So the devil called me this afternoon and said they where having a snowstorm in hell.In other news Valve announced that their revolutionary "content delivery service" known as "Steam" is being ported to OSX and will be available as early as April 2010. No really its true, straight from the horse's mouth. In addition the actual client and "Steam-works" being brought to Apple's operating system Valve also plans to port all of the Source Engine games, these include:
In an earlier post I spoke of different pieces of software I had been using to rip my DVDs to media files, never content to just leave things as they are I took to piecing bits and chunks of various episode clips together. I tried a few different Linux video editors including Kino (a KDE staple), PiTiVi (to be included by default in Ubuntu 10.04), and Cinelerra.
A few weeks back the girl I have been dating for awhile now had idly made a complaint about her laptop being poky at certain tasks. I'd used the thing once or twice to check my email and recalled it was running Vista - no surprise there. I like this girl a lot and figured it was time to take that next step in our relationship:I offered to put Linux on her laptop.
There is no denying the fact that we have become a touch-centric society in regards to our technology. Thanks to the "iPhone standard" every new handheld device better sport at least some form of touch screen if it expects to compete with the competition. Where is our technology headed though? With the idea of "bigger is better" in mind: if a 3.5~ inch touch screen is good a larger screen must better right?
Wine Technology advances at a rapid rate, in the last month we have seen two updates to Wine (1.1.33 & 1.1.34).
The Metasploit Meterpreter has supported the "hashdump" command (through the Priv extension) since before version 3.0. The "hashdump" command is an in-memory version of the pwdump tool, but instead of loading a DLL into LSASS.exe, it allocates memory inside the process, injects raw assembly code, executes its via CreateRemoteThread, and then reads the captured hashes back out of memory. This avoids writing files to the drive and by the same token avoids being flagged by antivirus (AV) and intrusion prevention (HIPS) products.
Update: This module, just like the original exploit, only works on IE6 at this time. IE7 requires a slightly different method to reuse the object pointer and IE8 enables DEP by default.
Last night, Kingcope uploaded a video to youtube demonstrating a logic flaw in the Samba CIFS service (this was followed by a mailing list post). This bug allows any user with write access to a file share to create a symbolic link to the root filesystem. From this link, the user can access any file on the system with their current privileges.
Many database servers helpfully provide version number, platform, and other salient details to just about anyone who asks, authenticated or not, which makes fingerprinting these applications a snap. However, Postgres is a little more coquettish about revealing such personal information about itself to just anyone. The best way to determine Postgres' version is to log in and just ask with a "select version()" query, but what if you don't (yet) have credentials?
Lucky for unauthenticated types, it turns out that Postgres is pretty forthcoming in its authentication failure messages.
Among the coolest features in metasploit is the ability to pivot through a meterpreter session to the network on the other side. The route command in msfconsole sets this up but requires a bit of typing to get right.
For those of you who don't know me, I have been a developer and computer security enthusiast for many years. I have been involved in computer security, specifically, for the last ten years. The first six years were as an independent research and hobbyist. I have spent the last four years working professionally as a software vulnerability researcher.
Tomorrow I will become the latest addition to the Metasploit and Rapid7 team, filling the Exploit Developer position. I am truly honored to have the chance to be part of such a talented team.
As of this afternoon, the msfencode command has the ability to emit ASP scripts that execute Metasploit payloads. This can be used to exploit the currently-unpatched file name parsing bug feature in Microsoft IIS. This flaw allows a user who can upload a "safe" file extension (jpg, png, etc) to upload an ASP script and force it to execute on the web server.
Even though Metasploit 3.3.3 was just released on December 23rd, the holidays provided some free time for the community and the development team to add more shiny to the Metasploit Framework.
This morning we released version 3.3.3 of the Metasploit Framework - this release focuses on exploit rankings, session automation, and bug fixes. The exploit rank indicates how reliable the exploit is and how likely it is for the exploit to have a negative impact on the target system. This ranking can be used to prevent exploits below a certain rank from being used and limit the impact to a particular target.
Last week we released Metasploit 3.3.2 following on the heels of Metasploit 3.3.1. This release marked a major change to how the Meterpreter backend processed commands; instead of running each request serially, the Meterpreter now spawns a background thread for each request.
On December 1st, Rapid7 announced the Community Edition of the NeXpose vulnerability management product. At the same time, we released version 3.3.1 of the Metasploit Framework, which contains the first step towards full integration between NeXpose and Metasploit.
We are excited to announce the immediate availability of version 3.3 of the Metasploit Framework. This release includes 446 exploits, 216 auxiliary modules, and hundreds of payloads, including an in-memory VNC service and the Meterpreter. In addition, the Windows payloads now support NX, DEP, IPv6, and the Windows 7 platform.
Animation package adds video encoding/decoding and per frame editing to the GIMP. A useful add on to a already great program. Yet another fun thing to do with linux, edit video with GIMP.
Read the included INSTALL text file for building and installation instructions.
story describes installation and configuration of Nagios for remote monitoring using nrpe
How do I monitor a remote linux system using Nagios
Solution / Answer:
Use th NRPE daemon to execute Nagios plugins on the remote server and report back to the monitoring host server.
NRPE Remote Server Installation and Setup
Its imperative to have a comprehensive backup and recovery solution that would enable the recovery of Linux servers, helping you to get back to business and minimize the downtime. The backup software solutions provides you a complete back up of the files, data, database, system or server.
Article covers:
* afbackup
* Amanda
* Aconis
* Areca
* Backup Pc
* fwbackups
* SBAdmin
* Simple Backup
* Bacula
* BAR
Add this site to google
don't forget to vote if you find something useful!!
4 days 20 hours ago
6 days 11 hours ago
2 weeks 2 days ago
2 weeks 2 days ago
2 weeks 2 days ago
2 weeks 2 days ago
2 weeks 3 days ago
2 weeks 5 days ago
2 weeks 5 days ago
2 weeks 5 days ago