Skip to content

Instantly share code, notes, and snippets.

@ctala
Last active December 14, 2019 18:46
Show Gist options
  • Save ctala/36ae82c7507407d4322d0086e1e59f33 to your computer and use it in GitHub Desktop.
Save ctala/36ae82c7507407d4322d0086e1e59f33 to your computer and use it in GitHub Desktop.
he following file disables the tcp_timestamps vulnerability on a Linux 1 AWS AMI using .ebextentions for an Elastic Beanstalk Application on deployment
###################################################################################################
#### Copyright 2019 cristiantala.cl. All Rights Reserved.
####
#### Licensed under the Apache License, Version 2.0 (the "License"). You may not use this file
#### except in compliance with the License. A copy of the License is located at
####
#### http://aws.amazon.com/apache2.0/
####
#### or in the "license" file accompanying this file. This file is distributed on an "AS IS"
#### BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
#### License for the specific language governing permissions and limitations under the License.
###################################################################################################
###################################################################################################
#### The following file disables the tcp_timestamps vulnerability on a Linux 1 AWS AMI using
#### .ebextentions for an Elastic Beanstalk Application on deployment.
####
#### Description :
#### The remote host responded with a TCP timestamp. The TCP timestamp response can be used to approximate
#### the remote host's uptime, potentially aiding in further attacks. Additionally, some operating systems can be
#### fingerprinted based on the behavior of their TCP timestamps.
###################################################################################################
commands:
01_disable_timestamp:
command: echo "0" > /proc/sys/net/ipv4/tcp_timestamps
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment