Samiux's Blog

Open Source is a great idea and it has changed the world! Open Source forever ....

While you do not know attack, how can you know about defense? (未知攻,焉知防?)

Do BAD things .... for the RIGHT reasons -- OWASP ZAP

It is easier to port a shell than a shell script. -- Larry Wall

Most of you are familiar with the virtues of a programmer. There are three, of course: laziness, impatience, and hubris. -- Larry Wall

为天地立心, 为生民立命, 为往圣继绝学, 为万世开太平。 -- 王炜

Monday, December 07, 2015

Facebook Don't Care About Their Users Again

›
Several years ago, a researcher found a vulnerability in Facebook and he informed the official and provided with the PoC in full details whe...
Tuesday, November 10, 2015

HOWTO : Quick Audit Your Android Devices

›
*** Google Play install is no longer supported by Google. The official site provides apk file download for installation. Make sure you en...

HOWTO : Audit Your Home Router

›
Recently, a lot of home routers have been compromised. However, vendors of home router will not disclose if the vulnerabilities have been f...
Monday, October 26, 2015

HOWTO : Detect and Prevent ICMP Tunnel Attack on Suricata

›
Recently, I read an article about ICMP Tunnel attack. It demo how to upload a file by encoding the content with Base64 via ICMP protocol. ...
Thursday, October 22, 2015

HOWTO : Self-signed Certificate on Suricata

›
Problem The most common weakness of Intrusion Detection and Prevention System is encrypted traffic inspection. The encrypted SSL/TLS traf...
Thursday, October 15, 2015

HOWTO : Detect and Prevent SSH Tunnel On Suricata

›
Problem The most common weakness of Intrusion Detection and Prevention System is encrypted traffic inspection. The SSH encrypted traffic ...
Wednesday, October 14, 2015

HOWTO : LuaJIT on Suricata

›
What is LuaJIT? LuaJIT is a Just-In-Time Compiler (JIT) for the Lua programming language. Lua is a powerful, dynamic and light-weight pro...
Friday, October 09, 2015

HOWTO : ClamAV For Suricata

›
Suricata is an Intrusion Detection and Prevention System and it can work with ClamAV too. One of the features of Suricata is using MD5 has...
Sunday, October 04, 2015

Cloudflare Or Not Cloudflare?

›
Cloudflare is very famous in against DDoS attacks. Their by-product is the IP address of the protected sites are hidden if the owner of th...
Thursday, September 17, 2015

Will Linux Be Infected By Malware Or Not?

›
When I came to know Linux, almost all advanced Linux users told me that Linux is impossible to be infected by virus and malware due to its e...

HOWTO : ArpON on Ubuntu 14.04 LTS

›
ArpON (ARP handler inspection) is a portable handler daemon that make ARP protocol secure in order to avoid the Man In The Middle (MITM) at...
Wednesday, September 16, 2015

HOWTO : Hardening and Tuning Ubuntu 14.04 LTS

›
This guide will lead you to hardening and tuning your Ubuntu 14.04 in a few steps without any expense. As an Information Security Enthusias...
Tuesday, September 08, 2015

HOWTO : ClamAV on Ubuntu 14.04 LTS

›
Clam AntiVirus (ClamAV) is a free and open-source, cross-platform antivirus software tool-kit able to detect many types of malicious softwa...
Saturday, August 29, 2015

HOWTO : Commix on Ubuntu 14.04 LTS

›
Commix (short for [comm]and [i]njection e[x]ploiter) has a simple environment and it can be used, from web developers, penetration testers ...

HOWTO : HconSTF on Ubuntu 14.04

›
Hcon Security Testing Framework (HconSTF) is Web Application Security Analysis & Penetration Testing Framework made of mozilla technolo...

HOWTO : PTF on Ubuntu 14.04 LTS

›
The PenTesters Framework (PTF) is a Python script designed for Debian/Ubuntu based distributions to create a similar and familiar distribut...
Friday, August 28, 2015

Catch Me If You Can 3

›
Last year, I was talking about how to use NightHawk to do malicious things. The full article is here . Two years ago, I also talked about ...

HOWTO : OpenVAS on Ubuntu 14.04 LTS

›
OpenVAS is a framework of several services and tools offering a comprehensive and powerful vulnerability scanning and vulnerability managem...

HOWTO : the-backdoor-factory on Ubuntu 14.04 LTS

›
The Backdoor Factory (BDF) is to patch executable binaries with user desired shellcode and continue normal execution of the prepatched stat...

HOWTO : SPIKE on Ubuntu 14.04 LTS

›
SPIKE is a fuzzer to find exploitable bugs on application programs. Install sudo apt-get install build-essential cd ~ mkdir arsenal ...
‹
›
Home
View web version

About Me

My photo
Samiux
Somewhere in the Hell
View my complete profile
Powered by Blogger.