background preloader

Locally checks for signs of a rootkit

Locally checks for signs of a rootkit

The Rootkit Hunter project Anonym.OS LiveCD | kaos.theory: fractal blog February 23rd, 2006 by dr.kaos Like sand through the hourglass, so are the vestiges of our privacy. From increased governmental surveilance to corporate content restrictions and data brokers, what you do, where you go, and who you talk to is of more interest to more people every day. Anonym.OS is an OpenBSD 3.8 Live CD with strong tools for anonymizing and encrypting connections. Standard network applications are provided and configured to take advantage of the tor onion routing network. Anonym.OS was first suggested by dr.kaos at Interzone 4 in Atlanta, March of 2005. Tags: anonymity, bsd, linux, openbsd, presentations, privacy, projects, security, shmoocon, software

E-mail Alert on Root SSH Login Want to be notified instantly when someone logs into your server as root? No problem, check out this nice tutorial on email notification for root logins. Want to be notified instantly when someone logs into your server as root? No problem, check out this nice tutorial on email notification for root logins. So lets get started! 1. 2. cd /root 3. pico .bashrc 4. Replace YourServerName with the handle for your actual serverReplace you@yourdomain.com with your actual email address 5. Now logout of SSH, close the connection and log back in! Note: This is a great tool for servers that have multiple admins or if you give someone SSH access for whatever reason, although you should give out the root password to as few people as humanly possible and be sure to change it often. This will not magically alert you when a hacker runs the latest kernel exploit on your server and logs into SSH because they will create their own SSH/telnet connection.

How To Display PHP Errors In My Script Code When Display_errors Is Disabled this page will help you troubleshoot on how you can display or show your php errors when you are debugin your code with a simple configuration in your web server Author: bigger_travis20 Comments maintiaing a website if very difficutl. there are always people who will abuse spamming comments for many different websites. when i started my website, i used to have a guest comments page, but then i would see so many spam. i use thi php function to detect some spam., there were times when i need to debug my script by showing the errors on my website.. web servers now a day have display_errors off by default, you can fun phpinfo() if you dont know how your server is setup.. or you can view it in your php configuration file called php.ini.. this is how the php.ini file would look like: ; Print out errors (as a part of the output). One way to display erorrs while the display_errors is off in the php.ini file, is to create write these functions at the beginning of your script files (.php files)

How To Recover Deleted Emails From Outlook And Thunderbird Did your important email get accidently deleted? Fret not, since it can be easily recovered. Mail Cure is a free portable tool for Windows that can recover every deleted email from both MS Outlook and Thunderbird instantly. Just run the tool(no installation required) and select the drive you want to scan data for deleted emails. Once done, it will automatically begin scanning for the deleted emails. One upside about this tool is that you can preview the recovered emails while the scan is still in progress. You can sort the emails by different ways such as sender, date, or subject. It is a great email recovery tool, that is both portable, and simple-to-use. Advertisement UNIX / Linux: Send E-mail When sudo Runs | linuxforge UNIX / Linux: Send E-mail When sudo Runs I’m not told to use the root user to perform activities that do not require it. I’ve configured sudo for myself and for other web developers so that they can restart MySQL or Apache web server. How do I send email when sudo run by one of my user? How do I keep track of user login done via sudo command? sudo does greatly enhances the security of the system without sharing root password with other users and admins. sudo provides simple auditing and tracking features too. Configure sudo To Send E-mail Sudo can be configured to to send e-mail when the sudo command is used. mailto "admin@staff.example.com" mail_always on Where, mailto “admin@staff.example.com” : Your email id.mail_always : Send mail to the mailto user every time a users runs sudo. Additional options: Sudo Logfile By default, sudo logs vis syslog. Defaults ! Save and close the file. Like this: Like Loading...

Wo ungefähr ist eine IP Adresse beheimatet? GeoIP in PHP Manchmal möchte man wissen aus welchem Land oder welcher Region eine IP-Adresse kommt, und dafür gibt es bereits Lösungen die leicht zu benutzen sind. Als erstes schauen wir uns die Geo-IP-Datenbank von MaxMind an, die wir mit der PEAR-Klasse Net_GeoIP ansprechen. Wer nur das Land braucht der sollte sich die kostenlose GeoLite Country Datenbank anschauen, wenn die Stadt bzw. die Region benötigt wird wirft man einen Blick auf die GeoLite City Datenbank. Von beiden gibt es auch noch kostenpflichtige Versionen, die genauer und aktueller sind. Das erste Beispiel zeigt die Verwendung der Länder-Datenbank: Die Ausgabe in diesem Fall sieht so aus: Für die zweite Variante mit der City-Datenbank sieht das Script recht ähnlich aus: Die Ausgabe: Des weiteren gibt es noch eine Region-Datenbank und eine Organisation/ISP-Datenbank, die mit den entsprechenden Methoden lookupRegion() und lookupOrg() in Net_GeoIP ausgelesen werden können. Leave a Reply

Fix Outlook 2010 Problem: PST File Repair Tool Microsoft Office Outlook 2010 is quite stable but not perfect, if your PST file becomes corrupt then you will need a repair tool to fix it. PST stands for Personal Storage Table(also referred as Personal Folder File) and is used to store all your Inbox, and other information. If it becomes corrupt, then your Inbox will also get corrupted. If Outlook 2010 is crashing, you could try running in Safe Mode and determine what is causing the problem. Outlook Inbox Repair Tool (SCANPST.exe) It is an official repair tool that is included in Office 2010 by default and was included in Office 2007 as well. You will have to navigate all the way to C:\Program Files\Microsoft Office\Office14 folder and search for SCANPST.EXE file. Double-click this file to open Microsoft Outlook Inbox Repair Tool. C:\Users\[Username]\AppData\Local\Microsoft\Outlook\[Name].pst Once done, hit Start and it will begin checking for errors. Stellar Outlook PST Repair Tool So why is the output destination needed? Advertisement

Setup Virtual Users and Directories in VSFTPD Setup virtual users instead of local users and configure user specific home directories for each user, or shared between a handful of users. The reason for setting up virtual users, and different home directory for each user, was to allow ftp access to a web server running a number of different sites for different clients. Each client can have one or more login to the ftp server, and the usernames and passwords can be shared with the apache webserver, so you only need to store their passwords in one place. I'm choosing vsftpd as the ftp server, as it seems to have the best reputation for being secure (and having the fewest security bugs) Installing Whilst each flavour of linux has it's own way of installing software, I'm going to run through using debian, so you will need to adapt it for whichever distro you use. Firstly we need to download and install the ftp server VSFTPD debian# apt-get install vsftpd debian# apt-get install libpam-pwdfile Configuration for subsequent users just use Testing

Forensics Live CD « UbuntuGuru DEFT v1.0 You may wish to check out DEFT (“Digital Evidence & Forensic Toolkit”) v1.0 by Stefano Fratepietro which was released recently on March 28, 2007. It’s a nice security / forensics Live CD distro built on top of Kubuntu. It contains the Sleuth kit & Autopsy frontend, the afflib “Advanced Forensic Format” tools, dd rescue, foremost, hex dump, ophcrack – a windows password recovery tool, qtparted, testdisk, vinetto (examine Thumbs.db files), readpst (examine MS-Outlook pst files), kismet, wireshart, ettercap, airsnort, and other network sniffers. One downside of this distro is it appears to require 256mb of ram and won’t work on systems with 128mb.Personally, I need a live CD distro that can easily run on legacy systems that I frequently need to work on. Another ubuntu based live CD security distro you may wish to check out is nubuntu. Backtrack 2 Another recently released (March 6th, 2007) security live CD distro with some forensics tools is Backtrack 2. Powered by ScribeFire.

Related: