Searching weak keys with nmap
Unfortunately there was a bug in the OpenSSL package in Debian which results in weak keys for services with SSL functionality. Download the tarball, unpack it, move the lists (blacklist.RSA-2048 and...
View Articlenmap and Heartbleed
It didn’t take long for most tools to pick-up the possibility to detect the Heartbleed OpenSSL bug. For nmap the needed elements are in the VCS.cd /usr/share/nmap/nselib/ sudo wget...
View ArticleClik here to view.
nmap GUI
There is the well-known zenmap GUI for nmap. But there is another one, Umit. This GUI has a little bit more icons… To give umit a try: sudo dnf -y install umit
View ArticleHappy Birthday Fedora Security Lab
Five years ago a bunch of guys started the Fedora Security Lab which was named Security Spin back then. Adam Miller initiated everything with the first commit. commit...
View ArticleFedora Security Spin
The next release of Fedora and the Fedora Security Lab (aka Security Spin) is just around the corner. Time for some testing…we would appreciate if you give the Security Lab a spin, perform the test...
View ArticleWieso Appliances kein Segen für die Welt sind…
Grosse Hosting-Anbieter haben halt wichtiges zu tun, als ihr Zeug auf einem aktuellen Stand zu halten.$ ssh 46.2.2.2 Unable to negotiate with 46.2.2.2: no matching key exchange method found. Their...
View Articlenmap 7
Open source-Projekte haben unterschiedliche Philosophien…bei nmap wird nicht nach “Release early, release often” gestrebt und so dauert es schon mal über drei Jahre bis zum nächsten Release. Aber nun...
View ArticleINTEL-SA-00086
Of course is my Lenovo T460 affected by INTEL-SA-00086. Just to be sure, I ran Intel’s Detection Tool. Lalalala…$ sudo ./intel_sa00086.py [....] *** Host Computer Information *** Name:...
View ArticleClik here to view.
Titan Security Key
During Nullcon I got a Titan Security Key. This device by Google is very similar to the popular Yubikeys. Unlike the first generation of Yubikeys is the Titan Security Key not generating an OTP...
View ArticleHardware Random Number Generator PRG320
/dev/urandom/ is a pseudo random number generator used by for Fedora and other linux-based operating systems. This little Python snippet will get you some data: import binascii import os data =...
View Article
