todb-r7

todb-r7

Keybase proof

I hereby claim:

• I am todb-r7 on github.
• I am todb (https://keybase.io/todb) on keybase.
• I have a public key whose fingerprint is C54A 80B5 06A1 0C20 F472 9181 2FBC C741 B922 8834

To claim this, I am signing this object:

todb-r7

This file is now just a pointer to this proof. Believe that.

todb-r7

trustno1
batman
696969
superman
mustang
footbal
dragon
basebal
caro
donna

todb-r7

ISSW Turbo Talks!

1. No photography, recording, or other attribution of material.
2. 10 minutes is good, 5 minutes is better.
3. Get your last orders in before 13:15.
4. Tell @todb if you're gonna talk.
5. Speakers get $10 drink tickets!
6. Join Slack, below!

todb-r7

# RVM prompt, two line style.

function git-current-branch {
  git branch 2> /dev/null | sed -e '/^[^*]/d' -e 's/* \(.*\)/(\1) /'
}
export PS1="[\$(~/.rvm/bin/rvm-prompt)]\n\$(git-current-branch)$PS1"

todb-r7

Sorted modules by commit counts

modules/exploits/windows/smb/psexec.rb                       106
modules/exploits/windows/smb/ms08_067_netapi.rb              73
modules/exploits/multi/http/tomcat_mgr_deploy.rb             65
modules/exploits/multi/http/jboss_bshdeployer.rb             51
modules/exploits/multi/http/jboss_maindeployer.rb            49
modules/exploits/multi/http/jboss_deploymentfilerepository.rb 49
modules/exploits/windows/local/bypassuac.rb                  47
modules/exploits/multi/browser/java_signed_applet.rb         47

todb-r7

Ceragon FibeAir IP-10 SSH Private Key Exposure (CVE-2015-0936)

Product Description

Ceragon produces a series of ruggedized, microwave backhaul devices used to provide connectivity to mobile, IP-based devices; usually, these devices are found in either large industrial environments, or installed on towers to provide "middle-mile" connectivity to mobile customers on behalf of ISPs. In other words, a FibeAir IP-10 typically act as a router of IP traffic. A compromise on these devices can expose the

todb-r7

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On or around March 31, 2015, if you are a registered user of
the Rapid7 Community at community.rapid7.com, you will notice
that your password will be automatically expired out, you
will get a password reset notification from community@rapid7.com,
and you will notice some significant changes on the site.

This is not a trick. We have not suffered a redirection

todb-r7

mike@rbci:~$ psql -U postgres
psql (9.0.3)
Type "help" for help.

postgres=# update pg_database set datallowconn = TRUE where datname = 'template0';
UPDATE 1
postgres=# \c template0
You are now connected to database "template0".
template0=# update pg_database set datistemplate = FALSE where datname = 'template1';
UPDATE 1