Let me start of by defining what TrueCrypt is. TrueCrypt is a piece of software that has been developed to allow fairly advanced file and disk encryption operations across a wide variety of systems and media. The beauty of TrueCrypt Read more…
A while ago I had put together a quick script to check files in a web directory for possible web shells. I was in a training class and looking for my information on this last week and it seems I've Read more…
One of the best parts of a Linux OS is that you can often patch on the fly without a need for reboot afterwards. The only thing that does definitively need a reboot is after a kernel patch. Sometimes, it isn't Read more…
FindMyHash is a great utility for checking hashes across various sites for pre-determined hash values, accepting both single hashes and hash files with support for a large variety of hash types (MD4, MD5, SHA1, SHA256, RMD160, LM, NTLM, MYSQL, CISCO7 Read more…
The released script will take a given log directory, normally your website log directory, and search it for attempts to exploit the server using the recently released GNU Bourne Again Shell (bash) vulnerability also known as Shell Shock. Once it Read more…
A few days ago I posted about a nasty vulnerability pertaining to GNU Bourne Again Shell, otherwise known as bash, The vulnerabilities still exist in unpatched systems and the scope of what could be affected is still expanding. The good Read more…
UPDATED: 09/26/2014 – 01:14 EST – Added vulnerability validation code This exploit may have bigger holes than even the Bat Cave. CVE-2014-6271 (Credit to Stephane Chazelas for discovery) was publicly announced yesterday, September, 24th and some articles are already calling this Read more…