Collaborate Disseminate
Many outline access keys use a random port but some do 443, I’ve found out since port 443 is for http its harder to find out that port is using a vpn.
So the question is, why don’t other Outline servers use port 443 instead of a random por… Continue reading Best port to setup Outline VPN for obfuscation
I was looking through my Apache log files and besides other GET requests with response status codes of 4XX (error), I’ve found this one which has a 200 (success) response status code:
"GET /?rest_route=/wp/v2/users/ HTTP/1.1" 200… Continue reading Understanding suspicious HTTP GET Request
I’m trying to figure out how secure a host firewall is, hence the question in the title.
I read that many firewalls allow outbound connections to port 80 to allow browsing, would that be enough for the malware to communicate to the control… Continue reading If a computer gets infected with malware, can the host firewall block the malware from communicating back to its controller on the internet?
One of our company sites redirects all bad URLs back to the login page which is required to even access the site. Is this insecure? It feels like it may cause some weird issues as I have never seen this before or at least be bad practice. … Continue reading Is redirecting back to login page bad practice/insecure
Should you compress the body of a HTTPS response before passing it to openssl? C++
I am aware of the attacks that are made possible by compressing a HTTP(s) response as explained over here. But according to Compression in HTTP you should c… Continue reading Should you compress the body of a HTTP(S) response before passing it to openssl? C++ [duplicate]
I’m struggling to grasp how QUIC implements handshakes in contrast with 3 handshakes in TCP. I came across with this picture on wikipedia. As QUIC uses UDP, I don’t understand how the protocol ensures that a packet was delivered and a clie… Continue reading How does QUIC provide delivery guarantee [migrated]
The main pursuit of this post is to find a way to view the HTTP(S) Headers that are outgoing from my open source proxy server, Tinyproxy. I would like to accomplish this with PHP if possible, but will use any approach that works.
Very brie… Continue reading How to View HTTP(S) Headers sent FROM tinyproxy [closed]
Relatively new to the DFIR scene. We have an assumed breach scenario playing out right now and I noticed that there were some GET and POST requests coming from a malignant dll in a users temp directory.
Cool, the strange thing is that the… Continue reading malicious dll making GET & POST requests to legit sites. What could it be doing?
Relatively new to the DFIR scene. We have an assumed breach scenario playing out right now and I noticed that there were some GET and POST requests coming from a malignant dll in a users temp directory.
Cool, the strange thing is that the… Continue reading malicious dll making GET & POST requests to legit sites. What could it be doing?
I have a desktop app that takes a file format and parses it to get some JSON data that is then send to a server.
My problem is figuring out if it is possible to somehow parse the data on the client and then send this JSON data to the serve… Continue reading Parse a File on Client and Send to Server Without Client Manipulating Data