My Security Planet » Tags » Linux

Feeds

13620 items (0 unread) in 75 feeds

• Jeremy Zawodny's blog
• Mozilla Webdev
• Transcendental Technical Travails
• Ian Bicking: a blog
• Hackosis

WebSecurity

• Watchfire Application Security Insider
• BlogSecurity
• sirdarckcat
• Google Online Security Blog
• CGISecurity.com: Your Web Site and Application Security Resource
• Switch/Twitch
• mybeNi websecurity
• cat slave diary
• SecuriTeam Blogs
• Curiouser and Curiouser
• Alex's Corner
• Billy (BK) Rios
• Chris Shiflett
• christian's weblog
• funkatron.com
• GNUCITIZEN
• The Spanner
• hackademix.net
• Ruby on Rails Security Project
• It's a shampoo world anyway
• Web Security Blog
• ha.ckers.org web application security lab
• Yet Another Infosec Blog
• PHP Security Blog
• Security Thoughts
• Sunnet Beskerming Security Advisories
• Disenchant's Blog
• Sylvan von Stuppe
• Larholm.com
• The Turkey Curse
• Jeremiah Grossman
• Anurag Agarwal - Application Security Evangelist
• Ivan Ristic
• deep inside | security & tools
• omg.wtf.bbq.
• BlueHat Security Briefings
• Tactical Web Application Security
• .:Computer Defense:.

Security

• tssci security
• Plynt Penetration Testing Blog
• Michael Howard's Web Log
• Security Retentive
• BindShell.Net
• Dominic White's .tHE pRODUCT
• SecurityFocus News
• Justice League
• Schneier on Security
• Rational Survivability
• terminal23
• 1 Raindrop
• hiredhacker.com
• Matasano Chargen
• Security Vulnerability Research & Defense
• Michael on Security - Musings on Information Security
• Fortify blog
• The Art of Software Security Assessment
• GDS Security Blog
• Vodun.org
• Robert Penz Blog
• Mark Curphey - SecurityBuddha.com
• Liminal states
• Security Ripcord
• ModSecurity Blog
• IBM Internet Security Systems Frequency X Blog
• Suspekt...
• extern blog SensePost;
• Zero in a bit

SEO

• SEO BlackHat: Black Hat SEO Blog
• busin3ss.name

Tools

• Opensourcetesting.org News

14 items tagged "Linux"

Related tags: Ubuntu [+]

SecuriTeam Blogs

• 

  Backtrack - The Future, The Funding, The Roadmap

  Posted: June 29th, 2010, 5:15am CDT by xyberpix

  Tags:  Linux   [edit]

  Great news, Backtrack now has funding to move ahead with scheduled releases, and a roadmap moving forward up to Backtrack 5. You can view the roadmap here. It seems that the worlds leader in penetration testing training, namely Offensive Security is going to be funding the BackTrack Linux distribution’s development going forward. No need to worry though, BackTrack is still going to remain an Open Source distro.

  Other news on this front is that the Exploit Database now has new EDB Research and Development teams that are actively working on vulnerability discovery and development, so watch this space for more news and good things to come. It’s also very worthwhile checking out the Exploit Database Blog.

  -

  Let the experts make sure your website is safe. Vulnerability Assessment is the answer.

hackademix.net

• 

  Bug in Ubuntu 10.04 Crashing Your Desktop via Firefox, NoScript

  Posted: May 4th, 2010, 3:24am CDT by Giorgio

  Tags:  Linux   [edit]

  I’m receiving several reports by Ubuntu and Debian users having their desktops crashed as soon as they click the NoScript icon. Yes, your whole session gone, back to your logon page in one move!

  Actually this may be triggered by different actions, not necessarily with NoScript installed, or reportedly just by having a long/complex enough interaction with Firefox.

  It turns out to be a bug in the xorg-server package, which Ubuntu’s maintainers deemed not worth to get fixed before releasing Lucid Lynx.

  My understanding is that a fix will be included in next automatic update, but in the meanwhile you can apply the available patch from Bryce Harrington’s PPA by issuing the following commands in a terminal:

  sudo add-apt-repository ppa:bryceharrington/purple && sudo apt-get update && sudo apt-get upgrade Update

  I was sure I had this crash reported by Debian users as well, but when some of them commented here that they couldn’t reproduce it, I double checked and could find Lucid Lynx reporters only. Better so.

• 

  Bug in Ubuntu 10.04 Crashing Your Desktop via Firefox, NoScript

  Posted: May 4th, 2010, 3:24am CDT by Giorgio

  Tags:  Linux   [edit]

  I’m receiving several reports by Ubuntu and Debian users having their desktops crashed as soon as they click the NoScript icon. Yes, your whole session gone, back to your logon page in one move!

  Actually this may be triggered by different actions, not necessarily with NoScript installed, or reportedly just by having a long/complex enough interaction with Firefox.

  It turns out to be a bug in the xorg-server package, which Ubuntu’s maintainers deemed not worth to get fixed before releasing Lucid Lynx.

  My understanding is that a fix will be included in next automatic update, but in the meanwhile you can apply the available patch from Bryce Harrington’s PPA by issuing the following commands in a terminal:
  
sudo add-apt-repository ppa:bryceharrington/purple && apt-get update && apt-get upgrade


Disenchant's Blog

• 

  Teaching John The Ripper how to Crack MD5 Hashes and more

  Posted: October 5th, 2009, 5:55am CDT by Disenchant

  Tags:  Linux   [edit]

  Long time ago, I posted a guide on how to make John the Ripper able to crack MD5 hashes ([www.disenchant.ch]). In that posting where some errors and also it’s not up to date so I made a small shell script which downloads, patches and compile JtR 1.7.3.4 for you automatically

  wget http://www.openwall.com/john/g/john-1.7.3.4.tar.gz
  tar xvf john-1.7.3.4.tar.gz
  wget http://www.openwall.com/john/contrib/john-1.7.3.4-jumbo-1.diff.gz
  gunzip john-1.7.3.4-jumbo-1.diff.gz
  cp john-1.7.3.4-jumbo-1.diff ./john-1.7.3.4
  cd ./john-1.7.3.4
  patch -p1 < john-1.7.3.4-jumbo-1.diff
  cd ./src/
  make clean linux-x86-any

  This patched John the Ripper can attack the following formats:
  DES/BSDI/MD5/BF/AFS/LM/NT/XSHA/PO/raw-MD5/IPB2/raw-sha1/md5a/hmac-md5/KRB5/bfegg/nsldap/ssha/openssha/oracle/MYSQL/mysql-sha1/mscash/lotus5/DOMINOSEC/NETLM/NETNTLM/NETLMv2/NETHALFLM/mssql/mssql05/epi/phps/mysql-fast/pix-md5/sapG/sapB/md5ns/HDAA

  I hope you enjoy it

SecuriTeam Blogs

• 

  I am carrier

  Posted: June 5th, 2009, 11:50pm CDT by Aviram

  Tags:  Linux   [edit]

  The swine flu craze in Asia is almost becoming ridiculous. Flying into Beijing a doctor came on board to check everyone’s temperature before they would let us out of the plane. Before passing immigration we were checked again and filled in forms to prove we are all in top health.

  Ironically, on the inbound flight to Beijing I caught the flu from the Chinese girl sitting next to me (I’m talking about the regular flu. No need to call an emergency medical team on me). I spent the week gobbling Chinese medicine herbs which did a great job in preventing me from crashing sick. But the problem is that I am about to fly out back to San Francisco through Tokyo, and I’m trying to think how to convince the Narita officials that my germs are pure and genuine Asian bodies and are were not carried with me from any American pigs (political innuendos not intended).

  It seems I’m also a carrier of something else, and again it’s not my fault. All I did was connect my USB stick to a computer on the business center in my Beijing hotel. I just wanted to print a document but didn’t bother locking the stick to ‘read only’. Apparently that was enough to have a Trojan infect the USB stick from the malware infested public computer.

  Not that it would matter, really, since my machine runs Ubuntu. In fact, I wouldn’t have noticed it unless someone that borrowed the USB stick from me showed me the Virus warning that popped up as they plugged the stick into their Windows machine. I could have infected dozens of machines by the time I found out about it – all those poor Windows machine, Trojaned just for borrowing my USB stick; I really don’t need that on my conscience.

  Once I know the Trojan is there, the cleanup is easy, I will ‘rm’ the files and the stick will be healthy again and stop be a carrier for defenseless Windows machines. Now if only it was that easy to recover from this damn flu.

  

  -

  Expose the security holes in your products during development. Black Box Testing makes it safer!

• 

  Is Your Son a Computer Hacker?

  Posted: February 13th, 2009, 7:12pm CST by p1

  Tags:  Linux   [edit]

  This would be hilarious, except for the fact that I think the guy who wrote it (some years back, but still) was serious.

  I don’t know if that makes it more funny, or less …

  Even the domain name is funny, as in “delusions of adequacy” …

  -

  Let the experts make sure your website is safe. Vulnerability Assessment is the answer.

• 

  Igniting Linux Desktop Security

  Posted: December 11th, 2008, 8:16pm CST by jbrown

  Tags:  Linux   [edit]

  

  Long ago, my all-time favorite desktop firewall was none other than sygate pro (symantec junkies sought-and-destroyed a while back). I loved all of its seemingly superior and cool features that really just made me feel great about using it on some servers and workstations. But like most other desktop firewalls, sygate is/was windows only. But this article isn’t about just any desktop firewall; it is about Firestarter, the Linux GUI firewall solution.

  Firestarter is a nice, sleek, Desktop-safe, open source and server or workstation setting network security solution. Say that 128 times fast! Haha. If you are an administrator or just a savvy Linux Desktop user who wants to feel a little more secure on your network, you’ll probably love Firestarter.

  Some of the great features of Firestarter include a graphical user interface to configuring firewall rules and settings, a nice wizard to walk you through it, real-time event monitor to check on intrusion attempts or the like, in and outbound network access policy control, port forwarding, the ability to whitelist and blacklist traffic, viewing network connections, advanced kernel tuning to provide somewhat protection against [flooding, broadcasting, spoofing, typical DoS attacks], and much more!

  Firestarter sits atop of iptables and it works quite nicely to control traffic in and out of your workstation or server. I’ll even give you a couple of quick and smile examples. Say you got XYZ Linux running ZYX Desktop system and you want to be able to transfer files (or data) via XZY, but only from a certain IP address. Simply add a rule in Firestarter and watch it work. What if you want to completely (for the boundries of this tool) block access from xx.xxx.xx.xxx? Add a rule to blacklist it on outboard traffic. Volia! Simple firewalling made super easy. I use Firestarter and I absolutely love it. So if you haven’t already tried Firestarter, I recommend you give it a shot! I can’t imagine you being disappointed.

  

  -

  Is your site safe from SQL Injection attacks? Use an SQL Injection Scanner on a daily basis to protect your network!

mybeNi websecurity

• 

  How to install nmap on Ubuntu Linux

  Posted: September 11th, 2008, 4:41pm CDT by beNi

  Tags:  Ubuntu Linux   [edit]

  Hey guys, ever wondered where to get the oh-so-famous nmap security tool? Installing the port scanning application nmap easily by typing sudo apt-get install nmap into a terminal of your choice Recently I pointed out How to find other LAN computers in Ubuntu, and if you want to scan one host seperately, a plain nmap -A -v [...]
• 

  Ubuntu HTML in front of Flash Video is hidden, why?

  Posted: September 7th, 2008, 4:47am CDT by beNi

  Tags:  Ubuntu Linux   [edit]

  A couple of years now I’m experiencing that in case a absolute positioned element is in front of a flash object in Firefox (all versions), this element is not visible. Parts of the element which are beside the flash object are shown, so it seems like there’s an issue with Adobe’s Flash Plugin for Ubuntu [...]

SecuriTeam Blogs

• 

  Linus and the “Security Circus”

  Posted: August 15th, 2008, 8:15pm CDT by p1

  Tags:  Linux   [edit]

  Ladeeeeez and gentlemen!

  Well, methinks Linus is going to be “security villain of the week” for a few days again.

  [www.networkworld.com]
  Problem is, he’s actually got a good point.  Unfortunately, his use of “security circus” is going to be read as the whole security community, when he is actually referring to the lunatic fringes at both ends of the “disclosure” spectrum.  There are those who still cling to the outdated and disproved dogma of “security by obscurity,” and there are the self-promoters (with egos the size of the MS Windows Vista source code) who are eager to trumpet any little flaw they find as a “security” vulnerability.  Those of us in the trenches have been trying to keep vendors and consultants from using these arguments on the uninformed for years.  Linus is saying the same thing.  He’s as frustrated as we are, and for the same reasons.  He just uses more sensational phrases.

  -

  Is your site safe from SQL Injection attacks? Use an SQL Injection Scanner on a daily basis to protect your network!

mybeNi websecurity

• 

  I’m just a regular everyday normal Motherfucker.

  Posted: January 19th, 2008, 4:52am CST by beNi

  Tags:  Ubuntu Linux   [edit]

  Sometimes, we see something which is so awesome in a very special way that we need to distribute it further. This happened to me today, I watched the Everyday Normal Guy 2 video, a very funny rap track with really really really great lyrics! Check it out, yoo :o)

Disenchant's Blog

• 

  Teaching John The Ripper how to Crack MD5 Hashes

  Posted: January 17th, 2008, 5:33am CST by Disenchant

  Tags:  Linux   [edit]

  Today I was playing around with the well known password cracking tool John the Ripper (JtR) and was looking forward to crack some MD5 hashes. Unfortunately, John still not supports raw-MD5 out of the box and so I was searching the web for a solution. It took me some minutes until I found out, that there are unofficial patches for John’s source code and so I simply patched it and tried to compile. For any reason, I run into problems (doesn’t matter now what problems ) and even after about half an hour searching the web for a solution I didn’t find anything. Then a few minutes later I found a simple howto for how to patch and compile John so that you won’t have any problems. The site which solved my problem was gurx.net and I couldn’t find it faster because it’s not written in English nor German. Now of course I’ll show you how to do it the gurx.net-way but with support for even many more algorithms than just MD5.

  mkdir john
  cd john
  wget http://www.openwall.com/john/f/john-1.7.2.tar.bz2
  tar -xvf john-1.7.2.tar
  cd john-1.7.2
  wget ftp://ftp.openwall.com/pub/projects/john/contrib/john-1.7.2-all-9.diff.gz
  gzip -d john-1.7.2-all-9.diff.gz
  patch -p1 cd src
  make
  make clean linux-x86-any

  Now you can use John out of the “run” directory.

  ./john -format=raw-MD5 /home/disenchant/md5_hashes_to_crack.txt

  raw-MD5 means that you’ve got an input file (/home/disenchant/md5_hashes_to_crack.txt) like the following:

  Alice:5f4dcc3b5aa765d61d8327deb882cf99
  Bob:1c0b76fce779f78f51be339c49445c49
  …

  PS: My machine’s a Xubuntu Edgy but this should work with any Linux box

mybeNi websecurity

• 

  How to Create a Gigabyte Testfile with dd?

  Posted: December 28th, 2007, 7:53am CST by beNi

  Tags:  Ubuntu Linux   [edit]

  And again, the whole task is as simple as typing that into your terminal: dd if=/dev/zero of=test.file bs=1000 count=0 seek=$[1000*1000*1] which will create a one (1) gigabyte big test file named “test.file” in the current Directory.
• 

  How to rescue your Xorg-Server in a “worst case” scenario?

  Posted: December 20th, 2007, 11:51am CST by beNi

  Tags:  Ubuntu Linux   [edit]

  Several years ago, I was a Linux beginner as like most people were at one point in their lives. I had just installed SuSe 9.0 for the first time, and the problem was that my ancient ATI Radeon 9000 (an old graphics card) didn’t stop bitching around: I just couldn’t manage to install and configure it [...]