Collaborate Disseminate
I am trying to investigate openssl S/MIME in order to both sign and encrypt loads to be transfered over an untrusted network.
Loads need to be protected in authenticity and confidentiality.
I have already implemented a bash script rather l… Continue reading openssl smime sign and encrypt loads
I have a completely up-to-date debian bullseye system. However, debsecan tool running on it retrieve more than 800 vulnerable packages.
Does it mean that all of these packages are vulnerable and even if my Debian system is totally up-to-da… Continue reading debsecan still retrieves +800 packages impacted by vulnerabilities on up-to-date bullseye system
I am studying WEP protocol and more specifically fake authentication attack. Man page says
This is only useful when you need an associated MAC address in various aireplay-ng
attacks and there is currently no associated client.
Whereas the… Continue reading WEP fake authentication purpose
During a pentest, I succeeded to compromize a user with low privileges.
As this is a domain user, I decided to run BloodHound based on its credentials to check whether there is a path from this user to domain admins.
I have the own privil… Continue reading how to exploit user which I own according to bloodhound?
I am trying to follow this tutorial to backdoor a simple 32bits PE binary (putty.exe).
The method used is to create a new section (named .test) containing some shellcode, changing the first CALL instruction to JMP on it, exe… Continue reading how to get address of PE section to jump in while backdooring PE binary
I assume one uses one uses dhe on top? / instead of? some other key derivation function. But I am confused as to what that actually means in practice and what the considerations are.
If we look at RFC8446 7.1, is psk_ke usin… Continue reading What is the difference between psk_ke and psk_dhe_ke as defined in RFC8446 4.2.9
TLS 1.3 specifies these three ciphersuites:
TLS_AES_128_GCM_SHA256
TLS_AES_256_GCM_SHA384
TLS_CHACHA20_POLY1305_SHA256
all of them both feature authenticated cipher modes and and a hashing algorithm at the end. What is th… Continue reading Why do cipher suites with message authenticated cipher modes also specify a hashing algorithm
I’m trying to create a connection between an openssl server and client on my machine using ECDHE-PSK-AES256-CBC-SHA384 What am I doing wrong with these commands?
openssl s_server -cipher ECDHE-PSK-AES256-CBC-SHA384 -nocert -psk 123456
ope… Continue reading Using PSK between an openssl server and client
I am trying to block privileges escalations from unprivileged accounts such as www-data.
Basically, if my web server is getting compromised, crackers may find ways to escalate (vulnerabilities found in sudo? root password re… Continue reading selinux : blocking sudo and su usage by placing user into user_t profile
My bank has me use a credit-card-sized smart card and a USB card reader to authenticate for online transactions. I want to optimize for size when I travel light.
I see that there are small SIM card readers, designed to read data from a c… Continue reading Are all smart card readers the same?