Omenix.Org » Computers

Nessus plugin update failed?

omen — Mon, 31 Aug 2009 16:44:09 +0000

Hello nessus? I mean Tenable, what’s going on?

The same result for Nessus 4.01

Hack In The Box Security Conference 2009

omen — Sun, 23 Aug 2009 17:18:32 +0000

HITBSecConf2009 – Malaysia will also see a new and improved version of our highly popular team-based hacking competition known as Capture The Flag. First developed and presented at Defcon in the US, the idea behind a CTF competition is to allow for teams of three to hack into prepared servers running in order to retrieve marked files or flags on these target machines. Participants will also be required to defend their systems from attack. Teams will be judged on both their defensive as well as the offensive game play.

We believe HITBSecConf is an ideal platform for leading network security vendors to not only meet with some of the leading network security specialists but to also showcase their own technology and solutions with the public as well.

Venue:
Crowne Plaza Mutiara Kuala Lumpur,
Jalan Sultan Ismail,
50250 Kuala Lumpur

Technical Training – DAY 1 and DAY 2
Date: 5th and 6th October 2009
Time: 0900 – 1800
TECH TRAINING 1 – Web Application (in)Security
TECH TRAINING 2 – The Art of Network Based Forensics – Going Beyond Packet Data
TECH TRAINING 3 – The Exploit Laboratory 4.0
TECH TRAINING 4 – The Security of ASEAN Locks (CLOSED DOOR SESSION FOR .GOV / LAW ENFORCEMENT ONLY)
TECH TRAINING 5 – Forensic Acquisition and Analysis (*NEW*)

Conference DAY 1 and DAY 2
Date: 7th and 8th October 2009
Time: 0900 – 1800
Triple Track Conference
HITB Labs
Capture The Flag (CTF)
Lock Picking Village
HAM Radio Village

For more details please visit HITBSecConf 2009

Patch your CentOS 5.x OpenSSH

omen — Fri, 21 Aug 2009 18:16:11 +0000

Just follow the steps below:

# wget http://mirror.mcs.anl.gov/openssh/portable/openssh-5.2p1.tar.gz

Check your md5/sha1

(md5sum : ada79c7328a8551bdf55c95e631e7dad)

(sha1sum : 8273a0237db98179fbdc412207ff8eb14ff3d6de)

Next, prepare to build and install the RPM. Disable the building of GUI components in the spec file. We don’t need these on a server:

# tar zxvf openssh-5.2p1.tar.gz
# cp openssh-5.2p1/contrib/redhat/openssh.spec /usr/src/redhat/SPECS/
# cp openssh-5.2p1.tar.gz /usr/src/redhat/SOURCES/
# cd /usr/src/redhat/SPECS
# perl -i.bak -pe ‘s/^(%define no_(gnome|x11)_askpass)\s+0$/$1 1/’ openssh.spec
# rpmbuild -bb openssh.spec
# cd /usr/src/redhat/RPMS/`uname -i`
# ls -l
-rw-r–r– 1 root root 275808 Feb 27 08:08 openssh-5.2p1-1.x86_64.rpm
-rw-r–r– 1 root root 439875 Feb 27 08:08 openssh-clients-5.2p1-1.x86_64.rpm
-rw-r–r– 1 root root 277714 Feb 27 08:08 openssh-server-5.2p1-1.x86_64.rpm
# rpm -Uvh openssh*rpm
Preparing… ########################################### [100%]
1:openssh ########################################### [ 33%]
2:openssh-clients ########################################### [ 67%]
3:openssh-server ########################################### [100%]

# service sshd restart

Check the sshd version you are running by typing:

telnet [host] [port]

LxLabs founder was found hanged.

omen — Fri, 12 Jun 2009 19:30:13 +0000

I was shocked when I read an article about founder of LxLabs was found hanged in his house @ Bangalore right after multiple vulnerability issues was found on LxLabs product which is HyperVM (Virtual Private Server Management) and more than 100,000 websites has been wiped out!

Security researchers at Milw0rm warn that the Kloxo (formerly Lxadmin) web hosting platform from LxLabs contains 24 security vulnerabilities and exploits. The flaws include SQL injection vulnerabilities and flaws that create a way for hackers to gain file access to files hosted on a vulnerable system.

Source: http://www.channelregister.co.uk/2009/06/09/lxlabs_funder_death/

Hack In The Box @ Dubai

omen — Sun, 15 Mar 2009 08:45:41 +0000

Venue: Sheraton Dubai Creek,
Baniyas/Creek Road,
Dubai, UAE

Technical Training – DAY 1 and DAY 2
Date: 20th and 21st April 2009
Time: 0900 – 1700

TECH TRAINING 1 – Web Application Security – Threats and Countermeasures
TECH TRAINING 2 – 802.11 Ninjitsu
TECH TRAINING 3 – The Exploit Laboratory 3.0

Conference DAY 1 and DAY 2
Date: 22nd and 23rd April 2009
Time: 0900 – 1700

Dual Track Conference
Capture The Flag (CTF)

More details, please visit http://conference.hitb.org/hitbsecconf2009dubai/

New Server migrated to JARING IDC

omen — Sun, 15 Mar 2009 08:42:01 +0000

Now I’ve moved my new server to JARING IDC. It’s much faster now. Below is the spec of my new server:
# CPU: 4 x Intel Xeon X3210 (2.13GHz)
# 8GB DDR2 RAM
# WDC WD10EADS-00L5B1 SATAII (953869Mbytes @ 1Tb) – Primary Disk
# WDC WD10EADS-00L5B1 SATAII (953869Mbytes @ 1Tb) – Backup

Anyone interested to do a personal hosting site. Please contact me

transparent background putty

omen — Fri, 28 Nov 2008 10:12:38 +0000

I’ve been looking for transparent option in putty and I’ve found on the net with that option take a look at the screen shot

HITB 2008 has changed the venue

omen — Tue, 26 Aug 2008 22:54:18 +0000

The venue for this year’s Hack in The Box Security Conference has been changed to CROWNE PLAZA MUTIARA KUALA LUMPUR. The reason for this change is due to unreasonable conditions placed upon us by The Westin which makes it impossible for us to proceed with having the conference there. Trust that we did try everything possible and greatly regret any inconvenience this change may cause.

For full details on the Crowne Plaza Mutiara, please click here

OSSEC HIDS Phishing detection rule

omen — Tue, 24 Jun 2008 09:28:50 +0000

Kudos to aphesz for making the rules. Well basically the rules is to send an email to admin especially for webhosters admin a notification about which site is under phishing attack. Below are the rules that you need to put in web_rules.xml at the end of file but before closing tag.

Now restart OSSEC and it should be picking up sites according to the keywords set. Keep in mind that the keywords above are just among the few popular sites that are usually being targeted. You’re free to add/remove those keywords as per your needs. Also, if you set OSSEC to email alerts to your mailbox, you’ll be getting these whenever it detects a phishing site. The best part is if you have APF to work along together. It will block who are trying visit the phising site. Usually the uploader of phishing site will get blocked because they want to check if their scripts is working or not

Spread the Firefox 3

omen — Wed, 18 Jun 2008 20:07:10 +0000

Hell yeah! Just in case you havenâ€™t seen this somewhere else already, help Firefox set a World Record by downloading version 3 on â€œthe download day 2008â€³