Jason Krs – WindowsTechs.com

Is there any guideline or procedure for 4G hardware equipement (4G landline phone and home Wifi router) security audit/assessment?

Posted on June 29, 2022 by Jason Krs

I need to perform a security audit/assessment on 4G LTE hardware equimements :

4G landline wireless phone (not android OS but with many features such as WiFi hotspot)
4G Wifi home router

Is there any standard/guideline/procedure (or any … Continue reading Is there any guideline or procedure for 4G hardware equipement (4G landline phone and home Wifi router) security audit/assessment?→

What are the different specialties in exploit development/research [closed]

Posted on July 18, 2021 by Jason Krs

I noticed that most exploit development online resources are about fuzzing and exploiting different flavors of buffer overflow. The problem with that is that most CVE are not necessarily related to buffer overflow.
So my question is : are … Continue reading What are the different specialties in exploit development/research [closed]→

Why practical risk analysis tutorials do not exists?

Posted on May 16, 2021 by Jason Krs

To says things simple ; when someone wants to learn offensive web application (or system) hacking, one could just download OWASP DVWA or register to Hackthebox and watch Ippsec videos to see "how to walk the walk". This is very t… Continue reading Why practical risk analysis tutorials do not exists?→

Are there technical framework for IT sec audit just like there are management frameworks?

Posted on June 5, 2019 by Jason Krs

TL;DR

Are there technical frameworks (processes with checklists ruled by international standards like COBIT, ISO 27000) for IT security analysis/auditing ?

Hello,

Let’s say you’re a software developer. And you need to cr… Continue reading Are there technical framework for IT sec audit just like there are management frameworks?→

Could "Windows Network and sharing center" constitue a security risk?

Posted on May 10, 2017 by Jason Krs

“Windows Network and sharing center” allows to see ALL windows OS based devices on a network (and sometimes more).

My inquiry is how this could represent a security risk ? i.e why would a sysadmin would not configure a GPO … Continue reading Could "Windows Network and sharing center" constitue a security risk?→

Is there an alternative to google blocked searches?

Posted on January 20, 2017 by Jason Krs

I’m trying to do some research on google. I’m using specific keywords like inurl, site, etc…. But google seems to think I’m trying to do harm (actually I’m doing recon on a website for a friend)… So it displays this mess… Continue reading Is there an alternative to google blocked searches?→

Where is the BurpSuite CA HTTPS certificate located?

Posted on January 18, 2017 by Jason Krs

Following this question -> Why are HTTPS requests blocked by Firefox when using ZAP proxy?

I was looking in Burp Suite where I could generate its CA for firefox. I could not see it. I went to Burp website -> https://support.portswigger.net/customer/portal/articles/1783087-installing-burp-s-ca-certificate-in-firefox but they show a url http://burp which is not working on my browser.

Where can I generate Burp’s certifcate ?

Continue reading Where is the BurpSuite CA HTTPS certificate located?→

Where is the BurpSuite CA HTTPS certificate located?

Posted on January 18, 2017 by Jason Krs

Following this question -> Why are HTTPS requests blocked by Firefox when using ZAP proxy?

I was looking in Burp Suite where I could generate its CA for Firefox. I could not see it. I went to Burp website -> https://support…. Continue reading Where is the BurpSuite CA HTTPS certificate located?→

Why are HTTPS requests blocked by Firefox when using ZAP proxy?

Posted on January 4, 2017 by Jason Krs

I have Zed Attack Proxy (ZAP) on my machine and my browser is Firefox. When I route the browser traffic through the ZAP proxy (using FoxyProxy), if it’s HTTPS traffic, Firefox says “Your connection is not secure” and that’s i… Continue reading Why are HTTPS requests blocked by Firefox when using ZAP proxy?→