|
|
Posted on 11/13/2014 9:44:26 AM
|
|
|
|
pt2gguin=o2352515728; uin=o2352515728; skey=@RX9bOGifd; ETK=; superuin=o2352515728; superkey=eCPgtWZZiNLsOJbL0RxFCmQtC*f-cBEU5bLUlkjQFtw_; supertoken=699677417; ptisp=cm; RK=eDE3yn4QkK; ptuserinfo=6274686162; ptcz=0c4ffedb5ca5a35b22d5757081f60d9246d72581579d698c35131f7e1520d82e; airkey=; pt2gguin=o1737278973; uin=o1737278973; skey=@lTo17CwLp; ETK=; superuin=o1737278973; superkey=P1EHSFd76CGnNd4LhbfC1dA*kL0EbGM4HK7ncObnlFE_; supertoken=1479713147; ptisp=cm; RK=enGjb6eEMW; ptuserinfo=6b646f66667163; ptcz=fc1fb573a580d5e284382bc36a1e1920abb7bb2ad4b520fed3a3a8a7b4904617; airkey=; pt2gguin=o1615607241; uin=o1615607241; skey=@cqaEenHTD; ETK=; superuin=o1615607241; superkey=WtRmeWBTeG1Re-Q2cB6XCX3-S-BVwuOjCRn1ETUboS8_; supertoken=3509768616; ptisp=cm; RK=ulUCL/uQFX; ptuserinfo=71636c697966; ptcz=4a80f557e8268de002e880f4423403f62053ce380eb2cf82c8d019242bb4dec0; airkey=;
Skey is a tool for one-time passwords. It is a client\server-based application. First, on the server side, you can use the keyinit command to create a skey client for each user, which needs to specify a secret password, and then you can generate a one-time password list for the client's users. When users connect to the server through telnet, ftp, etc., they can enter their passwords in the order of the passwords in the one-time password list, and the password will be changed to the next one in the list the next time they connect.
The skey: ftp://ftp.cc.gatech.edu/ac121/linux/system/network/sunacm/other/skey can be obtained from the following URL
The server-side use of skey has the following steps:
1. Initialize user Mary with the following command:
keyinit mary
Each time keyinit generates 99 one-time passwords for the user, it will create the user in the /etc/skeykeys file, which stores some information about the server-side calculation of the next one-time password. When using the keyinit command above, you will find the following record in /etc/skeykeys:
mary 0099 to25065 be9406d891ac86fb Mar 11, 2001 04:23:12
In the above record, from left to right, are the username, the serial number of the one-time password to be used, the type of password, the password represented by hexadecimal, and the date and time.
2. Provide Mary with a list of one-time passwords
You can print the list of export orders and send them to Mary. This is more secure and the password is not passed around the network.
3. Modify the default login shell for Mary to /usr/local/bin/keysh
Due to the role of PAM, Mary needs to enter a password when logging in, and after she enters this one-time password, the server must verify this password, and the verification is allowed through the connection.
Some users may not like a written list of passwords, and users can use the key command to get one-time passwords on their own clients. You can get the type and serial number of the one-time password by opening two windows, one connecting to the server, and then using the key command in the other window to obtain the password according to the type and serial number of the password. But you must be reminded that such convenience comes at the cost of a certain danger.
If you run out of default 99 passwords, you can use keyinit -s to refresh the password list.
In the /usr/src/skey/misc directory there are many other programs that replace keysh and provide other services, such as: su, login, ftp, etc. This allows you to cope with connection requests from different services.
To be on the safe side, you'd better set the properties and permissions of the /etc/skeykeys file.
QQcookies利用工具.rar
(286.36 KB, Number of downloads: 3, Selling price: 1 Grain MB)
|
Previous:How to whitelist a 360 Site Guard node on a Linux serverNext:Specify IP port scanner, multi-threaded scanning, very fast speed
|
