who needs social life when you have broadband?

This is a proof of concept of a DOS in misconfigured SSH daemons (which is default in some distros), an example is the OpenSSH (any version, any plataform) with no definition of MaxStartups in sshd_config, to read about problem, see my post on:

http://archive.netbsd.se/?ml=secureshell&a=2006-08&t=2257506
or
http://www.derkeiler.com/Mailing-Lists/securityfocus/Secure_Shell/2006-08/msg00030.html

Well, with this DOS, you can block any user to login on remote machine, a big problem for some admins which are isolated from machine =)

To use the PoC:

~# python poc.py –help

Screenshot

Download PoC: SSHD PoC

Requirements: Python 2.3+ / Linux or Windows

Yours,

- Perone

Hello, the screenshot says everything:

MSN Python BOT Download

To install:

~# apt-get install python-msn

~# ./mon.py or python mon.py

Enter your account and enjoy.
The source is a mess, but it’s just a PoC; the idea is to use this bot to show linux alerts.

Yours,

- Perone

Hello!

I’m not sure if this post is going to help me or not but I’m blogging anyway

Fact is I wanna move to Canada. I had enough of hot summer and would like to experience living abroad (again). So, if you are a Canadian please check my résumé clicking here and hire me hehehe. If you want, you may contact me directly by e-mail: bigodines ||at|| joomla.com.br

If you’re not sure if it will be worth to read my resume, I’m the main developer of two of the most famous Joomla! sites around the globe: Porsche and UNRIC (please note: developer != designer). Ok, that sound like I’m trying to impress :/. I don’t like these self-promotion lines but sometimes we need it

Now, the bad news:
I’ve been reading about visas and it seems that a permanent work-permit for skilled professionals (According to those HSMP calculators I found on the web I am a skilled professional :-P) can take up to 14 months. A friend told me that if I manage to find a company interested in my services, this waiting time may be shorter (I’m still checking this information).

There is also another alternative: I can go to Canada as a student and work legally 20hrs/week while waiting for my permanent visa… but first I need some networking contacts in Canada.

drop me a line if you need a responsible, dynamic, nerd web developer

hello,

We didn’t mean to create a blog that would be just a news crawler as most of the blogs out there are. But, as time is against us (one more time) I decided to blog about two (three actually) really interesting stuff I’ve read today.

The first is a vulnerability scan for PHP apps (it scans for XSS and SQLI vulnerabilities) it’s called Pixy and you should all give a try for this tool. It can save your job

The other article (which was divided in two parts) teaches how to create encrypted partitions to protect your data in linux. I read it at LinuxPlanet, you may click here and here to see how everything works.