Enlaces patrocinados

Enlaces patrocinados

Exploit Scanner for WordPress

The Exploit Scanner plug-in for WordPress is an excellent tool that helps discovering vulnerabilities in your WordPress deployment.

The plug-in installs as usual. It creates a new menu item: “Tools > Exploit Scanner”.

At the time of this writing, it has two features:

Run a manual scan for potential exploits. Show the list . . . → Read More: Exploit Scanner for WordPress

How to search in all fields of Windows 7 Contacts (Windows Address Book replacement)

I’ve been using the Windows Address Book (WAB) for years, since Windows 95. As anything that has been used for years, it has a lot of information about people I really care. Not only I keep the basic stuff, like names, e-mails and addresses, but also birthdays, the place I first met people, . . . → Read More: How to search in all fields of Windows 7 Contacts (Windows Address Book replacement)

VMware ESXi: howto remove the last snapshot

Sometimes we need to create a snapshot in VMware ESXi (e.g. for backup purposes) and delete it right afterwards. This kind of operations are usually performed with shell scripts. In this post, I will explain how to remove the last snapshot using the command line.

You can specify the snapshot you want to . . . → Read More: VMware ESXi: howto remove the last snapshot

VMware ESXi: howto wait for commands to complete (e.g. create snapshot)

In VMware ESXi, you have blocking and non-blocking tasks. When creating scripts to execute non-blocking tasks, it may be useful to wait for non-blocking commands to complete. This can be done by looking to the task list in the command line.

As an example, I used one of the harmless tasks in VMware: . . . → Read More: VMware ESXi: howto wait for commands to complete (e.g. create snapshot)

PPPoE in a multiple-connection Linux firewall

I had to configure a PPPoE interface as a secondary Internet connection in a Linux firewall, using the CentOS Linux distribution. The idea was to route HTTP and HTTPS traffic through the PPPoE connection to leverage the bandwidth usage of the primary static-IP connection.

There are some things to consider when the PPPoE . . . → Read More: PPPoE in a multiple-connection Linux firewall

Firewall Builder with multiple ISP connections howto

I’ve been using Firewall Builder to manage Linux (CentOS) firewalls for a while. It’s an excellent tool for middle-sized organizations.

I was a happy sysadmin with my single-ISP fwbuilder configuration. Everything was simple, everything worked out of the box. One day, a PPPoE connection came by. I thought there was a simple solution . . . → Read More: Firewall Builder with multiple ISP connections howto

vmktree: disable root ssh password logins in VMware ESXi 4.1

vmktree is a free web tool that shows you the graphs of resource usage of VMware ESX Server, VMware Server (on Linux), GSX Server (on Linux) and a few other data center devices (ilo/ilo2/rsa2/ds4000).

Currently, it is not possible to use vmktree with a VMware ESXi 4.1 host with ssh root logins disabled. . . . → Read More: vmktree: disable root ssh password logins in VMware ESXi 4.1

VMware ESXi: always keep another Administrator user other than root

I had to assign permissions to group “root” as a host Administrator of my ESXi. I was a little bit distracted and assigned the “Read-only” role to group “root” instead of role “Administrator”. As a side effect, user “root” got read-only permissions!

User “dcui” is Administrator by default, so we can use it . . . → Read More: VMware ESXi: always keep another Administrator user other than root

Selectively allow SSH for users in VMware ESXi

In another post, I explained how to disable root ssh login and allow regular users to login to the ESXi. It is also possible to selectively allow SSH for a particular set of users.

Create the security map

We need to create a map file to specify how to authenticate (or deny) users.

. . . → Read More: Selectively allow SSH for users in VMware ESXi

SSH with non-root users in VMware ESXi

The default configuration in VMware ESXi 4.1 allows ssh login only for root. On the other hand, preventing root ssh login is part of any OS hardening checklist. In this article, I will explain how to access an ESXi server with non-root users and how to prevent root ssh login.

I’ll show how . . . → Read More: SSH with non-root users in VMware ESXi