looking for a hash windows shell extension? Hashtab is probably one of the best. HashTab provides OS extensions to calculate file hashes. HashTab supports many hash algorithms such as MD5, SHA1, SHA2, RipeMD, HAVAL and Whirlpool. HashTab is supported as a Windows shell extension…
File carving is the process of reassembling computer files from fragments in the absence of filesystem metadata. The carving process makes use of knowledge of common file structures, information contained in files, and heuristics regarding how filesystems fragment data. Fusing…
F-Secure has created a free tool that automates the detection and removal of the widespread Flashback Mac OS X malware. How to use the tools: 1) Download FlashbackRemoval.zip to the Mac machine you want to scan. 2) Double-click the zip package to unzip it in the…
Honeynet/Honeywall Implementation Routing of malicious traffic and forensic analysis Steve Stonebraker 11/22/2010 A detailed implementation of a full interaction honeypot and honeywall in a virtualized VMWare environment is presented. The benefits and drawbacks of this type of this type…
to detect the mac flashback virus (courtesy of cnet.com) How does it work? The Flashback malware injects code into applications (specifically Web browsers) that will be executed when they run, and which then send screenshots and other personal information to…
To delete all currently stored alerts and related data in the ossec database execute these commands in MySQL Editor: truncate table alert; truncate table data; Bash Script: #!/usr/local/bin/bash # #Stop ossec, remove old alerts, start ossec echo “stopping ossec” /var/ossec/bin/ossec-control…
There are two config directives that controls Apache version. The ServerSignature directive adds a line containing the Apache HTTP Server server version and the ServerName to any server-generated documents, such as error messages sent back to clients. ServerSignature is set…
Download files wget wget Check the MD5 or SAH1 to make sure they are legit (Don’t skip!!) md5sum ossec-hids-latest.tar.gz cat ossec-hids-latest_sum.txt Extract the files from the tar tar zxvf ossec-hids-latest.tar.gz Cd into the directory and run the…
How do you check your website for vulnerabilities for free? Check out these sites that provide free vulnerability scans:
to fix this error: fseek() expects parameter 3 to be long os_lib_alerts.php SEEK_SET Line 842 in os_lib_alerts.php Reads: fseek($fp, $seek_place, “SEEK_SET”); It should actually be: fseek($fp, $seek_place, SEEK_SET);
