View Script That Run When You Install RPM Files

Créditos: cyberciti.biz

Top 20 OpenSSH Server Best Security Practices

Créditos: cyberciti.biz

WGET for WINDOWS

O wget pode ser usado também por aqueles que usam o sistema operacional WINDOWS, para isso basta baixar o programa, e chamá-lô no prompt de comando.
Não testei o programa aqui, mas pelo que pude ver, o programa tem várias opções do wget for linux, como -c -i .

Passwords

wget http://username:password@www.example.net/somedir/somefile
wget ftp://username:password@ftp.example.net/somedir/somefile

Integridade do arquivo>

MD5: bd126a7b59d5d1f97ba89a3e71425731
SHA1: 457b1cd985ed07baffd8c66ff40e9c1b6da93753

DNS Cache Poisoning

Website Source: 1 - 2

Keep in mind, it is easy to tell if you are vulnerable. You can perform a simple DNS lookup in order to see if you are vulnerable: dig @dnsserver porttest.dns-oarc.net in txt or go to Dan's site (está off) and run his "Check My DNS" script. The dig command will tell you if your system is "GOOD" or "POOR". Dan's system tells you if you are vulnerable or not.

Comando:

nishv@nishv.com [~]# dig +short @4.2.2.2 porttest.dns-oarc.net txt

Resposta:
porttest.y.x.w.v.u.t.s.r.q.p.o.n.m.l.k.j.i.h.g.f.e.d.c.b.a.pt.dns-oarc.net.
"209.244.4.25 is GOOD: 26 queries in 1.9 seconds from 26 ports with std dev 3880"


If you don’t get GREAT or GOOD and gets something like POOR, you should immediately stop using it.

If you manage that DNS server, patch it or decommission it!