Kali Linux is a distribution based on the Debian GNU/Linux distribution aimed at digital forensics and penetration testing users maintained and funded by Offensive Security. It was developed by Offensive Security as the successor to BackTrack Linux.
Kali provides users with easy access to a comprehensive and large collection of security-related tools ranging from port scanners to password crackers. Support for Live CD and Live USB functionality allows users to boot Kali directly from portable media without requiring installation, though permanent installation to hard disk is also an opt...
eh, learnt to build computers at 13, got into engineering school, hated it, went for computer security, had a meltdown, went back to school and almost done
I have used my current hard-disk from 1-2 years. It worked fine until I changed my motherboard .
Sometime it does not recognize the hard disk. If I unplug the hard drive cables and plug them again it's work. I have tried twice and both times solved problem this way.
What could be causing this? ...
logons still shouldn't be this compex, that's the old soup that was solved long ago, ala Facebook, Yahoo, that problem was addressed longer than some people here have lived
i thought it went more like SITUATION: Nobody's ever thought of making an A/C charger before! Let's patent one! Patent office: "I've never seen anything like this before! Patent granted!!"
Firesheep is an extension for the Firefox web browser that uses a packet sniffer to intercept unencrypted cookies from websites such as Facebook and Twitter. As cookies are transmitted over networks, packet sniffing is used to discover identities on a sidebar displayed in the browser, and allows the user to instantly take on the log-in credentials of the user by double-clicking on the victim's name.
The extension was created as a demonstration of the security risk of session hijacking vulnerabilities to users of web sites that only encrypt the login process and not the cookie(s) created...
there are plenty of MITM attacks possible (to varying degrees of difficulty) on almost every internet connection, with few exceptions; if you don't mind people impersonating you or accessing your personal data, that's one thing, but elsewhere it makes sense to use SSL
also -- practically every employee working in a large corporation regularly gets MITMed by their own company for all their unencrypted traffic
The best delete tool that (little) money can buy:
EDIT: To counter the detractors
No one mentioned the need for government level security, so arguments with that objective are pointless goalpost shifts. This is good enough for anyone who isn't James Bond or Bruce Wayne. P.S. Governments sanc...
at my org we are forced to go through a proxy if we want access at all... they can't force me to use their SSL trust chain because I installed my own browser and I have control over what certs it is using, but I know for a fact that they have a proxy that scans the unencrypted traffic for red flag keywords
o....k? I don't exactly see what your point is? "SSL isn't necessary"? I love statements like that because it's a famous last words type thing -- one minute you're sitting on your high horse safe and sound, the next minute, crap I wish I had used SSL
who's living in 1998, again? SSL isn't even a performance impact on modern systems; CPUs have instructions in hardware that do fast crypto
yeah, because they can tell what my browser is. system is clean of keyloggers and unannounced RDP. I've had local admin and took a peek. no idle network traffic or rootkits. I use the exact same user agent as the default browser
I said that people might be getting hacked because they're logging into phpadmin unencrypted with credentials. That is one possible way. I was responding to your question about "why the **** are more databases and customer info getting looted on a wholesale basis".
@Karen3819x4 Generally here in SO long term usage is coupled with either adapting to "teh greater good of the community"(c) or being filtered out. Arrogance and BS are generally traits of newbies.
I'm just having a discussion. I never claimed SSL was the end-all be-all. You're reading into my statements to construe that I am saying things or making claims which I am not. It's really simple: to summarize, I said something about "wait until stackexchange implements SSL" (they're going to do it soon; they've stated they will), you said something to the effect of SSL isn't needed; I then provided a few examples for how it could be useful. As part of a wider security strategy, of course.
The ad-hominem is totally unnecessary and only happens in here once in a blue moon. We have regular discussions in here about the pros and cons of this stuff without getting hostile.
@Karen3819x4 I always say silly things. They are never meant to be taken seriously. Half an hour with me in the chatroom is more than enough to realize that.
@Karen3819x4: there's nothing wrong with challenging ideas and backing it up. You just accused someone of having credibility issues - that's a personal attack
Also, I have been here for a few months and you and Ariane are the 2 only women I've seen here. Women are rare in the IT industry and that is a fact. But I'd treat any woman as I'd treat any man. As I do, in fact.
If you think anyone here has been hostile, please understand, it was not intentional, and if you construed anything that was said by me as hostile, I profusely apologize.
Anyways, I got SSH running on my server at home... What type of cool things can I do with it? I know I can proxy my internet traffic through it... Is there maybe a way to mount a share from home on my notebook when I'm away?
@Bob which is ameliorated by using http pipelining and keepalive... in the case of regular http, keepalive limits scalability, but in the case of https it's actually better than re-handshaking over and over
@Karen3819x4 I've dabbled with ARP poisoning networks. Basic HTTP authentication, and passwords passed in POST requests, were frighteningly easy to capture.
@Sathya not much. someone getting defensive / offensive in the course of a typical discussion
personality clash or something... in here you have to be able to withstand people arguing against you without getting offended... which happens on a daily basis because we're all engineers / techs of some sort and are used to technical banter without taking it personally
it's not that you have to have a thick skin; you really don't, because nobody in here is going to attack you
but Bob almost constantly tries to argue against me and i find it enjoyable, it doesn't make me angry, lol
out of all the regulars here I only once got in a slight barking match with Ben (sidran32) but that was a while ago and we're still friends despite it hehe
oh and einsteinsgrandson but i won't even start w/ him lol
Alright, just created a user on my Ubuntu server, and am running a script from another server to do a backup... Looks like it won't be done till morning. WIsh me luck
I'm sure you'd just as soon see an Israeli TLD with a Palestinian domain name indicating fruitful cooperation between those two nations.... or NK and SK
for spam, sure... but not likely any serious biznis