pastebin - collaborative debugging tool
secsav.kpaste.net RSS

Difference between
modified post fa92886d7c by Anonymous on Tue 22nd Apr 2014 06:12
original post 7a80565a by Anonymous on Sat 19th Apr 2014 11:51
Download diff
Show old version | new version | both versions

    
11
[[[ WiFi YT vids ]]]
22
33
https://www.youtube.com/user/NeedSec
44
https://www.youtube.com/user/Raventattoo/videos
55
https://www.youtube.com/user/Cyb3rw0rM1/videos
66
77
# GUI frontend to reaver
88
http://sourceforge.net/projects/wpscrackgui/
99
1010
1111
---
1212
# HSM from a Raspberry Pi
1313
http://cryptosense.com/building-a-raspberry-pi-hsm-for-rsa-2014/
1414
1515
# Shredding files recursively into directories
1616
http://www.linuxforums.org/forum/miscellaneous/46693-how-shred-entire-directory-tree.html#post257616
1717
1818
# OpenBSD lol
1919
http://bbs.progrider.org/prog/read/1383465168
2020
2121
http://www.iusmentis.com/maatschappij/privacy/filmen-cameratoezicht/
2222
2323
# iptables
2424
http://blog.commandlinekungfu.com/2014/01/episode-174-lightning-lockdown.html
2525
2626
# /g/ has root to NSA
2727
http://archive.rebeccablacktech.com/g/thread/S39950951#p39950951
2828
2929
# Scan the whole Internet in under 45 minutes!
3030
https://zmap.io/
3131
3232
# Inception - search RAM contents for interesting stuff
3333
http://www.breaknenter.org/projects/inception/
3434
3535
# Subterfuge - Automated MITM Framework
3636
https://code.google.com/p/subterfuge/
3737
3838
# Telegram
3939
http://www.thoughtcrime.org/blog/telegram-crypto-challenge/
4040
4141
# Entropy as fuck
4242
http://gamesbyemail.com/news/diceomatic
4343
http://www.random.org/
4444
4545
4646
4747
[[[ SELinux ]]]
4848
# From #centos
4949
Useful resources for SELinux: http://wiki.centos.org/HowTos/SELinux
5050
http://wiki.centos.org/TipsAndTricks/SelinuxBooleans
5151
http://docs.fedoraproject.org/en-US/Fedora/13/html/Security-Enhanced_Linux/
5252
http://fedorasolved.org/security-solutions/selinux-module-building
5353
http://www.youtube.com/watch?v=bQqX3RWn0Yw
5454
http://opensource.com/business/13/11/selinux-policy-guide
5555
5656
http://wiki.centos.org/HowTos/SELinux
5757
http://beginlinux.com/server_training/web-server/976-apache-and-selinux
5858
http://docs.fedoraproject.org/en-US/Fedora/13/html/Managing_Confined_Services/
5959
6060
http://www.reddit.com/r/linux/comments/23a2tg/the_selinux_coloring_book/
6161
6262
6363
[ CentOS ]
6464
http://wiki.centos.org/HowTos/OS_Protection
6565
6666
6767
6868
[[[ Theory ]]]
6969
# ECC Primer
7070
http://blog.cloudflare.com/a-relatively-easy-to-understand-primer-on-elliptic-curve-cryptography
7171
http://arstechnica.com/security/2013/10/a-relatively-easy-to-understand-primer-on-elliptic-curve-cryptography/2/
7272
http://blog.serverfault.com/2011/12/12/a-studied-approach-at-wifi-part-1/
7373
http://safecurves.cr.yp.to/
7474
7575
7676
[ GPG / PGP ]
7777
http://www.gnupg.org/documentation/index.html
7878
http://www.thedrinkingrecord.com/pgpgpg-guide/
7979
http://www.dewinter.com/gnupg_howto/english/GPGMiniHowto.html
8080
8181
8282
8383
[[[ Wikipedia ]]]
8484
https://en.wikipedia.org/wiki/Data_remanence
8585
http://en.wikipedia.org/wiki/PA-DSS
8686
8787
8888
8989
[[[ WebSec ]]]
9090
9191
# Want to use my wifi? (cookie spoofing, MITM etc.)
9292
http://thejh.net/written-stuff/want-to-use-my-wifi?
9393
9494
http://www.amanhardikar.com/mindmaps/Practice.html
9595
9696
# The Web Application Vulnerability Scanners Benchmark
9797
http://sectooladdict.blogspot.se/2014/02/wavsep-web-application-scanner.html?m=1
9898
9999
# Bypassing WAF's
100100
http://www.reddit.com/r/netsec/comments/20uhgh/bypassing_web_application_firewalls_using_http/
101101
102102
# Hardening WordPress
103103
http://codex.wordpress.org/Hardening_WordPress
104104
http://halfelf.org/2013/false-security/
105105
http://www.esecurityplanet.com/open-source-security/top-5-wordpress-vulnerabilities-and-how-to-fix-them.html
106106
https://wordpress.org/plugins/better-wp-security/
107107
http://wordpress.org/plugins/bulletproof-security/
108108
109109
# A seemingly innocent PHP vuln
110110
http://danuxx.blogspot.de/2013/03/unauthorized-access-bypassing-php-strcmp.html
111111
112112
# JS crypto
113113
http://www.reddit.com/r/netsec/comments/21ebv7/mylar_encryptdecrypt_your_webapp_data_in_users/
114114
115115
---
116116
https://wiki.ubuntu.com/BasicSecurity
117117
https://wiki.archlinux.org/index.php/Dm-crypt/Specialties#Securing_the_unencrypted_boot_partition
118118
119119
http://www.danielmiessler.com/study/infosec_interview_questions/
120120
121121
122122
123123
124124
125125
[[[ Talks & Other videos ]]]
126126
http://makehacklearn.org/2014/03/06/trustycon-videos/
127127
128128
129129
130130
---
131131
132132
[[[ Reddit ]]]
133133
134134
# How to sign kernel for UEFI Secure Boot.
135135
http://www.reddit.com/r/linux/comments/1mw1xb/state_of_securely_booting_linux/
136136
137137
# SSL/TLS Deployment Best Practices
138138
http://www.reddit.com/r/netsec/comments/1mn2nk/ssltls_deployment_best_practices/
139139
140140
# Hardening SSH
141141
http://www.reddit.com/r/linux/comments/1yfvm9/hardening_ssh_servers/
142142
143143
# Physical machine security
144144
http://www.reddit.com/r/netsec/comments/l91d5/physical_laptop_security/
145145
146146
# Linux sec
147147
http://www.reddit.com/r/linux/comments/1oobkf/what_kind_of_antimalware_exists_for_linux/
148148
149149
# OS under a OS
150150
http://www.reddit.com/r/linux/comments/1qib6u/the_second_proprietary_operating_system_hiding_in/
151151
152152
# grsec patches explained
153153
http://www.reddit.com/r/netsec/comments/renu4/grsecurity_pax_configuration_options_explained/
154154
155155
# 4 HTTP security headers you should always be using (ibuildings.nl)
156156
http://www.reddit.com/r/netsec/comments/1vztlh/4_http_security_headers_you_should_always_be_using/
157157
158158
# Show r/netsec: reveal your true IP address behind proxy/NATs using WebRTC (Firefox/Chrome) (jsfiddle.net)
159159
http://www.reddit.com/r/netsec/comments/1vzsnn/show_rnetsec_reveal_your_true_ip_address_behind/
160160
161161
# Laptop security best practices. What do you do? (self.linux)
162162
http://www.reddit.com/r/linux/comments/1zi10c/laptop_security_best_practices_what_do_you_do/
163163
164164
# Ever wonder what makes the new ssh-certificate authentication different from ssh-pubkey? This guide explains that and how to use it effectively. (neocri.me)
165165
http://redd.it/1zmsi2
166166
167167
# How I got root with Sudo (securusglobal.com)
168168
http://www.reddit.com/r/netsec/comments/20mftq/how_i_got_root_with_sudo/
169169
170170
# Hardening a Linux server (self.linux)
171171
http://www.reddit.com/r/linux/comments/1xxpap/hardening_a_linux_server/
172172
173173
# Security of Debian?
174174
http://www.reddit.com/r/linux/comments/1xfuqb/debian_74_relased/cfbwunr
175175
176176
# Sidestep Wireless Logins by Routing All Traffic Through Measly Little Ping Packets (getpostdelete.com)
177177
http://www.reddit.com/r/linux/comments/22tsil/sidestep_wireless_logins_by_routing_all_traffic/
178178
179179
# Why Linux is better for infosec?
180180
http://www.reddit.com/r/linux/comments/22xece/why_is_linux_better_for_infosecsysadmins/
181181
182-
182+
# Wayland is NOT immune to keyloggers (self.linux)
183-
183+
http://www.reddit.com/r/linux/comments/23mj49/wayland_is_not_immune_to_keyloggers/
184184

Submit a correction or amendment below (click here to make a fresh posting)
After submitting an amendment, you'll be able to view the differences between the old and new posts easily.

Syntax highlighting:

To highlight particular lines, prefix each line with {%HIGHLIGHT}




All content is user-submitted.
The administrators of this site (kpaste.net) are not responsible for their content.
Abuse reports should be emailed to us at