Collaborate Disseminate
I’m trying to test a man-in-the-middle attack between two Docker containers.
The local virtual machine has two containers with the same bridging network, I ‘m trying to use burpsuite to intercept their traffic.
I want to use arpspoof to d… Continue reading How to intercept traffic between two Docker containers
I have set up DMARC for some months now and I am using dmarc-visualizer to parse the reports.
Overall I am happy so we can advance towards BIMI, but before switching to quarantine or reject on DMARC, there is a behavior that I cannot under… Continue reading DMARC falsely reports impersonation
I’ve been asked to improve the security of my company’s iot device, and encrypt a storage partition. It’s a general purpose arm based device, and currently can boot from a variety of sources (USB, network, sd card, etc).
The company wants … Continue reading TPM use without secure boot
I am using a Mac for my daily work, But I do not know if I am vulnerable for the log4j exploit. Is there a way to find out? Is there a way to find all the applications that are using java? How to protect me? Update java? Update the log lib… Continue reading How to find out I an application is vulnerable for log4j?
I am not an expert in security items and exploits – so there I would like to know how this recent Log4Shell exploit can affect me as an end user.
Reading the news, the exploit can affect services like "Twitter", "Apple"… Continue reading How can the Log4Shell exploit affect an end user?
The title pretty much covers the question. I’m using Linux and, whenever I go to sites like Amazon Prime and such, if I try to watch any of their videos, the player would error out in an error code and claim that it can’t play protected co… Continue reading Why can I watch videos on Crunchyroll without having DRM content enabled in Firefox?
I recently bought a replacement display for my smartphone on ebay from a national supplier.
I later realized that it does not have the Huawei logo printed on it, but it is working fine.
There were many displays available and I noticed that… Continue reading Scanning for malicious hardware on display replacement for a smartphone
In many countries, for example, Russia where I live, you need to show an ID to obtain a SIM card. Often this is used by law enforcement to track people. Sometimes corrupt officers sell people’s location data for couple hundred bucks (imagi… Continue reading Avoiding carrying my main SIM card
I have some code and other resources which run in a container or VM ("black box") on a host machine. The host uses this as a service to process some files which are highly sensitive and they don’t want them off their premises (s… Continue reading How to protect workload from host
I’m trying to MITM an Android application but I cannot get it to work properly. Usually, I’m using Burp for those kind of attacks, which allows me to intercept and decrypt HTTPS traffic. (Assuming the certificate is installed on the Androi… Continue reading Man-in-the-Middle Mobile (e.g. Android) Application Tool