Collaborate Disseminate
I can capture using YAF and SiLK nmap (TCP) on my IP, however, I am unable to capture any UDP “flow.”
Isn’t YAF and SiLK suppose to be able to at least assign the first UDP packet as part of a flow? Is there a specific para… Continue reading YAF and SiLK fail to capture UDP flow
For school us students have laptops that we get to take home to do our school work. Can they see what websites you are on when you are on your own network and in incognito mode
Continue reading Can school see what I am doing on my school laptop in incognito mode [on hold]
We have started to develop a multi-tenancy product.
The product will be deployed in the cloud.
Should we encrypt the product data?
Should the data for each tenant be encrypted using its own key?
Added
Each tenant stores the… Continue reading Should we encrypt data in a multi-tenancy product in the cloud?
I am thinking about building a Linux Snort machine that can listen to both WAN and LAN traffic.
Setup I am thinking about:
Snort computer with two NICs
One NIC connected to hub/tap outside firewall (WAN)
One NIC connected to hub/tap insi… Continue reading Can dual NIC Snort machine cause threats to bypass firewall?
In my application, users have certain roles which have permissions. These permissions dictate which UI elements are available to them at the home screen. Many of the elements link to other pages, which many users cannot see b… Continue reading User can’t navigate to webpage through the UI due to permissions, but are able to navigate to page by pasting the URL. How do I protect against this?
I need clarifications regarding CVSS:
What is better for the references?
CVSSv2 or CVSSv3?
V3 is new, but V2 is mature.
Why there are differences in CVSS scores between NVD NIST repository and Red Hat repository?
For example:
https://a… Continue reading Clarification regarding CVSS
I am in promiscuous mode and I am using my one computer to sniff the network traffic. On both a separate computer and my phone I logged into the same http site and entered in some test credentials to see if the traffic would … Continue reading Wireshark – I can’t see traffic of other computer on the same network in promiscuous mode
The PrimeFaces Expression Language Injection explained here:
http://blog.mindedsecurity.com/2016/02/rce-in-oracle-netbeans-opensource.html
Will happy for the clarification about the remediation:
Why not enough to filter all … Continue reading Clarification about PrimeFaces Expression Language Injection
I am trying to build a payload for inserting as an obfuscated code into a Word document, which will create a listener on the attacked machine and will allow me to execute some commands (not through .exe file as shown in tones of videos)
I… Continue reading LPORT question – I seem to not understand some concepts
Today, the owner of the rather popular Web Developer toolbar noticed it had been hijacked and replaced with a malicious version. He disabled it, but the malicious version (diff) had been in the wild for at least an hour alrea… Continue reading What are the effects of the Chrome Web Developer extension hijack?