Aloha,
It’s been a while….:)
One friend of mine ask me to show him how to setup the transforms in Maltego and I said that I will create a fast screen cast . The video has no sound so you don’t have to turn on the volume 😉
Maltego is an open source intelligence and forensics application.
Read more here http://www.paterva.com/web6/products/maltego.php
See on Scoop.it – Latest malware information
To jumpstart the new year, both Microsoft and Adobe release their security updates today. Microsoft, in particular, releases seven bulletins to address 12 vulnerabilities while Adobe issues its fix for Adobe Reader and Acrobat.
See on blog.trendmicro.com
See on Scoop.it – Penetration Testing
Product: Cpanel & WHM; Security-Risk: High; Remote-Exploit: yes; Vendor-URL: http://www.cpanel.net; Affected Products: Cpanel’s Latest Version; Solution: Proper input sanitisation. Discovered by: …
See on thehackernews.com
See on Scoop.it – Latest malware information
So Soon? Malware Attacks on Windows 8Midsize InsiderFor Windows 8, the latest malware takes on the disguise of antivirus protection. According to the TrendMicro’s …
See on midsizeinsider.com
See on Scoop.it – Latest malware information
How cyber-criminals are planning to attack in 2013Moneyweb.co.zaMicrosoft’s latest operating system, along with all of its predecessors, will also suffer attacks.
See on www.moneyweb.co.za
See on Scoop.it – Latest malware information
Vulnerabilities In Java And Adobe Will Be Main Targets For Cybercriminals In 2013 Dark Reading Windows 8: Microsoft’s latest operating system, along with all of its predecessors, will also suffer attacks.
See on www.darkreading.com
See on Scoop.it – Metasploit
redistribution and commercial restrictions. Please see the Metasploit # web site for more information on licensing and terms of use. # http://metasploit.com/ ##. require ‘msf/core’. class Metasploit3 < Msf::Exploit::Remote Rank = …
See on www.allinfosec.com
ALoha,
This is the first on the series…..about Securing Cisco Devices.!
Cisco Switches must be configured!!!!
This is the reason you bought a Cisco Switch 😉
By default the ports are all configured as dynamic desirable which will cause a trunk to be automatically created if 2 switches with default configuration are connected.
So lets see what a malicious user can get….by sniffing the network.
After that using few commands specific for the switchport we will limit the traffic to protect the switch !
The Final Configuration of the port will be :
SW1#show running-config interface fastEthernet 0/18
Building configuration…
Current configuration : 319 bytes
!
interface FastEthernet0/18
switchport mode access
no cdp enable
spanning-tree bpdufilter enable
spanning-tree bpduguard enable
end
After the above configuration you should not connect another Switch on the interface FastEthernet 0/18. The Configuration is for end devices only.
Links to follow
See on Scoop.it – Last exploits
Cryptographp Local File Inclusion / HTTP Response Splitting by Lu33Y in webapps / 0day | Inj3ct0r 1337 – exploit database : vulnerability : 0day : shellcode ([webapps / 0day] – Cryptographp Local File Inclusion / HTTP Response Splitting
See on 1337day.com
See on Scoop.it – Last exploits
Understanding SQL injection attacks – how they are performed & precautions that can be taken.
See on www.cisco.com
