// author archive

JD McCloud

JD McCloud has written 8 posts for Praetorian Prefect
Email the author: blog(at)ptnsecurity.com

Juniper Kernel Crash – scapy Code

By JD McCloud ⋅ January 10, 2010 ⋅ Post a comment

Following the Juniper kernel flaw posts, we received a number of inquiries regarding how to determine the option value to use, however we were somewhat reluctant to provide that level of detail. Now that exploit code has been published elsewhere, there is little reason not to answer this question.

What DNS is not

By JD McCloud ⋅ November 9, 2009 ⋅ Post a comment

What DNS Is Not by Paul Vixie details what DNS is by explaining what it is NOT.

OSSEC: Agentless…It’s good, but not good enough

By JD McCloud ⋅ November 5, 2009 ⋅ Post a comment

In working with OSSEC agentless for some time now I have come across some limitations in the implementation that I felt needed to be addressed. As OSSEC agentless is designed to preform syscheck functions on remote hosts, more general features are hard (if not impossible) to write into a script. This post will demonstrate an alternative for adding additional features to the OSSEC standard build.

OSSEC: Agentless scripts

By JD McCloud ⋅ November 3, 2009 ⋅ Post a comment

In my last OSSEC post “OSSEC: Agentless to save the day” I went over how to setup agentless monitoring using the built in scripts. With this post I am going to get into the details of how to modify the OSSEC supplied scripts to do your bidding.

OSSEC: Agentless to save the day

By JD McCloud ⋅ November 2, 2009 ⋅ One comment

OSSEC is a Host Intrusion detection system (HIDS) in name, but in reality it is far more. It’s able to look for rootkits, monitor logs (LIDS), and even actively respond to defined events. While all these features are great the unsung hero is agentless monitoring.

Are Borderless Networks Possible?

By JD McCloud ⋅ October 15, 2009 ⋅ 11 comments

I attended SC World Congress in New York this week and a keynote from Cisco caught my attention: Securing the Cloud: Building the Borderless Network. I became fixated on the words used over and over by Joel McFarland. Borderless this, borderless that, borderless everything. This campaign started to bother me as this was [...]

VRF is the new Black: How I Learned to Stop Worrying and Love the Complexity

By JD McCloud ⋅ September 29, 2009 ⋅ 9 comments

Breaking up your network “is good,” we all know this, and VLANs have traditionally been used to segment a network to help with maintenance, management, and security; but, they are not the only game in town and often the wrong place to break your network into smaller and more efficient pieces. VPN Routing and [...]

Breaking Twitter (authentication)

By JD McCloud ⋅ September 25, 2009 ⋅ One comment

Yesterday we spent some time speculating on how phishing attacks like the one afflicting Twitter on Wednesday of this week are seeded. How are the original direct messages sent out that kick off the first stolen credentials, the next set of direct messages, and so on in the loop? We were hoping, but [...]