1
20.1 Legacy Series / Re: CVE-2019-18634, CVE-2020-7450
« on: February 02, 2020, 06:30:13 pm »
Ok, what about for the developers?
Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
Pages: [1]
2
20.1 Legacy Series / CVE-2019-18634, CVE-2020-7450
« on: February 02, 2020, 06:03:43 pm »
Reporting (2) CVE's after upgrading to [20.1]
***GOT REQUEST TO AUDIT SECURITY***
Fetching vuln.xml.bz2: .......... done
sudo-1.8.30 is vulnerable:
sudo -- Potential bypass of Runas user restrictions
CVE: CVE-2019-18634
WWW: https://vuxml.FreeBSD.org/freebsd/b4e5f782-442d-11ea-9ba9-206a8a720317.html
pkg-1.12.0 is vulnerable:
pkg -- vulnerability in libfetch
CVE: CVE-2020-7450
WWW: https://vuxml.FreeBSD.org/freebsd/2af10639-4299-11ea-aab1-98fa9bfec35a.html
2 problem(s) in 2 installed package(s) found.
***DONE***
***GOT REQUEST TO AUDIT SECURITY***
Fetching vuln.xml.bz2: .......... done
sudo-1.8.30 is vulnerable:
sudo -- Potential bypass of Runas user restrictions
CVE: CVE-2019-18634
WWW: https://vuxml.FreeBSD.org/freebsd/b4e5f782-442d-11ea-9ba9-206a8a720317.html
pkg-1.12.0 is vulnerable:
pkg -- vulnerability in libfetch
CVE: CVE-2020-7450
WWW: https://vuxml.FreeBSD.org/freebsd/2af10639-4299-11ea-aab1-98fa9bfec35a.html
2 problem(s) in 2 installed package(s) found.
***DONE***
3
19.7 Legacy Series / CVE-2020-7450
« on: January 30, 2020, 08:58:33 pm »
Reporting a CVE surfacing after yestedays' update:
-----
***GOT REQUEST TO AUDIT SECURITY***
Fetching vuln.xml.bz2: .......... done
pkg-1.12.0 is vulnerable:
pkg -- vulnerability in libfetch
CVE: CVE-2020-7450
WWW: https://vuxml.FreeBSD.org/freebsd/2af10639-4299-11ea-aab1-98fa9bfec35a.html
1 problem(s) in 1 installed package(s) found.
***DONE***
-----
-----
***GOT REQUEST TO AUDIT SECURITY***
Fetching vuln.xml.bz2: .......... done
pkg-1.12.0 is vulnerable:
pkg -- vulnerability in libfetch
CVE: CVE-2020-7450
WWW: https://vuxml.FreeBSD.org/freebsd/2af10639-4299-11ea-aab1-98fa9bfec35a.html
1 problem(s) in 1 installed package(s) found.
***DONE***
-----
4
19.7 Legacy Series / Possible to Slipstream OPNSense Updates ?
« on: December 12, 2019, 02:49:59 pm »
Greetings all,
I'm wondering if there is a way to slipstream the updates for OPNSense into the installation image, sort of how DISM for Windows allows the addition of .MSU files that can be cleaned up and updated into WIM and VHD files...
I'm wondering if there is a similar feature in OPNSense that would allow as such?
It'd be a pretty cool feature to have an update database like update.catalog.microsoft.com ... feel free to enlighten me if that exists already...
- MC
I'm wondering if there is a way to slipstream the updates for OPNSense into the installation image, sort of how DISM for Windows allows the addition of .MSU files that can be cleaned up and updated into WIM and VHD files...
I'm wondering if there is a similar feature in OPNSense that would allow as such?
It'd be a pretty cool feature to have an update database like update.catalog.microsoft.com ... feel free to enlighten me if that exists already...
- MC
5
Development and Code Review / Re: PowerShell/POSH Integration
« on: November 23, 2019, 04:30:17 pm »
thank you for letting me know. i appreciate your help.
-MC
-MC
6
Development and Code Review / PowerShell/POSH Integration
« on: November 22, 2019, 07:05:53 pm »
Greetings everybody,
It's been several months since I last posted an update here.
I'm looking to see if anyone knows what happened to this project here...
https://github.com/fvanroie/PS_OPNsense
I'd like to offer some development assistance for a module like this, but I see that it's about a year old and the author hasn't made any updates to it... it also has some errors when I attempt to use it. I'm curious if anyone else has worked on a module such as this.
I'm looking to provide a service that could automatically install OPNSense from a Windows based environment via LDAP/AD, fully loaded with certificates, etc and things of that nature.
About a year ago, I began programming batch files and migrated onto PowerShell for system administration and GUI development. I have some experience with BSD and Unix/Linux, but wouldn't call myself an expert on that end. Most of what I've been developing has been a way to integrate a Windows based environement with BSD/Unix, and for all intents and purposes...
...it has been quite the challenge.
That said, I've been making these series of videos on my YouTube channel which cover some topics like networking, hardware security, and programming... things of that nature.
If you'd like to see any of those videos
https://www.youtube.com/watch?v=LNCUoFSjRQo <- My most recent video covering the DCPromo tool [November 2019]
https://www.youtube.com/watch?v=-jkDPv9H6BQ <- Hardware Security and Business Analytics, (long)[ September 2019]
https://www.youtube.com/watch?v=v6RrrzR5v2E <- Programming GUIs and Looping explained (what I learned in that 8 month period of time )[ September 2019 ]
https://www.youtube.com/watch?v=C8NYaaqJAlI <- The Microsoft Deployment Toolkit process I've been looking to refine and integrate with Opnsense and LetsEncrypt [May 2019]
https://www.youtube.com/watch?v=qiZcHqkAzbs <- The MDT Process after a couple of months learning how to program/script with PowerShell [March 2019]
https://www.youtube.com/watch?v=5Cyp3pqIMRs <- The Original video I made after working with MDT for a couple of months and PS < 1 month [ January 2019 ]
Now, I've had quite the challenging year. No, really. Probably wasn't the best idea to come out of the gate upset about the FBI having performed this CVE against my network back in January, blaming Microsoft and everyone else under the sun... when it was a former manager I had worked with who sabotaged my network and has relentlessly performed DDoS attacks to 'be a super incompetent dickhead'... So, if I insulted anybody with my previous posts? I apologize.
Here's the problem. Microsoft CEO just spoke about $1T of cybercriminal theft occuring every year in the United States alone. Now, the math breaks down to about $3B a day. I'm sure other countries in the world are not happy with the United States, *****AT ALL***** because there are a lot of idiots in the government who think that it's ok to continue doing this thing called 'being very consistently ***terrible at their job****.'
Here's the bottom line. I care about that number growing. I'm fairly certain that anyone else who knows how to do mathematics correctly also cares about that number growing. However, "that number will continue to grow faster and faster" until the people that are bad at their jobs and at math do 1 of 3 things... 1) people stop being bad at math and their jobs when this epidemic of people that were bad at their jobs decided to randomly start breaking their own legs with a baseball bat. No really, I have a feeling that will send a very strong message to the people that are bad at their job that 'people can indeed be so retarded that they start breaking their own legs with baseball bats instead of being bad at mathematics.'
2) people start calling out other people that are bad at their job and at mathematics, so that this 'baseball bat self harm leg breaking' epidemic will then begin in massive numbers, and then somehow replace the 'opiate' epidemic, ( where people die from taking this legal prescription drug that some rich billionaire generates revenue to pay additional people to be just as bad at their job as they have always been )... I'm pretty sure it will happen. I can't specify as to how soon or how popular this epidemic will be? But I am fairly certain that the amount of people thinking that breaking their own legs was a better alternative to being very publicly executed by a member of the United States Military. No really, I have a feeling that when people that have been using this 'USA-Patriot Act of 2001' to generate revenue, AKA, identity theft, realize that being bad at their job could result in a very public execution by a member of the United States Military, I'm pretty sure that there will be $0 of identity theft and cybercriminal activities "pretty god damn quickly."
3) The people that use the excuse that they were busy playing with their dick instead of knowing how to assist people reverse the $23T of debt that the United States has accumulated/stolen from every other country on the planet, well, they will lose all of their sources of revenue. No really. They will. Any company or individual who pretends or masquerades as someone who is providing some type of service, that they charge people money for to use, but is in fact actually "causing this massive amount of identity theft to persist..."... Well, those people might just get an immediate one way ticket to sucking dick in Guantanamo Bay for the remainder of their lives. No really, it isn't a matter of 'if' any of this happens, it's a matter of 'it better damn well happen before China decides it's a good idea to launch a god damn nuclear armageddon.'
At any rate, I hope I have your attention now. Someone on this forum has been watching me, attacking me, and provisioning updates to my system in these updates that result in me "knowing that it's someone in the FBI."
Here is my declaration.
I have asked for help multiple times from this forum, but somehow, apparently many people can 'read' pretty well, but when it comes to 'typing in a response' or 'aiding the prevention of additional money being stolen from people', well, it appears as if everyone has broken fingers or hands.'
To think that I should have to spend any money on software or for support from a company like Decisio, it says that 'having to pay money to fix security issues' is the reason why the debt continues to skyrocket, the cybercriminal activities also continue to skyrocket, AND, the reason why it becomes this feedback loop where the problem just gets worse and worse... sort of like if you record the audio output of a speaker and then it loops over and over like a hall of mirrors effect.
That's where we are at right now. I have painstakingly spent a great deal of time studying and researching how to program in PS, as well as how to use OpnSense, Cloudflare, DNS/AD, etc and so forth.
I realize my words are strong and I hope that I have not offended people with good intentions, because the fact of the matter is, I see a lot of the soldiers, the men and women that have fought for the United States of America and have literally bled for the god damn flag, being ripped off by these sissies that sit in their cave and steal all of their pension money, ON TOP OF, my kids are getting their money stolen from them in the form of 'the government doing these things called treason'.
Here is my project.
https://github.com/mcc85s/PSD-Remaster
Here is my appeal.
I'm looking to deploy a system that combats this epidemic called "people continually selecting when and where they should be good at mathematics". For instance, "when they do that instead of being good at mathematics all the time", then "that person will soon begin to select when and where they were inspired to break their own legs with a baseball bat."
-MC
It's been several months since I last posted an update here.
I'm looking to see if anyone knows what happened to this project here...
https://github.com/fvanroie/PS_OPNsense
I'd like to offer some development assistance for a module like this, but I see that it's about a year old and the author hasn't made any updates to it... it also has some errors when I attempt to use it. I'm curious if anyone else has worked on a module such as this.
I'm looking to provide a service that could automatically install OPNSense from a Windows based environment via LDAP/AD, fully loaded with certificates, etc and things of that nature.
About a year ago, I began programming batch files and migrated onto PowerShell for system administration and GUI development. I have some experience with BSD and Unix/Linux, but wouldn't call myself an expert on that end. Most of what I've been developing has been a way to integrate a Windows based environement with BSD/Unix, and for all intents and purposes...
...it has been quite the challenge.
That said, I've been making these series of videos on my YouTube channel which cover some topics like networking, hardware security, and programming... things of that nature.
If you'd like to see any of those videos
https://www.youtube.com/watch?v=LNCUoFSjRQo <- My most recent video covering the DCPromo tool [November 2019]
https://www.youtube.com/watch?v=-jkDPv9H6BQ <- Hardware Security and Business Analytics, (long)[ September 2019]
https://www.youtube.com/watch?v=v6RrrzR5v2E <- Programming GUIs and Looping explained (what I learned in that 8 month period of time )[ September 2019 ]
https://www.youtube.com/watch?v=C8NYaaqJAlI <- The Microsoft Deployment Toolkit process I've been looking to refine and integrate with Opnsense and LetsEncrypt [May 2019]
https://www.youtube.com/watch?v=qiZcHqkAzbs <- The MDT Process after a couple of months learning how to program/script with PowerShell [March 2019]
https://www.youtube.com/watch?v=5Cyp3pqIMRs <- The Original video I made after working with MDT for a couple of months and PS < 1 month [ January 2019 ]
Now, I've had quite the challenging year. No, really. Probably wasn't the best idea to come out of the gate upset about the FBI having performed this CVE against my network back in January, blaming Microsoft and everyone else under the sun... when it was a former manager I had worked with who sabotaged my network and has relentlessly performed DDoS attacks to 'be a super incompetent dickhead'... So, if I insulted anybody with my previous posts? I apologize.
Here's the problem. Microsoft CEO just spoke about $1T of cybercriminal theft occuring every year in the United States alone. Now, the math breaks down to about $3B a day. I'm sure other countries in the world are not happy with the United States, *****AT ALL***** because there are a lot of idiots in the government who think that it's ok to continue doing this thing called 'being very consistently ***terrible at their job****.'
Here's the bottom line. I care about that number growing. I'm fairly certain that anyone else who knows how to do mathematics correctly also cares about that number growing. However, "that number will continue to grow faster and faster" until the people that are bad at their jobs and at math do 1 of 3 things... 1) people stop being bad at math and their jobs when this epidemic of people that were bad at their jobs decided to randomly start breaking their own legs with a baseball bat. No really, I have a feeling that will send a very strong message to the people that are bad at their job that 'people can indeed be so retarded that they start breaking their own legs with baseball bats instead of being bad at mathematics.'
2) people start calling out other people that are bad at their job and at mathematics, so that this 'baseball bat self harm leg breaking' epidemic will then begin in massive numbers, and then somehow replace the 'opiate' epidemic, ( where people die from taking this legal prescription drug that some rich billionaire generates revenue to pay additional people to be just as bad at their job as they have always been )... I'm pretty sure it will happen. I can't specify as to how soon or how popular this epidemic will be? But I am fairly certain that the amount of people thinking that breaking their own legs was a better alternative to being very publicly executed by a member of the United States Military. No really, I have a feeling that when people that have been using this 'USA-Patriot Act of 2001' to generate revenue, AKA, identity theft, realize that being bad at their job could result in a very public execution by a member of the United States Military, I'm pretty sure that there will be $0 of identity theft and cybercriminal activities "pretty god damn quickly."
3) The people that use the excuse that they were busy playing with their dick instead of knowing how to assist people reverse the $23T of debt that the United States has accumulated/stolen from every other country on the planet, well, they will lose all of their sources of revenue. No really. They will. Any company or individual who pretends or masquerades as someone who is providing some type of service, that they charge people money for to use, but is in fact actually "causing this massive amount of identity theft to persist..."... Well, those people might just get an immediate one way ticket to sucking dick in Guantanamo Bay for the remainder of their lives. No really, it isn't a matter of 'if' any of this happens, it's a matter of 'it better damn well happen before China decides it's a good idea to launch a god damn nuclear armageddon.'
At any rate, I hope I have your attention now. Someone on this forum has been watching me, attacking me, and provisioning updates to my system in these updates that result in me "knowing that it's someone in the FBI."
Here is my declaration.
I have asked for help multiple times from this forum, but somehow, apparently many people can 'read' pretty well, but when it comes to 'typing in a response' or 'aiding the prevention of additional money being stolen from people', well, it appears as if everyone has broken fingers or hands.'
To think that I should have to spend any money on software or for support from a company like Decisio, it says that 'having to pay money to fix security issues' is the reason why the debt continues to skyrocket, the cybercriminal activities also continue to skyrocket, AND, the reason why it becomes this feedback loop where the problem just gets worse and worse... sort of like if you record the audio output of a speaker and then it loops over and over like a hall of mirrors effect.
That's where we are at right now. I have painstakingly spent a great deal of time studying and researching how to program in PS, as well as how to use OpnSense, Cloudflare, DNS/AD, etc and so forth.
I realize my words are strong and I hope that I have not offended people with good intentions, because the fact of the matter is, I see a lot of the soldiers, the men and women that have fought for the United States of America and have literally bled for the god damn flag, being ripped off by these sissies that sit in their cave and steal all of their pension money, ON TOP OF, my kids are getting their money stolen from them in the form of 'the government doing these things called treason'.
Here is my project.
https://github.com/mcc85s/PSD-Remaster
Here is my appeal.
I'm looking to deploy a system that combats this epidemic called "people continually selecting when and where they should be good at mathematics". For instance, "when they do that instead of being good at mathematics all the time", then "that person will soon begin to select when and where they were inspired to break their own legs with a baseball bat."
-MC
Pages: [1]