Collaborate Disseminate
On macOS Sonoma, when I use any non-admin user, I am able to do a full OS update, or to run commands like softwareupdate –install-rosetta.
Why is this allowed?
I researched a little and came to this documentation saying:
authorising soft… Continue reading Why is non-admin user allowed to do macOS update?
Recently I saw hundreds of strange requests from different ip addresses in my server logs.
These requests were trying to bruteforce directories for example:
GET /admin/admin.php 404
GET /admin/controlpanel.html 404
GET /admin/controlpanel…. Continue reading Server directory bruteforcing [duplicate]
I have a hypothetical server and client app.
The server needs to know if a POST request came from my custom client application or regular browser.
what can i do to check who made a request. I mean I want it to be secure so changing user-ag… Continue reading http request authorization [duplicate]
Me and my friend are playing, he gave me his IP address and with that, when I put his IP in my browser I get his router’s log in page. He is using Ubiquiti airOS and on internet I saw that the default for username and password is: ubnt. Bu… Continue reading Logging in AirOS router from other network [closed]
I have a child domestic violence victim I am trying to collect evidence from and coordinate relief for (remotely), but I have cause to believe her phone and/or identity has been hijacked in the past to sabotage her escape options and paint… Continue reading Current iOS Spyware/Stalkerware Capabilities
So I want to do the following
Check the RSA public key of a https server
Make a GET request to that server
Get a response+signature from the server
I should be able to check if ANY reponse+signature pair matches the publickey.
I was able… Continue reading Check signature of an HTTPS response
I am diving now into WebGoat, there’s this little exercise in the “general” tab calle d “http proxies” which asks you to use zap/burp to intercept and modify a request, this is what is being us asked.
I understood what is … Continue reading Is there a difference between editing HTTP messages manually or with burp for example? (WebGoat HTTP intercept exercise "problem")
So I found out a couple of days ago that amazon.com has changed its behavior when trying to make a purchase. For years and up until recently, I could open a browser, log into amazon, close the browser. When I would open the b… Continue reading Is amazon.com allowing authentication based on browser cookies only?
I’d like to commit my OpenVPN client config to version control, in a repo that’s remotely hosted and publicly accessible.
This would reveal the server’s hostname and port, as well as the filepaths to .crt and .key files.
Sh… Continue reading Safe to commit OpenVPN client config to Git?
We have a CMS. On some public page within it, someone posted a URL that links to a folder on their desktop. I want it to go away, but based on the access logs I don’t know where the link itself is posted. Referer is blank.
W… Continue reading How to find what page on a site contains a given link?