Section: .. / papers / unix /
| /// File Name: |
ftp.conversions.txt |
Description:
|
There exists a vulnerability with certain configurations of certain ftp daemons with which users with a valid ftp only acccount on a system may execute arbitrary commands (including binaries supplied by themselves). There also exists the possibilty that anonymous ftp users may execute arbitrar y commands (also including binaries supplied by themselves). While this vulnerability is entirely configuration dependent. The required configuration is rather common. Exploit information here.
| | Author: | suid | | Homepage: | http://www.suid.edu/advisories/ | | File Size: | 6411 | | Last Modified: | Dec 20 16:52:02 1999 |
| MD5 Checksum: | 60d91c3dfdbb29df1e4f8c03f721854e |
|
| /// File Name: |
bsdkern.htm |
Description:
|
Attacking FreeBSD with Kernel Modules - The System Call Approach. System calls can be backdoored on FreeBSD much like they can on linux, and most linux kernel modules can easily be ported to FreeBSD. Includes information on intercepting system calls, filesystem related hacks, hiding files and contests, process related hacks, file execution redirection, tty hijacking, and module hiding.
| | Author: | pragmatic | | Homepage: | http://www.pimmel.com/articles/ | | File Size: | 146950 | | Last Modified: | Dec 20 15:09:53 1999 |
| MD5 Checksum: | 6fa8de63f4d5e1d3600b411782a2ff6a |
|
| /// File Name: |
linux.txt |
Description:
|
Beginners Guide to Linux + Easy Installation Guide version 1.1 - I'd bet some of the people reading this description are using Windows, and are afraid to install Unix on their computer for some reason. "Sure, Unix does all those cool things and has better security and most Unix programs are open-source, but what will happen if I'll screw up with the installation and delete my old copy of Windows?" Black Sun Research Facility presents - an easy to understand and simple installation guide for Redhat Linux and Mandrake Linux, the two most easiest-to-install distributions (although this tutorial is good for other common Linux distributions as well).
| | Author: | Barakirs | | File Size: | 33524 | | Last Modified: | Dec 11 15:04:15 1999 |
| MD5 Checksum: | d9cb2e5a272312e5564957dd36cd938f |
|
| /// File Name: |
trinoo.analysis.txt |
Description:
|
Unavailable.
| | File Size: | 55408 | | Last Modified: | Dec 8 20:02:23 1999 |
| MD5 Checksum: | 850306089225ee486a29ed60b7f5dd71 |
|
| /// File Name: |
tfn.analysis.txt |
Description:
|
The following is an analysis of the "Tribe Flood Network", or "TFN", by Mixter. TFN is ai powerful distributed attack tool and backdoor currently being developed and tested on a large number of compromised Unix systems on the Internet. TFN source available here.
| | Author: | David Dittrich | | File Size: | 31815 | | Last Modified: | Dec 8 19:33:43 1999 |
| MD5 Checksum: | 5e83210b7399408c0735c3ea14cdfe35 |
|
| /// File Name: |
logs.txt |
Description:
|
Commonly overlooked audit trails on intrusions. This is my attempt of compiling a 'top list' of audit trails that are being left after intrusions where the intruders try to cover their tracks but don't do a good job. To put it short, there are actually a lot of audit trails on a normal UNIX system, which can almost all be overcome, but with some effort, that most intruders evade.
| | Author: | Mixter | | Homepage: | http://members.tripod.com/mixtersecurity | | File Size: | 6319 | | Last Modified: | Dec 6 19:26:19 1999 |
| MD5 Checksum: | b16d1ecc218691d9dced63d62e760712 |
|
| /// File Name: |
exploit.txt |
Description:
|
A tutorial on how to write shellcode and exploits, and how buffer overflows work in general. It aims to be detailed and suitable for novice exploit coders with some C understanding.
| | Author: | Mixter | | Homepage: | http://members.tripod.com/mixtersecurity | | File Size: | 21386 | | Last Modified: | Nov 29 14:09:49 1999 |
| MD5 Checksum: | 20dde7bcc0210e65d823750810cfebd9 |
|
| /// File Name: |
unixsec.txt |
Description:
|
A tutorial for a Unix newbie or semi-newbie who is interested in computer security and/or networking. Basic Local/Remote Unix Security: Change default configurations, basic packet filtering, how to secure your system's networking services (or completely remove them or some of them, in case you don't need them, in order to increate your computer's security), how to use, how to avoid trojans, what are sniffers, how to maintain local security between different users in your system (if you're not the only one using this system, whether it's locally or remotely), some stuff about SSH, how to protect yourself against computer viruses under the Unix system, what are security scanners and how to use them, why you should encrypt your important data and how etc'.
| | Author: | Raven | | File Size: | 51409 | | Last Modified: | Nov 22 09:39:22 1999 |
| MD5 Checksum: | f3fcbdf2d5fdf2c69aa18c3ba2497651 |
|
| /// File Name: |
ppc.shellcode.txt |
Description:
|
Power PC shellcode. LinuxPPC and BSD (darwin?) versions are included.
| | Author: | Palante | | File Size: | 11888 | | Last Modified: | Nov 17 16:05:37 1999 |
| MD5 Checksum: | 544ea5c5049203fa4db8159ed39bee81 |
|
| /// File Name: |
alpha-bof.txt |
Description:
|
This paper will attempt to explain how to exploit a buffer overflow under alpha linux.
| | Author: | Taeho Oh | | File Size: | 34229 | | Last Modified: | Nov 15 20:15:10 1999 |
| MD5 Checksum: | 94b882751512d04ec72662890094c208 |
|
| /// File Name: |
Secure.Linux.for.Newbies.v1.1.txt |
Description:
|
Well written paper on securing linux for newbies. Lots of good and updated info. Version 1.1.
| | Author: | Sil | | File Size: | 16649 | | Last Modified: | Oct 25 14:00:58 1999 |
| MD5 Checksum: | 570672dea62d5322dd8a3af61496921f |
|
| /// File Name: |
omega.txt |
Description:
|
Tutorial on a new way of exploiting buffer overflows (ret-into-libc).
| | Author: | Lamagra. | | File Size: | 9138 | | Last Modified: | Oct 22 14:06:20 1999 |
| MD5 Checksum: | 567d84e713346700e3c79f318f95c78a |
|
| /// File Name: |
adv.overflow.paper.txt |
Description:
|
Paper on writing advanced buffer overflow exploits. The early buffer overflow exploit codes only spawn a shell ( execute /bin/sh ). However, nowadays some of the buffer overflow exploit codes have very nice features. For example, passing through filtering, opening a socket, breaking chroot, and so on. This paper will attempt to explain the advanced buffer overflow exploit skill under intel x86 linux.
| | Author: | Taeho Oh, Postech Laboratory for Unix Security, and Postech Linux User Group. | | File Size: | 60166 | | Last Modified: | Oct 21 17:07:02 1999 |
| MD5 Checksum: | 766c0b7ea7f39e69f2ab7dce3503415d |
|
| /// File Name: |
cops.ps |
Description:
|
The COPS Security Checker System: A description of one of the most popular UNIX security scanners
| | File Size: | 202735 | | Last Modified: | Oct 1 17:22:48 1999 |
| MD5 Checksum: | 1595be6f3741364a37bd6943cb0da3a1 |
|
| /// File Name: |
farmer.txt |
Description:
|
Improving the Security of Your Site by Breaking Into It: Discussion of a number of commonly used attacks on UNIX systems, and how to check your systems for vulnerability to them
| | File Size: | 51966 | | Last Modified: | Oct 1 17:22:48 1999 |
| MD5 Checksum: | 9263076a86ea1ed6433672a16ff4e69e |
|
| /// File Name: |
noroot.ps |
Description:
|
Life Without Root: A method for authorizing users to perform certain system administration tasks without giving them the super-user password
| | File Size: | 82758 | | Last Modified: | Oct 1 17:22:48 1999 |
| MD5 Checksum: | db036d542aa53454f5503454ec32d190 |
|
| /// File Name: |
password.ps |
Description:
|
UNIX Password Security: A discussion of the importance of well-chosen passwords, and how passwords are cracked
| | File Size: | 45570 | | Last Modified: | Oct 1 17:22:48 1999 |
| MD5 Checksum: | 3c8d71c2787c83c6a5383dc49ec62d85 |
|
| /// File Name: |
ritchie.ps |
Description:
|
On the Security of UNIX: The original UNIX security paper
| | File Size: | 23527 | | Last Modified: | Oct 1 17:22:48 1999 |
| MD5 Checksum: | 0aee70366340d619e2262b9f1401340a |
|
| /// File Name: |
sessext.ps |
Description:
|
The `Session Tty' Manager: A method for controlling access to terminals by background processes after the user has logged out
| | File Size: | 98032 | | Last Modified: | Oct 1 17:22:48 1999 |
| MD5 Checksum: | 789d924b9b1e382ba5c95ff4c901b921 |
|
| /// File Name: |
sri.ps |
Description:
|
Improving the Security of Your UNIX System: A description of many of the security features of the average UNIX system, and how to use them
| | File Size: | 274262 | | Last Modified: | Oct 1 17:22:48 1999 |
| MD5 Checksum: | c52a4a9fa7497e501cb8f84d80fcd5b5 |
|
| /// File Name: |
tools.ps |
Description:
|
UNIX Security Tools: An excellent summary of most of the public domain UNIX security tools, and where to obtain them
| | File Size: | 147852 | | Last Modified: | Oct 1 17:22:48 1999 |
| MD5 Checksum: | 2f8e5396603ba8eb713b4974da1427df |
|
| /// File Name: |
tripwire.ps |
Description:
|
The Design and Implementation of Tripwire: A File System Integrity Checker: Tripwire computes checksums of files on the system, and then scans later for any changes to those files
| | File Size: | 222139 | | Last Modified: | Oct 1 17:22:48 1999 |
| MD5 Checksum: | 66e85a10586dc2a38398ebf44ba36224 |
|
| /// File Name: |
twexper.ps |
Description:
|
Experiences With Tripwire: Using Integrity Checkers for Intrusion Detection: A description of how the Tripwire integrity checker has performed in the field
| | File Size: | 99971 | | Last Modified: | Oct 1 17:22:48 1999 |
| MD5 Checksum: | c9f69cefd7ca2199e43a1f88a71b60e4 |
|
| /// File Name: |
unixsec.ps |
Description:
|
UNIX & Security: Describes many of the security features of the UNIX operating system, as well as features that could be added to result in an evaluatable system at Class C2
| | File Size: | 299109 | | Last Modified: | Oct 1 17:22:48 1999 |
| MD5 Checksum: | d1e921d3d8bab9f12e8226d64b883971 |
|
| /// File Name: |
utnet.ps |
Description:
|
UTnet Guide to UNIX System Security: A guide to UNIX security resources
| | File Size: | 46964 | | Last Modified: | Oct 1 17:22:48 1999 |
| MD5 Checksum: | c35b8874d1f348f9551e6e4782eb8cee |
|
|
|
|
|
![.:[ packet storm ]:.](/images/ps-ani.gif)
