Vanguard Web App Scanner – Detect XSS and SQL Injection

Published on March 22, 2012, by in sysadmin.

Vanguard is a web app vulnerability scanner that checks your website for SQL injection and XSS. Vanguard is entirely in perl, so it is easy to modify for your needs. Vanguard works by first doing a port scan with nmap to determine if the host has available HTTP ports, next crawls the entire site, and

(More)…

How to Check Mail Server for SMTP Over TLS

Published on March 19, 2012, by in sysadmin.

Q. How can I check a server for SMTP over TLS? It is possible to have an SMTP connection use TLS from the sending server to the receiving server to add a pinch of security. Many banks and other security-minded corporations require this to send and receive email. To check the TLS capability of an

(More)…

Troubleshooting SSH Server Logs and Error Messages

Published on March 7, 2012, by in sysadmin.

ssh logs can have various messages that are all difficult to interpret as the exact meaning is all based on the situation or circumstance. Below are some general tips to keep in mind if you run across any of these messages in your logs! Example 1 If you see this, someone is trying random logins

(More)…

nessus localhost port

Published on March 1, 2012, by in sysadmin.

Q. What is the default port for Nessus? A. https://localhost:8834 Sweet!

Open Source Auditing Tools

Published on February 29, 2012, by in linux, osx, sysadmin, windows.

Here are various open source tools that are useful for security auditing! If you are a consultant, or an admin that just likes to be on top of his game, these are free open source tools that help audit the security level of workstations and servers in your environment. Note: These are by nature Linux-friendly

(More)…

How to Read a Packet Capture .cap File from Command Line

Published on February 17, 2012, by in linux, osx, sysadmin.

There are a couple of ways to read a packet capture .cap file from the command line. I’ll show you how! tcpdump The tack r filename option for tcpdump will display a capture file onto the screen. Pipe it to less to get something to scroll. $ tcpdump -r mycapturefile.cap | less $ tcpdump -r

(More)…

Home Archive for category "sysadmin" (Page 2)
© Copyleft scottlinux.com CC BY-SA 3.0