Tuesday, March 12, 2019

Protect your network...

Protect yourself

The best choice:

ossec-vm-2.9.3.ova ~2.6 GB

securityonion-16.04.5.6.iso ~1.8 GB

https://www.mcafee.com/enterprise/en-us/downloads/free-tools/getsusp.html




http://www.ossec.net/downloads.html

https://github.com/Security-Onion-Solutions/security-onion/blob/master/Verify_ISO.md

https://www.computerperformance.co.uk/network-security/best-network-intrusion-detection-tools/

https://wazuh.com/

https://medium.com/oniverse/best-linux-os-for-hackers-and-network-security-professionals-82e3c24f84d0

http://www.matriux.com/index.php?page=download

https://www.eurovps.com/blog/20-ways-to-secure-linux-vps/

https://bobcares.com/blog/how-to-secure-linux-server-from-hackers/

http://www.yolinux.com/TUTORIALS/LinuxSecurityTools.html

https://aide.github.io/

https://github.com/ossec/ossec-hids

OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response. http://ossec.github.io

https://www.ossec.net/

https://en.wikipedia.org/wiki/Host-based_intrusion_detection_system_comparison

https://wiki.ubuntu.com/BasicSecurity

https://wiki.centos.org/HowTos/OS_Protection

https://www.debian.org/doc/manuals/securing-debian-howto/ch-sec-tools.en.html

[]

More about FASM

Surveillance for free

https://www.howtogeek.com/405400/how-to-turn-an-old-android-phone-into-a-security-camera/

We’re going to be using an app named Haven, which was built by NSA leaker Edward Snowden. 

[]

Monday, March 11, 2019

The independent trotter

https://voidlinux.org/


Void is a general purpose operating system, based on the monolithic Linux® kernel. Its package system allows you to quickly install, update and remove software; software is provided in binary packages or can be built directly from sources with the help of the XBPS source packages collection.
It is available for the Intel x86®, ARM® and MIPS® processor architectures; Software packages can be built natively or cross compiling through the XBPS source packages collection.

Void Linux is an independent distribution, developed entirely by volunteers.
Unlike trillions of other existing distros, Void is not a modification of an existing distribution. Void's package manager and build system have been written from scratch.


----------------------


ABOUT

Alpine Linux is an independent, non-commercial, general purpose Linux distribution designed for power users who appreciate security, simplicity and resource efficiency.

SMALL

Alpine Linux is built around musl libc and busybox. This makes it smaller and more resource efficient than traditional GNU/Linux distributions. A container requires no more than 8 MB and a minimal installation to disk requires around 130 MB of storage. Not only do you get a fully-fledged Linux environment but a large selection of packages from the repository.
Binary packages are thinned out and split, giving you even more control over what you install, which in turn keeps your environment as small and efficient as possible.

SIMPLE

Alpine Linux is a very simple distribution that will try to stay out of your way. It uses its own package manager called apk, the OpenRC init system, script driven set-ups and that’s it! This provides you with a simple, crystal-clear Linux environment without all the noise. You can then add on top of that just the packages you need for your project, so whether it’s building a home PVR, or an iSCSI storage controller, a wafer-thin mail server container, or a rock-solid embedded switch, nothing else will get in the way.

SECURE

Alpine Linux was designed with security in mind. All userland binaries are compiled as Position Independent Executables (PIE) with stack smashing protection. These proactive security features prevent exploitation of entire classes of zero-day and other vulnerabilities.


---------------------------------------------------------------------------------
---------------------------------------------------------------------------------
MORE INFO FOR WINDOWS 10 USERS>
---------------------------------------------------------------------------------

TRAGAC (Power Windows 7,8,10 Search Machine) application: 




Sunday, March 10, 2019

HDD programming for protection purpose only

links:

http://www.winpatrol.com/download.html

https://docs.microsoft.com/en-us/sysinternals/downloads/sync

https://www.thoughtco.com/delphi-programming-4133475

http://zarko-gajic.iz.hr/delphi-programming-almanac-1998-2012/

...read the harddisk (HDD) serial number?
https://www.swissdelphicenter.ch/en/showcode.php?id=57

...get a list of all running Exe-Files/ Check if a Exe-File is running?
https://www.swissdelphicenter.ch/en/showcode.php?id=616

...enumerate the registry keys modified in a given time range?
https://www.swissdelphicenter.ch/en/showcode.php?id=2034

...detect if the program is running inside VMWare?
https://www.swissdelphicenter.ch/en/showcode.php?id=2369

...Determine if you are running inside Virtual PC?
https://www.swissdelphicenter.ch/en/showcode.php?id=1756

...obtain a list of loaded drivers under Windows ?
https://www.swissdelphicenter.ch/en/showcode.php?id=961

...get the CPU usage in percent on Windows ?
https://www.swissdelphicenter.ch/en/showcode.php?id=969

...list information about all users currently logged on to a workstation?
https://www.swissdelphicenter.ch/en/showcode.php?id=966

...get a list of users who are registered on the Workstation?
https://www.swissdelphicenter.ch/en/showcode.php?id=428

...get if logged in as administrator?
https://www.swissdelphicenter.ch/en/showcode.php?id=189


--------------------------------

...get handle and class name from the current mouse pos?
https://www.swissdelphicenter.ch/en/showcode.php?id=141

...change the priority class for a specified process?
https://www.swissdelphicenter.ch/en/showcode.php?id=387

...get process informations?
https://www.swissdelphicenter.ch/en/showcode.php?id=281

...enumerate processes and terminate them?
https://www.swissdelphicenter.ch/en/showcode.php?id=593

...patch a process?
https://www.swissdelphicenter.ch/en/showcode.php?id=1364

...get EXE path from window handle?
https://www.swissdelphicenter.ch/en/showcode.php?id=2010

...get the list of active process on a PC of my network?
https://www.swissdelphicenter.ch/en/showcode.php?id=2112

--------------------------------


...get windows, system, temporary directory?
https://www.swissdelphicenter.ch/en/showcode.php?id=144

...set/retrieve the Computer Name?
https://www.swissdelphicenter.ch/en/showcode.php?id=182

...get the current Username?
https://www.swissdelphicenter.ch/en/showcode.php?id=69

...get the CPU name/ speed?
https://www.swissdelphicenter.ch/en/showcode.php?id=994




https://www.experts-exchange.com/questions/21365835/How-to-check-whether-HDD-is-spinning-or-not-in-sleep-mode.html

* This Delphi code transitions INTO standby/hibernate mode.
http://www.swissdelphicenter.ch/torry/showcode.php?id=1401

* Standby transition (much simpler).
http://www.swissdelphicenter.ch/torry/showcode.php?id=862

http://delphi.icm.edu.pl/ftp/d40free/Pwrsav12.zip
PwrSave is a small component to prevent interruption of program execution due to Windows shutdown, hibernate, standby or user log off. When writing programs for data aqcuisition, control systems or servers these might be very undesired. This component will prevent these events and/or gives you the opportunity to take necessary action when such events occur.

* Shareware
http://www.3d2f.com/programs/1-807-powercontrol-download.shtml

* Scheduler approach.
http://www.sharewareconnection.com/shut-down-expert.htm

* Power-related shareware.
http://www.sharewareconnection.com/powrclik-suite.htm

* Shareware.
http://www.softwarevault.com/Remote-Computing/Powercontrol.xml

* using powercfg (which interprets the registry settings into something a bit more viewable and allows you to make changes)
http://www.msfn.org/board/index.php?act=ST&f=70&t=17081

* Auto Power-on
http://www.trialfiles.com/program_15845.html

* From the EE WinXP forum
http://www.experts-exchange.com/Operating_Systems/WinXP/Q_21209736.html

----------------
It was my hope that the links I posted would contain enough detail that an advanced Delphi developer would be able to tweak it to be able to glean the HDD status, rather than to just put it to sleep and wake it up.  I'm not that advanced.

====================
TExtendedForm : Form with power management and Drag'n'Drop for files
http://private.addcom.de/jakobsche/extform.exe

Detailed information about TExtetdedForm finds you in the file COMPONEN.HLP 
http://private.addcom.de/jakobsche/componen.hlp

========================
Pwrsav13 (upgraded version)
http://cc.borland.com/codecentral/ccweb.exe/listing?id=19527


--------------------

try this:
* create a relatively small file of data (src.txt)
* execute the following command, either directly, or through a batch file (.bat/.cmd).

copy /v /y src.txt tgt.txt

* check the execution time.  The /v flag should force the operating system to verify that the file has been written to the HDD successfully.


---------------------


Friday, March 8, 2019

Arch vs Mint is like Apples to Oranges

So Arch vs Linux Mint is more like apples to oranges. If they were cars, Linux Mint would be like a Mercedes Benz, it just works. Arch is a project for a car lover or a rich man (someone who’s got time to spare). It is good if you want to get your hands dirty if you want to fiddle and explore and build on your own, just like assembling your own car. Who needs their own customized car or Linux distro? In the real world, very few people do. What most people need is something that just works, Linux Mint works out-of-the-box. Arch will require you to set it up just right first before it becomes useful. And if you do, the end result is awesome, you get something that works for you, with no bloatware and as light or packed as you want. Just be prepared for constant updates and upgrades as it can be tedious and time-consuming.

[]




Mrežna zaštita gomile kompjutera na lan mreži

FILE ACCESS, first check this out:

https://accessdata.com/product-download/ftk-download-page

https://sourceforge.net/projects/activityindicat/


https://torry.net/pages.php?id=253

https://www.thoughtco.com/delphi-programming-4133475

NET FLOW ANALYZER

https://www.manageengine.com/products/netflow/?utm_source=capterra&utm_medium=ppc&utm_campaign=NetFlow

https://www.capterra.com/network-security-software/


https://gojs.net/latest/index.html


Here's a List of the Top Open-Source Network Monitoring Tools of 2019:

  1. Nagios
  2. Zabbix
  3. Incinga
  4. Libre NMS
  5. Pandora FMS
While it is possible to manually monitor a network (depending on the size of the network and how critical the resources on the network are), you will probably be better off using tools specifically designed for such a purpose.
Let’s take a look at best open source monitoring software for IT Infrastructure monitoring and see what works for you.

1Nagios

Nagios founded in 1999 is one of the industry leaders in providing monitoring solution from small to enterprise level of infrastructure.
Nagios is capable of monitoring almost all type of components like network protocols, operating systems, system metrics, applications, services, web server, website, middleware, etc.
Nagios runs on a Core 4 monitoring engine which provides a high level of performance by consuming fewer server resources.

You can integrate with almost any type of third-party software by using a plugin, and most likely someone has already written the plugin.
If you are into Middleware, you can leverage Nagios to monitor WebLogic, WebSphere, JBoss, Tomcat, Apache, URL, Nginx, etc.
Features
  • Centralized view of entire monitored IT infrastructure
  • Its event handlers grant automatic restart of failed applications
  • Multi-user access
  • Selective access allows clients to view only the infrastructure components about them
  • An active community of over 1 million users
  • Extendable architecture

2Zabbix

Zabbix is a splendid enterprise level software designed to monitor everything from performance and availability of servers, network equipment to web applications and database.
Zabbix is used by thousands of companies worldwide including DELL, Salesforce, ICANN, Orange, etc.

Zabbix is server-agent system architecture where you got to install the agent on a server (client) to by monitored by Zabbix server. However, you don’t need to install the agent for services like FTP, SSH, HTTP, DNS, etc.
You can get it installed on Linux, AIX, Windows, Solaris, MacOS X, FreeBSD, OpenBSD, etc.
It supports SNMP and provides better reporting.
Features
  • Monitor Java application servers over JMX directly
  • VM monitoring allows VMWare, vCenter, and vSpehere
  • The front end has self-protection against brute force attacks
  • Automation can be done by scripts in various languages like Ruby, Python, Perl, PHP, Java or shell scripts
  • Integrates with other system management tools like Puppet, cfengine, Chef, bcfg2 to name a few
If you are looking to learn how to implement Zabbix for a large organization, then you may refer essential online course by Packt Publishing.

3Cacti

Cacti is another open source network monitoring tool which can be installed on Linux or Windows OS. It is connected to RRDTool which allows us to generate graphs related to relevant network data.
It works with SNMP and presents the network statistics in the form of easy to understand charts.

Cacti require MySQL, Apache or IIS that support PHP.
Features
  • Unlimited graph items can be defined for each graph optionally utilizing CDEF or data sources from within Cacti
  • Auto padding support for graphs
  • Supports RRD(Round-Robin Database) files with more than one data source and can also use an RRD file stored anywhere on the local file system
  • User-based management and security
  • Custom data gathering scripts

4OpenNMS

OpenNMS let you build a network monitoring solution for any IT infrastructure. You can collect system metrics using JMX, WMI, SNMP, NRPE, XML HTTP, JDBC, XML, JSON, etc.
With the help of OpenNMS, you can discover layer two network topologies in your network. It’s built on event-driven architecture and support Grafana.

OpenNMS got built-in reporting which means you can view the report in beautiful dashboard and chart. Overall, OpenNMS got a great user interface.
You can also install it in Docker.
Features:
  • It is specially designed for Linux, but Windows, Solaris, and OSX are also supported
  • Device Temperature monitoring
  • Customizable admin dashboard
  • Power Supply Monitoring
  • IPv4 and IPv6 support
  • Events can generate notifications via email, SMS, XMPP, and various other methods
  • Geographical node map to show nodes and service outages using Open Street Map, Google Maps or Mapquest

5Icinga

Icinga monitoring framework allows you to monitor all the available systems in your network, which alerts you in the case of an alarm in many ways and provides you with a database for your SLA reporting.
Icinga, which began as Nagios Fork in 2009, got freed from the constraints of a fork and crafted Icinga 2 which is faster, easier to configure, more comfortable to scale significantly better.

Features:
  • Monitoring of network services, host services, and server components
  • It performs monitoring with Icinga 2 plugins
  • Support for event handlers and notifications
  • Phone, SMS, call and email support
  • Cross-platform support for various operating systems
  • Parallelized service checks
  • You can choose between 2 user interfaces, Classic UI and Icinga web
  • Template-based reports


Crystal’s syntax is heavily inspired by Ruby’s, so it feels natural to read and easy to write, and has the added benefit of a lower learning curve for experienced Ruby devs.

https://crystal-lang.org/

Ruby like programming for Ruby on steroids !

[]