Monitored - HTB
by paven - Saturday January 13, 2024 at 12:13 PM
#11
Contact Name Alias Email Address Pager Address/Number Minimum Importance Service Notification Options Host Notification Options Service Notification Period Host Notification Period Service Notification Commands Host Notification Commands Retention Options
nagiosadmin Nagios Admin admin@monitored.htb   0 Unknown, Warning, Critical, Recovery, Flapping, Downtime Down, Unreachable, Recovery, Flapping, Downtime nagiosadmin_notification_times nagiosadmin_notification_times xi_service_notification_handler xi_host_notification_handler Status Information, Non-Status Information
svc svc svc@monitored.htb   0 Unknown, Warning, Critical, Recovery, Flapping, Downtime Down, Unreachable, Recovery, Flapping, Downtime svc_notification_times svc_notification_times xi_service_notification_handler xi_host_notification_handler Status Information, Non-Status Information

admin@monitored.htb
svc@monitored.htb

connect by svc on /nagios

I dont get what command expression does - Enter the command_check definition from a host or service definition and press Go to see the expansion of the command
Reply
#12
(Jan 13, 2024, 08:18 PM)kingpingzi Wrote: I dont get what command expression does - Enter the command_check definition from a host or service definition and press Go to see the expansion of the command
Yeah, I think command expansion is a promising path. Configuration > Command Expansion > name of the check
Reply
#13
(Jan 13, 2024, 08:18 PM)kingpingzi Wrote: Contact Name Alias Email Address Pager Address/Number Minimum Importance Service Notification Options Host Notification Options Service Notification Period Host Notification Period Service Notification Commands Host Notification Commands Retention Options
nagiosadmin Nagios Admin admin@monitored.htb   0 Unknown, Warning, Critical, Recovery, Flapping, Downtime Down, Unreachable, Recovery, Flapping, Downtime nagiosadmin_notification_times nagiosadmin_notification_times xi_service_notification_handler xi_host_notification_handler Status Information, Non-Status Information
svc svc svc@monitored.htb   0 Unknown, Warning, Critical, Recovery, Flapping, Downtime Down, Unreachable, Recovery, Flapping, Downtime svc_notification_times svc_notification_times xi_service_notification_handler xi_host_notification_handler Status Information, Non-Status Information

admin@monitored.htb
svc@monitored.htb

connect by svc on /nagios

I dont get what command expression does - Enter the command_check definition from a host or service definition and press Go to see the expansion of the command


How do u get this info ? ldap ?
Reply
#14
(Jan 13, 2024, 08:27 PM)Art10n Wrote: How do u get this info ? ldap ?
It's from the Nagios
Reply
#15
(Jan 13, 2024, 08:27 PM)Art10n Wrote:
(Jan 13, 2024, 08:18 PM)kingpingzi Wrote: Contact Name Alias Email Address Pager Address/Number Minimum Importance Service Notification Options Host Notification Options Service Notification Period Host Notification Period Service Notification Commands Host Notification Commands Retention Options
nagiosadmin Nagios Admin admin@monitored.htb   0 Unknown, Warning, Critical, Recovery, Flapping, Downtime Down, Unreachable, Recovery, Flapping, Downtime nagiosadmin_notification_times nagiosadmin_notification_times xi_service_notification_handler xi_host_notification_handler Status Information, Non-Status Information
svc svc svc@monitored.htb   0 Unknown, Warning, Critical, Recovery, Flapping, Downtime Down, Unreachable, Recovery, Flapping, Downtime svc_notification_times svc_notification_times xi_service_notification_handler xi_host_notification_handler Status Information, Non-Status Information

admin@monitored.htb
svc@monitored.htb

connect by svc on /nagios

I dont get what command expression does - Enter the command_check definition from a host or service definition and press Go to see the expansion of the command


How do u get this info ? ldap ?

this from the nagios monitoring web interface
Reply
#16
cron.service - Regular background program processing daemon
Loaded: loaded (/lib/systemd/system/cron.service; enabled; vendor preset: enabled)
Active: active (running) since Sat 2024-01-13 14:01:22 EST; 1h 48min ago
Docs: man:cron(8)
Main PID: 540 (cron)
Tasks: 9 (limit: 4661)
Memory: 43.9M
CPU: 1min 57.037s
CGroup: /system.slice/cron.service
├─ 540 /usr/sbin/cron -f
├─ 552 /usr/sbin/CRON -f
├─ 571 /bin/sh -c sleep 30; sudo -u svc /bin/bash -c /opt/scripts/check_host.sh svc XjH7VCehowpR1xZB
├─ 1394 sudo -u svc /bin/bash -c /opt/scripts/check_host.sh svc XjH7VCehowpR1xZB
├─ 1395 /bin/bash -c /opt/scripts/check_host.sh svc XjH7VCehowpR1xZB
├─11881 /usr/sbin/CRON -f
├─11882 /bin/sh -c /usr/bin/php -q /usr/local/nagiosxi/cron/cmdsubsys.php >> /usr/local/nagiosxi/var/cmdsubsys.log 2>&1
├─11883 /usr/bin/php -q /usr/local/nagiosxi/cron/cmdsubsys.php
└─11898 sleep 60
Reply
#17
(Jan 13, 2024, 08:54 PM)DataNinja Wrote:
cron.service - Regular background program processing daemon
Loaded: loaded (/lib/systemd/system/cron.service; enabled; vendor preset: enabled)
Active: active (running) since Sat 2024-01-13 14:01:22 EST; 1h 48min ago
Docs: man:cron(8)
Main PID: 540 (cron)
Tasks: 9 (limit: 4661)
Memory: 43.9M
CPU: 1min 57.037s
CGroup: /system.slice/cron.service
├─ 540 /usr/sbin/cron -f
├─ 552 /usr/sbin/CRON -f
├─ 571 /bin/sh -c sleep 30; sudo -u svc /bin/bash -c /opt/scripts/check_host.sh svc XjH7VCehowpR1xZB
├─ 1394 sudo -u svc /bin/bash -c /opt/scripts/check_host.sh svc XjH7VCehowpR1xZB
├─ 1395 /bin/bash -c /opt/scripts/check_host.sh svc XjH7VCehowpR1xZB
├─11881 /usr/sbin/CRON -f
├─11882 /bin/sh -c /usr/bin/php -q /usr/local/nagiosxi/cron/cmdsubsys.php >> /usr/local/nagiosxi/var/cmdsubsys.log 2>&1
├─11883 /usr/bin/php -q /usr/local/nagiosxi/cron/cmdsubsys.php
└─11898 sleep 60

Where did you find this?
Reply
#18
(Jan 13, 2024, 09:07 PM)cehim215561 Wrote:
(Jan 13, 2024, 08:54 PM)DataNinja Wrote:
cron.service - Regular background program processing daemon
Loaded: loaded (/lib/systemd/system/cron.service; enabled; vendor preset: enabled)
Active: active (running) since Sat 2024-01-13 14:01:22 EST; 1h 48min ago
Docs: man:cron(8)
Main PID: 540 (cron)
Tasks: 9 (limit: 4661)
Memory: 43.9M
CPU: 1min 57.037s
CGroup: /system.slice/cron.service
├─ 540 /usr/sbin/cron -f
├─ 552 /usr/sbin/CRON -f
├─ 571 /bin/sh -c sleep 30; sudo -u svc /bin/bash -c /opt/scripts/check_host.sh svc XjH7VCehowpR1xZB
├─ 1394 sudo -u svc /bin/bash -c /opt/scripts/check_host.sh svc XjH7VCehowpR1xZB
├─ 1395 /bin/bash -c /opt/scripts/check_host.sh svc XjH7VCehowpR1xZB
├─11881 /usr/sbin/CRON -f
├─11882 /bin/sh -c /usr/bin/php -q /usr/local/nagiosxi/cron/cmdsubsys.php >> /usr/local/nagiosxi/var/cmdsubsys.log 2>&1
├─11883 /usr/bin/php -q /usr/local/nagiosxi/cron/cmdsubsys.php
└─11898 sleep 60

Where did you find this?

Technically that's what we found from the snmpwalk as well...
Reply
#19
(Jan 13, 2024, 09:10 PM)peRd1 Wrote:
(Jan 13, 2024, 09:07 PM)cehim215561 Wrote:
(Jan 13, 2024, 08:54 PM)DataNinja Wrote:
cron.service - Regular background program processing daemon
Loaded: loaded (/lib/systemd/system/cron.service; enabled; vendor preset: enabled)
Active: active (running) since Sat 2024-01-13 14:01:22 EST; 1h 48min ago
Docs: man:cron(8)
Main PID: 540 (cron)
Tasks: 9 (limit: 4661)
Memory: 43.9M
CPU: 1min 57.037s
CGroup: /system.slice/cron.service
├─ 540 /usr/sbin/cron -f
├─ 552 /usr/sbin/CRON -f
├─ 571 /bin/sh -c sleep 30; sudo -u svc /bin/bash -c /opt/scripts/check_host.sh svc XjH7VCehowpR1xZB
├─ 1394 sudo -u svc /bin/bash -c /opt/scripts/check_host.sh svc XjH7VCehowpR1xZB
├─ 1395 /bin/bash -c /opt/scripts/check_host.sh svc XjH7VCehowpR1xZB
├─11881 /usr/sbin/CRON -f
├─11882 /bin/sh -c /usr/bin/php -q /usr/local/nagiosxi/cron/cmdsubsys.php >> /usr/local/nagiosxi/var/cmdsubsys.log 2>&1
├─11883 /usr/bin/php -q /usr/local/nagiosxi/cron/cmdsubsys.php
└─11898 sleep 60

Where did you find this?

Technically that's what we found from the snmpwalk as well...

Yep, nothing much to do with that...

Have you got anything with the Command Expansion?
Reply
#20
PING WORKS!
[Image: yeCEPsM.png]
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
Heart [FREE] HackTheBox All Cheatsheets Tamarisk 15 827 3 hours ago
Last Post: 0x5k1z0
  CPTS-FLAG darkcat 14 5,734 4 hours ago
Last Post: Sukon
  [FREE] CPTS 12 FLAGS pulsebreaker 78 2,615 4 hours ago
Last Post: hitlerssecretsidechick
  [MEGALEAK] HackTheBox ProLabs, Fortress, Endgame - Alchemy, 250 Flags, leak htb-bot htb-bot 91 8,295 4 hours ago
Last Post: hitlerssecretsidechick
  [FREE] 300+ Writeups PDF HackTheBox/HTB premium retired Tamarisk 381 94,565 7 hours ago
Last Post: xixi75

Forum Jump:


 Users browsing this forum: 1 Guest(s)