Securing Linux systems and applications; understanding Linux security features.
2
votes
2answers
450 views
Skype security (linux)?
From the following article skype & from archlinux skype wiki some major skype insecurity in linux are:
The skype binary is disguised against decompiling, so nobody is (still) able to reproduce ...
2
votes
1answer
90 views
Network abnormally slow during night hours
My network recently the last week as become abnormally slow around 11 pm. Very slow buffering youtube videos during all hours. Ive recently purchased the new router about two months ago but not ...
2
votes
2answers
746 views
What are the best IT auditing guidelines for Red Hat Linux 5.x+, including the critical data protection?
Currently, I am a junior application consultant and we are maintaining huge amounts of redhat machines as servers. I am given the chance and liberty by my boss (unbelieveable!) to go do my own ...
2
votes
1answer
351 views
Victim system's internet connection slow after ARP spoof?
I've been using Nemesis 1.4 to test ARP spoofing on a local victim machine. I've been spoofing both the victim machine and the default gateway to ARP redirect to my machine.
Spoofing victim's source ...
2
votes
1answer
238 views
Using mysql root account to execute root commands
Suppose that I have full root access to mysql databases, but not root user shell (linux). How can I use the full root access to mysql databases to execute root commands?
2
votes
1answer
191 views
What are the implications of including binary blobs in the Linux kernel?
According to this there are compelling reasons for caution when installing obfuscated binaries. Knowing this, how can running binary blobs as a part of the Linux kernel be acceptable from a security ...
2
votes
1answer
139 views
Can linux (be made to) detect foreign connections to the ram bus?
I've been made aware on many answers and some comments that an attacker can read memory while a system is still running by attaching some sort of connection directly to the ram bus.
Can linux ...
2
votes
2answers
42 views
Does glibc2 version of the crypt function still use DES for alternative hashing methods?
I'm trying to understand how typical Linux distributions generate the password field for entries in /etc/shadow. I can't figure out what encryption algorithm is being used to produce the encrypted ...
2
votes
1answer
81 views
Force all user processes to be ptraced
I'm implementing a ptrace based tool for logging system call use. It is much more simple than strace, but I'm doing this so I can learn how these tools work. I'd like to trace all user processes since ...
2
votes
1answer
200 views
Tacacs+ scenario: can I permit user to configure only for one interface and deny others
I'm currently deploying TACACS+ with a Cisco device, I use a TACACS server from here: http://www.shrubbery.net/tac_plus/
My scenario is: I want to permit a user to configure my router but only for a ...
2
votes
0answers
330 views
Adding an alternative password change scheme to passwd using PAM modules [closed]
I am trying to set up a PAM module that lets one add a conditional password change scheme. The intended behavior is like this:
passwd
do you want to change authentication token for ...
1
vote
3answers
300 views
Online security check via command line
My scenario is that I have a VPS with Apache (mostly for development of my own projects) accessed via SSH; and I time to time I would like to do a quick check just to be sure that there's no potential ...
1
vote
3answers
330 views
Danger of Path Traversal Attacks
I have setup a test application in Linux. I havent checked for paths in it, so if user enter /etc/passwd , then that file gets displayed to him.
However, I want to understand what more can be done if ...
1
vote
4answers
4k views
Netcat IP Spoofing
I am connecting to a server
nc -v 192.168.0.1 1111
But I want to do IP spoofing because the server on 192.168.0.1 only accepting commands from 7.7.7.7. We are two friends, I am 192.168.1.1, and my ...
1
vote
2answers
127 views
Can unencrypted keys & logins be kept out of program memory?
No matter what technique is used to store encryption keys & logins, it seems that all roads lead back to program memory (as far as I know), as an unencrypted version of the keys & logins will ...
1
vote
4answers
3k views
How To - Learn basic hacking skills? [closed]
I'm interested in learning some basic hacking; and I've read online that Linux is a good place to start.
Although, I've been a Windows user for as long as I can remember. So I was hoping I could get a ...
1
vote
2answers
162 views
Is this Scenario Exploitable?
Here is the scenario:
You get to overwrite 4 (consecutive) Bytes of a Userland Remote Process in Linux without Exploit Mitigation and without the ability to inject any Shellcode and you know the ...
1
vote
2answers
329 views
Test firewall rules (Linux)
I have a question about how to test the firewall rules. To be more specific, for academic purpose I have to set up a machine which will accept all kind of packets o a specific interface.
I added an ...
1
vote
2answers
158 views
What's the secure way to change UNIX permissions on a harcoded file often?
I'm writing a daemon that monitors something in the OS and flips execution permissions on a file in /run/ back and forth. The file has static contents and the file name is hardcoded in the daemon. I ...
1
vote
1answer
658 views
Any reasons to why not use randomize_va_space?
I've been looking a bit into kernel options for hardening, and there is one that seems to be a good idea to deploy - randomize_va_space. But before I activate that feature I started a google search, ...
1
vote
4answers
699 views
Why do I need both root password and user password in Fedora Linux?
I am just now installing (for the first time) a shiny new Fedora 18. I set up a strong root password, installed the whole thing. Now it is asking me to create a user account and a password is ...
1
vote
3answers
244 views
Is there a security problem accessing my laptop via WIFI?
I'm developing a web application for mobile devices on my local server in my laptop. My laptop is connected to company network via LAN. And, my project manager, wants to check the web application ...
1
vote
1answer
97 views
Files to monitor in linux
All,
I have been googling around for different guides on what files to monitor that people would edit for malicious intent. In my readings so far, i have found the common files people edit.
so far i ...
1
vote
2answers
366 views
How is iptables useful to prevent attacks against a LAN?
I need some advice securing a LAN using iptables.
I've found lots of examples on how to secure single host with iptables, including scanning ports, attacking using ICMP-flood and TCP-flood. These ...
1
vote
2answers
602 views
If Xampp is not secure enough for a production environment what should I use?
I am not even sure if this is the right place to ask this but here goes:
I am thinking of running my own small website from a home server. I have been using Ubuntu 12.04 with xampp as my server ...
1
vote
1answer
182 views
Installing applications with different user accounts on linux
I have basic question about installing applications on Linux operating system, using the Oracle database as an example. When installing the Oracle database package, I created a user called ora112, a ...
1
vote
1answer
500 views
Pre Installed OpenVAS , light way Linux [closed]
Is there any Pre installed light way OpenVAS Linux distributions Or any light way Linux witch Openvas Tested on it and work properly on that Linux distribution ?
I have used Back Track (UBUNTU ...
1
vote
2answers
110 views
What was done to gain a list of home directory accounts?
Today some sites were defaced in our WHM/cpanel VPS.
I understand that the common cause of this is outdated scripts/plugins/etc.
However as I was checking the file manager of one of the accounts I saw ...
1
vote
1answer
73 views
Bypass va_randomize_space and stack-protector
Is a program compiled with the GCC -fstack-protector option and running in a Linux environment with the va_randomize_space kernel variable set to 1, totally protected against buffer overflow attacks?
...
1
vote
1answer
156 views
Can exploit vulnerability if program started with gdb, but segfaults if started without gdb
i'm currently trying to exploit a simple program called basic_vuln.c
#include <stdio.h>
int main(int argc, char** argv) {
char buf[64];
strcpy(buf, argv[1]);
}
I'm using xubuntu ...
1
vote
3answers
135 views
How to Detect Zimbra Sniffing Trojan
I am a sys admin of our system, we are running zimbra as email server in our environment. I got the following message from the CEO.
"Everytime I send or receive an email - I get a SPAM ads a few ...
1
vote
3answers
231 views
Restrict access to a specific directory on Linux
I want to limit access to a single directory on the hard disk (log files) to few processes (log files for a single process for example). All processes run under the same user, so file system access ...
1
vote
2answers
171 views
Linux kernel 3.2 syscalls
Just trying to get the assembler instructions for <__execve> of the code below because i want to build the shell spawn opcode list:
#include <stdio.h>
int main()
{
char *happy[2];
...
1
vote
3answers
152 views
Protect linux kiosk display
We use a small computer with linux attached to a big tv to display some data to the public.
Normally, there is no keyboard connected. When a keyboard is connected at boot, we start the configuration ...
1
vote
1answer
256 views
Why does the OpenSSH client on Mac OS X silently launch an ssh-agent for the user?
I'm confused by the difference in behavior of ssh clients I'm seeing on two different hosts. Just to be clear, this is the scenario:
"macbox" OS X using OpenSSH_5.2p1 ssh client
"sunbox" Solaris 10 ...
1
vote
2answers
138 views
Changing IP ID generation of a server
I've seen plenty about Idle Scans and incremental IP IDs on the net, but I have trouble finding a "solution" to the problem. Is there a way to "set" IP IDs for example to all zeros or is it coded into ...
1
vote
1answer
295 views
Should Windows 2008 R2 be used as an externally facing DNS name server?
When compared to more traditional DNS name servers, what are the benefits / drawbacks of using a Windows 2008 R2 as a public ns record for a company.
What limitations, or security issues would I ...
1
vote
1answer
56 views
Configure Wireshark to capture preformatted data from pseudo-device
So, for a research project, I'm trying to use the HONE project on github, which creates during its module installation two pseudo-devices in the /dev folder. These are called hone and honet, the ...
1
vote
1answer
132 views
Dual Linux System with Whole Disk Encryption
(This is a continuation of my question on Ask Ubuntu.)
My goal is I want to have a Xubuntu/Ubuntu dual boot, with a catch - I want the disk to be fully encrypted with the dm-crypt (native supplied) ...
1
vote
1answer
48 views
Does pppd encrypt traffic?
There is pppd program that can be used to create point-to-point conections over various channels (including other network).
It supports authentication and compression. But does it encrypt traffic or ...
1
vote
1answer
75 views
set uid for reboot binary & pm-suspend : security hole?
I think all the question is in the title :
For the use of my laptop to be more convenient I made a chmod 4755 to /sbin/reboot and /usr/lib/pm-utils/pm-action so I don't have to make a 'sudo' before ...
1
vote
1answer
63 views
How to forbid one directory only in TOMOYO (2.5)?
(For example) I want to restrict write access to /home/backup from anybody, except a particular backup script. (To protect from accidental deletion.) For this, I suppose, it is enough to have two ...
1
vote
1answer
430 views
NGINX / HTTP TRACE
I have a http server Nginx with HTTP TRACE Enabled.
A single nmap --script=http-methods.nse host.name give this result :
Not shown: 988 closed ports
PORT STATE SERVICE VERSION
[...]
...
1
vote
1answer
187 views
Is using decrypt_derived more secure than a keyfile?
Say I have two partitions on a Linux system, a root partition (/) and a /home partition. Both of them are encrypted with LUKS.
The /home partition needs only to be decrypted if / is unlocked and ...
1
vote
1answer
73 views
How many connections can TCP_WRAPPERS handle?
As we know that TCP_WRAPPERS is a good way of security on linux/unix system, to disallow or allow remote user to connect to the specific services. Assume that if there have a large number of ...
1
vote
1answer
2k views
How to use http-get-form in THC-Hydra?
I've been messing with Hydra (Brute Force) to solve the "Damn Vulnerable Web App"
brute force section but the problem is when I use http-get-form it said:
Warning: child 1 seems to have died, ...
1
vote
1answer
30 views
DBus proxy Javascript binding issues
Recent Gnome-3 (under GNU/Linux, BSD or other Un*x) offer a gnome shell with nice presentation, but where the configuration and theming are to be done via Internet Browser (and a public URL, on a ...
1
vote
1answer
111 views
Linux Runtime Memory protection [closed]
I'm searching for a solution to protect process memory at runtime level in Linux (just like GameGuard in Windows). I googled many times but didn't get any useful information.
Does anyone know any ...
1
vote
0answers
123 views
Any suggestion for a good readerless smart card (security token) solution? [closed]
I'm developing a small CRM application that will have to store some sensitive data and I would like to (optionally) supply my users with the possibility to use a readerless smart card (aka "security ...
1
vote
0answers
223 views
Unauthorised Perl Scripts [closed]
One of my servers just had the memory exhausted by a load of Perl scripts, we use plesk and they seem to have appeared under the /var/www/vhosts/domainexample.com/cgi-bin/ directory, I managed to stop ...
