1,670 reputation
1415
bio website f-hauri.ch
location Switzerland
age 49
visits member for 2 years, 2 months
seen 9 hours ago

I'm an old open-source independent hacker,

concerned about concepts of ethical hacking, teaching and sharing.

I like to play with shell, perl, lisp (sometime), sed and lot of other languages/environments.

Co-system administrator in several configurations, after various SMEs, I like to sometimes take time to focus on methods that I can improve or re-create (for example to change the level of abstraction).

In this, surfing on differents StackExchange's sites is a good way to boost my inspiration!


Dec
28
comment Linux-based Turla trojan
Re-reading your answer, the only difference between official linux's turla version and my bash version is that mine is not Elf and don't use SSL (now). I wrote this in order to permit some studies around the remaining question: How could we detect them... For now (after 2 weeks), the only idea I've found is to alter libc or use contained systems and some supervisor like apparmor...
Dec
20
revised Linux-based Turla trojan
deleted 6 characters in body
Dec
20
revised Linux-based Turla trojan
added 3 characters in body
Dec
20
revised Linux-based Turla trojan
added 729 characters in body
Dec
20
comment Linux-based Turla trojan
Of course, this sample could be perfected by using openssl instead of netcat... But the method would stay same.
Dec
20
answered Linux-based Turla trojan
Nov
28
comment Hacked Ubuntu server, probably hacked commands (netstat, ps, …), how to replace them?
You could try my little ddosBotKiller I recently wrote for this, and let my know if it work.
Nov
5
awarded  Yearling
Nov
3
comment How to prove to friend I have solution to puzzle (without revealing it)?
Hmm sorry, I've rewrite @domen right answer. (Yes I think it is THE answer. domen, if you post your own, I will drop mine).
Nov
3
answered How to prove to friend I have solution to puzzle (without revealing it)?
Nov
3
revised How do I know if my computer is being used for a botnet-based DDoS attack?
Dedicated tool
Oct
30
comment How do I know if my computer is being used for a botnet-based DDoS attack?
The version of my published tool is more flexible.
Oct
30
revised How do I know if my computer is being used for a botnet-based DDoS attack?
added 52 characters in body
Oct
30
answered How do I know if my computer is being used for a botnet-based DDoS attack?
Oct
17
comment Can “cat-ing” a file be a potential security risk?
Not really, but you could use many different terminal implementation. XTerm could be switched between vt100 and tektronix mode, wich have totally different window-manipulation control sequences.
Oct
13
comment How can I find subdomains of a site?
You could even ask google! But this won't be a complete list!
Oct
5
revised Good, simple list of reasons that email is inherently insecure
added 2 characters in body
Aug
30
comment Why do so many cracking attempts originate from China?
It's maybe your neighbor which hide his own address by spoofing chinese IP address.
Jul
20
awarded  Autobiographer
Jul
19
revised What defines a programming language as useful for hacking?
Descibe my sample