Shellshock - Bash Code Injection Vulnerabilty (CVE-2014-6271)

Submitted by root on

root's picture

Security researchers from Red Hat have uncovered a new exploit in the common "Bash" command shell found in OS X, Linux, AIX and many other *nix platforms which can be used to deploy malicious code with minimal effort. Due to the ubiquity of the Bash shell, the exploit can also affect a wide variety of different web-connected devices and properties, including unsecured websites, smart home appliances, servers, and more.

As mentioned above, this vulnerability is not limited to only one platform but in the same time in doesn't affect the average consumer because even if they have "bash" in their computers, they do not use it in a way that it can be vulnerable. Unless you are using your computer as a server that accepts commands from untrusted sources (like web servers for example) (and then only if it sets environment variables based on commands from untrusted sources) you do not have to worry about.

Networking ABC - questions and answers

Submitted by root on

root's picture

Define Network?

A network is a set of devices connected by physical or virtual media links.
A network is a connection of two or more nodes via a physical or virtual link but also two or more networks connected by one or more nodes.

What is a Link?

Link is the virtual or physical medium used to connect two or more computers.

What is a node?

Taking as example the response from the question above, the computers are called Nodes.

OpenSSL Heartbleed Bug

Submitted by root on

root's picture

What is Heartbleed Bug?
What is the CVE-2014-0160?
How widespread is this?

Many questions, explanations and technical details are mentioned here: http://heartbleed.com/

The goal of this article is not to repeat what is there but rather to make a summary and point out the most important (and some extra stuff too):

How to repair a sparsebundle image

Submitted by root on

root's picture

In this tutorial I will show you how to repair a sparsebundle image. It's not difficult but it can take some time, depending of the size of your image.
Also, please do note that some images are so damaged that they cannot be repaired so do not throw stones at me if you cannot fix yours.

OS X Misc Stuff

Submitted by root on

root's picture

How to start finder from command line:

Open up Terminal and run the command below (dot means current directory).
user@osx$ open .

How to restart the graphical interface of OS X:

user@osx$ sudo killall -HUP WindowServer

How to retrieve CPU information via command line in OS X:

sysctl -n machdep.cpu.brand_string
system_profiler | grep Processor

How to assign disks to AIX partition via VIO

Submitted by root on

root's picture

What I am showing you below is not hard at all but it needs extra attention and the steps must be followed accordingly.

First of all you must have the information regarding the assigned LUNS, either created by you or by the storage admin.
Once you have them, open 3 sessions: one to each VIO and another to the target partition. They will be referred below as gzv1, gzv2 and gzaix.

Scan for new devices on first VIO:

gzv1# cfgmgr

Executing commands remotely on multiple systems via SSH

Submitted by root on

root's picture

Let's assume you have your systems farm. From one of them you are able to connect to all others with ssh keys already configured.
Now, you create a list with all these systems in it. If you want to temporary skip one system, just put # in front of it, like in our example (server2 disabled).
The ssh options are there to assure you that even if you have ssh configuration problems or one server is down, you won't get stuck on that and everything will go smooth to the end.

Strings or File Manipulation

Submitted by root on

root's picture

How to replace tab with newline:

gz@linux:~$ cat list
str1    str2    str3    str4    str5    str6    str7    str8
gz@linux:~$ cat list | tr '\t' '\n' >list2
gz@linux:~$ cat list2
str1
str2
str3
str4
str5
str6
str7
str8

How to get different parts of a string, for example with path and file name:

gz:tips# foo=/tmp/dir/filename.tar.gz
gz:tips# echo ${foo%/*}
/tmp/dir
gz:tips# echo ${foo##*/}
filename.tar.gz
gz:tips# echo ${foo%%.*}
/tmp/dir/filename
gz:tips# echo ${foo%.tar.gz}

AIX World

Submitted by root on

root's picture

This corner is for AIX related docs.
You can find here tutorials, commands and other useful information.

Pages

Recent content

Logitech RS H-Shifter - Amazing Feel, But There’s a Catch (As Always)
root
Razer Gigantus V2 XXL – 5 Months Later (Still Worth It?)
root
Why Bluetooth Headphones Switch to MONO When Using the Microphone?
root
How I Test Mousepads: Glide, Control, and Surface Noise Explained
root
PX8 S2 – A Journey Through Sound, Expectations and Reality
root
Installing Windows 11 on Intel MacBook Pro 16 (2020)
root
EA Sports WRC vs Assetto Corsa Rally | Visual Comparison in Ultra Wide (Gravel, Asphalt, Wet, Night, Snow)
root
Assetto Corsa Rally Early Access – LIVE with Commentary and Feedback About the Game
root
RDR2 Live Gameplay – XFX RX 9060 XT Live Showcase
root
CONTROL Live Gameplay – XFX RX 9060 XT Live Showcase
root
All Rock Carvings - Red Dead Redemption 2 Vertical Gameplay – XFX RX 9060 XT Live Showcase
root
Sniper Elite 5 Vertical Gameplay – XFX RX 9060 XT Live Showcase
root
Live Sessions
root
Assetto Corsa Rally - Early Access Deep Dive: The good, the bad and the AWESOME!
root
Is the RX 9060 XT Mercury Class Worth It? Silent Power Meets Real Gameplay
root
I Tested Creative Pebble V2 on My Sim Rig – Surprising Results!
root
Everything You Must Know About Logitech PRO Racing Wheel!
root
The TCL 34R83Q is Insane... But There’s a Catch! My (Almost) PERFECT MiniLED Curved Ultrawide Yet.
root
Choose Your Perfect Mic / Lavalier | AIQIU M31 vs. Boya BY-M3/BY-M2 & Puluz PU425
root
Play Steam Games on iPhone with Backbone One Playstation Edition gen2 USB-C / Steam Deck Alternative
root
The TCL 34R83Q is Insane! But There’s a Catch. Honest Review About a Real Product. Read Description.
root
Server-Ready MS-01 - A Small PC with Everything: SFP+, USB4, 2.5gbps LAN, Enterprise SSD, TPM 2.0
root
Nagios: UNKNOWN: Drive S/N : No health status line found,
root
Nagios: Error: Could not stat() command file
root
tmutil: command line interface into Time Machine
root
macOS: tmutil set quota
root
ESXi: how to change the MTU of vmkernek (vmk) interface (when UI fails)
root
ESXi: A bunch of useful commands and information
root
How to repair a sparsebundle image
root
macOS: How to Show and Hide Hidden Files in macOS Finder
root
Subscribe to term:~# less tar.gz.ro RSS