Collaborate Disseminate
I have a lab I am dealing with and need help to get a meterpreter session on this win 7 system.
My buffer overflow works great back to the pivot box. However since my attack box is not reachable from the subnet I cant find a way to get the… Continue reading How can I get a meterpreter session back to my attack box from subnet via pivot?
Today I have a web application that needs to store the user’s email and password, so that when he opens the login screen, the authentication is done automatically.
For this, our application saves the email and password in localStorage, unf… Continue reading Store login credentials securely with JavaScript [duplicate]
I am trying to identify, why some of my e-mails are being marked as spam by recipients, and have therefore set up SPF and DKIM. In order to check that they can be verified, I set up aggregated DMARC reports.
When looking at one report, I c… Continue reading DMARC aggregated report SPF domain field
I wouldn’t have thought that certificates could be used to track my history, I thought they were essentially login credentials, but I installed some to use my Uni wifi and now my google pixel 3 has a warning that says "Network may be … Continue reading I installed internet certificates on my android to connect to uni wifi, can they see what I’m doing at home?
If you were to delete a veracript volume, either yourself or as someone trying to break in, can that information be recovered from a memory stick? Also if the volume is recoverable, would the encryption be compromised?
Continue reading Can a deleted veracrypt volume be recovered and decrypted?
I read this tutorial to create an OpenVPN server, it worked perfectly and was configured correctly, using a dedicated server to create the certificates it requires.
Now I want to create a new OpenVPN server, with a different IP to access o… Continue reading Is duplicating an OpenVPN server secure?
Can a ransomware attack on a user’s local machine affect the server of the company he works for, even if that server is in the cloud (VPS) and can only be accessed via SSH (with a key file, no password)?
Team environment for remote adminis… Continue reading Ransomware and cloud servers
I was reading a documentation that suggests blocking the computer from transferring files to an external device, such as a HD, Camera or Pen Drive, allowing only reading.
Is this type of protection still valid? Because today anyone can for… Continue reading Block file and data transfer out of a device
I have a server that is accessed only via local network in my VPS, as it is local it does not have a domain, it is accessed only via IP (ex.: http://localhost/routine.php).
This server will only be accessed via curl through my other server… Continue reading Do I need to create SSL for HTTPs over a local network?
I have an API that requires a security token to run.
Is it possible to use Fail2Ban or ModEvasive to block access from IPs that often try to access the API with an incorrect token?
I use PHP to receive these requests, is it possible with i… Continue reading Block many wrong requests via PHP