|
 |
dilluns, 30 / octubre / 2006 |
|
|
 Publicada la versió 2.7 del Metasploit Framework
This is the Metasploit Project. The goal is to provide useful information to people who perform penetration testing, IDS signature development, and exploit research. This site was created to fill the gaps in the information publicly available on various exploitation techniques and to create a useful resource for exploit developers. The tools and information on this site are provided for legal penetration testing and research purposes only.
[ 10/28/2006 ] Version 2.7 is released
[ 10/01/2006 ] New exploit module added: mcafee_epolicy_source
[ 10/01/2006 ] New exploit module added: ie_webview_setslice
[ 09/25/2006 ] New exploit module added: ie_vml_rectfill
[ 08/10/2006 ] New exploit module added: netapi_ms06_040
[ 08/10/2006 ] New exploit module added: ie_createobject
[ 08/10/2006 ] New exploit module added: eiq_license
[ 08/10/2006 ] New exploit module added: realvnc_client
[ 08/10/2006 ] New exploit module added: securecrt_ssh1
[ 08/10/2006 ] New exploit module added: mercury_imap
[ 06/29/2006 ] New exploit module added: rras_ms06_025_rasman
[ 06/22/2006 ] New exploit module added: rras_ms06_025
[ 06/22/2006 ] New exploit module added: ms05_030_nntp
[ 06/22/2006 ] New exploit module added: cesarftp_mkd
[ 06/22/2006 ] New exploit module added: niprint_lpd
|
18:31 (# Enllaç permanent) | Comentaris: | Trackback:
|
|
IBM ha publicat la segona versió del seu redbook Linux Client Migration Cookbook: A Practical Planning and Implementation Guide for Migration to Desktop Linux (també disponible en format HTML).
Es tracta d'una guia de referència tècnica per tal d'ajudar a les petites i mitjanes organitzacions que estan considerant la migració dels equips d'oficina a l'entorn Linux. El llibre més que centrar-se en explicar tècniques concretes, es centra en les consideracions que cal tenir presents alhora de fer front a un projecte de migració d'aquestes característiques. Així es planteja l'escenari més habitual que passa per la migració d'un conjunt de màquines que actualment executen Windows per migrar-les a Linux.
The goal of this IBM Redbook is to provide a technical planning reference for IT organizations large or small that are now considering a migration to Linux-based personal computers. For Linux, there is a tremendous amount of “how-to” information available online that addresses specific and very technical operating system configuration issues, platform-specific installation methods, user interface customizations, and so forth. This book includes some technical “how-to” as well, but the overall focus of the content in this book is to walk the reader through some of the important considerations and planning issues that you could encounter during a migration project. Within the context of a pre-existing Microsoft Windows-based environment, we attempt to present a more holistic, end-to-end view of the technical challenges and methods necessary to complete a successful migration to Linux-based clients.
This second version of the Linux Client Migration Cookbook builds on the content strategy we started with in the first version. Although anyone interested in using Linux on the desktop could benefit from different portions of this book, our primary audience for this book is existing business IT environments that need to begin an evaluation of desktop Linux, or in a broader sense, any organization whose strategy is to move toward greater adoption of open source software and open standards. For this version, we have completed an end-to-end refresh and have added a significant amount of new content. Some key areas that we have focused on include the following:
- Greater emphasis on illustrating the technical details of the Linux client operating system stack, and understanding how to best leverage those differences in a migration scenario from Microsoft Windows
- The tremendous amount of flexibility that Linux gives you to design custom client operating system images
- Deployment models: Understanding how Linux's flexibility allows for new, innovative, and cost-effective approaches to deploying and managing desktop operating systems
- In larger IT environments, the importance of automating the capture and migration of user's client-side personalization data
Table of Contents
Part 1 Choosing Linux
- Chapter 1. Introduction
- Chapter 2. The case for migration
Part 2 Planning the pilot migration
- Chapter 3. Organizational and human factors planning
- Chapter 4. Technical planning
- Chapter 5. Linux architecture and technical differences
Part 3 Performing the pilot migration
- Chapter 6. Migration best practices
- Chapter 7. Client deployment models
- Chapter 8. Client migration scenario
- Chapter 9. Integration how-tos
Part 4 Appendixes
- Appendix A. Linux glossary for Windows users
- Appendix B. Using enterprise management tools
- Appendix C. Automating desktop migration using Versora Progression Desktop
- Appendix D. Multi-station computing deep dive using Userful Desktop Multiplier
- Appendix E. Client personalization
- Appendix F. Desktop automation and scripting
- Appendix G. Application porting
|
18:24 (# Enllaç permanent) | Comentaris: | Trackback:
|
|
[US CERT] Backdoors and Holes in Network Perimeters. A Case Study for Improving Your Control System Security. Diversos tipus d'atacs que treuen profit de les debilitats dels sistemes de protecció perifèrica:
Control systems (also referred to as SCADA, DCS, PCS, etc.) are computer-based systems used within many of our nation's critical infrastructures to monitor and control sensitive processes and physical functions. "Control Systems" is a generic term applied to hardware, firmware, communications and software that are used to monitor and control vital functions of physical systems. In this vein, cyber attacks are defined as the penetration of control systems via any communication pathway in such a manner as to manipulate the control process with the intent to cause harm or disrupt operations.
|
17:52 (# Enllaç permanent) | Comentaris: | Trackback:
|
|
[802.11ninja.net] 802.11b Firmware-Level Attacks. Document on s'explica com aprofitar-se de les debilitats als controladors de dispositiu de targetes sense fils per a realitzar atacs de denegació de servei.
This paper describes a new style of DoS attack against 802.11 networks that abuses flaws in the firmware of popular 802.11 wireless cards. The impact of this attack is more damaging than other 802.11 DoS attacks, requiring as few as two packets from an attacker to deny service to all target users, often requiring a system restart to recover from the attack. It is the author’s hope that the public disclosure of this flaw will motivate 802.11 product manufacturers to resolve firmware flaws in their products, and to make those updates freely available to customers.
|
17:48 (# Enllaç permanent) | Comentaris: | Trackback:
|
|
© Copyright 2003-2006 Xavier Caballe.  . Si no s'indica expressament el contrari, el material publicat en aquest weblog es distribueix d'acord amb la llicència Creative Commons. El contingut és responsabilitat única i exclusivament del seu autor i no té cap relació amb les seves activitats professionals.
|
 |
 |
 |
 |
Contingut actualitzat
Categories
Darrers comentaris
Arxiu
Contingut antic
(ja no s'actualitza)
Versions anteriors
d'aquesta pàgina
|
 |
 |
 |
 |
|
