0 18 * * * date | awk '{print $1", "$2", "$3", "$4", "$6", "}'| head -c -1 | cat >> /home/xlogicx/logs/server_usage.csv; df --total | tail -n 1 | awk '{print $2", "$3", "$4", "$5}' | cat >> /home/xlogicx/logs/server_usage.csv

sudo dd if=(arches path) of= /dev/sdb1

#!/bin/bash
##
### netmon.sh - use nmap to watch local network for active hosts
## Note: don't forget to set 'NETWORK' to your subnet
#
export NETWORK="10.0.1."

# Cleanup 
function cancel() {
  echo ""
  echo "deleting /tmp/netmon.tmp.."; rm -f /tmp/netmon.tmp
  echo "killing all instances of nmap.."; killall -g nmap
  echo "killing all instances of netmon.sh.."; killall -g netmon.sh
}

# Make sure to catch ctrl-c for cleanup routine
trap cancel SIGINT

# Check if nmap is installed 
if [ -f `which nmap` ]
  then
    touch /tmp/netmon.tmp
    while true; do nmap -sP $NETWORK*|grep $NETWORK > /tmp/netmon.tmp; sleep 30; done &
    while true; do clear; echo "Local Network: "; cat /tmp/netmon.tmp; sleep 7; done
  else
    # If nmap is not installed tell the user and quit
    echo "nmap not found: install nmap and run again" && exit
fi

#!/usr/bin/python
##
### getip.py - get external ip from ipchicken.com
##
#
import httplib

conn = httplib.HTTPConnection("ipchicken.com")
conn.request("GET", "/")
resp = conn.getresponse()

if resp.status != 200:
	print resp.status, resp.reason
	exit()
elif resp.status == 200:
	output = resp.read()
	output = output[output.find('<font face="Verdana, Arial, Helvetica, sans-serif" size="5" color="#0000FF"><b>'): 
		output.find('<A HREF="javascript:makeLink()"><font size="2">')]
	output = output.strip('font face="Verdana, Arial, Helvetica, sans-serif" size="5" color="#0000FF"><b>')
	output = output.strip()
	output = output.strip('<br>')
	print output
else: 
	print resp.status, resp.reason
	exit()

• First off, I anonymously registered an account at no-ip.org, and installed a daemon which updates the DNS-records whenever the IP changes. This enables me to at least reach his box, as long as he's not suddenly behind a firewall.
  
  
• I setup a new account with a generic name (such as "ptd") and sudo privileges, and placed the home directory under /var/spool/<username> to ensure it's at least a bit more hidden.
  
  
• I deleted all logs which witnessed on my activities, and replaced them with symlinks to /dev/null, to make sure that nothing was saved in the logs when/if he discovers I'm connected.
  
  
• I renamed and moved the "/usr/bin/who"-application to "/usr/sbin/wat", so I can see him when he's logged in, while not letting him see me. My hostname shows up with that script. Is there any other way to disable that without replacing the program with a fake one compiled from scratch? Is my hostname visible anywhere else? /var/log/lastlog points to /dev/null, as well as /var/log/auth.log.
  
  
• I installed an FTPd which can enable me to access files, or store files on his box.
  
  
• A polipo proxy was added, to get me another way of accessing the internet "anonymously". I'm thinking about installing OpenVPN instead...
  
  
• I also installed a keylogger which logs all physical keystrokes into a stealth file, available for me by SSH or FTP.