No Image

리눅스 상에서 route 명령을 이용한 static route 설정

2015-08-06 KENNETH 0

  1. 네트워크 환경 route -n Destination Gateway Genmask Flags Metric Ref Use Iface 0.0.0.0 192.168.0.1 0.0.0.0 UG 100 0 0 eth0 10.52.88.192 10.100.100.1 255.255.255.192 UG 0 0 0 eth1 10.100.200.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1 192.168.0.0 0.0.0.0 255.255.255.0 U 100 0 0 eth0 (환경마다 틀리지만 대략 저렇게 나왔다고 가정합니다…. 억지로 지어내기도 힘드네… ;) * 메인 네트워크 : eth0 – IP : 192.168.0.0/24 – GW : 192.168.0.1 * 보조 네트워크 : eth1 – IP : 10.100.100.0/24 – GW : 10.100.100.1 => 평상시 외부와의 통신을 할경우 모두 eth0을 사용   2. 조건 설정 IP : 222.222.222.38 이 아이피로 패킷을 보낼때는 eth0이 아니라 eth1을 통해서 보내야 하는 상황…. (설정임…. ;;;)   3. 단일 호스트 등록 및 삭제 route add -host 222.222.222.38 gw 10.100.100.1 route del -host 222.222.222.38 gw 10.100.100.1   4. 네트워크 대역 등록 및 삭제 route add -net 222.222.222.38 [ more… ]

No Image

Microsoft Bounty Programs Expansion – Bounty for Defense, Authentication Bonus, and RemoteApp

2015-08-06 KENNETH 0

I am very pleased to be releasing additional expansions of the Microsoft Bounty Programs. Please stop by the Microsoft Networking Lounge at Black Hat, August 5-6, to learn more about these programs; or, visit https://aka.ms/BugBounty. We are raising the Bounty for Defense maximum from $50,000 USD to $100,000 USD. I am also very excited to announce that we are launching a bonus period for Authentication vulnerabilities in the Online Services Bug Bounty. We will be running an onsite contest at Black Hat in Las Vegas, August 5-6, related to this effort. Lastly, we are adding RemoteApp to the list of domains covered in the Online Services Bug Bounty. The changes to the Bounty for Defense reflect the continuing evolution of the Microsoft Bounty Program, based on the feedback and opportunities brought to us from the Security Research Community. Raising the [ more… ]

No Image

Microsoft Bounty Programs Expansion – Bounty for Defense, Authentication Bonus, and RemoteApp

2015-08-05 KENNETH 0

Microsoft Bounty Programs Expansion – Bounty for Defense, Authentication Bonus, and RemoteApp I am very pleased to be releasing additional expansions of the Microsoft Bounty Programs. Please stop by the Microsoft Networking Lounge at Black Hat, August 5-6, to learn more about these programs; or, visit https://aka.ms/BugBounty. We are raising the Bounty for Defense maximum from $50,000 USD to $100,000 USD. I am also very excited to announce that we are launching a bonus period for Authentication vulnerabilities in the Online Services Bug Bounty. We will be running an onsite contest at Black Hat in Las Vegas, August 5-6, related to this effort. Lastly, we are adding RemoteApp to the list of domains covered in the Online Services Bug Bounty. The changes to the Bounty for Defense reflect the continuing evolution of the Microsoft Bounty Program, based on the feedback [ more… ]

No Image

WordPress 4.2.4 Security and Maintenance Release

2015-08-05 KENNETH 0

출처 : https://wordpress.org/news/2015/08/wordpress-4-2-4-security-and-maintenance-release/ WordPress 4.2.4 is now available. This is a security release for all previous versions and we strongly encourage you to update your sites immediately. This release addresses six issues, including three cross-site scripting vulnerabilities and a potential SQL injection that could be used to compromise a site, which were discovered by Marc-Alexandre Montpas of Sucuri, Helen Hou-Sandí of the WordPress security team, Netanel Rubin of Check Point, and Ivan Grigorov. It also includes a fix for a potential timing side-channel attack, discovered by Johannes Schmitt of Scrutinizer, and prevents an attacker from locking a post from being edited, discovered by Mohamed A. Baset. Our thanks to those who have practiced responsible disclosure of security issues. WordPress 4.2.4 also fixes four bugs. For more information, see the release notes or consult the list of changes. Download WordPress 4.2.4 or venture over to Dashboard → Updates and simply click “Update [ more… ]