Collaborate Disseminate
I’ve seen that hostapd-wpe supports the following EAP types for impersonation:
1. EAP-FAST/MSCHAPv2 (Phase 0)
2. PEAP/MSCHAPv2
3. EAP-TTLS/MSCHAPv2
4. EAP-TTLS/MSCHAP
5. EAP-TTLS/CHAP
6. EAP-TTLS/PAP
I think that is usin… Continue reading How to change EAP configuration in hostapd-wpe
Using a bridged router so that I can set the IP settings directly on the gateway server. We have two such routers for two different IPs (we needed a secondary IP but the ISP only provided it through a new subscription.. I kno… Continue reading Is this ISP IP address assignment issue a vulnerability?
Using a bridged router so that I can set the IP settings directly on the gateway server. We have two such routers for two different IPs (we needed a secondary IP but the ISP only provided it through a new subscription.. I kno… Continue reading Is this ISP IP address assignment issue a vulnerability?
I am testing linux configuration security checking tools recently and I downloaded a tool called lynis. One thing it checks is the default run level. However, even after reading some info about run level, I still dont underst… Continue reading Linux runlevel configuration security
I have to store password to some other system in config file in my Java application (web app running on Tomcat). What are my options to protect it (both at rest and in memory)? (Hash is not an option)
at Rest: if I will encr… Continue reading Securing password in Java (config file and memory)
I have recently got into cyber-security and I have been looking at ways to configure a router. However, the sources I have found have been on how to configure a router and not things you can do to configure the router.
I am looking through the CIS recommendations for debian 8.
In a CIS compliance test using nessus, I see that the test for disabling ip forwarding has failed. But when I look at the system, I can see that it is in fact disabled.
$ cat /pro… Continue reading CIS recommendations – disabling ip forwarding
I’m trying to configure user based authentication for ActiveMQ, and I’m pretty confused about the many different files involved in this process. I’ve read ActiveMQ’s security page, but I still have several questions.
UltraVNC repeater versions prior to ultravnc_repeater_1300 do not restrict usage by IP address by default and cannot restrict by ports,which may be leveraged to induce connections to arbitrary hosts using any port. Continue reading VU#735416: UltraVNC repeater does not restrict IP addresses or ports by default
The online tool at Qualys for testing webserver SSL configurations, https://www.ssllabs.com/ssltest/index.html, produces a list of codeslike TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_CAMELLIA_256_CBC_SHA etc.