Yesterday I finally took my GCIH exam after taking the Sec 504 course a few months ago.
It was a fairly comprehensive exam, but I think the 504 course is a little on the basic side. I like the SANS stuff because you get exposed to some tools / techniques that might take you some time to figure out organically on your own.
In any event, 1.5 hours after I started the exam I walked out with a 92%. Not too bad!
Wednesday, September 26, 2012
Wednesday, September 19, 2012
ie_execcommand_uaf xp only?
With the release of the latest Internet Explorer 0day exploit, I was eager to get an environment up to test it out.
I decided to test out two environments.
1) Windows 7 fully patched with the latest Java version and IE9
2) Windows XP SP3 fully patched without Java and IE8
My testing proved unsuccessful against the configuration (1) above. I was very successful in crashing IE 9, but was not able to exploit it at all. I would have to do some more analysis with this, but a quick google search reveals that I am not alone in this finding. I think that scope of this 0day might have been exaggerated a bit. I did not spend a ton of time on this, but I did try of couple of different configurations.
Configuration (2) above, however, did not fair so well. IE8 still seems to be in use at about 20% of all browsers (and probably 90% of all corporate browsers). I think given those facts, this is still a pretty important 0day.
I decided to test out two environments.
1) Windows 7 fully patched with the latest Java version and IE9
2) Windows XP SP3 fully patched without Java and IE8
My testing proved unsuccessful against the configuration (1) above. I was very successful in crashing IE 9, but was not able to exploit it at all. I would have to do some more analysis with this, but a quick google search reveals that I am not alone in this finding. I think that scope of this 0day might have been exaggerated a bit. I did not spend a ton of time on this, but I did try of couple of different configurations.
Configuration (2) above, however, did not fair so well. IE8 still seems to be in use at about 20% of all browsers (and probably 90% of all corporate browsers). I think given those facts, this is still a pretty important 0day.
Tuesday, August 7, 2012
Two factor Authentication on Fedora 17
It turns out that adding an extra level of security to fedora 17 is quite easy.
The google-authenticator PAM module is easily installed via yum. Once installed, you simply have to edit the /etc/pam.d/sshd configuration to require the pam module as per the instructions located here.
As the user you wish to use two-factor authentication with, you need to run the google_authenticator bin from the command line. It will create an address that you can navigate to and take a picture with the google-authenticator app on your andriod device.
Voila, two factor authentication on your sshd!
Enjoy.
The google-authenticator PAM module is easily installed via yum. Once installed, you simply have to edit the /etc/pam.d/sshd configuration to require the pam module as per the instructions located here.
As the user you wish to use two-factor authentication with, you need to run the google_authenticator bin from the command line. It will create an address that you can navigate to and take a picture with the google-authenticator app on your andriod device.
Voila, two factor authentication on your sshd!
Enjoy.
Subscribe to:
Posts (Atom)