Collaborate Disseminate
I’m trying to edit my rsyslog.conf in order to set hex parts of my auditd logs in clear.
Does anyone know if it is possible to configure rsyslog in order to apply a parsing on the log received by a bash script ? (Or any other technique)
It… Continue reading Rsyslog & Auditd – Parsing audit.log / proctitle hexadecimal value to ascii [migrated]
We are currently working on an IoT product & having a hard time coming up with a strategy to create a unique password for each device/unit.
I do understand that password based on a function of { serial number, CPU id, MAC address or ti… Continue reading Creating a unique password for each device/unit of the same product
I ask because I’ve been looking into Miniconda (https://repo.anaconda.com/miniconda/Miniconda3-py39_4.9.2-Linux-x86_64.sh), and the installation shell script has TONS of binary data starting at line 577.
I ended up checking the shell scrip… Continue reading Is it normal for shell scripts to contain binary data?
I am trying to find if the following shell script is vulnerable to command injection
#!/bin/sh
set -x
dig +noall +answer TXT $2._domainkey.$1
Now when I try something like this,
sh script.sh "sparkpost.com & echo \$(whoami)"… Continue reading Are positional parameters vulnerable to command injection?
Is Bash more commonly used in security work than PowerShell? If so, why? (Now that Powershell can be used on Linux)
I tried to Google around for an answer on this, and the only questions we seem to have here are quite different, e.g.:
What… Continue reading Learn Bash or Powershell for Security Work? [closed]
i want to generate payload whith persistence script that automatically setuped when victim install the payload in window . I know that a multi/handler allow to set autorunscript and it works fine. the problem is i want to generate a payloa… Continue reading generating payload whith autorun script
It has become common trend to use shell scripts from the web and directly run them:
bash <(curl -sL some.random.website.com)
I always view the script before running them. However, shell scripts are always more cryptic than reading a r… Continue reading Shell scripts scanning tools
I was going to post this on a different SE site, but I found that explicitly stating –tlsv1.1 to curl fixed the problem, for now. My question now relates to security.
A vendor switched to FTPS (not SSH FTP) recently. I’ve added –ssl a… Continue reading Linux curl SH script broken unless I specify TLS version
And welcome.
I’m A cafe owner, and I have a small problem that I need to reset the password of the wifi manually every day because of the clients, I dug around it and found some interesting details “for me.”
The first thing I found that I… Continue reading How To Make A Router Change The WPA Password Automatically Everyday? [closed]
This is with regards to a Netcat based script running on a Debian based distribution, specifically the Proxmox hypervisor (see here if unknown https://en.wikipedia.org/wiki/Proxmox_Virtual_Environment)
I would need to run a… Continue reading Netcat on Debian Security advice please nc -(dknl) [closed]