http://arnoth.net/earnoth/dokuwiki/ 2010-03-11T20:49:23-06:00 http://arnoth.net/earnoth/dokuwiki/ http://arnoth.net/earnoth/dokuwiki/lib/images/favicon.ico text/html 2010-03-09T11:07:53-06:00 earnoth http://arnoth.net/earnoth/dokuwiki/technods:programming:perl Epoch stuff Going from seconds since epoch: use POSIX; strftime("%a %b %e %H:%M:%S %Y %z %Z", localtime($time)); or print scalar gmtime $time; Going to seconds since epoch: use Time::Local; $date_epoch = timelocal($sec, $min, $hr, $day, $month-1, $year-1900); text/html 2010-03-07T09:33:58-06:00 earnoth http://arnoth.net/earnoth/dokuwiki/techdocs:security:clamav Compile and install Install process, works on 9.04 and 8.04n apt-get install zlib1g-dev libncurses5-dev groupadd clamav useradd -g clamav clamav ./configure && make && make install Configure ClamAV Tailor the following config files to taste: /usr/local/etc/clamav.conf /usr/local/etc/freshclam.conf Run clamconf text/html 2010-02-25T11:34:19-06:00 earnoth http://arnoth.net/earnoth/dokuwiki/techdocs:security Nepenthes Nepenthes Notes Anti-Virus ClamAV notes Malware Research Malware research notes Snort Dependencies on Ubuntu 8.04n: apt-get install libpcap0.8-dev pcre libpcre3-dev text/html 2010-02-19T11:31:30-06:00 earnoth http://arnoth.net/earnoth/dokuwiki/techdocs:programming Perl Notes text/html 2010-02-19T11:30:38-06:00 earnoth http://arnoth.net/earnoth/dokuwiki/techdocs Technical Documents Here is where all the documentation for my personal geeky work goes. Vim Technical Documents MythTV Technical Documents VMWare Technical Documents Ubuntu Technical Documents Linux Technical Documents Windows Technical Documents text/html 2010-01-23T14:58:29-06:00 earnoth http://arnoth.net/earnoth/dokuwiki/techdocs:security:malware:9d64e6a0dc6a3353770916d53350c2ac Research Notes for bd618f92139641ac7a2800c9f895a2ce Summary Notes 2010-01-23 Executed on WinXPHomeSP2 running in VMware Server 1.0.0 build 28343. Installed an agent that started massive communications with a multitude of hosts on the Internet, primarily over port 80 but seeming to use encrypted channels. text/html 2010-01-23T14:12:49-06:00 earnoth http://arnoth.net/earnoth/dokuwiki/techdocs:ubuntu:general Ubuntu General Documents This section contains my documentation for generic features that are typically common across different Ubuntu versions. Administration Installing package clusters Using Apt, one can install many different packages for a purpose using the meta-packages. For example, the different developer packages (gcc, make, bison, etc) required for compiling most different open source projects can be installed using build-essential: text/html 2010-01-23T13:51:44-06:00 earnoth http://arnoth.net/earnoth/dokuwiki/techdocs:security:malware Tracking Sites <http://www.nothink.org> malware irc control sites Research Notes e797cdc4dc4badc3c639bfc2f71240b6 53e38a165518036db28523eed3bac45e 289567012392e5739fcd5f73043a005e 3018e3b251119fd3215489f1f233a328 1f443c0271f1d699164521fb8b3dd408 text/html 2010-01-11T19:08:25-06:00 earnoth http://arnoth.net/earnoth/dokuwiki/techdocs:linux:commandline The following is a list of useful commands that I've learned for Linux, but that I use so rarely, I tend to forget until I need them again. Creating a CD ISO To rip an entire normal data-cd (ISO filesystem) from a CD-ROM: dd if=/dev/cdrom of=my_cd_image.iso Making an ISO from a file system To create an iso using files in Linux: text/html 2010-01-10T21:46:51-06:00 earnoth http://arnoth.net/earnoth/dokuwiki/techdocs:security:malware:0fc38cc0e7f8f732a79b976fd79d9a76 Research Notes for 0fc38cc0e7f8f732a79b976fd79d9a76 Summary Notes 2010-01-10 Executed on WinXPHomeSP2 running in VMware Server 1.0.0 build 28343, OS complains that the file “is not a valid Win32 application”. Links virustotal analysis text/html 2010-01-10T21:41:37-06:00 earnoth http://arnoth.net/earnoth/dokuwiki/techdocs:security:malware:1df34209b750a6651f94388897d0f737 Research Notes for 1df34209b750a6651f94388897d0f737 Summary Notes 2010-01-10 Executed on WinXPHomeSP2 running in VMware Server 1.0.0 build 28343. Received a dialog box that exclaimed, “W32.NytemareV2 says 'Your kung-fu is no good!'” Will try on a bare-metal victim device tomorrow.