Collaborate Disseminate
SANS Digital Forensics and Incident Response Blog blog pertaining to Digital Forensic SIFTing: String Searching and File Carving using srch_strings_wrap Continue reading Digital Forensic SIFTing: String Searching and File Carving using srch_strings_wrap
We have implemented/are implementing a network vulnerability scanning process, and we have chosen to use Qualysguard.
Qualys supply a scanner appliance for the internal network scanning, which obviously connects to the network. Our interna… Continue reading Network Vulnerability Scanner placement on network
I have a LAN network with three computers connecting to the Internet both through wired and encrypted wifi connections. Is there a way I can check who is connecting to the Internet via the wifi connection?
Before I ask my question, I would like to make sure that I understand the settings correctly.
So, the given:
A client, using some web browser (firefox, for instance) – the Client
The bank server – the Server
The Client est… Continue reading Is accessing bank account on the internet really secure?
My model is one where I have several clients which wish to speak with some (but not all) of the other clients.
All messages will be sent through a server.
Only the two clients communicating with each other should be able to know the mess… Continue reading Encryption – should I be using RSA or AES?
I want to be able to offer ssh accounts on my Linux server for people to be able to use for SSH tunnelling. All accounts will be locked down with no interactive shell, for tunnelling/port forwarding purposes only. My problem is that I don’… Continue reading SSH Tunnelling: How can I stop users being able to access services bound to localhost via port forwarding?
We’re planning to give the possibility to write community-driven extensions in javascript for our public webapp and let people to customize their instances of the application. The problem is to monitor the quality of extensio… Continue reading How to scan Javascript for malicious code?
ipmievd (aka the IPMI event daemon) in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux (RHEL) 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users t… Continue reading CVE-2011-4339 (ipmitool)
Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr 3.1.0 RC and probably earlier allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) index.php, (2) admin/boxes.php, (3) comm/clients.php, (4) commande/inde… Continue reading CVE-2011-4814 (dolibarr_erp/crm)
Multiple SQL injection vulnerabilities in Dolibarr 3.1.0 RC and probably earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) sortfield, (2) sortorder, and (3) sall parameters to user/index.php and (b) user/group/index… Continue reading CVE-2011-4802 (dolibarr_erp/crm)