How to stop wget on user

Discussion in 'Installation/Configuration' started by itstudio7777, Feb 20, 2022.

  1. itstudio7777

    itstudio7777 Member

    Hello !
    I need help with stopping wget option for 1 user.
    I want to stop it because there is a wget cron job added by hacker.

    Could you please help me ?
    My server is Debian 10, Apache and Ispconfig 3
     
  2. Jesse Norell

    Jesse Norell Well-Known Member Staff Member Howtoforge Staff

    Just delete the cron job and fix whatever vulnerability the hacker exploited to create it.

    To answer your question, either set custom permissions for that client which does not allow cron jobs or create a client template which does that and assign that template to the client. But this is probably the wrong solution, as if you don't fix the vulnerability used, they will just switch tactics to doing something else.
     
    Th0m likes this.
  3. itstudio7777

    itstudio7777 Member

    How to delete it ?
    When I type crontab -e on my console, there is no Cronjob added, but on my system logs I’m seeing it.
     
  4. Taleman

    Taleman Well-Known Member HowtoForge Supporter

    Read
    Code:
    man crontab
    To edit a users crontab, log in as root and use command
    Code:
    crontab -u username -e
     
    itstudio7777 and Th0m like this.
  5. itstudio7777

    itstudio7777 Member

    Thank you !
     

Share This Page