Subscribe to RSS Feed

Posts Tagged ‘ Security ’

Delete files securely on Linux – Journaled file systems

December 18, 2009 by JR

terminal-logo-small Few days ago I write about shred, which work fine for old systems, like EXT2, but not so nice with journaled file systems. Modern file systems need something more robust, like dd and srm (a secure replacement for rm). Unlike the standard rm, srm overwrites and rename the files before unlinking them. This makes it very hard to recovery of the data.

Create test file:

echo "secure content" > /tmp/secure.txt

» Continue Reading "Delete files securely on Linux – Journaled file systems"

Please leave a comment

Twitter hacked? Not really, only Twitter DNS records compromised

December 17, 2009 by JR

I before post ‘Twitter Hacked by Iranian Cyber Army’, but actually just Twitter DNS records was hacked. I think even twitter.com server headers and tracepath to servers simply prove this, because they are completely different normally when hacked.

Hacked twitter.com headers:

» Continue Reading "Twitter hacked? Not really, only Twitter DNS records compromised"

Please leave a comment

Twitter Hacked by Iranian Cyber Army

December 17, 2009 by JR

Twitter site is hacked by Iranian Cyber Army. Here is some screenshots and full info about page.

Screenshots

This_Web_Site_Has_Been_Hacked_By_Iranian_Cyber_Army

lynx-twitter-hacked

Server info and full html content

lynx -mime_header http://twitter.com
HTTP/1.1 200 OK
Date: Fri, 18 Dec 2009 06:42:08 GMT
Server: Apache/2.2.14 (Unix) mod_ssl/2.2.14 OpenSSL/0.9.8l DAV/2 mod_auth_passthrough/2.1 FrontPage/5.0.2.2635
Last-Modified: Fri, 18 Dec 2009 06:21:13 GMT
ETag: "90c06a-717-47afabf13c840"
Accept-Ranges: bytes
Content-Length: 1815
Connection: close
Content-Type: text/html
 
<html>
 
<head>
<meta http-equiv="Content-Language" content="en-us">
<meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
<title>..:: This Web Site Has Been Hacked By Iranian Cyber Army ::.. </title>
</head>
 
<body bgcolor="#000000">
 
<p align="center">&nbsp;</p>
<p align="center"><img border="0" src="index.6.gif"><img border="0" src="index.2.gif"><img border="0" src="index.7.gif"></p>
<p align="center"><img border="0" src="index.8.gif"></p>
<p align="center">
<a href="mailto:iranian.cyber.army@gmail.com?subject=Mowjcamp">
<img border="0" src="index.5.gif"></a></p>
<p align="center"><img border="0" src="index.3.jpg" width="43%" height="106%"></p>
<p align="center"><font face="Tahoma" size="2"><b>&nbsp;&nbsp;&nbsp;</b></font></p>
<p align="center"><b><font face="Tahoma" size="2" color="#FFFFFF">&nbsp;&#1576;&#1606;&#1575;&#1605; &#1582;&#1583;&#1575;<br>
&#1576;&#1607; &#1593;&#1606;&#1608;&#1575;&#1606; &#1740;&#1705; &#1575;&#1740;&#1585;&#1575;&#1606;&#1740; &#1583;&#1585; &#1662;&#1575;&#1587;&#1582; &#1576;&#1607; &#1583;&#1582;&#1575;&#1604;&#1578; &#1607;&#1575;&#1740; &#1588;&#1740;&#1591;&#1606;&#1578; &#1570;&#1605;&#1740;&#1586; &#1575;&#1740;&#1606; &#1587;&#1585;&#1608;&#1740;&#1587; &#1583;&#1607;&#1606;&#1583;&#1607; &#1576;&#1607; &#1583;&#1587;&#1578;&#1608;&#1585; 
&#1605;&#1602;&#1575;&#1605;&#1575;&#1578; &#1570;&#1605;&#1585;&#1740;&#1705;&#1575;&#1740;&#1740; &#1583;&#1585; &#1575;&#1605;&#1608;&#1585; &#1583;&#1575;&#1582;&#1604;&#1740; &#1705;&#1588;&#1608;&#1585;&#1605; )&nbsp; <br>
&#1575;&#1740;&#1606; &#1587;&#1575;&#1740;&#1578; &#1576;&#1607; &#1593;&#1606;&#1608;&#1575;&#1606; &#1607;&#1588;&#1583;&#1575;&#1585; &#1607;&#1705; &#1605;&#1740; &#1588;&#1608;&#1583; <br>
&nbsp;</font></b></p>
 
</body>
 
</html>
Please leave a comment

Howto hide and modify Apache server information (ServerSignature and ServerTokens) and Hide PHP version (X-Powered-By)

November 20, 2009 by JR

By default almost all Apache installation shows sensitive server information with Apache version number, server operating system details, installed Apache modules, PHP-version and so on. Attackers can use this information when performing attacks.

Some examples howto check server information that Apache sends

» Continue Reading "Howto hide and modify Apache server information (ServerSignature and ServerTokens) and Hide PHP version (X-Powered-By)"
Please leave a comment

Recent Comments

Recent Twitter Updates