https://wiki.05012003.xyz/index.php?action=history&feed=atom&title=Seguridad 2026-05-08T17:07:42Z Historial de revisiones de esta página en la wiki MediaWiki 1.44.2 https://wiki.05012003.xyz/index.php?title=Seguridad&diff=214&oldid=prev 2025-12-23T21:57:14Z

<p>Página creada con «Lo siguiente es un reporte de seguridad (Y de fallos de seguridad) del proyecto generados con Perro Guardian. Un programa creado por <a href="/Usuario:JP" title="Usuario:JP">Usuario:JP</a> (Codigo cerrado, no lo voy a compartir) perroguardian-ia4-micro-security-advisor llamado con opciones &quot;--solo-carpeta Proyecto-Squid-Proxy-COPIA/ --arbol&quot; # A los buenos dias # 23-12-25; 22:11 # Ejecutando como usuario me (me@DEBIAN) # Dockerd 4 docker-mini-scan (ClamAV nano*4) NAV / IGN: LICENSE IGN: R…»</p> <p><b>Página nueva</b></p><div>Lo siguiente es un reporte de seguridad (Y de fallos de seguridad) del proyecto generados con Perro Guardian. Un programa creado por [[Usuario:JP]] (Codigo cerrado, no lo voy a compartir)<br /> perroguardian-ia4-micro-security-advisor llamado con opciones &quot;--solo-carpeta Proyecto-Squid-Proxy-COPIA/ --arbol&quot;<br /> <br /> <br /> <br /> <br /> # A los buenos dias<br /> # 23-12-25; 22:11<br /> # Ejecutando como usuario me (me@DEBIAN)<br /> # Dockerd 4 docker-mini-scan (ClamAV nano*4)<br /> <br /> NAV /<br /> <br /> IGN: LICENSE<br /> IGN: README.md<br /> IGN-R: .git/<br /> <br /> {1}: todo.sh<br /> - Missing checks for folder and proper script validations<br /> <br /> {2}: pordefecto.sh<br /> - Hardcoded variables<br /> - Posible arbitrary code/program injection near ending: versionphp=$(ls php7)<br /> <br /> {5}: main.sh<br /> - Not checking proper files are there; just checking for directory<br /> MINOR - Arbitrary setfont seems irrelevant<br /> - Posible injection in exported/sourced variables<br /> - User is dropped into a &quot;shell&quot; that could lead to escapes (editar block)<br /> MINOR - Prompt for changing files &quot;read -p &#039;¿Quier...&quot; does not check for lowercase &#039;S&#039;<br /> <br /> {7}: root.sh<br /> MINOR - Useless variable checking<br /> MINOR - Weird behavior: Fail condition never called or never set to be called (?)<br /> - Posible injection in exported/sourced variables<br /> - Posible injection in setting up variables for later copying of files<br /> MINOR - Out of place ACL check<br /> MINOR - $interfaz variable makes no sense in this context (near source aux/ngin...)<br /> MINOR - Not sourcing (?) scripts near the end<br /> <br /> NAV /piclienteradius/<br /> <br /> {0}: main.sh<br /> - Everything looks good :D<br /> <br /> NAV /piclienteradius/aux/<br /> <br /> {0}: generar_hostapd.sh<br /> - Everything looks good :D<br /> <br /> NAV /cosas/<br /> <br /> {!}: Directory appears to be of little relevance - Skipping files<br /> <br /> NAV /extras/<br /> <br /> {1}: ajustar.sh<br /> - Possible injection using sed<br /> <br /> {0}: cambiar_contra_router.sh<br /> - Everything looks good :D<br /> <br /> {1}: copias.sh<br /> - Weird use of ssh keying.<br /> <br /> {1}: testsubshell.sh<br /> - Possible injection in nested shell<br /> <br /> NAV /extras/todoantiguo/<br /> <br /> {!}: Directory appears to be of little relevance - Skipping files<br /> <br /> NAV /aux/<br /> <br /> {!}: Skipping files &quot;nginx.sh&quot; &quot;generar_nginx.sh&quot;. Non-executable or executable bit masked<br /> <br /> {! + 1}: Multiple repeated offenses in the following files: crear_cuentas_sql.sh generar_cert.sh iptables.sh<br /> - Use of hardcoded variables, rest of these files are fine. (Minor non-validation in generar_cert.sh ignored)<br /> <br /> {1}: mail.sh<br /> - This file simply doesn&#039;t work<br /> <br /> {1}: gen_acl.sh<br /> - No proper exit<br /> <br /> {1}: generar_dhcp.sh<br /> - --append is hardcoded at argv4<br /> <br /> {0}: instalar.sh personalizacion.sh pers2.sh radius.sh rootssh.sh generar_red.sh generar_squid.sh<br /> - Everything looks good :D (Minor security concern in rootssh.sh — Using root password for SSH is generally discouraged, assigned minor due to prompting the user for this risky change)<br /> <br /> <br /> <br /> <br /> [==========[100%]==========] GUAU!<br /> Limpiando todo...<br /> Limpiando docker...<br /> Desbloqueando...<br /> 00:36:41 real, usuario.<br /> Se han producido (0) errores.</div>

JP