Osumi, Yusuke ozuma

## squid.conf
acl blacklist_regex url_regex "/usr/local/squid/etc/blacklist.txt"
http_access deny blacklist_regex
...
...
access_log /var/log/squid/access.log squid
access_log /var/log/squid/deny.log squid blacklist_regex

## osueta.py
#!/usr/bin/python
# coding: UTF-8

# OpenSSH User Enumeration Time-Based Attack
# https://cureblog.de/2013/07/openssh-user-enumeration-time-based-attack/

# 存在するユーザの場合は数十秒、存在しないユーザならば数秒で終わるため判定可能

import sys
import socket

## markdown.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                ozuma
                / markdown.md
            
            
              Last active
              August 29, 2015 14:04
            
              
                Markdown サンプル
              
          
    見出し1

見出し2

見出し3

見出し4

markdownサンプル文章です。ここは地の文です。

  
## make_pkcs12.sh
#!/bin/sh

openssl pkcs12 -export -inkey localhost.key -certfile ca-bundle.crt < localhost.crt > server.p12

## auth-dbd.conf
DBDriver mysql
DBDParams host=dbserver,user=dbuser,pass=dbpass,dbname=dbname
DBDPersist Off

<Location /hoge/fuga.cgi>
  SSLRequrireSSL
  AuthBasicProvider dbd
  AuthDBDUserPWQuery "SELECT ENCRYPT('...') ... FROM tablename WHERE id = %s"
  AuthName "Basic Auth"
  require valid-user

## irssi.config
settings = {
  core = {
    real_name = "Unknown";
    user_name = "Unknown";
    nick = "Neme";
  };
  "fe-text" = { actlist_sort = "refnum"; };
  "fe-common/core" = {
    autolog = "yes";
    autolog_path = "/home/ozuma/irclogs/%Y/$tag/$0.%m-%d.log";

## centos6-install.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                ozuma
                / centos6-install.md
            
            
              Last active
              August 29, 2015 14:08
            
              
                Heartbleed/CCS Injection持ちのCentOS6を作る
              
          
CentOS 6.5のISOファイルをダウンロードしてインストール

# yum --disablerepo=updates,extra install mod_ssl

のように、baseリポジトリからインストールする(そのまま入れるとupdatesから入っちゃう)

CentOS 6.4はopenssl 1.0.0なのでheartbleedが無い。


## ccs-injection-tool.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                ozuma
                / ccs-injection-tool.md
            
            
              Last active
              August 29, 2015 14:08
            
              
                CCS Injection: check tool
              
          
    Metasploitのモジュールが一番ちゃんとやってるぽい

http://www.rapid7.com/db/modules/auxiliary/scanner/ssl/openssl_ccs

msf > use auxiliary/scanner/ssl/openssl_ccs
msf auxiliary(openssl_ccs) > set RHOSTS 192.168.204.148
msf auxiliary(openssl_ccs) > exploit

脆弱性があると、こういうメッセージが出る。

  
## error-html.txt
HTTP_BAD_GATEWAY.html.var
HTTP_BAD_REQUEST.html.var
HTTP_FORBIDDEN.html.var
HTTP_GONE.html.var
HTTP_INTERNAL_SERVER_ERROR.html.var
HTTP_LENGTH_REQUIRED.html.var
HTTP_METHOD_NOT_ALLOWED.html.var
HTTP_NOT_FOUND.html.var
HTTP_NOT_IMPLEMENTED.html.var
HTTP_PRECONDITION_FAILED.html.var

## proxytunnel.txt
http://stackoverflow.com/questions/3220419/openssl-s-client-using-a-proxy

    proxytunnel -p yourproxy:8080 -d www.google.com:443 -a 7000 &
    openssl s_client -connect localhost:7000 -showcerts
	acl blacklist_regex url_regex "/usr/local/squid/etc/blacklist.txt"
	http_access deny blacklist_regex
	...
	...
	access_log /var/log/squid/access.log squid
	access_log /var/log/squid/deny.log squid blacklist_regex
	#!/usr/bin/python
	# coding: UTF-8

	# OpenSSH User Enumeration Time-Based Attack
	# https://cureblog.de/2013/07/openssh-user-enumeration-time-based-attack/

	# 存在するユーザの場合は数十秒、存在しないユーザならば数秒で終わるため判定可能

	import sys
	import socket
	#!/bin/sh

	openssl pkcs12 -export -inkey localhost.key -certfile ca-bundle.crt < localhost.crt > server.p12
	DBDriver mysql
	DBDParams host=dbserver,user=dbuser,pass=dbpass,dbname=dbname
	DBDPersist Off

	<Location /hoge/fuga.cgi>
	SSLRequrireSSL
	AuthBasicProvider dbd
	AuthDBDUserPWQuery "SELECT ENCRYPT('...') ... FROM tablename WHERE id = %s"
	AuthName "Basic Auth"
	require valid-user
	settings = {
	core = {
	real_name = "Unknown";
	user_name = "Unknown";
	nick = "Neme";
	};
	"fe-text" = { actlist_sort = "refnum"; };
	"fe-common/core" = {
	autolog = "yes";
	autolog_path = "/home/ozuma/irclogs/%Y/$tag/$0.%m-%d.log";
	HTTP_BAD_GATEWAY.html.var
	HTTP_BAD_REQUEST.html.var
	HTTP_FORBIDDEN.html.var
	HTTP_GONE.html.var
	HTTP_INTERNAL_SERVER_ERROR.html.var
	HTTP_LENGTH_REQUIRED.html.var
	HTTP_METHOD_NOT_ALLOWED.html.var
	HTTP_NOT_FOUND.html.var
	HTTP_NOT_IMPLEMENTED.html.var
	HTTP_PRECONDITION_FAILED.html.var
	http://stackoverflow.com/questions/3220419/openssl-s-client-using-a-proxy

	proxytunnel -p yourproxy:8080 -d www.google.com:443 -a 7000 &
	openssl s_client -connect localhost:7000 -showcerts