Irongeek.com

News/Change Log:

01/21/2012	Unix File Permissions and Ownership (CHOWN, CHMOD, ETC) I'm taking a security class were we had a lab on Unix/Linux file system permissions. I decided I might as well record it, and the steps taken, along with explanations as to what I was doing to set the permissions such as read, write, execute, SetUID, SetGID and the Stickybit. Kevin Benton created the lab, so I'd like to give him credit for inspiring me to do this video.
01/16/2012	Basic Setup of Security-Onion: Snort, Snorby, Barnyard, PulledPork, Daemonlogger Thanks to Doug Burks for making building a Network Security Monitoring Server much easier. I mentioned Snort, Snorby, Barnyard, PulledPork and Daemonlogger in the title, but there is a lot more on the distro than that. This is a nice way to get an IDS up and running featuring pretty frontends without going into dependency hell.
01/07/2012	Pen-Testing Web 2.0: Stealing HTML5 Storage & Injecting JSON Jeremy Druin This is Jeremy's talk from a recent ISSA meeting. In it he covers what the title says, showing off stealing of HTML 5 storage, injecting JSON, using Burp Suite, Muttillidae and some XSS attack fun. Sorry about the noise in the first bit, I had to set the camera up a ways off and it picked up my bag of chips better than it did Jeremy's talk. @webpwnized
01/01/2012	Video Posted and Code Updated for Homemade Hardware Keylogger My video from NeoISF is now posted: PHUKD/Keylogger Hybrid. The code has been updated in the following ways: On the PIC side: Updated Firmware for the USB Host Module - PIC24FJ256GB106 to work with more keyboards. On the Teensy side: 0.04: * If a keyboard was plugged in after the keylogger was already powered on, it would type "i7-". I added code to fix this problem. * Fixed RAW serial debug mode not to print key * Changed name of variable "lasttenletters" to "lastfewletters" and expanded it to 60. * Ctrl+Alt+Y is now used for typing more debugging details. * Implemented likely to fail code for unlocking workstation using captured password. * I had some problems with running out of SRAM because of all of my static strings. I started using the F() function to pull these strings from flash memory to solve this issue. * Fixed a case issue with lastfewletters. I did not know the method changed it in place. * Fixed a bug in HIDtoASCII that made it top row of number keys not work right.

More.........