Tag Archives: security

security

Security – XXE external entity attack.

XXE known ad XML eXternal Entities is an application security weakness by compromised data processed by an insecurely configured XML parser. XML files may contain the document type definition known as DTD, which describes the structure of an XML file. DTD allows us to define and use XML entities. Let’s see one example:

1
2
3
4
5
6
7
<?xml version="1.0" encoding="utf-8" ?>
<!DOCTYPE order [
  <!ENTITY lol SYSTEM "file:///D:/texts.txt">
]>
<order>
  <itemID>&lol;</itemID>
</order>

If… Read More »

Security – uBlock Origin wide-spectrum blocker.

uBlock Origin is NOT an “ad blocker”: it is a wide-spectrum blocker — which happens to be able to function as a mere “ad blocker”. The default behavior of uBlock Origin when newly installed is to block ads, trackers and malware sites — through EasyList, EasyPrivacy, Peter Lowe’s ad/tracking/malware servers, Online Malicious URL Blocklist, and… Read More »

Security – Plugins menu not showing in WordPress.

Today in my development area I saw the plugins menu not showing in WordPress. The main reason was:

PHP
1
define('DISALLOW_FILE_MODS', true);

This can be changed to false. Security WordPress keys are random and complicated you can use the online generator on this website. More settings for WordPress can be found on the official website.

Security – Detecting malware in Linux.

This tool is provided by R-fx Networks.

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
[mythcat@desk ~]$ wget http://www.rfxn.com/downloads/maldetect-current.tar.gz
[mythcat@desk ~]$ tar -xf maldetect-current.tar.gz
[mythcat@desk ~]$ cd maldetect-1.6.4/
[mythcat@desk maldetect-1.6.4]$ su
Password:
[root@desk maldetect-1.6.4]# ./install.sh
Failed to enable unit: Unit file maldet.service does not exist.
Linux Malware Detect v1.6.4
            (C) 2002-2019, R-fx Networks <proj@r-fx.org>
            (C) 2019, Ryan MacDonald <ryan@r-fx.org>
This program may be freely redistributed under the terms of the GNU GPL
 
installation completed to /usr/local/maldetect
config file: /usr/local/maldetect/conf.maldet
exec file: /usr/local/maldetect/maldet
exec link: /usr/local/sbin/maldet
exec link: /usr/local/sbin/lmd
cron.daily: /etc/cron.daily/maldet
maldet(31046): {sigup} performing signature update check...
maldet(31046): {sigup} local signature set is version 201907043616
maldet(31046): {sigup} new signature set 2019081912001 available
maldet(31046): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-sigpack.tgz
maldet(31046): {sigup} downloading https://cdn.rfxn.com/downloads/maldet-cleanv2.tgz
maldet(31046): {sigup} verified md5sum of maldet-sigpack.tgz
maldet(31046): {sigup} unpacked and installed maldet-sigpack.tgz
maldet(31046): {sigup} verified md5sum of maldet-clean.tgz
maldet(31046): {sigup} unpacked and installed maldet-clean.tgz
maldet(31046): {sigup} signature set update completed
maldet(31046): {sigup} 15552 signatures (12740 MD5 | 2035 HEX | 777 YARA | 0 USER)
[root@desk maldetect-1.6.4]# vim /usr/local/maldetect/conf.maldet

Change this row to scan_user_access=1 Now you can run it:

1
[mythcat@desk ~]$ /usr/local/sbin/maldet -a

Security – Fix Data Execution Prevention (DEP).

The tutorial is about Data Execution Prevention (DEP). Note: For Riva installations that use the Novell Windows client and Novell GroupWise client, Data Execution Prevention (DEP) should be disabled. Open a Command Prompt using Run as Administrator and use the commands for enabling or disable the DEP Enable Data Execution Prevention (DEP) completely:

1
C:\Windows\system32>bcdedit.exe /set nx AlwaysOn

Disable… Read More »

Security – What’s the Wow6432Node?

If you see this under Wow6432Node the HKEY_LOCAL_MACHINE\SOFTWARE registry subkey, then is not an error. The operating system uses this key to present a separate view of HKEY_LOCAL_MACHINE\SOFTWARE for 32-bit applications that run on a 64-bit version of Windows. When a 32-bit application queries a value under the HKEY_LOCAL_MACHINE\SOFTWARE\ subkey, the application reads from the… Read More »