Collaborate Disseminate
I have a Samsung A6 that has developed a fault that means it will only intermittently charge whilst it is turned off (the charging symbol comes on for a few seconds, then turns of for a few seconds, repeats … charging is very slow so it … Continue reading Samsung Devices Appear to Communicate Via Mains Wiring
I Am trying to understand a little bit better behind the scenes on bypassing aslr by reading the bytes in the memory of a process, but how can I make an example of an info leak in WIN32? my code does the leaks of bytes , but how can I chec… Continue reading what is an example of out of bounds read in order to leak sensitive information?
Can the owner of the google form see the time when I have submitted that form? I mean by the owner, the one who has done the form that I am filling which is the same one that I am sending it to.
I recently watched a 1980s computer television programme about the problems of spying. Basically, they showed how anyone could buy relatively cheap and common hardware and then be able to sit outside a house, or drive around in a car, and … Continue reading Why did I never see those "spy signal jammers" for sale?
The ANPR camera system’s internal management dashboard could be
accessed by simply entering its IP address into a web browser. No
login details or authentication of any sort was needed to view and
search the live system
With the apikey request made to the server, I can access any user’s ssokey information.
Does this cause a security breach ? So with this ssokey, is user account security compromised in terms of information or access ?
Continue reading Does knowing the ssokey constitute a security breach?
While doing penetration testing for a client I stumbled upon a security incident. CloudFlare promises to hide the origin IP address when using its DNS.
I went to dnsdumpster.com, inputted my client’s domain and there I found… Continue reading Did I just find a bug in CloudFlare or is this a feature?
Just found my current company code on the plain internet.
We are talking hundreds of thousands of lines of scripts and configurations, including database schemas and a fair amount of internal information. Looks like an archi… Continue reading Ex-contractor published company source code and secrets online
They way I understand HaveIBeenPawned password API is that it’s a safe system because the site “can’t do much with my partial hash even if they wanted to”. But is that really true?
Is the following scenario feasible?
… Continue reading Is super paranoid use of HaveIBeenPawned password API going to help?
I’ve been doing a security audit and found out you can easily identify host roles and running services just by their computer name (using nslookup).
I would like to report this so that they use less obvious computer names an… Continue reading Computer name naming convention for security