Collaborate Disseminate
As I understand, code obfuscation is used to make reverse engineering difficult/hard for the adversaries/red team.
Now if I use a source code obfuscator where a .C/.CPP file is used as input and an obfuscated .C/.CPP file is generated, sho… Continue reading Code obfuscation and source code repositories
For an embedded IoT product running linux, digital signature validation of new firmware package is performed by a startup script file. For maintenance and troubleshooting purposes, the product does support a user account. As in the case of… Continue reading Obfuscation of scripts
How to obfuscate ssh connection using obfsproxy (obfs4proxy) ?
What is the configuration on Linux for obfs4proxy and openssh-server (ex. /etc/ssh/sshd_config) ? (server-side)
What is the configuration on Windows/Linux for obfs4proxy and po… Continue reading How to mask ssh using obfsproxy? [migrated]
Many outline access keys use a random port but some do 443, I’ve found out since port 443 is for http its harder to find out that port is using a vpn.
So the question is, why don’t other Outline servers use port 443 instead of a random por… Continue reading Best port to setup Outline VPN for obfuscation
We are not IT security specialists but we are very curious to know more about a scam we received through mail.
We received a mail with a HTML file attached. The subject of the mail looked very clickbaity.
The title was: Webshop will remove… Continue reading Who can we read the contents of the variable? Which format is used? [closed]
I’m looking for a specific answer regarding the TLS handshake in a scenario of domain-fronting.
Following hensonsecurity and zscaler blogs I have noticed that a detailed description regarding the re-direct / routing scheme is missing when … Continue reading DomainFronting – re-routing and SSL certificats
This year, ransomware is no less active than before: cybercriminals continue to threaten nationwide retailers and enterprises, old variants of malware return while the new ones develop. Continue reading New ransomware trends in 2022
so i just learn to bypass detection of OS command injection. i am try to use bashfucator to obfuscate the command.
bashfuscator -c ‘cat /etc/passwd’ -s 1 -t 1 –no-mangling –layers 1
result:
[+] Mutators used: String/Hex Hash
[+] Paylo… Continue reading bashfuscator]- how to run obfuscated command with ‘bash -c’
I am reading about implementing UUIDs in URLs instead of incremental IDs to reduce attack vectors using obfuscation. I plan to create a UUID from an incremental ID and store the UUID which would be used to access the data.
As per the speci… Continue reading UUIDs replacing inremental IDs in URLs
I see that HTTPS uses symmetric encryption for the file transfer, often AES. I also read that AES uses padding to help obfuscate the data itself. Though I am curious how powerful that padding is when downloading files.
If a server has a pu… Continue reading Is it possible to eavesdrop HTTPS encryptions by file size?