Collaborate Disseminate
I was signing up for Shop and Ship, and they asked me to upload my passport, driver’s license or my national ID, and the reason for that, as they say, is to clear customs. Is it safe to upload?
Image of the request: https://i.stack.imgur.c… Continue reading Shop and Ship is asking me for my ID card. Is it safe? [closed]
I’m thinking of using Suricata or Snort.
I can’t do anything myself, so I’m going to ask a freelance security engineer to do it.
If the engineer is skilled, once suricata or snort is set up, will it work fine in one setup?
at the moment,th… Continue reading What kind of engineers should I look for to implement Suricata or Snort?
The number of devices in my home network keeps growing: Apart from my gaming PC and our home office notebooks, we have the kids’ tablets, all our smart phones, a smart TV stick, some WLAN peripherals, etc. The more devices we get, the more… Continue reading Intrusion detection in a small home network
Can someone please explain following message
Message: IPS Alert: Potential Corporate Privacy Violation. Signature ET DNS Non-DNS or Non-Compliant DNS traffic on DNS port Reserved Bit Set. From: 192.168.1.11:6889, to: 46.4.77.183:53, proto… Continue reading What does "Non-Compliant DNS traffic" mean? [closed]
I read about Domain Fronting technique, it bypasses network security filters but requires a relatively complex configuration (having evil.com pointing to a.cdn.net, and good.com pointing to b.cdn.net, then we send a request to good.com whi… Continue reading Bypass network security filters with CDN
My organisation has a Network Detection and Recovery (NDR) but does not have an WIPS/ WIDS. Because NDR is usually hooked to the core switch, is this enough to detect and mitigate against threats coming through the wireless LAN access con… Continue reading WIPS and IDS vs NDR
I am trying to wrap my head around the difference between the different flow options in Snort.
There are four directional flow options:
Option Description
1) to_client Trigger on server responses from A to B
2) to_server Tri… Continue reading Difference between to_server and from_client in snort
I was wondering if there are any open source tools that detect if a host in a network is trying to install a software or pypi package?
Continue reading IDS To Detect software installation in CentOS [migrated]
I’m using the open source version of Tripwire on Ubuntu 22.04. Right now when a file is modified Tripwire will document this in the integrity check with an "Expected" vs "Observed" section, outlining things like md5 cha… Continue reading Can you configure Tripwire to produce an actual diff between modified files
My goal is to evade IDS/IPS detection and scan the target with nmap. If the scan is detected, the target seems to stop responding for 10s. I think that IP Fragmentation Attack is exactly what I need.
So I tried to scan with -f and -ff flag… Continue reading Does fragrouter work with OpenVPN?