Collaborate Disseminate
The great divide in terms of single board computers lies between those that can run some form of Linux-based distribution, and those that can not. For example the Raspberry Pi Zero is a Linux board, while the Raspberry Pi Pico’s …read more
Continue reading The Raspberry Pi Pico Can’t Run Linux. But It Can Run FUSIX.
Linux and Unix operating systems require regular patching like any IT system, but as security professionals, ethical hackers, and criminal hackers will tell you, regular Linux and Unix patching is often neglected.
CVE-2021-3156 sudo Vulnerability
Last… Continue reading The Linux Flaw you can’t afford to Ignore (CVE-2021-3156)
I’ve seen age being recommended at various locations but I haven’t seen anything related to its security. I’m not a crypto nerd but I was thinking about it and wondered what it’s state of security is. There is no audit (as far as I know) (… Continue reading Age encryption tool [closed]
The Unix Way™ provides extreme hackability. The idea is that software should be written as tools to accomplish discrete tasks, and that it should be modular, extensible, and play well with others. It’s like software as a LEGO set — …read more
The worm returned in recent attacks against web applications, IP cameras and routers. Continue reading Gitpaste-12 Worm Widens Set of Exploits in New Attacks
I have a laptop on which I’m the only user. While installing the laptop I was wondering why I should choose a different password for the root account and user account. My reasoning is:
The change of finding a valid password doubles if the… Continue reading On a single user laptop does it make sense to have a separte password for root and the user?
Since I have been focusing on leaving some proprietary password managers I have paid for years, I am taking a more independent approach and I would like to know your input about this matter. I use Linux extensively and using a KDBX file fe… Continue reading Best password manager: Unix PASS or .KDBX with KeepassXC? [closed]
Purpose: test if PtH (Pass the hash) is feasible against Unix box
Scenario:
Windows host (Windows Server 2008) vulnerable to eternalblue
got Administration hash as part of the post-exploitation process (meterpreter hashdump command)
Admi… Continue reading Pass the Hash & Unix
I’m curious if there is a way to make user input safe for grep commands. I have a search box that should allow an end user to search a directory recursively for files containing a string.
I could accomplish this solely with PHP but grep sh… Continue reading Grep Commands with User Input
I have GPG agent forwarding via SSH RemoteForward working, up to a point:
I can list my private and public keys on the remote host.
If I try to decrypt a file remotely, the PIN is prompted for but the text is stepped, garbled and the pas… Continue reading GPG Agent SSH Forward Pinentry