How to Read a Packet Capture .cap File from Command Line

There are a couple of ways to read a packet capture .cap file from the command line. I’ll show you how!

tcpdump

The tack r filename option for tcpdump will display a capture file onto . . . → Read More: How to Read a Packet Capture .cap File from Command Line

Which Linux to Use

 

A common question I hear is ‘Why are there so many different versions of Linux?‘ Especially when there is simply ‘Windows’, or ‘OS X’, it seems logical that there could be a single ‘Linux’, but for various . . . → Read More: Which Linux to Use

How to Kill Zombie Processes

Killing zombie processes in Linux or Unix cannot be done, as they are already dead. :) Often the only solution is to restart your machine. However, it is sometimes possible to kill or restart the parent process . . . → Read More: How to Kill Zombie Processes

What’s New in Ubuntu Server 12.04 LTS

Ubuntu Server 12.04 will be released on 26 April 2012. Ubuntu 12.04 is supported with security updates until 2017 which makes Ubuntu LTS an attractive choice for use as a server. At the time of this blog . . . → Read More: What’s New in Ubuntu Server 12.04 LTS

Troubleshoot ssh Authentication Failure

ssh has a built in debug mode from the client side to provide information in troubleshooting a connection. This will provide information such as mismatch in client/server configuration options, key conflicts, permission problems, and various other useful . . . → Read More: Troubleshoot ssh Authentication Failure

BlindElephant – Web Application Fingerprinting

BlindElephant is a nifty python app that fingerprints web applications such as wordpress, drupal, mediawiki, phpbb, joomla, and many others to determine the version of the web application.

BlindElephant works via a new trendy technique of fetching . . . → Read More: BlindElephant – Web Application Fingerprinting

Postfix Empty Mail Queue

To empty / clear / delete the Postfix mail queue, simply issue this command:

$ sudo postsuper -d ALL

The output will look similar to this:

$ sudo postsuper -d ALL postsuper: Deleted: 4 messages . . . → Read More: Postfix Empty Mail Queue

Banner Grabs with netcat and nmap

netcat can be used to quickly grab a service banner, as well as trusty nmap. I’ll show you some tips!

The netcat command is simply:

$ nc [target] [port]

Add tack v to get more verbosity.

. . . → Read More: Banner Grabs with netcat and nmap

TCP/OS Fingerprinting Tools – p0f and nmap

The particular way an operating system or device sends and receives TCP packets provides a unique fingerprint. TCP header information such as the window size, TTL, overall SYN packet size, MSS, MTU and so forth can help . . . → Read More: TCP/OS Fingerprinting Tools – p0f and nmap

Disable SSLv2 in Cyrus IMAP server

Cyrus often ships by default with SSLv2 enabled which can be considered a security vulnerability. Here’s how to disable SSLv2 in your Cyrus IMAP server!

1. Edit the file /etc/imapd.conf

sudo nano /etc/imapd.conf

Find the . . . → Read More: Disable SSLv2 in Cyrus IMAP server

myhosting.com Linux VPS Review

myhosting.com provides Linux VPS hosting for cheap. I recently had the opportunity for an in-depth test drive and so here is the scottlinux review!

myhosting.com Linux VPS offerings runs on Virtuozzo Containers, the commercial version of . . . → Read More: myhosting.com Linux VPS Review

Add User to Group in Linux

In Linux, the command gpasswd can be used to add or remove users from a group. I’ll show you how! To add a user to a group, use tack a:

$ sudo gpasswd -a user group

The . . . → Read More: Add User to Group in Linux

How to Check for SSL Renegotiation

To check if a server allows SSL Renegotiation, you can use the openssl command. I’ll show you how!

The commands are as follows:

$ openssl s_client -connect yourdomain.com:443

Then after the regular ssl cert info . . . → Read More: How to Check for SSL Renegotiation