linuxlifecycle.com | Support Life Cycles for Enterprise Linux Distributions | Presenting linuxlifecycle.com! A simple clear site which displays the current support cycle or life cycle of major Linux distributions. http://linuxlifecycle.com Corrections and feedback welcome,
Create HTML Reports with Nikto Web Server Scanner
Create HTML Reports with Nikto Web Server Scanner | The open source web server scanner Nikto can create excellent HTML reports. I’ll show you how! In your nikto scan options, use tack capital F htm to signify the output format as html. Below is an example command: $ nikto -h example.com -Display V -F htm -output niktoscan.html Click to view an example HTML report
Protect Against XSS by Enabling HttpOnly for Linux Apache PHP
Protect Against XSS by Enabling HttpOnly for Linux Apache PHP | HttpOnly is a session cookie flag created to protect against cross site scripting and theft of session cookies. For good security, this should be enabled for PHP running under Apache especially for sites such as WordPress, Drupal, Joomla, and other popular PHP-based web applications. OWASP has some information on HttpOnly. I’ll show you how to
How to Install OSSEC on Red Hat or CentOS 6
How to Install OSSEC on Red Hat or CentOS 6 | OSSEC is an open source centralized log monitoring and notification system. OSSEC is often used to meet PCI Compliance central logging and intrusion monitoring requirements with a free and self-managed solution. OSSEC monitors all types of logs such as syslog, apache, maillogs, mysql logs, ftp logs, cisco IOS logs, and more. I’ll show you how
Ubuntu Server MOTD Include Security Updates
Ubuntu Server MOTD Include Security Updates | Ubuntu Server can display outstanding package and security updates as the MOTD when logging in locally or via ssh. I’ll show you how! To enable this feature, install the following package: $ sudo apt-get install update-notifier-common The terminal output will look as below: $ ssh user@example.com Linux example.com 3.0.18-linode43 #1 SMP Mon Jan 30 11:44:09
Create HTML reports with nmap
Create HTML reports with nmap | nmap can actually create very good html reports. I’ll show you how! Below is a one-liner command that will scan and create an html file for all open ports and services. This example happens to be a scan of my home network with a few VirtualBox VMs started to add to the mix. I use
GUI for sqlmap
GUI for sqlmap | An excellent python based GUI for sqlmap is available here: https://code.google.com/p/gui-for-sqlmap/ On Debian or Ubuntu, here is how to install: $ sudo apt-get install python-tk python2.7 sakura $ git clone git://github.com/sqlmapproject/sqlmap.git $ cd sqlmap $ wget http://gui-for-sqlmap.googlecode.com/files/sqm-17612.zip $ unzip sqm-17612.zip $ python2.7 sqm.pyw Cool!
Oracle Enterprise Linux – Free Public Yum Repository
Oracle Enterprise Linux – Free Public Yum Repository | Oracle provides a free public yum update repository for package and security updates to Oracle Enterprise Linux. No support contract is required and likewise no support is provided. See this page for details: http://public-yum.oracle.com/ Oracle Enterprise Linux is available for free from oracle.com. A valid login account is required and can be made temporarily with
Display System Monitoring Information with phpSysInfo
Display System Monitoring Information with phpSysInfo | phpSysInfo is an awesome PHP script that displays system and other monitoring information for Linux. phpSysInfo pulls data from /proc and other locations to display on an easy to read page. On Ubuntu or Debian, install phpsysinfo with: $ sudo apt-get install phpsysinfo The config file is then located in: /etc/phpsysinfo/config.php Debian / Ubuntu Security
Metasploitable 2 Vulnerability Scan Comparison
Metasploitable 2 Vulnerability Scan Comparison | For kicks, I performed authenticated vulnerability scans on the latest Metasploitable 2 release. Metasploitable 2 is a customized Ubuntu Linux image that is full of vulnerabilities to be used for pen testing as well as of course used to practice with metasploit. Scanners used: openvas 5 (open source) nessus 5.0.1 (community feed) nexpose 5.3 (community
