Collaborate Disseminate
I recently started thinking about an attacker which would clone a mobile application, and add some code which would do something malicious, e.g. credential theft. This cloned app would communicate with a legitimate server and therefore off… Continue reading What are modern protections against mobile application cloning
I have a web application which uses an external authentication server for obtaining a session. When a client tries to login, the browser is making requests towards the external authentication server until a cookie is obtained. Note that th… Continue reading Protecting an external authentication server against CSRF
I am trying to execute an attack that requires a full-duplex MiTM position. This is the reason why I choose to use Ettercap. I have picked DHCP spoofing as the attack of choice.
The problem that I am facing is that Ettercap executes the … Continue reading How can Ettercap act as a client instead of a gateway?
I am currently working on a project where I need to find a host running a SIEM solution. From my research I am fairly confident that the host is running Elastic Stack, probably within another solution such as SIEMonster, but … Continue reading Enumerating hosts running Elastic Stack