jonaslejon
Joined 15 years ago
Karma
649
Submissions
71
Member since
Mar 22
Recent submissions
Comment · 9 months ago
Memories! I was at the hacking conference HAL2001 and listening to Dug Song and Solar Designer, who were talking about their SSH timing analysis: https://download.openwall.net/pub/advisories/OW-003-ssh-traf...
Time flies
Comment · 2 years ago
Nice tool! Will check it out. I have used jdam in the past to fuzz JSON: https://gitlab.com/michenriksen/jdam
Comment · 2 years ago
OpenSSH 9.8p1 was released July 1, 2024 according to https://www.openssh.com/releasenotes.html#9.8p1
Comment · 4 years ago
This was quite funny:
if name == "boring_wozniak" /* Steve Wozniak is not boring */ { goto begin }
Comment · 4 years ago
I personally use OSSEC for File Integrity Monitoring. And it has also actually caught an intruder that modified some PHP-code on a webserver. The attacker forgot to use the prefix @ in the PHP-code so a new error message was sent to the logfile and reported by OSSEC.
[ my public key: https://keybase.io/jonaslejon; my proof: https://keybase.io/jonaslejon/sigs/CWrMd2vYkWkMYf7XVDm0kpGGtm1-yXbhmqenTcQdCDM ]