Reputation
1,868
Top tag
Next privilege 2,000 Rep.
Edit questions and answers
Badges
1 7 17
Newest
 Yearling
Impact
~111k people reached

Feb
6
revised Linux-based Turla trojan
Add idea of sending process stats to bayesian tool from alphanet
Feb
5
comment Linux-based Turla trojan
I've edited my answer, adding a checklist. Please have a look and feel free to comment.
Feb
4
comment Linux-based Turla trojan
@AndréDaniel APT advanced persistent threat don't require root privilege (but let attacker, time to find a way of elevation...)
Feb
4
comment Linux-based Turla trojan
After some tests, research and discuss. I've posted a log edit to my answer today, with a checklist todo. Please read and comment
Feb
4
revised Linux-based Turla trojan
Add some way of research
Dec
20
revised Linux-based Turla trojan
deleted 6 characters in body
Dec
20
revised Linux-based Turla trojan
added 3 characters in body
Dec
20
revised Linux-based Turla trojan
added 729 characters in body
Dec
20
comment Linux-based Turla trojan
Of course, this sample could be perfected by using openssl instead of netcat... But the method would stay same.
Dec
20
answered Linux-based Turla trojan
Nov
28
comment Hacked Ubuntu server, probably hacked commands (netstat, ps, …), how to replace them?
You could try my little ddosBotKiller I recently wrote for this, and let my know if it work.
Nov
5
awarded  Yearling
Nov
3
comment How to prove to friend I have solution to puzzle (without revealing it)?
Hmm sorry, I've rewrite @domen right answer. (Yes I think it is THE answer. domen, if you post your own, I will drop mine).
Nov
3
answered How to prove to friend I have solution to puzzle (without revealing it)?
Nov
3
revised How do I know if my computer is being used for a botnet-based DDoS attack?
Dedicated tool
Oct
30
comment How do I know if my computer is being used for a botnet-based DDoS attack?
The version of my published tool is more flexible.
Oct
30
revised How do I know if my computer is being used for a botnet-based DDoS attack?
added 52 characters in body
Oct
30
answered How do I know if my computer is being used for a botnet-based DDoS attack?
Oct
17
comment Can “cat-ing” a file be a potential security risk?
Not really, but you could use many different terminal implementation. XTerm could be switched between vt100 and tektronix mode, wich have totally different window-manipulation control sequences.
Oct
13
comment How can I find subdomains of a site?
You could even ask google! But this won't be a complete list!