h4k.com

There are many problems with certain web sites that alter your web browser controls such as the address bar or control buttons for the sake of deception or design. Sometimes when visiting a web page it will hide the address bar in FireFox so the actual web site address is not visible. This is a security risk because it is now more difficult to tell which web site is being visited. Some web sites change the browser so that it cannot be resized making some information impossible to see. These problems and many more FireFox display control features can all be easily fixed with the two following steps:

1) In the address bar of FireFox type in “about:config” (without the quotes) and press ENTER.
2) Scroll down the alphabetically sorted list to the section where it says “dom.disable_window_open_feature.” for the series of variables below. By double clicking on the Preference Name it will change the value to it’s opposite value, true or false.

Preference Name : Description

close : Prevents the close button from being disabled.
directories : Prevents the bookmarks toolbar from being hidden.
location : Prevents the address bar from being hidden
menubar : Prevents the menubar from being hidden.
minimizable : Prevents popup window minimization from being disabled.
personalbar : Prevents the bookmarks toolbar from being hidden.
resizable : Prevents popup window resizing from being disabled.
scrollbars : Prevents the scrollbars on a popup from being disabled.
status : Prevents the status bar from being hidden.
titlebar : Prevents the title bar from being hidden.
toolbar : Prevents the navigation toolbar from being hidden.

By setting these all to true it gives you the most control over your browser. For the preferences to be updated all instances of FireFox needs to be completed closed and then restarted. (Reference)

Darik’s Boot and Nuke (DBAN) is a utility for completely destroying all the data on a hard drive. To use the program simply download the file, write it to a floppy, blank CD, or USB drive and then boot the computer to the newly created media. It is easy to use with on-screen instructions and works by overwriting all the data on the hard drive multiple times with various patterns and random data. DBAN is commonly ran on used hard drives that may be sold or given away so that none of the data can be recovered. This application destroys all data on the hard drive, including any installed operating systems, and should be used with caution.

http://dban.sourceforge.net/

SpyBot Search & Destroy is an application for Microsoft Windows that is used to detect and remove spyware, keyloggers, trojan viruses and more. It is a free program that is constantly updated for new threats. This is a powerful program that is easy to use. Spybot can be used in conjunction with your standard anti-virus software to help ensure a clean Windows system.

http://www.safer-networking.org/en/index.html

Rootkit Revealer is a program for Microsoft Windows to help determine if a computer has been infected with a rootkit. If you suspect your computer may be infected with a virus but your standard anti-virus scanner is not detecting anything this may be the program you need.

For more information about rootkits, how this program works, and the download go here:
http://technet.microsoft.com/en-us/sysinternals/bb897445.aspx

Windows Sysinternals are a set of powerful Windows utilities that “help you manage, troubleshoot and diagnose your Windows systems and applications”. There are dozens of free, light-weight applications available here separated into the following categories:

• File and Disk Utilities
• Networking Utilities
• Process Utilities
• Security Utilities
• System Information
• Miscellaneous Utilities

Any Windows network administrator, security professional, developer, or technical support analyst will be able to find many useful tools here.

http://technet.microsoft.com/en-us/sysinternals/default.aspx

Log Parser is a free, closed-source Windows utility for parsing through many different types of logs using SQL like queries. It can change the input to a different type of output to easily create reports or charts with large data sets.

Available here:
http://www.microsoft.com/technet/scriptcenter/tools/logparser/default.mspx

Official forum:
http://forums.iis.net/default.aspx?GroupID=51

VBScript is a great language to quickly accomplish Microsoft-specific tasks in a Windows environment. From managing local or network security groups to automating account modifications in Active Directory the Visual Basic scripting language can do it all.

http://www.activexperts.com/activmonitor/windowsmanagement/scripts/

http://www.microsoft.com/technet/scriptcenter/scripts/ad/users/default.mspx

http://techtasks.com/code/listlangs

http://www.w3schools.com/vbscript/vbscript_ref_functions.asp

Updating the popular WordPress blog software to the newest version can be automated using the WordPress Automatic Update plugin. The plugin takes care of everything including creating backups of the databases and even puts up an upgrade in progress notification on the front page. As with any software it is important to apply the relevant security updates on a timely basis so to help prevent the site from being attacked or used to unknowingly distribute exploits to visitors of the site. It seems that this type of update automation should be built in to the WordPress software by default but it is not so this is the plugin should be installed.

http://wordpress.org/extend/plugins/wordpress-automatic-upgrade/

The FlashBlock Firefox extension replaces any embedded flash code in a web page with a little flash symbol. Clicking on the symbol loads the flash object. This extension is great for preventing the many web sites that excessively use Flash objects from overwhelming Firefox. It also prevents sites from using Flash tracking objects and stopping other hidden malicious Flash objects.

http://flashblock.mozdev.org/

CERT has an informative how-to on securing your web browser. It details this task in Firefox, Internet Explorer and Safari with screen captures on the optimal security settings. The essay also covers some of the current and popular technologies operating in conjunction with the web browser and the risks they pose.

One good recommendation is to disable your web browser from automatically playing movies or sounds embedded in web pages. Embedding a hidden malicious .mov file into a web site would be simple to implement and having your web browser automatically executes movie clips without warning could quickly result in an infected computer.

http://www.cert.org/tech_tips/securing_browser/