Collaborate Disseminate
I have a host with different bridges and a daemon not only to listening on a certain IP, but it is also attached to the bridge. I would like to communicate with this daemon with traffic coming from another bridge/an interface not part of … Continue reading Can iptables or route be used to eg double-DNAT so traffic appears to be from a different bridge?
Basically, I am having an <a> tag with target set to _blank, where an attacker has control over the href parameter, thus possible inserting a javascript tag, like the following:
<a target=”_blank” href=”javascript:… Continue reading XSS with <a> tag with target="_blank`
I (from EU) recently attended a scientific conference in China. As part of the goodies there is a decent looking thumbdrive which has the conference logo printed on it. It seems to be in original packaging, so I guess somebod… Continue reading Should I use a thumbdrive I got on a conference in China? [on hold]
I have come across something of a curious situation that a website (Palestinian News Network) has a valid TLS certificate (see here) but that the website always forces loading of the site via http://.
(This includes the main domains as wel… Continue reading Is there a way around HTTPS being redirected to HTTP?
I’m currently trying out a simple format string vuln exploit. The target program looks like this:
int main(int argc, char *argv[])
{
char buffer[1024];
strncpy(buffer, argv[1], sizeof(buffer));
printf(buffer);
… Continue reading Shellcode as part of format string buffer
Last year (2018) I was accused of torrenting Files whilst in my residence in Germany. I have never torrented any file ever. One thing that stands out is that during the same day CyberGhost (the VPN [paid license] provider I use) installed … Continue reading Torrented files under my IP address
Goal is to prevent access and control by hackers or see remote window by replay
A. what are the security risk in 4 cases of using ASA and firepower with amazon?
B. which case is the most secured?
C. should i apply firepowe… Continue reading what are the security risk in 6 cases of using ASA and firepower with amazon?
Initial try in bash
nmap -sL scanme.nmap.org | sed -e ‘s/Nmap scan report for //g’ | head -n -1 | tail -n +3 | awk ‘{system(“nmap -sV -Pn ” $1)}’ | grep open | awk ‘{system(“printf ” $1 ” | cut -f1 -d\”/\” ; printf ” $3 “;… Continue reading how to use one line of bash command to apply script with nmap and do it in bash and ansible? [on hold]
As I understand it, with CORS, on cross-origin requests, the browser will send an Origin header, and if the origin isn’t allowed, the server will still send back a 200 response with a non-matching Access-Control-Allow-Origin … Continue reading Why return successfully to non-allowed origins
Backgound
Reading this article on BBC News dated 29th March 2018, the company in question suffered a data breach and up to 150 million accounts usernames, email addresses and passwords were potentially stolen.
The company s… Continue reading If a password is encrypted and then the encryption is stolen is it best practise to change plaintext passwords?