Collaborate Disseminate
I am trying to replicate some information available on the Shodan Monitor Dashboard using the Shodan API.
Specifically, I would like to retrieve the list of vulnerabilities by IP, or IPs and their associated vulnerabilities. IPs are part o… Continue reading How to query Shodan’s API to get the list of vulnerabilities per IP
Multi Factor Authentication is obviously a lifesaver for passwords, so things that can easily leak (peeking, guessing, stealing, …). A second/third/… factor of another kind considerably reduces the risk.
This is less obvious for hardwa… Continue reading Do you know of a reasonable study on MFA value as a function of the nature of the first factor?
CVE-2022-22720 (Apache HTTP Server 2.4.52 vulnerability) mentions that the risk is with HTTP Request Smuggling.
My understanding of HTTP Request Smuggling is that a front server A transmits to a back server B a request. That request can be… Continue reading Is a HTTP Request Smuggling a concern when using load balancers?
Azure Active Directory generates certificates for federated SSO that have a lifespan of 3 years.
in the case of an on premises AD, this is two years by default, and can be changed.
Are there any technical/security reasons why such a length… Continue reading Are there specific reasons why ADFS certificates are generated for 2 years?
I recently saw an unsolicited report done by a security(1) company A about the security posture of company B.
I got interested by one of the points in the report about analysis of malware activity from company B.
It was a table of the malw… Continue reading How can IPs connecting to a C&C become public knowledge? (the C&C is sinkholed) [closed]
When installing JavaScript modules, I sometimes see that some of them have security vulnerabilities.
It made me wonder about the kind of vulnerabilities this could be, and how they could be exploited in the context of the browser. That is … Continue reading What is the nature of vulnerabilities in JS modules used client-side?
GitHub Pages allows to set up a public page under <user>.github.io that can optionally be customized with a personal domain. In order to do so:
GitHub must be set up to recognize that an incoming call referred to by a non-GitHub dom… Continue reading How is a DNS wildcard a security issue for GitHub Pages?
I am considering the security risks to have a standard user added to the Administrators group on an enterprise Windows 10 machine that is dedicated to that user. This is related to security only, so breaking the OS of a wrong manipulation,… Continue reading What are the security risks to have admin rights for a user account on Windows 10?
I am wondering about the (pragmatic) risks of a local split-tunelling of a corporate VPN.
Local split-tunelling is the case where only the route to the local network is left open, and the rest of the traffic is routed though the VPN. This … Continue reading What risks to take into account for local VPN split-tunelling?
All the Multi Factor Authentication (MFA) mechanisms I have seen were installed on the same “authentication node”. What I mean by that is that a single service (say, an authentication web page, or a VPN access) were doing all the MFA check… Continue reading Does all of MFA need to be on a single authentication node?