Collaborate Disseminate
I recently discovered the CIS Hardening Image Benchmarks and they seem very useful for auditing the baseline image of a device. However, these CIS Benchmarks are very in-depth and are around 1,300 pages long.
I tried to find a publicly ava… Continue reading Automated auditing of device image based on CIS Hardening Image Benchmark
Seems like there’s been a lot of hardware-enabled security features released for x64 in the last few years. MPX (albeit that’s since been deprecated), MBEC, CET with indirect branch control and shadow stacks, VT-rp, SMEP/SMAP, Intel TDT to… Continue reading What’s next for hardware-level security features?
The CIS CAT Lite tool fails a rule and has the following note:
"This Group Policy path is provided by the Group Policy template <…>.admx that is included with the Microsoft Windows 11 Release 22H2 Administrative Templates v1.0… Continue reading Is this CIS CAT Lite rule applicable to Windows 10?
I’m trying to understand SUID privilege escalation and I’m trying to recreate some issues.
But both all my scripts and binaries drop the SUID-Bit and get executed with the user with which I’m executing the them.
Therefore my question how c… Continue reading Ubuntu 24.04 and SUID
We are performing regular reinstallations of our systems which keeps on changing the servers sshd private keys due to regeneration at the end of the OS installation.
Due to this our automated systems and my users have deactivated StrictHos… Continue reading sshd HostKey hardcoding implementation
I decided to move to self-hosting because it is cheaper.
What I want to host:
My personal website
Some apps for fun
Maybe later a Honeypot
I have my old laptop acting as the main host. It has Ubuntu installed with virtualbox.
What I plan… Continue reading Port knocking through NAT for self-hosted server
I decided to move to self-hosting because it is cheaper.
What I want to host:
My personal website
Some apps for fun
Maybe later a Honeypot
I have my old laptop acting as the main host. It has Ubuntu installed with virtualbox.
What I plan… Continue reading Port knocking through NAT for self-hosted server
The server is based on Linux and applications are based on Android and iOS.
I was looking through "Linux Hardening Guide" as someone recommended it to me in order to harden Linux servers. I looked at the syllabus of the book, but… Continue reading How to learn to secure Web Applications? [closed]
I’m wondering this. I am planning to resolve Vulnerability Assessment and Penetration Testing reports. Do I need to learn how to do such attacks in order to harden the server?
Or don’t I?
Continue reading Do I need to study how to find security flaws in order to harden my Linux server?
We are looking into reviewing our organization OS/DB hardening checklist (done by predecessor). We’re aware that there are various benchmarks out there like CIS & STIG to guide on that, and the current checklist is rather a short list … Continue reading OS/DB Hardening Checklist Drafting Process