The WhiteHack Blog

We all know that ESX server can be run within VMWare Workstation 6, but as I already has Server 2.0 installed, I decided to see if the same could be done, mainly as learning ESX server cannot be a bad thing, but I did not want to run Server 2, and Workstation 6 at the same time, although both are free products, it really does not make much sense to run thetwo on eht same machine if one will suffice.

The basic VM is set as a 32bit RedHat linux machine running a 2.6 kernel, with 1GB memory, bridged nic, 8GB hard disk, and I am using the ESX 3.5.0 iso image from VMWare.

(continue reading…)

grsecurity’s Brad Spengler has just released details of an exploit that works on a fully patched Linux kernel (versions 2.6.30 and 2.6.30.1).

From TheRegister:

“The vulnerability is located in several parts of Linux, including one that implements functions known as net/tun. Although the code correctly checks to make sure the tun variable doesn’t point to NULL, the compiler removes the lines responsible for that inspection during optimization routines. The result: When the variable points to zero, the kernel tries to access forbidden pieces of memory, leading to a compromise of the box running the OS.”

The source code is rather interesting to read, indicating that due to gcc optimizations unexploitable code becomes exploitable, and it can bypass the mmap_min_addr in an SELinux vulnerability. The code can be compiled to work on 32bit and 64 bit systems.

YouTube video of exploit in action.

Awesome!

Rumours are rife about a new 0day SSH exploit for SSH.

Apparantly targetting version 4.3.0 of SSH, and made by the elusive anit-sec group, who are also resonsible for the takedown of Astalavista, the hack looks like this:
(continue reading…)

Just encoutered a problem where an Acer Inspire One lost the wifi icon.

This seems to be a regular occurence with these netbooks, and most of the searching I did seemed to indicate a full system restore is required.

There is, however, a easy fix.

Open the Terminal program (you can do this by opening up a folder (such as Pictures), and selecting File > Terminal.

At the command prompt type in:

cd ~/.gconf/system/
Then type in
rm networking -r
You’ll need to press y a number of times to delete the folders.
When it returns to the command prompt type in
sudo init 6
The netbook will now reboot, and your wifi icon should be visible again.

So I have decided to use Slackware as a base for my Linux build.

Naturally I am going to call it WhiteHack Linux.

I will be using VMWare server to host the development box.

So after finishing my MCSE, then taking a week out to do my CEH before I crack on with the next certification I started to wonder what to do next, the CCNA or the RHCE? The CCNA is the one required more by employers, but the RHCE is probably (IMHO) more interesting, albeit far more expensive to sit the exam. The CCNA offers a Microsoft-like second chance which is good as the exam costs £140 the RHCE costs over £600 and as far as I know, there is not a free re-sit. So the CCNA it is…

But with side line at a DIY Linux. I found a great manual called Linux From Scratch, which walks you through creating your own distribution, what better way to learn an OS than to build it yourself?

So on these pages I’ll jot down my progress.