The Daily Tip

RSS

Injecting shellcode into processes with Syringe

Posted August 8, 2011 - 2:51 pm

One feature that I believe would greatly complement ShellCodeExec is the ability to inject the shellcode into a process ID of the user’s choosing. This can be particularly useful when on a host that only permits certain processes to initiate outbound connections. With this goal in mind, I set out to implement these techniques in my own general purpose injection utility, which I have dubbed Syringe.
- Quick Read
- Like
- Tweet
How to start planning your IPv6 transition

Posted March 28, 2011 - 11:35 am

If you attempt to make the move straight over to IPv6 without knowing what you already have that is IPv6 compliant, you are not only wasting your time, but could bring down your data center like a house of cards.
- Quick Read
- Like
- Tweet
Keeping project sponsors engaged

Posted March 21, 2011 - 4:49 pm

Unlike most members of a project team, a project sponsor might not completely understand his or her role. With that in mind, here are some suggestions for keeping sponsors engaged and participating.
- Quick Read
- Like
- Tweet
Security tip: How to set up a chroot jail

Posted March 3, 2011 - 4:37 pm

Using packages such as mod_chroot for use with Apache, or Jailkit, an open-source project with a handful of utilities, can make configuring a chroot jail much more efficient and even automated in some cases. Here are some important things to remember when setting up a chroot jail.
- Quick Read
- Like
- Tweet
What do the PCI ASV changes mean for you?

Posted February 15, 2011 - 3:38 pm

As an ITworld reader, you're invited to attend a free webinar hosted by SecureState. SecureState's consultants will guide you through the PCI ASV changes and address any questions that you may have.
- Quick Read
- Like
- Tweet
Getting value from the project management process

Posted February 14, 2011 - 2:58 pm

Many project teams actually have individuals whose only responsibility is to personally communicate with every member of the team and collect status data. I don't think that could be considered real "visibility" in any project leader's book.
- Quick Read
- Like
- Tweet
Why you're probably not ready for DLP software

Posted January 24, 2011 - 9:18 am

9 questions you must ask and answer before deciding on any DLP solution.
- Quick Read
- Like
- Tweet
Empowering project teams

Posted January 20, 2011 - 8:46 am

Although it might be accepted that a good leader "empowers" his or her team members, what does that really mean in practice? Here are 4 ways project managers can foster an atmosphere of empowerment.
- Quick Read
- Like
- Tweet
Motivating a project team

Posted January 6, 2011 - 9:37 am

Want to motivate your project team? Forego the stick... and maybe the carrot too.
- Quick Read
- Like
- Tweet
Want a bigger budget for your security program? Use metrics

Posted November 22, 2010 - 8:44 am

Good metrics can illustrate the effectiveness and performance of your security program, diagnose trends and issues, determine resource allocation, and secure security budget.
- Quick Read
- Like
- Tweet
Want to be a project leader? Hone these 5 traits for project management success

Posted November 18, 2010 - 4:06 pm

Step away from that Gantt chart and start leading your team.
- Quick Read
- Like
- Tweet
Project management: The change challenge

Posted October 7, 2010 - 7:50 am

3 steps you can take today to make change more acceptable (if not easier to bear)
- Quick Read
- Like
- Tweet
BI debate: ROLAP solutions versus OLAP

Posted September 29, 2010 - 1:21 pm

Many BI tools discussions center upon how best to determine optimal technology for a particular application or set of end users. A common, and often vigorous one, is whether an OLAP solution is appropriate or would a ROLAP (Relational OLAP) option make more sense. Here are some simple evaluation points for these two unique solutions as well as which one is more appropriate or has an advantage.
- Quick Read
- Like
- Tweet
Usability testing: 10 tools to make it quick and easy

Posted September 21, 2010 - 7:57 am

These 10 online tools make usability testing quick, easy, and maybe even fun. And, yes, some of them are free.
- Quick Read
- Like
- Tweet
Using OSSEC to parse auditd logs

Posted September 20, 2010 - 8:40 am

OSSEC can parse and correlate a large number of log formats, but one feature Security consultant Josh Lochner found lacking is the ability to parse auditd daemon logs. Here he shares a decoder he created to pull information out of the /var/log/audit/audit.log created by the auditd service.
- Quick Read
- Like
- Tweet
Essential Joomla! extensions

Posted September 16, 2010 - 7:52 am

Joomla! developers offer up their favorite extensions for the open source Web content management system.
- Quick Read
- Like
- Tweet
Gmail Priority Inbox: Tips for managing your email

Posted September 15, 2010 - 7:26 am

On August 30, Google launched (in beta) Priority Inbox for Gmail. The idea is simple: To help you get right to your most important messages. But, of course, there are ways to make it work better, and that's where these tips come in.
- Quick Read
- Like
- Tweet
Joomla! jumpstart: 8 tips and best practices from Joomla! developers

Posted September 8, 2010 - 8:05 am

Joomla's ecosystem demands that you let everyone know you do Joomla, says Rob Graham, CEO of consulting firm TrainingCraft. "It's not just a Web CMS, it's a market in itself."
- Quick Read
- 1 comment
- Like
- Tweet
Got game? How to be great at anything

Posted September 3, 2010 - 7:33 am

Practice, practice, practice ... but only for 90 minutes at a time
- Quick Read
- Like
- Tweet
Tool review: Splunk 4

Posted September 2, 2010 - 7:33 am

For one security expert, Splunk proves to be a great tool for watching logs for security issues, fine tuning egress filtering, and system monitoring. And for most small businesses, the free version's 500MB of indexing per day is more than enough.
- Quick Read
- Like
- Tweet
Embedded mobile broadband versus dongles or tethering: Which is best?

Posted August 31, 2010 - 7:43 am

4 ways to get online when there's no WiFi in range
- Quick Read
- Like
- Tweet
Uninterruptible Power Supply: Using and caring for your desktop UPS

Posted August 26, 2010 - 8:17 am

A desktop UPS is about as close to "set-and-forget" as electronics get... but if the battery runs down, it has turned into just a big surge protector. Here's what you need to do to make sure your desktop UPS will work when you need it.
- Quick Read
- 2 comments
- Like
- Tweet
Use Puppy Linux 5.0 for secure on-the-go browsing

Posted August 25, 2010 - 7:28 am

For one security expert, being able to drop a bootable USB drive with Puppy Linux onto untrusted systems and use them as a browser, VPN client, and productivity tool has proven very handy.
- Quick Read
- Like
- Tweet
Adopt this PCI DSS compliance credo: Trust, but verify

Posted August 23, 2010 - 10:44 am

Yes, verification comes with a price, but it will more than likely be much lower than the price of a highly publicized security breach.
- Quick Read
- Like
- Tweet
3 ways to improve your site's 404 error page

Posted August 17, 2010 - 7:57 am

Users hate to get them; websites hate to serve them. But there are ways to make the dreaded 404 Error pages more useful -- or at least somewhat entertaining.
- Quick Read
- Like
- Tweet