amuck-landowner

Recent content by Mohammed H

  1. M

    How to check OS install: Manual vs Template

    templates usually have old OS versions for example . debian 7.2 . while manual installs always use the net to update itself to latest version. this way works assuming you didn't update your system and your host provider didn't update his templates .. other than that I doubt there is a way to...
  2. M

    OpenVZ rescue console

    @Flapadar I checked the c code of (vzctl enter) its using linux fork() function to fork a new pid with its own allocated memory. I can assume its very safe to use it since the ssh session will die once that pid dies or exit. there is no way I'm aware of to exit that fork and back to node as...
  3. M

    OpenVZ rescue console

    Hi there, I already stated that . but still I didn't find anyway to exploit it till now. the only issue I can think of is if vzctl itself have privilege escalation problem . and that is vendor problem not the mentioned idea problem. @lbft very true . thanks Highest Regards Mohammed H
  4. M

    OpenVZ rescue console

    Hello, this is just an idea not sure if its a secure method or not (it can be extended as long as you know bash) : on Node : useradd -d console-user passwd console-user create file /home/console-user/enter.sh with below content : #!/bin/bash exec sudo /usr/sbin/vzctl enter Container-ID now...
  5. M

    Running haveged to enhance your system entropy

    Hello, thanks for the info. also for KVM nodes you can allow KVM guests access /dev/random or /dev/hwrng (if you have hardware RNG) using virtio rng as explained here http://rhelblog.redhat.com/2015/03/09/red-hat-enterprise-linux-virtual-machines-access-to-random-numbers-made-easy/ and using...
  6. M

    Any good SSH tutorials out there?

    http://www.cyberciti.biz/faq/
  7. M

    [FREE] XSLOVZ - WHMCS module to control OpenVZ node via ssh2 extension

    @iWF-Jacob yes some users reported same issue. its apparently a false-positive I already in contact with avast lab to discuss the reason of the block. Highest Regards Mohammed H
  8. M

    [FREE] XSLOVZ - WHMCS module to control OpenVZ node via ssh2 extension

    Hi there, just wanted to let people who use this module that v1.1 has been released and has some bugfixes and new features : Ability to limit traffic per package/per container. Better way to remove container IPs. kindly check the announcement for info and notices about upgrade. Highest...
  9. M

    [FREE] XSLOVZ - WHMCS module to control OpenVZ node via ssh2 extension

    @KuJoe, @HalfEatenPie you are correct. I updated the repo with new version that have sudo enabled. and I will update Installation docs on how configure it. thanks for your suggestions I'm sure it will help the community. if you guys have any further suggestions. I'm open for any of them :)...
  10. M

    [FREE] XSLOVZ - WHMCS module to control OpenVZ node via ssh2 extension

    Hello, yes that's true for normal servers. but for OpenVZ nodes I prefer to lock it down using iptables and allow only sysadmin IP and server hosting WHMCS to access it.
  11. M

    [FREE] XSLOVZ - WHMCS module to control OpenVZ node via ssh2 extension

    Hi There, this module was developed in 2013. I wanted to share it with you so we can all benefit from it. and may be extend it. Description : This is a server provisioning module made for WHMCS. it can help server administrators or VPS server providers to Create, Terminate, Suspend, Unsuspend...
  12. M

    You're all doing it wrong.

    well I will have to disagree with you. sticking with 3rd party apps is dangerous too since its source code is available (even if its encrypted, it can be decrypted). and when the source code is available 0days will be too. while in-house platforms with good programming habits is more secure (at...
  13. M

    You're all doing it wrong.

    Hello, well I must say that your well written article just revived me from the desperation I see from all this 1$/mo VPS providers . thank you so much for this valuable info. Highest Regards Mohammed H
  14. M

    Competitive Pricing?

    Hello, yeah your prices seems very competitive . however you might want tell your clients about your VIrtualization platform (KVM,OpenVZ,XEN,etc...) and also what is the panel they will get (SolusVM,OnApp,etc...) Highest Regards Mohammed H
Top
amuck-landowner