Change sudo default password cache | sudo’s default password cache time is 5 minutes. To change the default time, it is possible to edit a setting in /etc/sudoers as desired. I’ll show you how! Edit /etc/sudoers with your desired text editor, or as standard with sudo visudo: $ sudo visudo For example, to increase the timeout to 30 minutes for user
Linux Security Weekly | 010
Linux Security Weekly | 010 | Hello and welcome to Linux Security Weekly for July 29 2012. Linux Security Weekly is the audio podcast which covers current and important security vulnerabilities in Linux and open source software for the past week. Show Notes: Mod Security 2.7 (2.7.0-RC2) http://blog.spiderlabs.com/2012/07/announcing-the-availability-of-modsecurity-extension-for-iis.html http://blog.spiderlabs.com/2012/07/beyond-apache-modsecurity-for-iisnginx.html http://modsecurity.org/download/ Wireshark http://www.wireshark.org/news/20120722.html Red Hat bind – RHEL 4 http://rhn.redhat.com/errata/RHSA-2012-1110.html bind
A Closer Look at WordPress Password Hashes
A Closer Look at WordPress Password Hashes | Check out this write up on WordPress password hashes: A Closer Look at WordPress Password Hashes If you find this topic interesting, you may also be interested in Expert Pen Testing or CISSP training. Check it out!
Suse | sudo asks for root password
Suse | sudo asks for root password | By default, the sudo command on Suse Linux asks for the root password instead of the user’s password. I’ll show you how to fix that to be more expected (and secure!) behavior of sudo and only ask for the user’s password. 1. Crack open a terminal, and issue: $ sudo visudo 2. Comment out the
Linux Security Weekly | 009
Linux Security Weekly | 009 | Hello and welcome to Linux Security Weekly for July 22, 2012. Linux Security Weekly is the audio podcast which covers current and important security vulnerabilities in Linux and open source software for the past week. Show Notes: PHP 5.4.5 and PHP 5.3.15 released http://www.php.net/archive/2012.php#id2012-07-19-1 Firefox and Thunderbird 14.0.1 and 10.0.6 for ESR http://www.mozilla.org/en-US/firefox/14.0.1/releasenotes/ https://www.mozilla.org/security/known-vulnerabilities/firefox.html
Linux Security Weekly | 008
Linux Security Weekly | 008 | Hello and welcome to Linux Security Weekly for July 15, 2012. Linux Security Weekly is the audio podcast which covers current and important security vulnerabilities in Linux and open source software for the past week. Show Notes: CentOS 6.3 released http://lists.centos.org/pipermail/centos-announce/2012-July/018706.html http://wiki.centos.org/Manuals/ReleaseNotes/CentOS6.3 Chrome Browser 20.0.1132.57 http://googlechromereleases.blogspot.com/2012/07/stable-channel-update.html mysql updates coming https://bugzilla.redhat.com/show_bug.cgi?id=832540 Red Hat kernel updates
linuxlifecycle.com | Support Life Cycles for Enterprise Linux Distributions
linuxlifecycle.com | Support Life Cycles for Enterprise Linux Distributions | Presenting linuxlifecycle.com! A simple clear site which displays the current support cycle or life cycle of major Linux distributions. http://linuxlifecycle.com Corrections and feedback welcome,
Create HTML Reports with Nikto Web Server Scanner
Create HTML Reports with Nikto Web Server Scanner | The open source web server scanner Nikto can create excellent HTML reports. I’ll show you how! In your nikto scan options, use tack capital F htm to signify the output format as html. Below is an example command: $ nikto -h example.com -Display V -F htm -output niktoscan.html Click to view an example HTML report
Protect Against XSS by Enabling HttpOnly for Linux Apache PHP
Protect Against XSS by Enabling HttpOnly for Linux Apache PHP | HttpOnly is a session cookie flag created to protect against cross site scripting and theft of session cookies. For good security, this should be enabled for PHP running under Apache especially for sites such as WordPress, Drupal, Joomla, and other popular PHP-based web applications. OWASP has some information on HttpOnly. I’ll show you how to
How to Install OSSEC on Red Hat or CentOS 6
How to Install OSSEC on Red Hat or CentOS 6 | OSSEC is an open source centralized log monitoring and notification system. OSSEC is often used to meet PCI Compliance central logging and intrusion monitoring requirements with a free and self-managed solution. OSSEC monitors all types of logs such as syslog, apache, maillogs, mysql logs, ftp logs, cisco IOS logs, and more. I’ll show you how
