A closer look at the iiscan
David Dede The free IIScan was recently announced on the full-disclosure list and I took the time to review it. They announced it as a new generation…
Browsing Category
Website Security
1051 posts
VMware insecure file creation
If you are using the free VMware server on Linux, beware that the installer is creating files with insecure permissions, allowing any user to modify…
Searching vulnerable sites with Google
At http://sucuri.net/ we have a free online tool that allows you to scan any domain name for security issues. It is very simple and report…
Process monitoring with OSSEC
OSSEC v2.3 was just released and one feature that really interested me was the Process monitoring. That’s what the OSSEC team says about it: “We…
Improve Domain Name Security, Lessons Learned
I was very glad to interested to read this article by http://syedaqeel.com/ where he talks about a recent domain name hijacking that he suffered and…
Password security without a password manager
Daniel from http://www.dailyblogtips.com published an article with some of his ideas on how to create passwords for multiple sites. The idea is to create an…
We just reached 3,000 sites being monitored
I was very glad to find out today that we reached 3,000 sites being monitored by http://sucuri.net. They are all being checked frequently for DNS,…
Who has better passwords? Men or Women?
A few days ago Tonu Samuel published the distribution of passwords between men and women for a site with more than 800,000 users. Who do…
apache.org hacked?
Apache.org was down for a while this morning and shortly after they released a note about a compromise: This is a short overview of what…
WordPress <= 2.8.3 Remote admin reset password
How to annoy a wordpress admin? By changing his password without confirmation… WordPress get_row($wpdb->prepare(“SELECT * FROM $wpdb->users WHEREuser_activation_key = %s”, $key)); if ( empty( $user…
The curiosity killed the cat
During the last few months we have been releasing numerous free online tools at Sucuri. One to scan web sites for security issues, another one…