Use Curl to Fetch ASP.NET Version Banner

Published on May 11, 2012, by in sysadmin, windows.

The version of ASP.NET is sent in a banner with http requests and can be viewed with a curl command. I’ll show you how! X-AspNet-Version: 2.0.50727 To view this with curl, use tack capital I and fetch any url ending in .aspx. A random url ending in .aspx works as well: $ curl -I 10.112.12.67/asdfsaf.aspx

(More)…

Debian Administrator’s Handbook

Published on May 10, 2012, by in linux, sysadmin.

Two well known Debian developers have written the Debian Administrator’s Handbook. It is now available in paper back as well as ebook formats. Check it out! http://debian-handbook.info/2012/the-debian-administrators-handbook-is-available/

Perform DNS Lookups with the host command

Published on April 26, 2012, by in linux, osx, sysadmin.

The dig command is commonly used to make DNS queries. However, a much overlooked command is the host command. Here are some quick tips for a useful tool to add to your bag of tricks or to impress your friends. The syntax is: $ host [domain.com] When run with no options, a simple quick summary

(More)…

The Importance of Securing a Linux Web Server

Published on April 22, 2012, by in linux, sysadmin.

Linux web hosting is popular but that also makes Linux a target for malware and other malicious hacking. Here is a write up pointing out some general best practices for Linux web servers: The Importance of Securing a Linux Web Server If you find this topic interesting, you may also be interested in Linux Boot

(More)…

Hak5 – How ssh Works

Published on April 21, 2012, by in sysadmin.

This is an awesome episode of Hak5. Check it out!

Fun with SHODAN

Published on March 30, 2012, by in linux, sysadmin, windows.

Shodanhq.com is awesome. These are fun: http://www.shodanhq.com/search?q=X-Powered-By%3A+PHP%2F5.1.2 Many sites running old PHP from 2006. Edit as desired to find an old php target. http://www.shodanhq.com/search?q=X-AspNet-Version%3A+1.1.4322 Incredible how many sites still use ASP .NET 1.x http://www.shodanhq.com/search?q=%22cisco-ios%22+%22last-modified%22 Web management pages for Cisco devices that have authentication disabled. http://www.shodanhq.com/search?q=Server%3A+Microsoft-IIS%2F5.0+ IIS 5.0 http://www.shodanhq.com/search?q=Server%3A+Apache%2F1. Ancient versions of Apache still in use

(More)…

Security Dangers of Web Management Interfaces

Published on March 28, 2012, by in sysadmin.

Web management interfaces are an often neglected area in regards to security. Here is a good write up demonstrating how easy it is to find vulnerable web management logins for hacking as well as some best practices: Security Dangers of Web Management Interfaces If you find this topic interesting, you may also be interested in

(More)…

Home Archive for category "sysadmin"
© Copyleft scottlinux.com CC BY-SA 3.0