Collaborate Disseminate
Can someone please explain to me the difference between the USB Rubber Ducky and the Bash Bunny? I understand that the Bash Bunny can emulate more trusted devices then just the keyboard like the USB Rubber Ducky, but why does that make it … Continue reading Difference in attack vectors between Bash Bunny and USB Rubber Ducky
Has anybody heard of this? I have a pair of counterfeit AirPods that shipped from Russia, the use of which has led to some odd behavior. I suspect them as a malware vector. I wonder if once paired, they are trusted the way, say, firewir… Continue reading Are counterfeit AirPods a risk vector for malware? [closed]
There are many talks about why someone should not use WPS because of the attacks it allows. But does it also prevent attacks? For example, if guests want to join my network instead of giving these people my password, which is personal or t… Continue reading What type of attack does WPS prevent?
Phishing attacks continue to plague organizations across the globe with great success, but why? Cybercriminals are targeting the human element of organizations. Additionally, they are developing techniques to use an…
The post The Business Value of t… Continue reading The Business Value of the Social-Engineer Phishing Service
When I used Chrome today via Burp, I noted that, apart from the tracking requests, three random HTTP HEAD requests are sent each time I open the browser.
I already found
How to find a process that is sending HTTP HEAD requests
for this an… Continue reading Can Chrome’s HTTP HEAD requests be misused to launch an attack?
As with anything to do with software, there have been many documented security vulnerabilities that relate to media files. While many of these exploits take advantage of attributes or variables of specific files types, such as metadata or … Continue reading Malicious payload in raw media file content
I am writing an app that serves images to clients.
The app is written mostly in python. I store the images in AWS s3 and serve the clients them directly from there.
Am I vulnerable to buffer overflow attacks?
If an image is bigger than 500… Continue reading Does limiting size of images prevents buffer overflow?
Sources said the DoE suffered “damage” in the attack, which also likely extends beyond the initially known SolarWinds Orion attack vector. Continue reading Nuclear Weapons Agency Hacked in Widening Cyberattack – Report
I am learning about InfoSec and I always found these two terms
Attack Pattern
an attack pattern is an abstraction mechanism for describing how a
type of observed attack is executed
Attack Vector
a method or pathway used by a hacker to a… Continue reading Difference between Attack Pattern and Attack Vector
Well I’m not a developer so I’m here to resolve a specific question.
I have been investigating this subject for a while now and I need and opinion from experts or developers which really understand about application development (I know som… Continue reading Can someone impersonate you on WhatsApp?