Collaborate Disseminate
I know that bluetooth supports different security modes and levels (Core Spec Vol. 3 Part C, 5.2). Dependent on these modes and levels, certain encryption and authentication is required.
How do I find out what my device is a… Continue reading How to test actually implemented bluetooth security level (BR/EDR)
I want to test a specific device connected to different networks using fuzzing. For each network interface, there are different services listening using different protocols, with open specification.
As i can not fuzz every n… Continue reading Criteria for selecting fields and network protocols for fuzzing
In this 35C3 talk, it is said that while it is possible to manually inspect whether a package optimizes away memset() that clears sensitive memory, doing it automatically would be challenging. Assuming that the binary is comp… Continue reading What makes detection of optimized-away memory clearing non-trivial?
I live in AZ and Cable One gave me a new ip address in MO, it is messing up my tv programs. They say it may take them up to 4 weeks to change it. Is there any way to speed them up?
Continue reading how long does it take an isp to change an ip address? [on hold]
I need to compare several DAST / IAST tools.
Therefore I want to deploy three different vulnerable applications such as WebGoat.
Each DAST / IAST tool will target those three vulnerable applications.
For comparison reasons… Continue reading Vulnerable applications including list of existing vulnerabilities [on hold]
public class ExcelDataConfig {
XSSFWorkbook wb;
XSSFSheet sheet1;
XSSFSheet sheet2;
public ExcelDataConfig (String excelPath) {
try {
File src = new File (excelPath);
FileInputStream fis = new FileInp… Continue reading i am trying pass username and password from sheet 1 and add user data in sheet 2 but its getting error [migrated]
Behind the magically populating dashboards of ShiftLeft lies a complex web of services. We have the state-of the art code property graph generation and querying systems that run on each incoming code artifact, squeezes the security DNA from it and uses… Continue reading Efficiently Testing Pipelined Microservices
I need to devise test scenarios to test according to the ISTQB standard (or there abouts). Testing should focus on functional tests such as certificate path validation, ensuring keys are backed up etc.. but not the underlying… Continue reading Testing of a Public key Infrastructure
After automated scan on my web application I have the result that “Server leaks inodes via ETags, header found with file /icons/README, fields: 0x16a4 0x438c0000000”.
I’ve read about ETags but I don’t see any security risk related to this… Continue reading Security scan result – Server leaks inodes via ETags
We have a set of internal Python/Django web applications that are pretty well tested functionality-wise, but from time to time we do discover vulnerabilities and, specifically, places where SQL and other types of injections m… Continue reading Continuous SQL injection testing