Sunday, December 15, 2019

Strand Hogg Virus or Malware


The StrandHogg vulnerability is mostly infected the android OS without accessing root mode and use vulnerability based on weakness seen.

Promon security researchers have found proof of a dangerous Android vulnerability named 'StrandHogg’, that allows real-life malware to pose as legitimate apps, with users unaware they are being targeted.

What’s the impact?
  • All versions of Android affected, including Android 10*
  • All top 500 most popular apps are at risk still we are still not listed how many apps are vulnerable
  • Real-life malware is exploiting the vulnerability
  • Till now 36 malicious applications exploiting the vulnerability was identified
  • The main thing is vulnerability can be exploited without root access
  • When exploited by hackers
  • They can listen to the user or victim through the microphone
  • Take photos through the camera and view the mobile screen.
  • Read and send important SMS messages they will take control without the knowledge of the victims
  • Make and/or record phone conversations with victims knowledge
  • Phishing login credentials by watching the mobile screen
  • Get access to all private photos and files on the device and may be use to gain from information gathered.
  • Get location and GPS information and target the victims.
  • Get access to the contacts list and miss use or sell at dark web
  • Access phone logs and modify everything.

How to identify or avoid from this virus:

  • Check the mobile access or permission to applications
  • Please avoid the application which are asking for permission or ask to download.
  • Check whether without your knowledge any apps installed.


Beware of virus and Malwares. Use your end devices securely.

Saturday, December 14, 2019

Networking-Cisco IOS vs Cisco NXOS and CatOS

  • Cisco nexus NXOS does not support login command to switch users.
  • Cisco nexus NXOS does not distinguish between standard or extended access list, all lists are named and "extended" in functionality.
  • Cisco NXOS did not support scp server prior to the release od version 5.1(1).
  • In cisco NXOS there is no "write" command to save the configuration like on IOS. We need to use Copy command instead of write command. We can also use command aliases to provide write command.
  • When accessing cisco NXOS, users authenticate directly to their assigned privilege level.
  • SSH server is enabled while telnet is disabled by default in Cisco Nexus device.
Cisco CatOS:
  • Mostly we can see CatOS on catalyst switches. Which works with high speed based on input.
  • CatOS is a catalyst operating system which is a discontinued operating system for many of the catalyst brand of legacy network switches. CatOS ran on switches such as 1200,2800G, 4000,4500,5000,5500,6000,6500 series. It was originally called as XDI by the switching company cresendo communications, Inc. Cisco renamed it to CatOS when they acquired cresendo in late 1993.
  • CatOS can still run on some of cisco's modular switches, "hybrid mode". In hybrid mode, the network management processor (NMP) or switch Processor (SP) runs CatOS and the route processor runs Cisco IOS.

Hill Station view:

Networking-Cisco NXOS

  • Nexus device will be mostly located in data center.
  • Cisco NXOS is originally named as SAN OS, it was initially 32 bit OS evolved with 64 bit OS.
  • Cisco NXOS supports symmetric multiprocessing, it allows preemptive multitasking. Which allows a high priority process to get CPU time ahead of lower priority.
  • Cisco NXOS built on Linux kernel, which natively supports python for scripting.
  • One of the benefit in Cisco  NXOS is we can set or activate the feature based on our need.
  • Cisco NXOS is a network operating system for nexus series ethernet switches and MDS(multilayer director switch) series fibre channel storage area network switches created by cisco systems.
  • Cisco Nexus is based on Montavista software embedded Linux and which is interoperable with other cisco operating systems. The command line interface is similar to cisco IOS.


Hill Station view:


Networking- Cisco IOS XR

  • Cisco IOS XR found in service providers routers like 12000 series cisco IOS XR.
  • Cisco IOS XR originally designed for 64 bit operations. As somewhat equal to NX-OS, Cisco IOS XR offers many enhancements like multiprocessing, separate memory spaces etc.
  • Cisco IOS XR activates only services that are needed.
  • Cisco IOS XR built on QNX neutrino micro kernel, QNX is quite similar to Unix.
  • Features cisco IOS XR offers that are not found in NXOS. This has ability to have single instance of OS Controlling multiple Chassis.
  • Cisco IOS XR offers supports for interfaces such as DWDM(dense wavelength division multiplexing) and packet over SONET.
  • The basic difference found in NXOS is when you're finished entering Configuration commands in your cisco IOS XR you need to commit your changes to make them effect before exiting configuration mode.  And to erase the current config user commit replace.
  • Cisco IOS XR is a train of cisco systems widely deployed internetworking operating systems(IOS), used in higher end network converging systems (NCS), carrier-grade routers such as the CRS series, 12000 series and ASR9000 series
Advantages of cisco IOS XR:
  • Largely supports hardware redundancy and fault containment methods such as protected memory spaces for individual processes and process restart ability, which gives improved high availability for the network.
  • Better scalability for large hardware configurations through distributed software infrastructure and a two stage forwarding architecture.
  • A package based software distribution model allowing optional features such as multicast routing and MPLS to be installed and removed while the router is in service.
  • The ability to install packages upgrades and packages while router remains in service.
  • A Web-based GUI for system management, making use of a generic, XML management interface.


Note: Not all IOS XR models supports ISSU. Only some models supported by ISSU.
Hill Station view:


Networking-Cisco IOS vs Cisco IOS XE

  • Cisco IOS is monolithic operating system running directly on hardware.
  • Cisco IOS XE is a combination of a Linux kernel and a monolithic application IOSd that runs on the top of this kernel.
  • Cisco IOS XR is based on QNX - since version 5.0 is also based on Linux. 
  • IOSd application has been separated into many applications. While IOS XE(IOSd) and Cisco IOS share a lot of the same code. But cisco IOS XR is completely different code base. 
  • Cisco IOS XE has IOSd running as a application on top of Linux, also it able to run different applications on the hardware. Best example for this is running wireshark on a switch. Also Cisco IOS XE is open service containers. 
Hill Station view:

Tuesday, December 10, 2019

Networking-Cisco IOS-XE

  • Cisco IOS XE is a inter networking operating system(IOS) of cisco systems.  Mostly we could see this operating systems in ASR1000 series routers.
  • To understand Cisco IOS XE we will use master and slave concept. Cisco IOS XE will have two codes. Master code IOS process is  the main process and other code is like a slave, when master issues order slave will do it job.
Here route processor(RP) plays a major role in which has
  • RP base
  • RP control
  • RP operating system

  • Above will be into control plane and in between IOS and rest platform
  • IOS-XE runs processes deamon on Linux based. Complete image has a sub packages called as consolidated package.
  • RP access uses the protocol SSL/SSH.
  • RP IOS provides cisco IOS kernel.
  • Cisco IOS-XE built on Linux and provides distributed software architecture that moves many operating system responsibilities out of the IOS process and has a copy of IOS running as a separate process. Since it runs a copy of IOS, all CLI commands are same for Cisco IOS and Cisco IOS-XE. In contrast to Cisco IOS-XR which has completely different code base and its developers implemented quite a different CLI command set.

ESP(Embedded Service Processor) Base:

Data plane and all flow of data's, embedded service processor responsible for features QOS, ACL, Netflow, NAT

SIP(Shared Port Adapter Interface Processor) Base:

Shared port Adapter SPA OS and control plane is a carrier card that you insert on reader slot.

SPA driver and FPD (field programmable device) provides interface between Network and shared port adapter interface processor.

Hill Station view:



Networking-Cisco IOS

IOS was developed In  1980's 'C Program Language'. IOS does not support multiprocessing at a time. First one instruction should be completed after that only other instruction will begin.
Moreover you can found IOS in borderless network that is a network allow anyone anywhere on any device to connect like corporate network example for this 3900 series ISR routers and 2900 cisco routers.

  • Cisco IOS is a inter operating system family of software which used on cisco routers and switches.
  • Best feature of Cisco IOS is routing, switching, Inter networking and telecommunication functions this features are integrated into multi-tasking operating system. Although Cisco IOS code base includes a cooperative multi-tasking kernel, most of the IOS features ported to other kernels like QNX and Linux for use in cisco products or simulators like cisco VIRL.
  • Cisco IOS use shared memory space, since all pool uses same memory space, sometimes misbehaving OSPF could wreak havoc on router process.
  • If you take Cisco 7513 modular router which supports versatile interface processor (VIP) module which allow individual line card to run their own instances for load balancing or redundancy.

Note:

Remember not all cisco model run on IOS. For example ASA security model device which runs on Linux based operating system, and carrier routers which runs on IOS-XR.


Hill Station view:



Explore Me

Networking- Cisco IOS XR

Cisco IOS XR found in service providers routers like 12000 series cisco IOS XR. Cisco IOS XR originally designed for 64 bit operations....