Feb
28
2021
Mysql procedures and functions security type is set as DEFINER which is the default value, as described in the “Create Procedure and create function chapter” on mysql.com.Why one needs to be cautious? Anyone with EXECUTE privilege can run the procedure or function with the DEFINER permissions. This might not be what you want. An error […]
Tags: Mysql, security
May
29
2017
The “QUOTE” keyword is essential to allow a user to run system-specific commands on FTP servers (SITE or ALLO for example). These commands do not have to be understood by FTP clients. Most FTP clients send a NOOP – that actually is a dummy packet – to keep the connection up QUOTE SYST returns the Operating […]
Tags: FTP, security
Apr
22
2017
Windows services can be started with a Managed Service Account (MSA) for the sake of security and easy management. It is working just fine until I initiate a server reboot. The service would not start. Opening the service and wiping out the password field makes the service start again, until the next boot. What could […]
Tags: GPO, security, Windows
Apr
06
2017
Windows Managed service accounts (MSA) appeared in Windows 2008 R2 Server. MSA provide dedicated accounts for each service without the hassle of managing password assignment or reset. Less management, more security.However, a single account cannot be used across multiple servers. This could lead to many service accounts within a domain but this is not a […]
Tags: Powershell, security, Windows
Aug
09
2009
Cracking a WEP key is extremely easy and is a matter of a few seconds. Truth? Pretty much… We are going to decrypt traffic in real time as well without even needing to connect to the wireless access point. All steps will be run under root super-user as interfaces state needs to be changed. Aircrack Installation […]
Tags: linux, security, wifi