Collaborate Disseminate
I’m setting up firewalls on a few computers and am stuck on what logging I should be doing? I spent a few days Googling, but came up with little info. I have totally run out of ideas on where to look next to figure this out. Any hints woul… Continue reading What Logs Do I Need When Setting Up Firewall
After making requests to certain domain and their responses being either 4xx or 5xx status codes, the server response header shows Akamai Ghost.
Is this response coming from Akamai’s firewall or their CDN servers?
I have a Fortigate device and a Nessus vulnerability scan set up. When I ran the scan, it said that there was some kind of .htaccess~ file in my Fortigate device. This is the vulnerability it found.
The problem is, I can’t even find a file… Continue reading Nessus vulnerability 11411 in Fortigate
How you would bypass the following firewall rules to perform a TCP scan identifying service ports in the open (NOT open|filtered) state for hosts behind the firewall using nmap or metasploit:
• The firewall blocks incoming SYN-flagged pack… Continue reading How to bypass a firewall with the following rules and perform a TCP scan?
Suppose there is a remote server 203.0.113.123 listening on port 1337 that is running a vulnerable application. I have engineered a sequence of inputs for that application that result in a shell. I can generate that input with a Python scr… Continue reading Use a custom Metasploit exploit
I am in the process of setting up a KVM host, the machine will be directly exposed to the Internet, with no hardware firewall.
I would like to know how to secure it on the network side, so far I have two ideas in mind:
Harden the host as m… Continue reading Best way to protect a KVM host
I’m totally not a Microsoft Windows professional. When it comes to Windows, I’m just a normal user. And as this user, I’m wondering why Microsoft isn’t shipping a full potential Windows Defender by default. According to a few Blogs and IT-… Continue reading Is the "Windows-Defender-Hardening" safe to perform? [closed]
I want to block some ports access to the internet but still allow internal hosts to access the port with firewalld. There is another firewall between the internet and the host but I want to add a firewall on the host too.
Do I block the po… Continue reading firewalld rules that will block traffic from internet but allow internal traffic
Question#1
whitewinterwolf answer says
the circuit level gateway CHANGES the source ip address of outgoing
packet(from the internal network point of view).
Two different TCP connection are formed, inbound and outbound.
Question#2
I am playing with a Linux CTF server and came across a kind of reverse connection block. I uploaded a php webshell, gained control of www-data user and tried to make a reverse shell.
Possible a UFW block at 1024~UP ports. In this server, I… Continue reading I cannot make a reverse connection