Collaborate Disseminate
We have a domain, erbaharlab.com, which we have bought for our research group.
www.erbaharlab.com contains our research group website, nanospacejm2.erbaharlab.com contains a conference website and there might be other conference subdomains… Continue reading SSL certificates and firewall blacklists
Background: At my place of work, we’re trying to block all unapproved browsers on all Windows machines and the IT Security guys did a search on our internal infrastructure and came up with a list of all the hash values of the installed Ver… Continue reading Does a database with pre-calculated SHA256 values exist for Windows EXEs?
I have a website. It receives visits from about 50000 different ip addresses a day, I know it does not provide 100% protection, but I am thinking of doing an ip block operation on harmful ip addresses written on the internet.
Has anyone tr… Continue reading Block specific spam ip address to my websites [duplicate]
In response to low-hanging fruit attacks (accounts creation, image sending etc.) which request rates goes below our rate-limiting rules and are not blocked, we started blocking AS numbers from countries in which we do not operate. We start… Continue reading Is blocking Autonomous Systems numbers in the firewall a good practice?
Assuming I am creating an online service that allows my clients to send email (using their SMTP credentials), what risks should I consider and how to prevent them?
The sender of the emails will always be the username of the SMTP credential… Continue reading Risks sending emails with my servers using clients’ SMTP credentials
Is there a public database or open-source effort to identify and blacklist hostile botnet IP attempting to hack the global internet?
Personally, I have list of thousands of IPs attempting to penetrate my Linux box on a daily basis. These a… Continue reading Is there a public list of known botnet IP addresses?
How to defend against Badusb devices that act as wireless non-Bluetooth devices on Debian?
I’ve read that the best way to block a device on Linux will be to block it using udev.
So how do I blacklist all wireless devices (non-Bluetooth tha… Continue reading Using udev to block wireless devices on Debian [migrated]
Is there any way to check if my email is on a blacklist or whitelist of some organization? Is there an option to check it without sending an email to that organization?
Because of I don’t want to send at first many email that will go direc… Continue reading checking if my email is in blacklist or whitelist of an organization [closed]
I’m writing an app that tries to check if an email address is already known by a company or not, meaning, if an given email address is in the whitelist or the blacklist of the company’s email server. I thought about analyzing the SMTP comm… Continue reading checking if email is in whitelist or blacklist [closed]
I’m exploiting an SSTI (server-side template insertion) vulnerability in a website written in flask-python.
My problem is that payload for RCE is being limited by blacklist.
I tried everything with a document that I found to be hyper-detai… Continue reading Ignore blacklist characters and keywords in SSTI exploit payload