Today I found my self needing to find my way in into an unconfigured Mikrotik router. In this article I’ll explain how I used the Microtik Neighbour Discovery Protocol and Wireshark to get access to the router in a Linux environment without any of the Microtik tools.
Continue readingThe monster that lurks or why empowering attacked groups is not a good idea
Nowadays it doesn’t come as a surprise that those with power end up abusing it to harm those which are on a worse capability to defend themselves. This is something that happens at all levels of society and it just requires something that makes you different from those with power to be triggered. This seems […]
Continue readingMarch 2015’s OpenSSL releases and security advisory
Today the OpenSSL project has released new versions for the 0.9.8, 1.0.0, 1.0.1 and 1.0.2 branches of the library. My current employer Coresec Systems AB has allowed me to spend some time preparing for the release and documenting a bit the issues and possible work arounds. In this blogpost I will release some of the […]
Continue readingFeliz navidad y mejor año nuevo
Aquellos que me sigáis por otras vías seguramente hayáis visto mi felicitación navideña. La verdad es que la hice por una persona muy especial que tiene una versión única de la misma, sin embargo decidí compartir una versión menos personal de la demo con vosotros. Sinceramente espero que os guste. Para ejecutarla basta con hacer […]
Continue readingUnderstanding, exploiting and preventing CVE-2014-6271: remote code execution through bash
Well today I’m going to write a short note about this security issue which is now public. The issue has been tested and fixed on Gentoo systems and given the type it does affect even hardened systems.
Continue readingEste 25 de Mayo ves a votar
Esta va a ser la única entrada que voy a escribir sobre política en este blog (al menos hasta septiembre que son las locales y nacionales en Suecia). Para los que no queráis leer todo el rollo se resume en dos cosas: en primer lugar yo voy a votar por el partido pirata (sueco), en […]
Continue readingFreetiger to be merged into systemd
Hi guys! In order to provide the best possible user experience in systemd, we have decided to merge freetiger into systemd.
Continue readingSome insights on Sven Vermeulen’s SELinux book
I got my hands on a copy of Sven’s SELinux book so after reading it I think it’s a good idea to write a review on it.
Continue readingIPv6 may be the future of P2P and thus Direct Connect
Hi, as you may have noticed there was subnet isolation at Campus Party Europe and a symmetric NAT which made impossible direct communication between campuseros nor NAT traversal respectively. To circumvent these limitations we created one server where users on the same subnets could talk to each other directly and decided to go with public […]
Continue readingUsando el DC en Campus Party Europa // Using the DC at Campus Party Europe
English translation still to come. Actualización 3 Pues hemos hecho funcionar esto con IPv6. El servidor alternativo se encuentra en adcs://[2001:5c0:1400:b::29a3]:2785 Necesitaréis algún cliente con soporte IPv6 para poder conectar (el DC++ falla en las conexiones cliente-cliente pero el AirDC++ parece funcionar bien y es el cliente que recomendamos). Más información al final del artículo. […]
Continue reading