Author Archives: steveshomelab

Forked-daapd path traversal vulnerability Nuclei template

I went to a local OWASP chapter meeting last week and saw a presentation on the Nuclei vulnerability scanner by Alex Archondakis. I was previously vaguely aware of the tool, but thought this was a good opportunity to take a … Continue reading

Posted in Security | Tagged , | Leave a comment

Impressive vulnerability fix turnaround

I was probing the web service on Saturday on some software I have running on my Raspberry Pi, when I discovered a serious Path Traversal vulnerability, allowing access to arbitrary files on the system. I reported this privately on Saturday … Continue reading

Posted in Security | Tagged , | Leave a comment

How to fill storage space on an iPhone or iPad with little effort

Before I sell-on my old gadgets, I always try to do a factory reset and erase all data. I want to make it as difficult as I can for future owners to recover my personal data. As an additional step, … Continue reading

Posted in Linux, Privacy, Security | Tagged , , , , , , | Leave a comment

How to share a Bluetooth mouse between Windows 10 and Ubuntu Linux (dual boot)

Here’s a little python script I put together to help get a Bluetooth mouse to work across both partitions on my daughter’s laptop. I’ve included some potentially helpful pix at the bottom of the post.

Posted in Linux, Networking, Windows | Tagged , , , , , | 2 Comments

Secure administration of Splunk Free on Linux using SSH port forwarding (or tunnelling)

Splunk is a great data search, monitoring and analysis tool, and a cut-down version of the tool – Splunk Free – is available for learning/testing purposes. One of the limitations of the free version is that there are no user … Continue reading

Posted in Linux, Security | Tagged , , , | Leave a comment

Qualys Cloud Agent installation issue caused by ISP’s ‘helpful’ DNS response [Fixed!]

When I tried to do a Qualys vulnerability scan of a Fedora 29 system today, things didn’t go too smoothly. First, I downloaded and installed the Qualys Cloud Agent – so far, so good. The next step was to run … Continue reading

Posted in Linux, Security | Tagged , , , , , | Leave a comment

Secure hotel internet access #1 – Parallels FAIL

Before setting off on holiday recently, I wanted to come up with a solution for my family to be able to access the internet securely in our hotel. I’ve been playing around with using a couple of small USB wireless … Continue reading

Posted in Linux, Security, Virtualization | Tagged , | Leave a comment

Deactivating Facebook Messenger

Today I deactivated my Facebook account, including Messenger. According to Facebook’s instructions, I needed to first deactivate my Facebook account, then deactivate Messenger. Deactivating Facebook was easy, but then I tried to follow the instructions to deactivate Messenger: Unfortunately, there … Continue reading

Posted in Privacy | Tagged , , | Leave a comment

IOS Speed Dial – .tel.qlnk.net – avoid!

Last night I was looking into how one might go about adding a ‘speed dial’ contact shortcut to the home screen on an iPhone. According to my Googling efforts, a commonly-proposed solution is to browse to 1111111111111.tel.qlnk.net in safari and … Continue reading

Posted in Privacy, Security | Tagged , , , | Leave a comment

Facebook CTF (Capture The Flag) platform – Bad Gateway

Facebook recently released their CTF (Capture The Flag) platform as an Open Source project on GitHub, so I thought I’d check it out. I thought it might be fun to host some Capture The Flag competitions with friends and colleagues. What … Continue reading

Posted in Linux, Security | Tagged , , , , , | Leave a comment