Reputation
1,763
Top tag
Next privilege 2,000 Rep.
Edit questions and answers
Badges
1 6 16
Newest
 Constituent
Impact
~94k people reached

Jun
14
comment Did this ShellShock exploit work?
... Go to tldp.org, in Guides index, search for System Administrators! Enjoy reading!
Jun
14
comment Did this ShellShock exploit work?
You could run who for looking about user connected to your server.
Jun
14
comment Does GRE Tunneling support the Websocket Protocol?
WebSocket is not under HTTP, because of HTTP limitation WebSocket is a sibling protocole, linked to HTTP for javascript applications. So WebSocket is a TCP protocol, as you rightly said: which is, like everything, transported by GRE.
May
5
comment Managing multiple SSH private keys for a team
Hem yes, even if you need to keep root access without password for administrative scripts, having separated account for each sysadmin is mostly a good practice. Of couse, each sysadmin who have access to sudo could install his own backdoor. You have to keep this in mind.
May
5
comment Managing multiple SSH private keys for a team
Read The Linux System Administrator's Guide for further docs.
Mar
22
comment Easy explanation of SSL client certificates for a developer
You must keep in mind user is stupid enough! And no: they could even be already hacked and mitm authority cert already pushed in his trusted list... The real problem is that your server will register mitm client cert!
Mar
22
comment Does Wifi encryption create a private tunnel between the adapter and the accesspoint?
I want to answer "No", but.. Body must be at least 30 characters...
Mar
10
comment uploading photos to cloud from an infected device
Is the cloud already virus free?
Feb
5
comment Linux-based Turla trojan
I've edited my answer, adding a checklist. Please have a look and feel free to comment.
Feb
4
comment Linux-based Turla trojan
@AndréDaniel APT advanced persistent threat don't require root privilege (but let attacker, time to find a way of elevation...)
Feb
4
comment Linux-based Turla trojan
After some tests, research and discuss. I've posted a log edit to my answer today, with a checklist todo. Please read and comment
Dec
20
comment Linux-based Turla trojan
Of course, this sample could be perfected by using openssl instead of netcat... But the method would stay same.
Nov
28
comment Hacked Ubuntu server, probably hacked commands (netstat, ps, …), how to replace them?
You could try my little ddosBotKiller I recently wrote for this, and let my know if it work.
Nov
3
comment How to prove to friend I have solution to puzzle (without revealing it)?
Hmm sorry, I've rewrite @domen right answer. (Yes I think it is THE answer. domen, if you post your own, I will drop mine).
Oct
30
comment How do I know if my computer is being used for a botnet-based DDoS attack?
The version of my published tool is more flexible.
Oct
17
comment Can “cat-ing” a file be a potential security risk?
Not really, but you could use many different terminal implementation. XTerm could be switched between vt100 and tektronix mode, wich have totally different window-manipulation control sequences.
Oct
13
comment How can I find subdomains of a site?
You could even ask google! But this won't be a complete list!
Aug
30
comment Why do so many cracking attempts originate from China?
It's maybe your neighbor which hide his own address by spoofing chinese IP address.
Jul
19
comment What defines a programming language as useful for hacking?
@Luc: bash is a scripting language but it's also a powerfull user environment. You could make a lot of succesives tries against your goal, than finaly dump the history to your prefered editor ...to begin your work/script. You could even quickly edit temporary scripts, use myFunc() { ...; } on command line, create immediate loops, and so on...
Jul
6
comment Difference between binary malware and script-based malware?
In interpreted language, the script is not compiled, but interpreted! But the interpreter is compiled for each architecture. See also: Interpreted languages