As the title says, I am interested in detecting any nmap scans directed on a (my) GNU/Linux host. I would like to use snort in combination with barnyard2 and snorby for this, or if possible to perform a signature-based detection on snort unified2 logs. I noticed a similar packet to the following ...
@RоryMcCune The sad thing is that it will be bought by some mercantile Philistine who will keep it in a safe and speculate on it, instead of drinking it.
@RоryMcCune And on top of it all, they want to charge you £4.95 for shipping!!
I'm not sure whether it's more ridiculous that they're not throwing in free shipping for a £36,750 bottle of whisky, or that the price of shipping seems to indicate that they plan on dropping it into a box and chucking it in the standard post.
@TildalWave I really hate Krispy Kreme - the queueue is not for me, it's just getting in the way. They are giving away free boxes of doughnuts to everyone
In August 2011, the private key of the CA 'Diginotar' is stoen by a Iranian hacker. I am trying to find what are the techniques used to obtain the private key. But what I found is just the consequences of lossing a private key.
Can anyone tell me or give a link which tells me the techniques used?
Do we want this here? It's technically on-topic, and it could be a good question if it was answerable (learning from Diginotar's mistake), but AFAIK the answer isn't publicly known.
@Gilles Yeah, I believe you're right...I don't think the details have ever been published. Because of that, probably not a great question anywhere, despite the fact it is on-topic.
I use Linux on my desktop, but I got suprised after checking random PDF files on my machines with Virustotal. One of them contained a "PDF.Exploit.CVE_2008_2992".
So PDF files can have malicious content in them.
Question: How can I "sterilize" a PDF file? I'm thinking of converting a PDF file ...
In August 2011, the private key of the CA 'Diginotar' is stoen by a Iranian hacker. I am trying to find what are the techniques used to obtain the private key. But what I found is just the consequences of lossing a private key.
Can anyone tell me or give a link which tells me the techniques used?
I use Linux on my desktop, but I got suprised after checking random PDF files on my machines with Virustotal. One of them contained a "PDF.Exploit.CVE_2008_2992".
So PDF files can have malicious content in them.
Question: How can I "sterilize" a PDF file? I'm thinking of converting a PDF file ...
