Ivan Buetler - Solaris Security category

SSH Shell Monitoring with DTrace

Tue, 23 Mar 2010 14:40:00 GMT

Shell Monitoring with DTrace (Solaris 10) ===============================================

Imagine a foreign guy needs root privileges on your Unix workstation. You feel pretty bad, because you are usually protecting your system day and night but for now, some auditors and/or penetration testers want to have root access to achieve their auditing goals. Do you like this situation? I don't think so. But don't worry, use Shell Monitoring to observe the auditors activities.

Please find the PDF on

http://www.hacking-lab.com/download/

Regards

-- SWISS CYBER STORM III -- MAY 2011 --

Defense in-depth; Improve against 0-day exploitation

Thu, 12 Nov 2009 13:18:00 GMT

At my talk at the Compass Security Conference 2009 I brought up some defense in-depth strategies to armor an internet facing server to make it more robust against zero-day exploits. I performed some practical live-demo examples and conceptual recommendations. This considerations are now available within a short pdf - as an add-on to the public power point pdf slides.

Download from Hacking-Lab: http://www.hacking-lab.com/download
Power Point Slides as PDF from Compass Security: http://www.csnc.ch/en/downloads/publications.html

Regards
E1

Solaris sadmind Exploit für Sol9 SPARC

Fri, 24 Oct 2008 06:33:00 GMT

Letzte Woche wurde ich auf die Solaris sadmind Remote Vulnerability aufmerksam gemacht. Eine Vulnerability ohne Exploit ist halb so schlimm....doch nun ist der Exploit erschienen. Solaris Administratoren: Bitte patchen!

http://packetstormsecurity.org/0810-exploits/sadmind-root.c

Ivan