InfoSecPodcast.com

Some things to look for in your SecurID / Remote Access logs

15. June 2011

2950 Comments2011-06-16+03%3A43%3A42Chris+Harrington

The RSA SecurID token has arguably been the defacto second factor authenticator for many years. Despite the recent breach at RSA I do not see many organizations moving to alternate vendors or other second factor technologies, like PKI / SmartCards or telephone based solutions. In the wake of the RSA breach most companies [...]

NSA’s guide to securing routers

16. February 2007

950 CommentsNSA%27s+guide+to+securing+routers2007-02-17+02%3A50%3A21Chris+Harrington

My old pal’s from the System Network and Attack Center at the NSA have a great guide on securing routers. The Router Security Configuration Guide has a good amount of the networking basics and then goes into a lot of hands on configurations and best practices. Cisco routers are covered specifically but I would imagine [...]

URL Obfuscation Examples

1. November 2006

800 CommentsURL+Obfuscation+Examples2006-11-02+01%3A23%3A27Chris+Harrington

Web browsers understand all sorts of URL formats. If you want to go to Google you put http://www.google.com in your browser. These URL’s are also valid for Google as well: http://1208930147 and http://%67%6f%6f%67%6c%65%2e%63%6f%6d For a good explanation as to why this is and what URL obfuscation is used for, check out this post. –Chris Technorati [...]

Skype Security

16. October 2006

610 CommentsSkype+Security2006-10-16+15%3A50%3A31Chris+Harrington

I use Skype fairly regularly as do many people I know. In fact, you can Skype me at chrisharringtonor leave me voicemail at 603-397-3392 (also Skype). Over the past couple months I have seen some interesting information and links on Skype and it’s security and anonymity. I thought I would share some of these. Anonymity [...]

Securing Microsoft Office

12. October 2006

620 CommentsSecuring+Microsoft+Office2006-10-12+15%3A07%3A01Chris+Harrington

SecurityFocus has posted a two part article on securing Microsoft Office, written by Khushbu Jithra. It’s a pretty good article combo with the first article talking about Office’s security issues and the second article covering the forensics involved. –Chris Technorati tags: Microsoft Office, Security, vulnerability, security focus

Demystifying 802.1x

18. September 2006

520 CommentsDemystifying+802.1x2006-09-19+02%3A58%3A25Chris+Harrington

I came across this white paper by Fluke Networks. It does a great job of visually representing the components in 802.1x, how the various handshake’s work and different protocols involved. Definitely worth a read if you want a cheat sheet on 802.1x. It’s through Bitpipe so you will have to register to download it. –Chris [...]

MS Exchange build numbers for pentesting

31. August 2006

370 Comments2006-08-31+18%3A45%3A53Chris+Harrington

Have you ever telnet’d to an MS Exchange server and wondered what Service Pack or Release version it was? I know I have. It can be a good way to double check what Nessus or another VA tool told you was a vulnerable version. CDOLive has a nice table that matches Version, Service Pack and [...]

Everything you wanted to know about SQL injection

3. August 2006

250 Comments2006-08-04+02%3A50%3A30Chris+Harrington

Ok…it’s probably not EVERYTHING but I thought it was a pretty good article. Besides, that is their title to the article, not mine. I like that it covered not only execution of a SQL injection attack but also how to detect it and tips to prevent such an attack. Application security is not my strongest [...]

Archive | Security How To’s RSS feed for this section

Some things to look for in your SecurID / Remote Access logs

NSA’s guide to securing routers

URL Obfuscation Examples

Skype Security

Securing Microsoft Office

Demystifying 802.1x

MS Exchange build numbers for pentesting

Everything you wanted to know about SQL injection

Latest Videos

Translate

InfoSecPodcast tweets

Tags

Reading now

Who's Online

Spam Blocked