Collaborate Disseminate
I’m a cyber security student and don’t do server stuffs on regular basis, I was just wondering how to check SSH login logs and found that it can be checked using sudo cat /var/log/auth.log and checked on my server and there were lots of Fa… Continue reading Is someone trying to hack into my server?
I have the task to place an FTP server in the company DMZ for our partners to store sensitive data that can not be sent by mail.
I have chosen the IIS FTPS. I will generate a self-signed certificate for server authentication. Also, I was… Continue reading IIS FTPS Best Practise
I am using the passport-local passport strategy, but in general I have a few questions (sorry for the length). They might be very novice questions so I apologize in advance, but please criticize every aspect of my question an… Continue reading When Deserializing a User in Passport is there any reason not to remove Secrets?
What is the security implication of the APP_SECRET being discovered in a Cordova Mobile app? Steps on how to get the APP_SECRET is described here but there appears to be no clear guidance on what the risk is if it gets exposed.
I am looki… Continue reading Cordova’s APP_SECRET discovered in config.xml file
I am interested in developing a script that uses Scapy to do an Overlapping Fragment Attack on my own IP.
What I want to do is to create 2 fragments and the first fragment is constructed with proper TCP header to pass ACL fi… Continue reading Recreating Overlapping Fragmentation Attack using Python Scapy
In a LAMP environment is it possible for an upload to create a directory/folder and if so how to prevent it via PHP?
I recently built a Downloads Manager that will debut though before I do so I want to know what file extensions I should explicitly disallow from being accepted?
Running LAMP/WAMP the most obvious I’ve come up with since the … Continue reading File extensions that should NOT be allowed to be uploaded
Does the browser setting to restore the previous session on startup pose any security concerns on a machine with separate logins for each user? Are there any security reasons for an organization to block that setting?
No longer having to maintain forensic artifact libraries for every security vendor has provided me time to tackle other repetitive investigation tasks with automation. My next challenge is to eliminate the need for manual updates to the artifact library. As software patches are released, I want to collect the new artifacts and update the database. … Continue reading “No Maintenance Artifact Library” Continue reading No Maintenance Artifact Library
I’m trying to execute pickle shell-code through a download function on a website but I get the following error:
<html>
<h1>ERROR: Cannot load file</h1>
<!–
Traceback (most recent call last):
File “/… Continue reading Pickle Shellcode Import Error