SUSE & openSUSE

Tips,Tricks, Tutorials,How Tos and Troubleshooting suse linux

Archive for the 'Security' Category

Ratproxy – Passive web application security assessment tool

Posted by admin on 10th July 2008


Ratproxy is an opensource semi-automated, largely passive web application security audit tool from the search giant Google. It is meant to complement active crawlers and manual proxies more commonly used for this task, and is optimized specifically for an accurate and sensitive detection, and automatic annotation, of potential problems and security-relevant design patterns based on the observation of existing, user-initiated traffic in complex web 2.0 environments.

Read the rest of this entry »

Posted in Security | No Comments »

OWASP WebScarab – HTTP & HTTPS analysis tool for Linux

Posted by admin on 10th July 2008


OWASP WebScarab is a framework for analysing HTTP and HTTPS applications. Written in Java, WebScarab has several modes of operation, implemented by a number of plugins. In its most common usage, WebScarab operates as an intercepting proxy, allowing the operator to review and modify requests created by the browser before they are sent to the server, and to review and modify responses returned from the server before they are received by the browser. WebScarab is able to intercept both HTTP and HTTPS communication. The operator can also review the conversations (requests and responses) that have passed through WebScarab.

Read the rest of this entry »

Posted in Security | 1 Comment »

TrueCrypt – Free opensource on the fly Disk Encryption tool

Posted by admin on 9th July 2008


TrueCrypt is a free opensource software system for establishing and maintaining an on-the-fly-encrypted volume (data storage device). On-the-fly encryption means that data are automatically encrypted or decrypted right before they are loaded or saved, without any user intervention. No data stored on an encrypted volume can be read (decrypted) without using the correct password/keyfile(s) or correct encryption keys. Entire file system is encrypted (e.g., file names, folder names, contents of every file, free space, meta data, etc).

Read the rest of this entry »

Posted in Security | 4 Comments »

Install & Configure OpenVPN SSL VPN in SUSE & openSUSE Linux

Posted by admin on 3rd July 2008


OpenVPN is a full-featured open source SSL VPN solution that accommodates a wide range of configurations, including remote access, site-to-site VPNs, Wi-Fi security, and enterprise-scale remote access solutions with load balancing, failover, and fine-grained access-controls. OpenVPN offers a cost-effective, lightweight alternative to other VPN technologies available in the market.

Read the rest of this entry »

Posted in Internet & Browser, Security | 16 Comments »

How to Disable ICMP Redirects in Suse/openSUSE Linux for security

Posted by admin on 21st February 2008


ICMP Redirects are used to update hosts of optimal alternate routes to a destination. These are updates normally sent by routing devices when the router becomes aware of an alternate route to reach a destination than the current one. This method is not very efficient and can cause security concerns.

However, this can be fixed at run time (dynamically) without having to reboot the PC or server running Suse Linux or OpenSuse operating system or at boot time (system startup).

Read the rest of this entry »

Posted in Networking, Security | No Comments »