nemozone

a zone for no one and everyone :) Btw this blog is only for adults! Dieser Blog ist nur für Erwachsene!

Intro

Sometimes you get hit with ideas for side-projects that sound absolutely plausible in your head. The idea grips you, your mind’s eye can practically visualize it already. And then reality strikes, and you realize how utterly insane this would be, and just how much work would need to go into it…

Source: https://blog.pimaker.at/texts/rvc1/

Google Earth Enterprise is deployed with default credentials. We discovered that educational, government, private enterprise and military organizations all rely on GEE for day-to-day operations…

Source: https://johnjhacking.com/blog/gee-exploitation/

Many people used to ask me where to start learning about macOS security or exploitation, what are the trainings or books out there that can help with this topic. Nowadays there are a few trainings, which can get you started. Other great resources for macOS security are blog posts and conference talks.

I thought I will try to collect some resources that can help people to get started in this field…

Source: https://theevilbit.github.io/posts/getting_started_in_macos_security/

Scanning software for 6000+ scanners

VueScan is an application for scanning documents, photos, film, and slides on Windows, macOS, and Linux. VueScan supports over 6000 scanners from 42 manufacturers – even when there isn't a driver available from the manufacturer.

The base VueScan app is available for free but will leave a watermark on your scanned images unless you purchase a license from Hamrick Software.

NOTE: This wrapper is not verified by, affiliated with, or supported by Hamrick Software.

https://flathub.org/apps/details/com.hamrick.VueScan

I must be a lucky fellow, :) I have found this program. Open up the terminal(CTRL+Alt+t)

sudo apt-get update
sudo apt-get install cpu-checker

Then enter the command below

sudo kvm-ok

If you receive this output

INFO: /dev/kvm exists
KVM acceleration can be used

All is good. If you don't receive this output, you have to enter the BIOS/UEFI and to enable virtualization.

systemctl --firmware-setup reboot

The settings can look different from system to system due to the BIOS/UEFI OEM's like. Some examples

With this command you can verify if your CPU is even capable, which most CPU's nowadays are.

grep -E 'svm|vmx' /proc/cpuinfo

With this command you can ensure if the proper kernel module is loaded after. The BIOS settings had been enabled

# lsmod | grep kvm

Further reading

https://www.thomas-krenn.com/en/wiki/Activating_the_Intel_VT_Virtualization_Feature

These articles have been archived, the original links are dead :(

https://web.archive.org/web/20150923203121/https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Virtualization_Administration_Guide/sect-Virtualization-Tips_and_tricks-Verifying_virtualization_extensions.html

https://web.archive.org/web/20150923203237/https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Virtualization_Administration_Guide/sect-Virtualization-Troubleshooting-Enabling_Intel_VT_and_AMD_V_virtualization_hardware_extensions_in_BIOS.html#proc-Virtualization-Enabling_Intel_VT_and_AMD_V_virtualization_hardware_extensions_in_BIOS-Enabling_virtualization_extensions_in_BIOS

https://www.smarthomebeginner.com/enable-hardware-virtualization-vt-x-amd-v/

Some info in German

https://web.archive.org/web/20140102022018/http://www.heise.de/ct/hotline/CPU-Virtualisierungsfunktionen-nutzbar-323506.html

The goal of the swtpm project is to provide a TPM emulator (TPM 1.2 & TPM 2) that can be integrated into virtualized environments, such as virtual machines and containers. So far it has been integrated into QEMU and as a prototype into RunC…

https://github.com/stefanberger/swtpm/wiki

https://github.com/stefanberger/swtpm

This tutorial explains how to install and run Windows 10 on Linux using GPU passthrough and VFIO drivers to achieve near-native performance – for gaming, photo or video editing, and other graphics and CPU intensive tasks. It also lists the common pitfalls and possible ways to further improve performance. Last not least it offers a comprehensive list of external resources and helpful links.

https://www.heiko-sieger.info/running-windows-10-on-linux-using-kvm-with-vga-passthrough/

Some Qemu further reading:

https://www.atechtown.com/install-qemu-on-ubuntu/

Also the stuff from Pavol Elsig on YT is very interesting

https://www.youtube.com/channel/UCToFb-mcTsoyyf3muma9r9w

Webcamoid is a full featured and multiplatform webcam suite.

https://github.com/webcamoid/webcamoid

https://webcamoid.github.io/#downloads

A nice curated list of known Linux malware

https://github.com/timb-machine/linux-malware