This is a simple problem in the end that cost me serious troubleshooting time. Hopefully you found this article and it can save you some of what I lost. You may encounter a problem when running a script on the Linux CLI that results in error: bad substitution and a Read more…
Most logging solutions are set up to facilitate capture and storage of log data from live systems either sending logs to the server or by agents handling the log transportation. HELK is no different. However, once in a while it may be necessary to import log data manually. This walk Read more…
After working on this for a bit I wanted to make sure I posted this reminder for myself and others. Regex is a very powerful tool but the syntax is almost something of an art. I needed to identify strings of numbers between two colons. The following regex should look Read more…
One of the best parts of a Linux OS is that you can often patch on the fly without a need for reboot afterwards. The only thing that does definitively need a reboot is after a kernel patch. Sometimes, it isn't possible to issue the reboot right away, so the system Read more…
FindMyHash is a great utility for checking hashes across various sites for pre-determined hash values, accepting both single hashes and hash files with support for a large variety of hash types (MD4, MD5, SHA1, SHA256, RMD160, LM, NTLM, MYSQL, CISCO7 or JUNIPER). Unfortunately, the native tool doesn't currently offer the Read more…
The released script will take a given log directory, normally your website log directory, and search it for attempts to exploit the server using the recently released GNU Bourne Again Shell (bash) vulnerability also known as Shell Shock. Once it identifies these entries, it will output them into a separate Read more…