Tip from SB ‏@SBousseaden

From SB
‏@SBousseaden

"if u see "devtools.selfxss.count" in cmd cmdline then likely it's #backswap banking trojan, also monitor changes to firefox user preferences "prefs.js", this malwr is a combin of smart tricks to inject JS within browsers with no proc code inj "
https://www.welivesecurity.com/2018/05/25/backswap-malware-empty-bank-accounts

Howard's List

1. Efficient use of ecological systems.
2. Determining an efficient way to garner the energy from the sun, so that humans can migrate away from fossil fuels.
3. Finding and getting to another planet that will support and sustain human life.
4. Determining a way to better and more efficiently conserve and better use water.
5. Educating people about the responsibility of reproduction.
6. Educating people to become more tolerant and understanding of other cultures through language and custom classes.
7. Creating more extensive and efficient transportation infrastructure (Better roads, better rail system, and more comprehensive public transportation).
8. Getting chemicals and steroids out of our food supply systems. Ending "assembly line" style production of food.
9. Curtailing the power of the pharmaceutical industry. Working to curtail the greed factor in the production of pharmaceuticals.
10. Reducing the divorce rate. Divorce has systematically created subsequent dysfunctional generations of people.
11. Discover a more efficient way to distribute food and water to the 8 billion plus humans in the world in effort to end poverty.
12. End the IMF and Federal Reserve, or at least curtail their power and influence on the world economic system.

I took this from a GFI advertisment

"As a system admin, we know you're turning over every stone to find tools that make your life easier. Help is at hand with our guide to the top 10 free network monitoring and analysis tools!


http://www.wireshark.com Wireshark kicks off our list, being a network protocol analyzer andcapture utility. Captured data can easily be sent to another application for analysis, or filtered within WireShark itself.


http://pandorafms.com/?lng=en If you want to keep an eye on your servers, applications and communications, look no further than Pandora FMS. It can be configured to create alerts based on specific events,nd send notifications to administrators.


http://angryip.org Angry IP Scanner Scans IP addresses and ports, finding live hosts and providing you with information about them.


http://microsoft-network-monitor.en.s... When you're looking to capture packet data to analyze network traffic, turn to Microsoft Network Monitor. It has support for over three hundred public and Microsoft propriety protocols, as well as a wireless Monitor Mode.


http://www.telerik.com/fiddler
 Fiddler captures HTTP between computers and the Internet to help with debugging. You see incoming and outgoing data, including encrypted HTTPS traffic, allowing you to test your website performance, or the security of your web applications.


http://www.netresec.com/?page=Network... Network Miner is classed as a Network Forensic Analysis Tool, and is used to capture packets. It then extracts files and images from that data, allowing you to reconstruct your users actions.


http://www.colasoft.com/capsa-free/ Another tool for monitoring, troubleshooting and analysing network traffic is Capsa Free. Not only does it have over 300 protocols, and the ability to create and customise them, but it's dashboard also allows you to see a summary of traffic stays, TCP/UDP conversations, and packet analysis.


http://www.softinventive.com/products... Total Network Monitor watches over your hosts and services, notifyingyou when something requires your attention.t's colorful interface lets you see what's wrong at a glance.


http://www.xirrus.com/Products/Networ... And don't miss Xirrus Wi-Fi Inspector which manages connections,locates devices, detects rogue access points, and has connection and speed quality tests.


http://www.zenoss.org Lastly, Zenoss Core keeps an eye on your applications, servers, storage, networking and virtualization giving youperformance and availability stats. It also has an advanced notification system.


http://technet.microsoft.com/en-us/sysinternals/bb545021.aspx
The Sysinternals site was created in 1996 by Mark Russinovich and Bryce Cogswell to host their advanced system utilities and technical information. Whether you’re an IT Pro or a developer, you’ll find Sysinternals utilities to help you manage, troubleshoot and diagnose your Windows systems and applications.



With so much pressure on IT departments, can you afford not to take advantage of any free help you can get?"

Once you have OpenVas in a Docker Container you have a way to operate from a Windows 10 OS and still do what you need to do as far as scanning. The rest of this page is from the Docker Hub.

atomicorp/openvas
By atomicorp • Updated 9 months ago
OpenVAS Container for Docker

Openvas Docker container

This container is based on Centos 7 for FIPS-140-2 compliance. It is a self contained Openvas Scanner with web console on port 443.

Launchdocker run -d -p 443:443 --name openvas atomicorp/openvas https:/// Default login / password: admin / admin


Launch with a Volumedocker volume create openvas docker run -d -p 443:443 -v openvas:/var/lib/openvas/mgr --name openvas atomicorp/openvas


Set Admin Passworddocker run -d -p 443:443 -e OV_PASSWORD=iliketurtles --name openvas atomicorp/openvas


Update NVT datadocker run -d -p 443:443 -e OV_UPDATE=yes --name openvas atomicorp/openvas


Attach to runningdocker exec -it openvas bash


Thanks Jan-Oliver Wagner @Greenbone Michael Meyer @Greenbone Everyone at Greenbone that made this project possible The Arachni Project Openvas Docker creators used as a reference: Mike Splain, William Collani, Serge Katzmann, and Daniel Popescu

Commando VM: The First of Its Kind Windows Offensive Distribution

Commando VM: The First of Its Kind Windows Offensive Distribution


March 28, 2019 | by Jacob Barteaux, Blaine Stancill, Nhan Huynh

For penetration testers looking for a stable and supported Linux testing platform, the industry agrees that Kali is the go-to platform. However, if you’d prefer to use Windows as an operating system, you may have noticed that a worthy platform didn’t exist. As security researchers, every one of us has probably spent hours customizing a Windows working environment at least once and we all use the same tools, utilities, and techniques during customer engagements. Therefore, maintaining a custom environment while keeping all our tool sets up-to-date can be a monotonous chore for all. Recognizing that, we have created a Windows distribution focused on supporting penetration testers and red teamers.

https://www.fireeye.com/blog/threat-research/2019/03/commando-vm-windows-offensive-distribution.html

free network monitoring and analysis tools

The top 10 free network monitoring and analysis tools!

http://www.wireshark.com

Wireshark kicks off our list, being a network protocol analyzer and capture utility. Captured data can easily be sent to another application for analysis, or filtered within WireShark itself.

http://pandorafms.com/?lng=en

If you want to keep an eye on your servers, applications and communications, look no further than Pandora FMS. It can be configured to create alerts based on specific events,nd send notifications to administrators.

http://angryip.org

Angry IP Scanner Scans IP addresses and ports, finding live hosts and providing you with information about them.

http://microsoft-network-monitor.en.s...

When you're looking to capture packet data to analyze network traffic, turn to Microsoft Network Monitor. It has support for over three hundred public and Microsoft propriety protocols, as well as a wireless Monitor Mode.

http://www.telerik.com/fiddler

Fiddler captures HTTP between computers and the Internet to help with debugging. You see incoming and outgoing data, including encrypted HTTPS traffic, allowing you to test your website performance, or the security of your web applications.

http://www.netresec.com/?page=Network...

Network Miner is classed as a Network Forensic Analysis Tool, and is used to capture packets. It then extracts files and images from that data, allowing you to reconstruct your user’s actions.

http://www.colasoft.com/capsa-free/

Another tool for monitoring, troubleshooting and analyzing network traffic is Capsa Free. Not only does it have over 300 protocols, and the ability to create and customize them, but it's dashboard also allows you to see a summary of traffic stays, TCP/UDP conversations, and packet analysis.

http://www.softinventive.com/products...

Total Network Monitor watches over your hosts and services, notifying you when something requires your attention. Its colorful interface lets you see what's wrong at a glance.

http://www.xirrus.com/Products/Networ...

And don't miss Xirrus Wi-Fi Inspector which manages connections, locates devices, detects rogue access points, and has connection and speed quality tests.

http://www.zenoss.org

Lastly, Zenoss Core keeps an eye on your applications, servers, storage, networking and virtualization giving you performance and availability stats. It also has an advanced notification system.

http://technet.microsoft.com/en-us/sysinternals...

The Sysinternals site was created in 1996 by Mark Russinovich and Bryce Cogswell to host their advanced system utilities and technical information. Whether you’re an IT Pro or a developer, you’ll find Sysinternals utilities to help you manage, troubleshoot and diagnose your Windows systems and applications.

Building the Real World from the Academic

Creating documents for an English class can be a challenge. Instead of trying to make up things to write about, I decided to use my real world business decisions and interactions to do the job. At first it just seemed like a simpler way to do a task. But there are side benefits I didn't realize that are coming from the educational experience. I am forced to think and evaluate more closely how the documentation looks and flows. I am also finding that I look at the work from more of a third person perspective. That allows me to be more critical of the content and the idea itself. Personally I think it has been a very good experience and I have learned and gained a great deal about business, from English class. Sandhills Community College has been really great to me. I would recommend that you brush up on your writing skills or just refresh them by taking English 111 and 114 for the boost it will give your critical thinking a writing skills.