Collaborate Disseminate
There’s a common misconception that cloud providers handle security, a relic leftover from hosting providers of previous decades. The truth is, cloud providers use a shared responsibility model, leaving a lot of security up to the customer. Stories of … Continue reading Securing AWS Management Configurations By Combating 6 Common Threats
I have a .NET desktop application with an SQL Server 2016 Express SP1 back end running the latest cumulative update 3.
I have enabled TLS 1.3 on both server (Windows Server 2012 R2) and client (Windows 10 Pro) machines via the registry i… Continue reading Is TLS 1.3 available and if so, how is it enabled?
I am developing a script in PHP that is to be used on many different server environments and must store database details somehow without an option for environment specific setup. What is the recommended way for the plaintext… Continue reading How to properly store the password for the mySQL database?
In ASP.Net, the normal way of encrypting an object ( as an exmaple a user cookie in the server side ) is read the shared key located in the machine.config file. The machine config file contains following config entries.
<… Continue reading ASP.Net usage of the Machine.config file
I want to protect my networktraffic in unencrypted/open WiFi-Hotspots in hotels. For that reason I setup my Qnap TS-110 as a OpenVPN-Server. All other services are disabled.
I configured my Qnap NAS like in this video:
https… Continue reading Qnap TS-110 as OpenVPN-Server – Is this generated client configuration secure?
http://thehackernews.com/2017/06/linux-buffer-overflow-code.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9445
“that could allow remote attackers to potentially trigger a buffer overflow”
Can someone def… Continue reading Effects of CVE-2017-9445?
I would like to suggest to the client which one EAP method and inner authentication to use.
I’m using hostapd to create the AP.
I’ve tried by removing some methods in the hostapd.eap_user but I simply managed to make those … Continue reading Force/Suggest the client to use one specific EAP method
I’m trying to change the default EAP type in hostapd but I am not able to understand how to do that.
Here’s what I’ve found reading the hostapd.conf file:
> # NAI Realm information
> # One or more realm can be adverti… Continue reading Change default EAP type in hostapd
I used the metasploit module auxiliary/admin/mysql/mysql_enum for enumerating mysql db.
This is the text of results:
Allow Use of symlinks for Database Files: YES
What is symlinks for database files? can I access to anothe… Continue reading Linux symlink to database file
I’ve seen that hostapd-wpe supports the following EAP types for impersonation:
1. EAP-FAST/MSCHAPv2 (Phase 0)
2. PEAP/MSCHAPv2
3. EAP-TTLS/MSCHAPv2
4. EAP-TTLS/MSCHAP
5. EAP-TTLS/CHAP
6. EAP-TTLS/PAP
I think that is usin… Continue reading How to change EAP configuration in hostapd-wpe