SECURITY RESEARCH / ENGINEERING
文章与研究
在证据与实验中理解复杂系统。
2017-05-19
local smb = require "smb"
local vulns = require "vulns"
local stdnse = require "stdnse"
local string = require "string"
description = [[
Attempts to detect if a Microsoft SMBv1 server is vulnerable to a remote code
execution vulnerability (ms17-010).
The script connects to the $IPC tree, executes a transaction on FID 0 and
checks if the error "STATUS_INSUFF_SERVER_RESOURCES" is returned to
determine if the target is not patched against ms17-010.
Tested on a vulnerable Windows 7\. We might have some issues with v2 protocols with
signing enabled.
References:
* https://technet.microsoft.com/en-us/library/security/ms17-010.aspx
* https://blogs.technet.microsoft.com/msrc/2017/05/12/customer-guidance-for-wannacrypt-attacks/
* https://msdn.microsoft.com/en-us/library/ee441489.aspx
* https://github......
阅读全文 →
2017-05-08
尼玛折腾了半天看网上各种网站都是告诉我这么解决的
Add these line to the end of file:
SecAuditLogDirMode 1733
SecAuditLogFileMode 0550
SecAuditLogType Concurrent
SecAuditLogStorageDir /usr/local/apache/logs/modsec_audit
Check the directory of /usr/local/apache/logs/modsec_audit for proper permissions of : 1733
折腾了半天 还是提示
2017/05/08 11:09:04 [error] 26844#0: [client ] ModSecurity: Audit log: Failed to lock global mutex: Permission denied [hostname "localhost.localdomain"] [uri "/favicon.ico"] [unique_id "AhAcAcAcAcAcAcAcpcAcAcAc"]
2017/05/08 11:09:04 [error] 26844#0: [client ] ModSecurity: Audit log: Failed to unlock global mutex......
阅读全文 →
2017-05-08
尼玛折腾了半天看网上各种网站都是告诉我这么解决的
Add these line to the end of file:
SecAuditLogDirMode 1733
SecAuditLogFileMode 0550
SecAuditLogType Concurrent
SecAuditLogStorageDir /usr/local/apache/logs/modsec_audit
Check the directory of /usr/local/apache/logs/modsec_audit for proper permissions of : 1733
折腾了半天 还是提示
2017/05/08 11:09:04 [error] 26844#0: [client ] ModSecurity: Audit log: Failed to lock global mutex: Permission denied [hostname "localhost.localdomain"] [uri "/favicon.ico"] [unique_id "AhAcAcAcAcAcAcAcpcAcAcAc"]
2017/05/08 11:09:04 [error] 26844#0: [client ] ModSecurity: Audit log: Failed to unlock global mutex......
阅读全文 →