DefCon 23 Video Demo: Rogue DHCP/DNS server gaining root access to target

image_pdfimage_print

DefCon 23 Video Demo: Rogue DHCP/DNS server ShellShock exploit proof of concept

image_pdfimage_print

DefCon 23 Video Demo: Rogue DHCP/DNS server on Citrix XenServer 6.2 with Open vSwitch 1.4.6

image_pdfimage_print

DefCon 23 Video Demo: MAC Flooding on Citrix XenServer 6.2 with Open vSwitch 1.4.6

image_pdfimage_print

DefCon 23 Video Demo: MAC Flooding on Gentoo/Xen with Open vSwitch 2.0.0

image_pdfimage_print

DefCon 23 Video Demo: MAC Flooding on Gentoo/Xen with 802.1d Bridging

image_pdfimage_print

Disabling User List in GDM (Gnome 3)

image_pdfimage_print

In a multi-user environment you really do not want a full list of usernames being displayed in the GDM login screen for security reasons. In order to disable this feature on my Gentoo lab systems running Gnome 3 and GDM I performed the following actions.

Continue reading ‘Disabling User List in GDM (Gnome 3)’

Exploring Layer 2 Network Security In Virtualized Environments – DerbyCon 4.0

image_pdfimage_print

I gave a talk this past weekend on part of my Ph.D. dissertation research at the DerbyCon 4.0 “Family Rootz” Computer Security conference in Louisville, KY. Take a look at the following video to view the talk in its entirety. The rest of the conference videos are available here.

 

 

Asterisk SIP Trunk Settings – Vestalink

image_pdfimage_print

Vestalink is a new SIP trunk provider that has sprung up as a replacement for Google Voice trunking within Asterisk servers. They offer a very attractive pricing plan with 2000 mins/month going for $39.99 per year, and unlimited plans at $49.99 per year! This provides a single DID along with two SIP channels for the possibility of holding two simutanious calls from one account (call waiting). The folks over to Nerd Vittles have written up a great guide to getting the service working with FreePBX, however I was hard pressed to find any documentation on how to get this working under a standard Asterisk server using only the CLI. Applying the Nerd Vittles FreePBX configuration to Asterisk CLI did not work out of the box. After some messing around I was able to sucessfully register my Asterisk server to my Vestalink account, and I have provided generic configurations that should help anyone looking to integrate a Vestalink SIP trunk with a vanilla Asterisk installation.

Continue reading ‘Asterisk SIP Trunk Settings – Vestalink’

Open vSwitch on Gentoo – Setting Up Your First vSwitch

image_pdfimage_print

In my last post I outlined how to get Open vSwitch installed on Gentoo from source for version 1.11.0 as well as from portage using version 2.0.0. I also described how to associate Open vSwitch with with Xen based virtual machines. This guide will detail how to build your first virtual switch from scratch and create virtual switch ports associated with the virtual switch that persist upon a reboot of the host machine. The virtual ports can then be used with VirtualBox VMs and other generic applications that can make use of them.

Continue reading ‘Open vSwitch on Gentoo – Setting Up Your First vSwitch’