Collaborate Disseminate
We are currently working on an IoT product & having a hard time coming up with a strategy to create a unique password for each device/unit.
I do understand that password based on a function of { serial number, CPU id, MAC address or ti… Continue reading Creating a unique password for each device/unit of the same product
I ask because I’ve been looking into Miniconda (https://repo.anaconda.com/miniconda/Miniconda3-py39_4.9.2-Linux-x86_64.sh), and the installation shell script has TONS of binary data starting at line 577.
I ended up checking the shell scrip… Continue reading Is it normal for shell scripts to contain binary data?
I am trying to find if the following shell script is vulnerable to command injection
#!/bin/sh
set -x
dig +noall +answer TXT $2._domainkey.$1
Now when I try something like this,
sh script.sh "sparkpost.com & echo \$(whoami)"… Continue reading Are positional parameters vulnerable to command injection?
Is Bash more commonly used in security work than PowerShell? If so, why? (Now that Powershell can be used on Linux)
I tried to Google around for an answer on this, and the only questions we seem to have here are quite different, e.g.:
What… Continue reading Learn Bash or Powershell for Security Work? [closed]
i want to generate payload whith persistence script that automatically setuped when victim install the payload in window . I know that a multi/handler allow to set autorunscript and it works fine. the problem is i want to generate a payloa… Continue reading generating payload whith autorun script
It has become common trend to use shell scripts from the web and directly run them:
bash <(curl -sL some.random.website.com)
I always view the script before running them. However, shell scripts are always more cryptic than reading a r… Continue reading Shell scripts scanning tools
I was going to post this on a different SE site, but I found that explicitly stating –tlsv1.1 to curl fixed the problem, for now. My question now relates to security.
A vendor switched to FTPS (not SSH FTP) recently. I’ve added –ssl a… Continue reading Linux curl SH script broken unless I specify TLS version
And welcome.
I’m A cafe owner, and I have a small problem that I need to reset the password of the wifi manually every day because of the clients, I dug around it and found some interesting details “for me.”
The first thing I found that I… Continue reading How To Make A Router Change The WPA Password Automatically Everyday? [closed]
This is with regards to a Netcat based script running on a Debian based distribution, specifically the Proxmox hypervisor (see here if unknown https://en.wikipedia.org/wiki/Proxmox_Virtual_Environment)
I would need to run a… Continue reading Netcat on Debian Security advice please nc -(dknl) [closed]
I’m currently developing a web service that takes user input and passes it to a bash script as an argument.
I know that without sanitizing this allows for remote command execution. So I want to know if alphanumeric strings … Continue reading Are alphanumeric strings safe to pass to a bash script?