Basic UNIX Security
Libraries
Vulnerabilities
Well Known IPs
99 Bottles
100
The file containing the hashed&salted passwds on a BSD system
What is /etc/master.passwd
100
pango
What does layout and rendering of internationalized text
100
This serious 2014 OpenSSL vulnerability was the first to have a logo and branding
What is heartbleed
100
::1
What is the IPv6 localhost address
100
%!PS /Helvetica findfont 9 scalefont setfont /printBeer { dup 20 string cvs show ( bottle) show 1 ne { (s) show } if ( of beer) show } def /printVerse { dup dup dup 7 mul 50 add /yPos exch def 15 yPos moveto printBeer ( on the wall, ) show printBeer (. ) show (Take one down, pass it around, ) show 1 sub printBeer ( on the wall. ) show } def /song { 100 -1 1 { printVerse } for } def song showpage %%EOF
What is postscript
200
The proper file permissions of the file containing the hashed&salted passwords
What is 0600 (root:wheel)
200
libusb
What is a userspace USB programming library
200
The discoverer of a 2009 DNS software vulnerability which allowed DNS cache poisoning
Who is Dan Kaminsky
200
172.16.0.0/12
What range is reserved for local communications within a private network
200
SELECT ( 100 - level ) || ' bottle' || CASE WHEN level != 99 THEN 's' END || ' of beer on the wall' || chr(10) || ( 100 - level ) || ' bottle' || CASE WHEN level != 99 THEN 's' END || ' of beer' || chr(10) || 'Take one down, pass it around' || chr(10) || ( 99 - level ) || ' bottle' || CASE WHEN level != 98 THEN 's' END || ' of beer on the wall' FROM dual CONNECT BY level <= 99;
What is SQL
300
Proper permissions of /.rhosts
What is 0000
300
libpoppler
What is a PDF rendering library
300
This 2014 Bash remote code execution vulnerability was considered more serious than Heartbleed
What is shellshock
300
100.64.0.0/10
What is the provider carrier grade NAT range
300
s/.*/99 bottles of beer on the wall/ h : b s/^0// /^0/q s/^1 bottles/1 bottle/ p s/on.*// p s/.*/Take one down, pass it around/ p g /^.[1-9]/{ h s/^.// y/123456789/012345678/ x s/^\(.\).*$/\1/ G s/\n// h bb } y/0123456789/9012345678/ h bb
What is sed
400
Proper permissions of the /tmp folder
What is 01777
400
cairo
What is a 2D vector graphics library
400
This vulnerability allows an MITM attacker to downgrade vulnerable TLS connections to 512-bit export-grade cryptography.
What is logjam
400
192.0.2.0/24
What is the documentation prefix
400
#include #include int main(void) { unsigned int bottles = 99; do { printf("%u bottles of beer on the wall\n", bottles); printf("%u bottles of beer\n", bottles); printf("Take one down, pass it around\n"); printf("%u bottles of beer on the wall\n\n", --bottles); } while(bottles > 0); return EXIT_SUCCESS; }
What is C
500
Proper permissions of sudo binary (perms and owner)
What is 04711 root:wheel
500
pango
What does layout and rendering of internationalized text
500
The full name of the database of fails which is abbreviated CVE
What is Common Vulnerabilities and Exposures
500
192.88.99.0/24
What is the 6to4 anycast range
500
-module(beersong). -export([sing/0]). -define(TEMPLATE_0, "~s of beer on the wall, ~s of beer.~nGo to the store and buy some more, 99 bottles of beer on the wall.~n"). -define(TEMPLATE_N, "~s of beer on the wall, ~s of beer.~nTake one down and pass it around, ~s of beer on the wall.~n~n"). create_verse(0) -> {0, io_lib:format(?TEMPLATE_0, phrase(0))}; create_verse(Bottle) -> {Bottle, io_lib:format(?TEMPLATE_N, phrase(Bottle))}. phrase(0) -> ["No more bottles", "no more bottles"]; phrase(1) -> ["1 bottle", "1 bottle", "no more bottles"]; phrase(2) -> ["2 bottles", "2 bottles", "1 bottle"]; phrase(Bottle) -> lists:duplicate(2, integer_to_list(Bottle) ++ " bottles") ++ [integer_to_list(Bottle-1) ++ " bottles"]. bottles() -> lists:reverse(lists:seq(0,99)). sing() -> lists:foreach(fun spawn_singer/1, bottles()), sing_verse(99). spawn_singer(Bottle) -> Pid = self(), spawn(fun() -> Pid ! create_verse(Bottle) end). sing_verse(Bottle) -> receive {_, Verse} when Bottle == 0 -> io:format(Verse); {N, Verse} when Bottle == N -> io:format(Verse), sing_verse(Bottle-1) after 3000 -> io:format("Verse not received - re-starting singer~n"), spawn_singer(Bottle), sing_verse(Bottle) end.
What is erlang