LinuxQuestions.org

Rootkit Hunter 1.2.8

Posted 02-14-2006 at 09:20 AM by unSpawn

Tags rootkit hunter

Rootkit Hunter just released 1.2.8: get it from http://www.rootkit.nl/

unSpawn

Moderator

Posted in Uncategorized

Views 605 Comments 0 unSpawn is offline

Constructing "ZoneAlarm for Linux"?

Posted 02-02-2006 at 07:13 PM by unSpawn

Once in a while a question like is there a "ZoneAlarm for Linux"? pops up in LQ-SEC. Usually members tend to tell OP's any firewall handling matters should be done using a front-end if Netfilter-fu is low, but basically that's it. IIRC that too LInux-centric a view: it is not all ZoneAlarm provides. As far as I can remember it checks if the binary has changed, looks up if it's allowed to use the network and if it is allowed to act as server and/or client.

//OK, first...

unSpawn

Moderator

Posted in Uncategorized

Views 8751 Comments 0 unSpawn is offline

Time out of mind

Posted 01-15-2006 at 10:30 AM by unSpawn

Don't know how that happened, but
Q: services display time skew (several zones off) in syslog.
A: test if /etc/localtime isn't a file but linked to /usr/share/zoneinfo/(posix/)$continent/$place .

unSpawn

Moderator

Posted in Uncategorized

Views 518 Comments 0 unSpawn is offline

Bash input validation

Posted 01-11-2006 at 08:28 PM by unSpawn

Takes argument and stops when character outside restricted set is found.
Don't know how much slower, didn't run any timing tests with or without yet.

Code:

val_str() {
        declare -r str_allow="1234567890-_.abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ "
        declare -r str_len="128"; str=( "$1" ); if [ -z "${str}" -o "${#str}" -gt "${str_len}" ]; then return 1; fi
        charLim=$[${#str}-1];

...

unSpawn

Moderator

Posted in Uncategorized

Views 2413 Comments 1 unSpawn is offline

PHP, aka Pretty Hosed Programming

Posted 01-11-2006 at 08:02 PM by unSpawn

If you've read the SANS Top 20 of 2005 (http://www.sans.org/top20/)) there is a clear message with respect to deploying PHP-driven applications: be paranoid or be cracked. A short tour of a few vulnerability reporting sites show that with programmers who can't be arsed to follow the most basic principles of programming, who force users to run their app with all essential security features off and with undereducated users running apps without questioning this will be another wonderful year for your...

unSpawn

Moderator

Posted in Uncategorized

Views 600 Comments 0 unSpawn is offline

Page 9 of 10

« First