This is a little blog post describing my home network setup and the thoughts and principles behind it. I hope it may be of use to somebody having similar goals. Design Decisions General affordable should scale well for a private LAN trade-off between security and usability extendable should offer places to learn “Women acceptance Factor […]
Some pentesting live CDs have been updated recently or will be shortly. Time for an overview.
Preface This is an English summary of the German paper "Betrieb und Sicherheit von ownCloud" (V1.0 2015-06-16) of "Bundesamt für Sicherheit in der Informationstechnik" (Federal Office for Information Security Germany) available for download here. Please note that this English translation is my own (so all errors and language issues in this post are also my […]
Eine Kursbuchkarte (Bahnbus) aus dem Jahr 1953 hat den Weg zu mir gefunden. Um sie zu erhalten und besser einsehen zu können, habe ich sie in kleinen Kacheln eingescannt und dann zusammen “gestitcht”. Das Ergebnis findet sich hier (freigegeben nur zur nichtkommerziellen, privaten Nutzung!): Anmerkung: Die Feindatei (Klick auf das Bild) ist ca. 6 MB […]
This is my personal scratch pad with information I had to research to get ESXi 5.5 to work for me. Installation ESXi 5.5 / Win 7 Dual Boot I decided that it would be handy to have ESXi running on my box … So basically this is what I did (disclaimer: if you break your […]
A little grep'ing through logs reveal the following scan patterns (red: October): Source IPs: 22.214.171.124 126.96.36.199 188.8.131.52 184.108.40.206 220.127.116.11 18.104.22.168 22.214.171.124 126.96.36.199 188.8.131.52 184.108.40.206 220.127.116.11 18.104.22.168 22.214.171.124 126.96.36.199 Page Requests: GET /admin.cgi HTTP/1.1 GET //cgi-bin/bash HTTP/1.0 GET /cgi-bin/bash HTTP/1.0 GET /cgi-bin/hello HTTP/1.1 GET /cgi-bin/helpme HTTP/1.0 GET /cgi-bin/info.sh HTTP/1.0 GET /cgi-bin/php5-cli? HTTP/1.1 GET /cgi-bin/php5? HTTP/1.1 GET […]
I've added a new RSS feeds for external news and blog posts I personally consider worth reading You should be able to add it to any RSS feed reader. https://www.thierfreund.de/newsfeed/ If you like it, drop me a line.
You can only find this funny if you attend conf calls in real life … but then it's hard to spot the difference to the last call you attended 😉 http://www.youtube.com/watch?v=DYu_bGbZiiQ
Finally: the new version of SIFT has been released. http://digital-forensics.sans.org/blog/2014/03/23/sans-sift-3-0-virtual-machine-released
The server needed an upgrade … so the migration to the next Debian release had to be done. And of course the migration of the CMS. This was more complicated than expected … I wasn't able to find a smooth migration path from Drupal 6 to 7 for me (some important modules weren't available for […]