Resources

Technical Documentation and Other Fun Stuff

I’m starting to create documents that I use when working in the field. I plan on consistently working my way through various documents or ideas that I have hanging around here and getting them online here. Use them at will for your own needs.

If you find inaccuracies, please let me know and I’ll make corrections. If you have ideas for improvements, please let me know about those as well. I can’t guarantee that I will agree or incorporate them here, but I like to improve my stuff. If you make a good case for a change and I add them to the docs, I will certainly attribute the improvements back to you. Enjoy.

Security

• Reconnoiter – Harvesting Usernames via Social Media – Reconnoiter is a little script that I started writing out of irritation and a surprising number of other folks found useful. The basic premise is to search Linkedin for the names of employees at a target company, then create lists of possible usernames.
• Seven Steps to Help Protect Your Computers – This is a quick guide aimed at business owners who want to protect their computers, but aren’t sure what to do.

FreeBSD

• FreeBSD 7.0 – A build document for minimal FreeBSD 7.0 installation. No X or listening daemons other than OpenSSH.
• FreeBSD 6.3 – Build document for a minimal server installation. No X or listening daemons other than OpenSSH.

Windows

• Building an Internal SSL CA – Use a Linux server as a Certificate Authority and publish it to all machines in your Active Directory domain using Group Policy.
• Signing SSL Certificate Requests – A quick follow on the SSL CA post. Now that you have a CA, perhaps we’d like to sign some certificates too.

Useful Tools

• Url Encoder and Decoder – A quick utility to convert text to or from URL encoding. I use this one a lot.

Papers

• Web Application Security – What is it and why is important?

Presentations

• War Driving by Remote Control – What do you get when you cross a track RC vehicle, 2 Linksys Routers and OpenWRT?
• Building an Open Source Security Toolkit – Does doing security work require big money to buy good tools? Nope! Here’s some cool stuff that’s out there.