Collaborate Disseminate
I have an AWS virtual machine running a web application on IIS that connects to a SQL Server database (on the same machine). Recently, I have noticed that there are a plethora of failed login attempts on my SQL Server databas… Continue reading Windows Firewall blocking local access to SQL Server?
This question already has an answer here:
How to prove some server sent some file over HTTPS
3 answers
Can you prove to a 3… Continue reading Is it possible to save a verifiable log of a TLS session? [duplicate]
I know you can use -addext with openssl req….. but, are you able to do that with openssl ca….? I would like to be able to add Subject Alternative Names with only one command without having to edit the configuration file.
… Continue reading Specify Subject Alt Names in OpenSSL CA
I am using VMware and have 3 VMs all on the NAT network with DHCP. All three machines can ping each other. From one Windows to the other Windows, I can RDP into the 192.168.190.130 Windows machine just fine.
I want to confirm that hydra wo… Continue reading Hydra test with Windows RDP taking a very long time [closed]
I’m migrating Dovecot from an Ubuntu 14.04 server to Debian 9. All good apart from one client using Entourage 2008 which now no longer works – my dovecot log reports:
failed: error:1417A0C1:SSL routines:tls_post_process_clie… Continue reading Debug OpenSSL connection from client to resolve ‘no shared cipher’ problem in Dovecot
I am attempting to learn about buffer overflows. I have written a simple C program that calls a function called checkpw() which allocates a char array of 10 bytes large. When I analyze the op code I see that it actually alloc… Continue reading Bufferoverflow example on 64 bit Linux
I have 3 Firefox profiles set up (“home”, “work”, and “tmp”) and one Chromium profile. I currently have Firefox open in the “home” profile and Chromium open. When I started another instance of Chromium with chromium –temp-pr… Continue reading How can Chromium access my Firefox history?
This question already has an answer here:
Why do people still use/recommend MD5 if it is cracked since 1996?
8 answers
Google have announced the discovery of a SHA-1 collision between two PDF files with distinct content.
While SHA-1 hashes are no longer permitted for SSL/TLS certificate fingerprints, and other measures would prevent certific… Continue reading What are the implications of a SHA-1 collision being found?
I’ve come across a few sites (but not many, https://www.bankofamerica.com made me think of this) that convert the credential fields to password fields that were not masked fields (e.g. Username field) before transmitting (e.g… Continue reading Benefit of converting credential fields to password fields