What make using web applications so desirable to many organizations is that it lightens the developer of the responsibility of building a client for a specific type of computer or a specific operating system.
As an instructor, from time to time to teach a concept, I need to perform an actual test to get my point across to the students. Testing or hacking a live site may have some repercussions that I rather not have to deal with, so using an insecure application locally works great for me. I […]
OpenVAS Terms to Know Host A Host is a single system that is connected to a computer network and that may be scanned. One or many hosts form the basis of a scan target. A host is also an asset type. Any scanned or discovered host can be recorded in the asset database. Hosts in […]
An authenticated scan may provide more vulnerability details on the scanned system. During an authenticated scan the target is both scanned from the outside via the network and from the inside via a valid user login. During an authenticated scan OpenVAS logs in to the target system in order to run local security checks (LSC). […]
Using Metasploit and nmap together as been a useful technique for me during some of my engagements. Below are the steps I take to implement that task. Start metasploit by issuing the following command: msfconsole Verify the status of the database by issuing the following command: db_status Run NMAP from inside msfconsole and save the […]
msf > help Core Commands ============= Command Description ——- ———– ? Help menu banner Display an awesome metasploit banner cd Change the current working directory color Toggle color connect Communicate with a host exit Exit the console get Gets the value of a context-specific variable getg Gets the value of a global variable grep Grep […]
– ————————————————————————- Debian Security Advisory DSA-4217-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff June 03, 2018 https://www.debian.org/security/faq – ————————————————————————- Package : wireshark CVE ID : CVE-2018-9273 CVE-2018-7320 CVE-2018-7334 CVE-2018-7335 CVE-2018-7419 CVE-2018-9261 CVE-2018-9264 CVE-2018-11358 CVE-2018-11360 CVE-2018-11362 It was discovered that Wireshark, a network protocol analyzer, contained several vulnerabilities in the dissectors for PCP, ADB, NBAP, UMTS MAC, IEEE 802.11, […]
Run .bin file in Linux / UNIX Change the permission of the file you downloaded to be executable by typing the following command: $ chmod +x file.bin Start the installation process or run .bin file by typing the following command: $ sudo ./file.bin For example if .bin file name is program.bin. Then type the following […]
The Security Assessment Process & Best Practices Presentation
Internet Safety Tips for Kids & Teens Personal Information. Don’t give out personal information without your parents’ permission. This means you should not share your last name, home address, school name, or telephone number. Remember, just because someone asks for information about you does not mean you have to tell them anything about yourself! Screen […]
