New answers tagged linux
0
I'll answer these backwards in order to hopefully make the reasoning clearer. With regards to the second question: the contents of local log files stored on disk should always be considered untrustworthy. Logs should be forwarded to a SIEM in real-time, precisely to avoid an attacker being able to cover their tracks. How you can accomplish this:
...
1
First of all, your runtime encrypt-decrypt speed will be dependent on how fast your CPU/ core can handle AES, and whether it's implemented in software or on the hardware - the method by which the volume key is unlocked has almost no bearing on runtime operations.
I'll propose LUKS2 in mode aes-xts-plain64 (or aes-xts-plain depending on your kernel) which is ...
0
After several retries to slightly adjust the payload. To no avail. I reinstalled Metasploitable 2.
I Remade the payload again as originally intended.
I ran sudo ./test.elf on the metasploitable machine and it worked.
I had ran sudo ./test.elf before and it gave me command not found on the other install.
It seems to work now. After making several payloads ...
2
IP / port scanning is something that is happening on a daily basis. The cgi-bin directory is a standard directory and included in almost if not all wordlists used by directory brute forcing tools such as dirb, dirsearch etc. The cgi-bin directory is also of interest in relation to a know vulnerability ShellShock (read further to see whether your system is ...
0
JAVA Application/Server
I would recommended to read the Everything about Java's SecureRandom article.
TL;DR
You have two options:
set the java.security.egd system property to file:/dev/urandom. The easiest option is to configure it by using the JAVA_TOOL_OPTIONS environment variable:
export JAVA_TOOL_OPTIONS = '-Djava.security.egd=file:/dev/urandom'
set ...
0
freerdp is now displaying the remote desktop thumbprint in SHA256 format. Before that, it was displaying it in SHA1 format. Windows is still displaying it in SHA1 format hence when you look at it visually, the numbers don't match.
You can extract the certificate in Windows and generate a SHA256 for the certificate. Run the following on the extracted ...
2
Put ssh in a VPN tunnel.
Set up a VPN like wireguard, which does not respond to port scans.
Make the sshd on the server listen only on the private IP of the wireguard interface.
Then ssh into the server using wireguards internal ip on the client.
Do the same for other services which don't require public access.
Hackers almost always have a chance to get in. ...
2
If you connect to the ssh server from only a known set of ip addresses, then it's a wise idea to restrict access to only allow incoming connections from these addresses. By blocking incoming connections from all other address, this mitigates attacks that may exploit a potential zero-day vulnerability in ssh, or a configuration error.
You can do this in ...
1
In most implementations, the char data type is equivalent to a byte. Meaning a string is just a series of arbitrary bytes, and vice versa. Those bytes do not have to be human-readable. I'll demonstrate on my system, with a slight modification to the source to make things a little clearer in the disassembly:
#include <stdio.h>
#include <string.h&...
3
Specifically, is it the Linux Kernel, the Android OS, or the DVM?
All of this. And also the firmware.
Bugs in the virtual machine would allow the attacker to change what an application is supposed to do, which is especially a problem if the application is allowed to access the specific hardware. Bugs in the Android OS could mean that an attacker could ...
Top 50 recent answers are included
