Fedora Security Lab

The Fedora Security Lab provides an environment and tools for security auditing, #PenTesting, #Forensics, #SystemRescue, #Bughunting, #OSINT and more...

[Nix Security Tool Box @NixSecTools]

In the last month there were a lot of tools added for dealing with ADs. Like hekatomb (made by @ProcessusT), adidnsdump (made by @_dirkjan), autobloody (make by @rouge_cravate), roadtools (also made by @_dirkjan) and a dozens more.

Available now in Nixpkgs unstable.

[Fedora Security Lab @FedoraSL]

https://t.co/oSX8b5d0Sv

[Nix Security Tool Box @NixSecTools]

Available tools: 436

[Nix Security Tool Box @NixSecTools]

There are some new tools in the pipeline
for @nixos_org / Nixpkgs:

- gallia by @FraunhoferAISEC
- dBmonster by @90N45
- dismember by @liam_galvin
- crackql
- graphinder by @escapetechhq
- pretender by @RedTeamPT

[Fedora Project (@[email protected]) @fedora]

#Fedora Linux 37 Beta is here now! https://t.co/tkPXCcI643

[Nix Security Tool Box @NixSecTools]

https://t.co/4iibarlWO6 allows passive DNS capturing and is a monitoring toolkit. Written by @_n0p_

Is now available in Nixpkgs/NixOS

[Joerg Simon @kullnark]

Today 16 years ago I had my first official duty at a @fedora booth, only two years later @FedoraSL was officially approved as a official spin, thanks for all this great years

[Fedora Project (@[email protected]) @fedora]

The release of Fedora Linux 36 is getting closer, and so is the latest edition of our bi-annual virtual Release Party! Join us next month, May 13th & 14th, to learn about the latest features in Fedora Linux and activity in the @fedoracommunity 🥳 🥳https://t.co/0jHUDq3833

[Fedora Project (@[email protected]) @fedora]

We are excited to invite you all to our first ever Fedora Mentor Summit. We have talks, panel discussions, fun sessions and a lot more focused on the topic "Mentorship"!
Registrations are open now: https://t.co/zwZGKe2AKY
#FMS2022

[Fedora Project (@[email protected]) @fedora]

Interested in mentoring with the Fedora Project? We have applied as a mentoring organization for the Google Summer of Code 2022. Selected orgs will be announced on Sunday, March 6th!
Meanwhile, we're looking for project ideas and potential mentors.
https://t.co/CIyekffMoj
#gsoc

[Fabian Affolter @fabaff]

Using the #Log4Shell/#log4j tools on @fedora and the @FedoraSL is as simple as:

curl -L https://t.co/QlHyCvE0Qe | sh
source ~/.nix-profile/etc/profile.d/nix.sh
nix-channel --add https://t.co/a4mS6zlyD8
nix-channel --update
nix-env -i log4shell-detector

[Fabian Affolter @fabaff]

To help with the detection of #Log4Shell/#log4j, will the following tools

- log4j-detect by @takito1812
- log4j-scan by @FullHunt
- log4j-vuln-scanner by @_hillu
- log4jcheck by @NorthwaveLabs
- log4shell-detector by @cyb3rops

soon be in the @nixpkg/@nixos_org unstable channel

[Fedora Project (@[email protected]) @fedora]

#GNOME41: Coming soon to a #Fedora Linux 35 near you!

[Fabian Affolter @fabaff]

For @nixos_org we now have nmap-unfree for 7.91 as an ugly "hack". The standard @nmap package will stay at 7.80.

For the @FedoraSL and @fedora you will only get 7.80. The same applies for all other distributions that cares about "free and open".

[Fedora Project (@[email protected]) @fedora]

We'll be at the upcoming #FOSDEM2021 #opensource conference along with many other projects! Find out in this Magazine article how you can stay in touch with us around the event: https://t.co/HdxQq74mvp #community #JoinIn

[Fedora Project (@[email protected]) @fedora]

Want to deploy your own @matrixdotorg server ? Learn how to do it securely using @FedoraCoreOS

#Matrix #fedora #letsencrypt

https://t.co/poXS9KUA13

[Fedora Project (@[email protected]) @fedora]

Learn about #Kinoite, a #Fedora #Silverblue variant that uses the KDE Plasma desktop, in this magazine article: https://t.co/3Net5cfTqY #opensource #community

[Fedora Security Lab @FedoraSL]

@vwbusguy @elastic claims that there will be "no impact". We highly doubt that...the devil is in the details

[Fedora Security Lab @FedoraSL]

The "@nmap Public Source License" is another good example why you should not start to cook your own license.

For now, @fedora declared this license as "not acceptable".
This means that there will be no more nmap updates.

[Fedora Security Lab @FedoraSL]

We are in the process of aligning the package set for IT security tasks (#pentesting, #Vulnerability searching, #Forensic, security #assessment and #BugBounty) between @fedora and @nixos_org.

Strong focus on new tools and not those which are unmaintained for 10 years now 😉