Collaborate Disseminate
A one-liner exploit for X, the danger of searching for Chrome in Bing, exposing your Docker API, you can find sensitive data in the cloud, exploit users by embedded videos in Word documents, dead web apps, hacking BGP routes, a new DHCP vulnerability a… Continue reading Bing, Chrome, and Docker API – Hack Naked News #195
Automatic DNS registration and autodiscovery functionality provides an opportunity for the misconfiguration of networks,resulting in a loss of confidentiality and integrity of the network if an attacker on the network adds a specially configured proxy device. Continue reading VU#598349: Automatic DNS registration and proxy autodiscovery allow spoofing of network services
Reverse engineering the Toshiba FlashAir SD storage card allowed a researcher to execute remote code – and could’ve allowed him to add other malicious or practical features. Continue reading Hacking For Sport: A Journey in Reverse Engineering a Toshiba Wireless SD Card
Basically I have a local network and an IPCam (with its own storage) in it. Due to some practical limitations, I cannot use technologies such as AP isolation or VLAN to isolate low-integrity and high-integrity devices.
Most places I’ve worked at consider DHCP to be a bad idea for management networks, or “secured” networks. I’m curious as to why that is.
Consider this scenario…
There is an ISCSI storage network, say, 10.1.1.0/24
Clien… Continue reading Why is DHCP considered insecure?
If a networking embedded device that has no routable configuration but DHCP enabled and receives no response from any DHCP server in the network – should the device switch over to Link Local Addressing mode? IN such a case ho… Continue reading When to switch to Link Local Address
The vulnerability allows an attacker to execute a malware or other payloads on a client machine by sending malicious messages from the DHCP server. Continue reading Critical Linux Flaw Opens the Door to Full Root Access
A command injection bug in Red Hat’s DHCP client could allow an attacker to run any command on your computer. As root. Continue reading RedHat admins, patch now – don’t let your servers get pwned!
IP address obfuscation is a well known approach (for example, MLA
Kewley, Dorene, et al. “Dynamic approaches to thwart adversary intelligence gathering.”)
The approach suggested, is mainly used in networks with static IP add… Continue reading IP address obfuscation [on hold]
Can someone try explaining (in simple terms) how Wi-Fi routers push nameservers and routes to my resolv.conf? I’ve noticed it gets changed automatically as I move between different Wi-Fi networks. I think it’s related to dnsm… Continue reading How does resolv.conf work?