VirtualTam's bookmarks

121. Acme-dns on CentOS 7 | jaletzki.de 2019-01-23

     tags: cryptography/certificate, letsencrypt, network/dns, network/http, network/transport-layer-security, security

     [ permalink ]

     • https://github.com/joohoi/acme-dns
     • https://github.com/Neilpang/acme.sh
122. How to find Unused Amazon EC2 Security groups - Stack Overflow 2019-01-22

     tags: cloud, cloud/aws, infrastructure, network, programming/python, security

     [ permalink ]

     • https://gist.github.com/miketheman/2630437
     • https://gist.github.com/TomRyan-321/0cf6e48937cbe9513afc50117d6ffd6f
123. Login throttling in PHP 2019-01-18

     tags: bruteforce, ddos, programming/php, security, security/authentication, web

     [ permalink ]

     • http://www.omniceps.com/stop-brute-force-attacks-php-throttling/
     • http://miftyisbored.com/a-complete-tutorial-on-login-throttling-and-recaptha-with-laravel-5-3/
     • https://mattstauffer.com/blog/login-throttling-in-laravel-5.1/
     • http://codedevelopr.com/articles/throttle-user-login-attempts-in-php/
     • https://stackoverflow.com/questions/9153554/best-way-to-implement-ban-after-too-many-login-attempts
     • https://stackoverflow.com/questions/2090910/how-can-i-throttle-user-login-attempts-in-php
     • https://stackoverflow.com/questions/549/the-definitive-guide-to-form-based-website-authentication#477585
124. Project Wycheproof tests crypto libraries against known attacks 2019-01-17

     tags: cipher, cryptography, cryptography/encryption, programming/testing, security

     [ permalink ]

     • https://security.googleblog.com/2016/12/project-wycheproof.html
125. NetAuth: an easy to deploy, easy to use authentication and identity provider 2019-01-16

     tags: kerberos, network, network/ldap, security, security/authentication, security/authorization

     [ permalink ]

     • https://github.com/NetAuth/NetAuth
126. amazon s3 - What is the purpose of the expiration time in signed S3 urls? - Information Security Stack Exchange 2019-01-10

     tags: cloud/aws, cryptography, cryptography/hash, security, security/authorization

     [ permalink ]
127. Heffalump - is an endless honeypot 2019-01-07

     tags: header, network/http, programming/go, security, server, stream

     [ permalink ]

     • https://play.golang.org/p/0i67F3iZ8fY
     • https://en.wikipedia.org/wiki/Slowloris_(computer_security)
     • https://www.reddit.com/r/golang/comments/ad2bxn/rob_pike_has_done_it_again/
128. unCaptcha: A Low-Resource Defeat of reCaptcha's Audio Challenge 2019-01-03

     tags: audio, captcha, programming/html/form, security/authentication, web

     [ permalink ]

     • https://github.com/ecthros/uncaptcha2
     • https://www.usenix.org/system/files/conference/woot17/woot17-paper-bock.pdf
     • https://github.com/ecthros/uncaptcha
129. bettercap: The Swiss Army knife for 802.11, BLE and Ethernet networks reconnaissance and MITM attacks. 2018-12-26

     tags: bluetooth, network, pcap, security, traffic, wireless

     [ permalink ]

     • https://github.com/bettercap/bettercap/wiki
     • https://github.com/evilsocket/bleah
130. opensnitch: OpenSnitch is a GNU/Linux port of the Little Snitch application firewall. 2018-12-26

     tags: application, linux, network, network/firewall, programming/go, security

     [ permalink ]
131. ec2.py: Dynamic inventory does not work with assumed roles in shared config · Issue #25718 · ansible/ansible · GitHub 2018-12-26

     tags: cloud/aws, configuration-management/ansible, programming/python, security/authentication, security/authorization

     [ permalink ]

     • https://github.com/ansible/ansible/blob/6318229bc424e5bb95b83b5ddad355a8c315d0f7/contrib/inventory/ec2.ini#L186
     • https://github.com/ansible/ansible/pull/34279#issuecomment-355136912
     • https://docs.ansible.com/ansible/latest/plugins/inventory/aws_ec2.html
132. Why is `--duplicate-cn` not recommended in OpenVPN? - Server Fault 2018-12-26

     tags: cryptography/certificate, network, network/vpn, security

     [ permalink ]
133. ferm and docker playing together 2018-12-21

     tags: ferm, linux, linux/container/docker, linux/iptables, linux/kernel, network, network/firewall, security

     [ permalink ]

     • https://github.com/diefans/ferment
     • https://blog.urth.org/2018/06/01/making-docker-play-nice-with-ferm-firewalls-on-linux/
     • https://unrouted.io/2017/08/15/docker-firewall/
     • https://github.com/wikimedia/puppet/commit/74050c6233c8b5ae291d3d7f5131a587941c50ac
     • https://github.com/moby/moby/issues/12294#issuecomment-432921518
     • https://github.com/Jamesits/systemd-named-netns
134. ldapbrowse: Console LDAP browser 2018-12-13

     tags: command-line, network/ldap, security/authentication, security/authorization

     [ permalink ]
135. The next version of HTTP won’t be using TCP | Ars Technica 2018-11-27

     tags: google, network, network/http, performance, protocol, security

     [ permalink ]

     • https://mailarchive.ietf.org/arch/msg/quic/RLRs4nB1lwFCZ_7k0iuz0ZBa35s
     • https://datatracker.ietf.org/meeting/98/materials/slides-98-edu-sessf-quic-tutorial-00.pdf
     • https://www.reddit.com/r/networking/comments/9wriid/http3quic_and_the_yawning_abysmal_division/
     • https://www.reddit.com/r/programming/comments/9wncor/httpoverquic_to_be_renamed_http3/
     • https://www.youtube.com/watch?v=uVf_yyMfIPQ
     • https://github.com/lucas-clemente/quic-go
136. crt.sh | Certificate Search 2018-11-21

     tags: cryptography/certificate, letsencrypt, network/http, network/transport-layer-security, security

     [ permalink ]

     • https://transparencyreport.google.com
137. The Underhanded C Contest 2018-11-16

     tags: backdoor, obfuscation, programming, programming/c, security

     [ permalink ]

     • https://en.wikipedia.org/wiki/Underhanded_C_Contest
138. Displaying a remote SSL certificate details using CLI tools - Server Fault 2018-11-15

     tags: command-line, cryptography/certificate, network/nmap, network/transport-layer-security, openssl, security

     [ permalink ]
139. Macaroons: Cookies with Contextual Caveats for Decentralized Authorization in the Cloud – Google AI 2018-11-12

     tags: cookie, network/http, research, security, web

     [ permalink ]

     • https://theory.stanford.edu/~ataly/Papers/macaroons.pdf
     • https://github.com/rescrv/libmacaroons
     • https://github.com/go-macaroon/macaroon
     • http://macaroons.io/
140. mysql - What column type/length should I use for storing a Bcrypt hashed password in a Database? - Stack Overflow 2018-10-21

     tags: cryptography/hash, database, database/mariadb, database/mysql, programming/sql, security/password

     [ permalink ]

     • https://stackoverflow.com/questions/51008351/bcrypt-hashedsecret-too-short-to-be-a-bcrypted-password
     • https://stackoverflow.com/questions/247304/what-data-type-to-use-for-hashed-password-field-and-what-length