Nenad Vijatov » Security http://blog.vijatov.com xor %ecx,%ecx Thu, 05 Aug 2010 23:14:55 +0000 en hourly 1 http://wordpress.org/?v=3.0.1 Ubuntu Pentest Edition http://blog.vijatov.com/2010/01/15/ubuntu-pentest-edition/ http://blog.vijatov.com/2010/01/15/ubuntu-pentest-edition/#comments Fri, 15 Jan 2010 11:41:00 +0000 Nenad Vijatov http://blog.vijatov.com/?p=116 netinfinity release Ubuntu Pentest Edition …
“Ubuntu pentest edition is primarily designed as a complete system (everyday usage – office, internet etc..) and can be used in pentesting purposes, which is a big advantage because you do not need to have a dual boot or use a virtual machine to run the system for pentest.”
Try it … link.

]]> http://blog.vijatov.com/2010/01/15/ubuntu-pentest-edition/feed/ 0 Security Researcher Acknowledgments for Microsoft Online Services http://blog.vijatov.com/2009/09/01/security-researcher-acknowledgments-for-microsoft-online-services-4/ http://blog.vijatov.com/2009/09/01/security-researcher-acknowledgments-for-microsoft-online-services-4/#comments Tue, 01 Sep 2009 06:40:32 +0000 Nenad Vijatov http://blog.vijatov.com/?p=106 … for July and August.
Thanks to Microsoft Security Response Center.

]]> http://blog.vijatov.com/2009/09/01/security-researcher-acknowledgments-for-microsoft-online-services-4/feed/ 0 Security Researcher Acknowledgment http://blog.vijatov.com/2009/07/16/security-researcher-acknowledgment/ http://blog.vijatov.com/2009/07/16/security-researcher-acknowledgment/#comments Thu, 16 Jul 2009 13:18:23 +0000 Nenad Vijatov http://blog.vijatov.com/?p=104 … for June 2009.

http://technet.microsoft.com/en-us/security/cc308589.aspx

]]> http://blog.vijatov.com/2009/07/16/security-researcher-acknowledgment/feed/ 0 Security Researcher Acknowledgments for Microsoft Online Services http://blog.vijatov.com/2009/06/04/security-researcher-acknowledgments-for-microsoft-online-services-3/ http://blog.vijatov.com/2009/06/04/security-researcher-acknowledgments-for-microsoft-online-services-3/#comments Thu, 04 Jun 2009 07:38:50 +0000 Nenad Vijatov http://blog.vijatov.com/?p=97 I got Acknowledgment for Security Researcher fourth time this year … Great me! :)

]]> http://blog.vijatov.com/2009/06/04/security-researcher-acknowledgments-for-microsoft-online-services-3/feed/ 0 Security Researcher Acknowledgments for Microsoft Online Services http://blog.vijatov.com/2009/04/06/security-researcher-acknowledgments-for-microsoft-online-services-2/ http://blog.vijatov.com/2009/04/06/security-researcher-acknowledgments-for-microsoft-online-services-2/#comments Mon, 06 Apr 2009 11:20:59 +0000 Nenad Vijatov http://blog.vijatov.com/?p=66 Third time in a row …
http://technet.microsoft.com/en-us/security/cc308589.aspx

]]> http://blog.vijatov.com/2009/04/06/security-researcher-acknowledgments-for-microsoft-online-services-2/feed/ 0 Pwn2Own 2009 http://blog.vijatov.com/2009/03/22/pwn2own-2009/ http://blog.vijatov.com/2009/03/22/pwn2own-2009/#comments Sat, 21 Mar 2009 23:11:07 +0000 Nenad Vijatov http://blog.vijatov.com/?p=62 This years Pwn2Own uncover 4 new never seen before critical vulnerabilities affecting the IE8, Safari and FireFox.
More about this contest you can read at DVLabs Blog.

]]> http://blog.vijatov.com/2009/03/22/pwn2own-2009/feed/ 0 Analysis of Conficker http://blog.vijatov.com/2009/03/10/analysis-of-conficker/ http://blog.vijatov.com/2009/03/10/analysis-of-conficker/#comments Tue, 10 Mar 2009 12:02:45 +0000 Nenad Vijatov http://blog.vijatov.com/?p=60 Guys from the SRI International were made really good analysis on the currently most active Virus/Worm, Conficker, also known as Downup, Downadup and Kido.

Analysis can be found at http://mtc.sri.com/Conficker/.

]]> http://blog.vijatov.com/2009/03/10/analysis-of-conficker/feed/ 0 Security Researcher Acknowledgment – second time in a row http://blog.vijatov.com/2009/03/06/security-researcher-acknowledgment-second-time-in-a-row/ http://blog.vijatov.com/2009/03/06/security-researcher-acknowledgment-second-time-in-a-row/#comments Fri, 06 Mar 2009 14:16:57 +0000 Nenad Vijatov http://blog.vijatov.com/?p=58 … and now I am very proud of myself because my name is the second time in a row appear on this page Security Researcher Acknowledgments for Microsoft Online Services. Hope to see you soon again!

]]> http://blog.vijatov.com/2009/03/06/security-researcher-acknowledgment-second-time-in-a-row/feed/ 0 Security Researcher Acknowledgments for Microsoft Online Services http://blog.vijatov.com/2009/02/10/security-researcher-acknowledgments-for-microsoft-online-services/ http://blog.vijatov.com/2009/02/10/security-researcher-acknowledgments-for-microsoft-online-services/#comments Tue, 10 Feb 2009 08:05:58 +0000 Nenad Vijatov http://blog.vijatov.com/?p=53 I am very proud to inform you that I’m on Security Researcher Acknowledgments for Microsoft Online Services for January 2009.
I will continue my research in hope that i will be on this prestigious list again!

]]> http://blog.vijatov.com/2009/02/10/security-researcher-acknowledgments-for-microsoft-online-services/feed/ 0 Password protect single user mode http://blog.vijatov.com/2008/02/25/9/ http://blog.vijatov.com/2008/02/25/9/#comments Mon, 25 Feb 2008 13:59:00 +0000 Nenad Vijatov http://vijatov.com/blog/?p=9 You forget your root password and get locked out of your own box. What do you do? Typically, you would reboot into single user mode and change the password there.

When booting into single user mode you will not be prompted for the root password. This is something every attacker knows and prays on once he has gained physical access to you box. So what do you do?
Firstly, a good sys admin knows not to forget the root password. Login in as root is never a good idea so using sudo is always advised.
This still leaves the single user mode vulnerable, to secure it you will have to append the following line “su:S:wait:/sbin/sulogin” to your “/etc/inittab” file.
Now, every time you boot into single user mode you will be prompted for the root password.

# password protect single user mode
su:S:wait:/sbin/sulogin

PS: Always remember you password, if you can’t then write in down in a safe place.

]]> http://blog.vijatov.com/2008/02/25/9/feed/ 0