Ervin Barta ervinb

WannaCry|WannaDecrypt0r NSA-Cyberweapon-Powered Ransomware Worm

Virus Name: WannaCrypt, WannaCry, WanaCrypt0r, WCrypt, WCRY
Vector: All Windows versions before Windows 10 are vulnerable if not patched for MS-17-010. It uses EternalBlue MS17-010 to propagate.
Ransom: between $300 to $600. There is code to 'rm' (delete) files in the virus. Seems to reset if the virus crashes.
Backdooring: The worm loops through every RDP session on a system to run the ransomware as that user. It also installs the DOUBLEPULSAR backdoor. It corrupts shadow volumes to make recovery harder. (source: malwarebytes)
Kill switch: If the website www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com is up the virus exits instead of infecting the host. (source: malwarebytes). This domain has been sinkholed, stopping the spread of the worm. Will not work if proxied (source).

update: A minor variant of the viru

This is an example of using Linux Kernel's Transparent Proxy to route all TCP traffic to docker containers without having to resort to PROXY protocol which is not supported by some applications (e.g. sshd). To get the demo to work you only need vagrant installed:

git clone [this-gist] tproxy-demo
cd tproxy-demo
vagrant up

This is a mini-HOWTO for setting up Linux Containers (LXC) on Ubuntu. This guide focuses on the creation of a web server with good process isolation and firewalling.

Dependencies

apt-get install lxc

Create a container

This all applies to Ruby 2.1. In some cases a setting is not available in 2.0, this is noted. There is also a different with 1.9, 1.8, and REE --- these are not noted.

All the relevant code is in https://github.com/ruby/ruby/blob/master/gc.c

RUBY_HEAP_MIN_SLOTS

default: 10000

The number of heap slots to start out with. This should be set high enough so that your app has enough or almost enough memory after loading so that it doesn't have to allocate more memory on the first request (althogh this probably isn't such a big deal for most apps).

(todo: figure out how big a slot is. i think the answer can be infered from this code.)

303 See Other

Location: https://github.com/wsargent/docker-cheat-sheet

Hi there!

The docker cheat sheet has moved to a Github project under https://github.com/wsargent/docker-cheat-sheet.

Please click on the link above to go to the cheat sheet.

	#!groovy
	import groovy.json.JsonOutput
	import groovy.json.JsonSlurper

	def label = "mypod-${UUID.randomUUID().toString()}"
	podTemplate(label: label, yaml: """
	spec:
	containers:
	- name: mvn
	image: maven:3.3.9-jdk-8

	#!/usr/bin/env python
	import json
	import sys

	try:
	dotenv = sys.argv[1]
	except IndexError as e:
	dotenv = '.env'

	with open(dotenv, 'r') as f:

	/**
	* NOTE: Earlier versions of this file used `php artisan serve`.
	* However, Codeception and/or PhantomJS is not too fond of
	* running that way for some reason. I ended up switching
	* to Apache since that's what worked for all our devs
	* locally. This script now includes how to get that
	* setup properly. Please enjoy this responsibly.
	*
	* Assumptions:
	* Using site5/phantoman to run phantomjs as the headless browser

	# Rails Stuff
	alias stoprails='kill -9 $(lsof -i :3000 -t)'
	alias startrails='rails server -d'
	alias restartrails='stopRails && startRails'

	#Check PHP For Erroes
	alias phpcheck='find ./ -name \*.php \| xargs -n 1 php -l'

	# ROT13-encode text. Works for decoding, too! ;)
	alias rot13='tr a-zA-Z n-za-mN-ZA-M'

	#!/bin/sh


	# Setup some variables needed for bootstrapping the environment
	ROOT=/home/vrde/projectz/myproject
	REPOS=${ROOT}/repos

	export PYTHONPATH=${REPOS}