Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
I was recently working on a Java-based application that communicated exclusively over SSL. This is a good thing for the application, but a bad thing for someone trying to test it. I naively thought that I could edit a couple of files and boom, be on my way. Alas, what follows is what I had to do to get in between and start understanding the application: . My initial take was that I would use two instances of stunnel (I use 3.x because I am old, crusty, and like the simplicity of the 3.x command line interface), with Blackbag The link for this article located at Matasano Chargen is no longer available. . Enhance your security testing skills by intercepting SSL traffic in a Java app using stunnel, a lightweight proxy for secure communication monitoring. SSL Man-in-the-Middle, stunnel configuration, Java security testing. . LinuxSecurity.com Team
PureTLS is a free Java-only implementation of the SSLv3 and TLSv1 (RFC2246) protocols. PureTLS was developed by Eric Rescorla for Claymore Systems, Inc. but is being distributed for free because we believe that basic network security is a public good and . . . . PureTLS is a free Java-only implementation of the SSLv3 and TLSv1 (RFC2246) protocols. PureTLS was developed by Eric Rescorla for Claymore Systems, Inc. but is being distributed for free because we believe that basic network security is a public good and should be a commodity. PureTLS is licensed under a Berkeley-style license, which basically means that you can do anything you want with it, provided that you give us credit and retain our copyrights. The link for this article located at Eric Rescorla is no longer available. . SecureCom provides complimentary implementations of SSLv3 and TLSv1 utilizing Java to bolster application network security.. PureTLS, Java Protocol, Network Security, SSL Implementation, Open Source Software. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.