• 0 Posts
  • 56 Comments
Joined 3 years ago
cake
Cake day: July 1st, 2023

help-circle



  • micro enters the chat.

    Static, portable binary with no dependencies.

    Out of the box:

    • Syntax highlighting
    • Multi-line cursors like Sublime Text
    • Mouse support (works incredibly well)
    • Splits and tabs for working on multiple files
    • Diff gutter
    • Copy and paste with system clipboard
    • Cross-platform (runs basically on anything that Go does)
    • Sane key binds (ctrl-s, ctrl-c, ctrl-v, ctrl-z, ctrl-x, etc)
    • Terminal emulator
    • Plugin system to extend it
    • And much much more

    I have nothing to do with the project but this binary is the absolute best. curl or wget to any host and away you go with effectively a Sublime Text / VSCode like in the terminal. It’s as simple as nano and as functional as a well configured and extended vim.

    It’s baffling it’s not more well known and not installed by default on major distros.



  • It already is pretty rampant, however most Linux admins have minimal if any detection strategy.

    Additionally, while there’s plenty of binaries about like VoidLink, almost all campaigns against Linux hosts target SSH, or RCE vulnerabilities, and deliver shell scripts that orchestrate the attack.

    Why compile a binary when the shell has everything you need? The threat models are pretty different between Windows and the *nix world.

    When you look at botnet composition, they’re usually made up of outdated Linux hosts with SSH open with password-based authentication.

    Seriously people, switch to key-based auth and disable password auth entirely.










  • I’d rather a Mac than a Windows box. At least you get a proper shell (zsh or bash - zsh is the default now I think), python installed by default, can install package managers (macports, brew), can get coreutils, etc and most FOSS software from the Linux world runs since macs are UNIX at heart.

    I’m pretty sure cd isn’t even coreutils but implemented by shells as a wrapper for chdir/fchdir which is part of the kernel. Which has always bugged me since you can’t reliably pipe or redirect to cd since shells do things differently; it doesn’t handle stdin or the last component of a command runs in a subshell so doesn’t affect your current shell, blah blah.