Re: OpenBSD as a pentester PC?

2015-11-26 Thread Stuart McMurray
Cheers, > Chris. > > I do much the same, with two VMs, though. I use the OpenBSD VM for on-the-spot development more than general use. The other thing I've found OpenBSD great for as a pentester is quickly putting together small networks of virtual machines for either testing things or for one-off demonstrations. -- J. Stuart McMurray

Re: Logging Password change attempts

2014-10-30 Thread Stuart McMurray
A setuid wrapper around passwd would prevent normal (non-root, non-sudo) users from running passwd directly: -r-sr-xr-x 1 auditor bin 10240 Oct 30 11:47 passwd -r-x-- 1 auditor bin 28376 Oct 30 11:46 passwd.orig The only catch is it can't be a shell script, which adds another (trivial)

Re: Question re dhclient.conf

2014-09-29 Thread Stuart McMurray
gt; sockets. " > > > > > > Unfortunately this mechanism was used for more than just routing. And > > > without a dhclient-script to > > > hack I don't see how a dynamic address can be updated vi the named/key > > > mechanism. > > > > > > Dhu > > > > If your goal is to set entries in DNS for a machine which acts as DHCP > > client there are two other possibilities I know of: > > > > 1. Use a reservation in DHCP server together with fixed entries in DNS > > > > 2. Get ISC DHCP from ports and configure it to make dynamic updates to > > BIND > > > > Depending on your exact setup there may be other ways to achieve the > > same as you did with the script. > > > > Bruno > > > > > > > -- > Ne obliviscaris, vix ea nostra voco. > > Why not have the DHCP server update DNS? -- J. Stuart McMurray

Re: rc.local mystery executables

2014-08-15 Thread Stuart McMurray
Before I blocked all of China, I saw something very similar on an ssh honeypot I run. Every few hours or so, I'd get the following: http://sprunge.us/OGfE Seemed totally automated. J. Stuart McMurray On Fri, Aug 15, 2014 at 1:51 PM, Josh Grosse wrote: > On 2014-08-15 12:38, Mihai

Re: openbsd and chromebooks

2014-07-25 Thread Stuart McMurray
The other thing that kept me from putting OpenBSD on here is that dual-booting is kinda kooky and has security implications for the ChromeOS side. A better question: Anybody know of any small laptops (not necessarily chromebooks) that run OpenBSD well? J. Stuart McMurray On Fri, Jul 25, 2014

Re: openbsd and chromebooks

2014-07-25 Thread Stuart McMurray
bummer. J. Stuart McMurray On Fri, Jul 25, 2014 at 11:40 AM, frantisek holop wrote: > has anyone tried any of the existing chromebooks? > any dmesgs? > > http://en.wikipedia.org/wiki/Chromebook#Chromebook_models > > -f > -- > tap here >>> <<< with hammer for a new monitor.

Re: Strange route entry from China

2014-05-13 Thread Stuart McMurray
> > > > > > > It came and disappeared quite fast. > > > > The box are a more or less stock OpenBSD 5.5 > > > > Is it normal that entries like this comes and goes? > > > > > > > Labs are prime targets for scanning for vulnerable machines. > > And, 163data.com.cn is a large source of shady activity. -- J. Stuart McMurray

Re: Blocking traceroute

2013-04-18 Thread Stuart McMurray
You don't even need socat. You could do it all with pf. Except for DNS, though, you'd have to block outbound DNS traffic to maintain anonymity. J. Stuart McMurray On Thu, Apr 18, 2013 at 10:17 PM, Juan Francisco Cantero Hurtado < i...@juanfra.info> wrote: > On Thu, Apr 18,

Re: ARP and npppd

2013-02-18 Thread Stuart McMurray
On Mon, Feb 18, 2013 at 09:37:27AM -0500, sven falempin wrote: > On Mon, Feb 18, 2013 at 6:43 AM, Stuart Henderson wrote: > > > On 2013-02-18, Claudio Jeker wrote: > > > Even though L2TP has L2 in its name it is not built to create ethernet > > > layer 2 tunnels. It is just tunneling PPP packets

Re: ARP and npppd

2013-02-17 Thread Stuart McMurray
On Sun, Feb 17, 2013 at 5:13 PM, Claudio Jeker wrote: > On Sun, Feb 17, 2013 at 10:32:33AM -0500, Stuart McMurray wrote: > > Hi all, > > > > I'm having a bit of trouble getting l2tp working from behind a firewall. > > > > Here's the setup: > >

ARP and npppd

2013-02-17 Thread Stuart McMurray
Hi all, I'm having a bit of trouble getting l2tp working from behind a firewall. Here's the setup: OpenBSD with isakmpd and npppd -- Home Router -- Internet -- Cell Network -- iPhone/Laptop Basically, the idea is to make a VPN for use when I'm travelling. I can connect just fine and put traff

Re: bootable OpenBSD USB stick from windows?

2013-02-11 Thread Stuart McMurray
ing like dd, maybe you can write the floppy image > to your usb. > -- Stuart McMurray

Re: bootable OpenBSD USB stick from windows?

2013-02-11 Thread Stuart McMurray
For Windows, VirtualBox is free and should do the trick. You'll probably need the extension pack. https://www.virtualbox.org/wiki/Downloads -Stuart On Tue, Feb 12, 2013 at 01:53:46PM +1300, m...@extensibl.com wrote: > On Mon, Feb 11, 2013 at 10:51:29PM +, Heptas Torres wrote: > > Hello > > I