Ssh, linux

Wednesday, 14 December 2011

Hardening Ubuntu Linux using Bastille Linux

The Bastille Hardening program "locks down" an operating system, proactively configuring the system for increased security and decreasing its susceptibility to compromise. Bastille can also assess a system's current state of hardening, granular reporting on each of the security settings with which it works.

Bastille currently supports the Red Hat (Fedora Core, Enterprise, and Numbered/Classic), SUSE, Debian, Gentoo, and Mandrake distributions, along with HP-UX. Bastille's focuses on letting the system's user/administrator choose exactly how to harden the operating system. In its default hardening mode, it interactively asks the user questions, explains the topics of those questions, and builds a policy based on the user's answers. It then applies the policy to the system. In its assessment mode, it builds a report intended to teach the user about available security settings as well as inform the user as to which settings have been tightened.

How to Change the Network MAC Address on Ubuntu Linux - macchanger

07:30 No comments

A Media Access Control address (MAC address) is a unique identifier assigned to network interfaces for communications on the physical network segment. MAC addresses are used for numerous network technologies. Logically, MAC addresses are used in the Media Access Control protocol sub-layer of the OSI reference model.

MAC addresses are most often assigned by the manufacturer of a network interface card (NIC) and are stored in its hardware, the card's read-only memory, or some other firmware mechanism. If assigned by the manufacturer, a MAC address usually encodes the manufacturer's registered identification number and may be referred to as the burned-in address. It may also be known as an Ethernet hardware address (EHA), hardware address or physical address. A network node may have multiple NICs and will then have one unique MAC address per NIC.

MACChanger is a GNU/Linux utility for viewing/manipulating the MAC addresses of network interfaces. It can set specific, random, vendor-based (with a 6600+ vendor list), and device-type-based MACs.

A Fast Web Server Log Analyzer - Visitors

07:00 No comments

Visitors is a very fast web log analyzer for Linux, Windows, and other Unix-like operating systems. It takes as input a web server log file, and outputs statistics in form of different reports. The design principles are very different compared to other software of the same type:

* Designed to be executed by the command line, output html and text reports. The text report can be used in pipe to less to check web stats from ssh.
* Support for real time statistics with the Visitors Stream Mode.
* To specify the log format is not needed at all. Works out of box with apache and most other web servers with a standard log format.
* It's a portable C program, can be compiled on many different systems.
* The produced html report doesn't contain images or external CSS, is self-contained, you can send it by email to users.
* Visitors is free software (and of course, freeware), under the terms of the GPL license.

Visitors Reports information
Visitors reports contain a number of useful information and statistics:
* Requested pages.
* Requested images.
* Referrers by hits and age.
* Unique visitors in each day.
* Page views per visit.
* Pages accessed by the Google crawler (and the date of google's last access on every page).
* Percentage of visits originated from Google searches for every day.
* User's navigation patterns (web trails).
* Key phrases used in Google searches.
* User agents.
* Weekdays and Hours distributions of accesses.
* Weekdays/Hours combined bidimentional map.
* Month/Year combined bidimentional map.
* Visual path analysis with Graphviz.
* Operating systems, browsers and domains popularity.
* 404 errors.

Automatic SQL Injection Exploitation Tool - TheMole

07:00 No comments

Author is not responsible for any damage or illegal actions caused by the use of this program.
Use on your own risk!

SQL injection is yet another common vulnerability that is the result of lax input validation. Unlike cross-site scripting vulnerabilities that are ultimately directed at your site’s visitors, SQL injection is an attack on the site itself—in particular its database. The goal of SQL injection is to insert arbitrary data, most often a database query, into a string that’s eventually executed by the database. The insidious query may attempt any number of actions, from retrieving alternate data, to modifying or removing information from the database.

TheMole is an automatic SQL Injection exploitation tool. Only by providing a vulnerable URL and a valid string on the site it can detect the injection and exploit it, either by using the union technique or a boolean query based technique.

TheMole Features
* Support for injections using Mysql, SQL Server, Postgres and Oracle databases.
* Command line interface. Different commands trigger different actions.
* Auto-completion for commands, command arguments and database, table and columns names.
* Support for query filters, in order to bypass certain IPS/IDS rules using generic filters, and the possibility of creating new ones easily.
* Developed in python 3.