Collaborate Disseminate
I have here a situation where if I share this file with someone on the internet, the file may contain: 1. data pointing to the directories where it is stored on my computer, along with 2. the name of the computer (the “Device Name” under “… Continue reading How risky is it to let someone know the name of your Windows PC?
I have here a situation where if I share this file with someone on the internet, the file may contain: 1. data pointing to the directories where it is stored on my computer, along with 2. the name of the computer (the “Device Name” under “… Continue reading How risky is it to let someone know the name of your Windows PC?
Lets say the target company says only *.target.com is in scope.
If i’m doing hosntnames recon, then its easy to stay in scope as only subdomains of target.com is in scope e.g dev.target.com, admin.target.com.
But i have heard pentesters ta… Continue reading How is IP reconaissance different from host names reconaissance?
I am using a mobile ISP to access the internet. I noticed something really weird: most sites (e.g. www.whatismyip.com, https://www.iplocation.net/http-browser-header) report my IP as let’s say IP A: XX.XX.XX.57.
However, a site that I’m ho… Continue reading Is different X-Forwarded-For values per site an indicator for something malicious?
I was setting up firewalld on an enterprise server and came across their concept of firewall zones. I figured I can easily use them and their source property to restrict access to SSH to only the internal network and my home public IP addr… Continue reading Are country IP address blocks officially standardised and can they be reliably used for access control?
I pay monthly for a VPN. However, I browse online while connected to my university WiFi which requires authentication to use. The WiFi is open (no password directly) but when someone connects to it a page pops up and we have to input our u… Continue reading Is a VPN effective when connected to WiFi network that requires authentication?
In a web app, would storing a users IP address in a session be more secure then storing it without it? I think that if I store a JWT in their cookies that includes their IP address for session authentication, it would prevent attackers fro… Continue reading Would storing the users IP address in a session token be more secure?
Is there anywhere that provides a list of CIDR ranges for web hosting providers, data centers, cloud computing services etc.? It could be free or commercial.
I get a lot of web scraping from these IPs, and would like to block as many as po… Continue reading CIDR ranges for web hosting providers, data centers, cloud computing etc [closed]
When I was on my activity page on my activity google (The page where you can check your google history) , my AVG detected an phishing site and aborted the connection even when I didn’t click on it. I was simply going through my history/act… Continue reading Preloading Google MyActivity
So I’ve found a way to get the IP address of a user on a popular website without taking them out of said website (i.e. without making them click any links) by making them (the user) send a request to an arbitrary url, and by doing this you… Continue reading Are there any security issues with getting the IP address of a user? [duplicate]