Main Page

From CyberguardiansWiki

Jump to: navigation, search

ass gallery movie whipped le tigre video deceptacon intervideo dvd decoders autorotation video eurosport schlierenzauer video eltorououal Cyberguardians - Wiki Knowledge Share <Return Home>


Contents

1 - Windows

- - Unable to delete registry key?
- Use the at command to schedule an interactive registry edit with SYSTEM rights
ex. c:\> at 16:00 /interactive regedt32.exe
- - Netstat Foo
- - C:\> netstat –na 1 | find "[Scan_Host_IP_Addr]" -- Watches for connections/scans
- - C:\> netstat –nao 1 | find "[Dest_IP_Addr]" -- Finds the PID generating the traffic
- - C:\> netstat –na 1 | find "4444" | find "ESTABLISHED" -- Reports when someone connects
- - Get Your Netbios Name Codes http://www.cotse.com/nbcodes.htm
- - PSTools Foo
- - Remote Shutdown > psexec \\RemotePC -u UserName -p Password shutdown -r -t 1
- - Remote Service Disabling - sc \\<host> config <service> start= disabled
- - MISC
- - LM Empty Hash AAD3B435B51404EEAAD3B435B51404EE
- - NTLM Empty Hash 31D6CFE0D16AE931B73C59D7E0C089C0
- - Find Resultant Set of Group Policy, rsop.msc
- - C:\> write notepad.exe:STR -- allows you to see ADS

2 - Linux

3 - Unix

- Escaping wildcards in grep/egrep >grep ' 10\.0\.0\.1 ' or >egrep ' 10\.0\.0\.[0-9]+ '
- Finding Big Files for Deletion >find / -xdev -type f -size +1000k -exec ls -lh {} \; | awk '{ print $9 ": " $5 }'

4 - Security

Spafford's first principle of security administration. This principle states that 'if you have responsibility for security but have no authority to set rules or punish violators, your own role in the organization is to take the blame when something big goes wrong'.

5 - Browsers

- Firefox Hacks
- Render pages faster > nglayout.initialpaint.delay :int 0-50
- Reduce Reflows > content.notify.interval :int 500000<>1000000 & content.notify.ontimer  :bool true
- Search Tool results in new tab > browser.search.openintab :bool true
- Increase http connections > network.http.max-connections :int 32
- Increase server connections > network.http.max-connections-per-server :int 16
- Increase persistent connections > network.http.max-persistent-connections-per-server :int 8
- Reduce interval for persistent connections > network.http.request.max-start-delay :int 0
- Activate pipelining > network.http.pipelining :bool true & network.http.pipelining.maxrequests :int 16

6 - Wireless

- WAP Security Tips

  1.  Update the firmware on the AP and on all of the STAs.
2. Change the administrator’s password to a very complex one that you can remember and or document.
3. If the AP allows you to do so, change the name of the administrator’s account.
4. Disable DHCP on the LAN side of the AP and use Static IP addressing on the STAs.
5. Change the default IP address of the AP to something that will work for your STAs.
6. Use the strongest authentication and encryption that the AP and STAs can all use.
7. Turn off the broadcasting of the SSID in the Beacon frame.
8. Use a non default SSID that neither identifies you, your business, your location, or the location of the AP.
9. Place a space or two at the end of the SSID. (War Drivers will not see them)
10. Implement a MAC filter allowing only your STAs to connect.
11. Turn the transmit power down on the AP to just what is required for desired coverage.
12. Use a non-overlapping channel, preferably not channel 6.
13. Change your PHY to 5GHz if possible.
14. Use Anti-Spyware on your STAs.
15. Use a personal firewall on the STAs.
16. Use end point protection software if possible.
17. Install the AP in a physically safe location.
18. Do not disclose your configurations to others.
19. Limit the number of allowed associations to just your STAs.
20. When not in use, turn off the AP.
21. If there is a breach in security, change all security settings as soon as possible.
22. If you are unable to configure the AP securely, consult a trained and certified professional to do so on your behalf.

Views
Personal tools