Collaborate Disseminate
A friend found several suspicious PHP files on his server when we was upgrading his Wordpress install. They are all in the public_html folder and the filenames are the name of his domain with seemingly random digits next it.
I’ve "bea… Continue reading Found several potentially malicious PHP files but not sure what they are doing? [duplicate]
As I understand, code obfuscation is used to make reverse engineering difficult/hard for the adversaries/red team.
Now if I use a source code obfuscator where a .C/.CPP file is used as input and an obfuscated .C/.CPP file is generated, sho… Continue reading Code obfuscation and source code repositories
For an embedded IoT product running linux, digital signature validation of new firmware package is performed by a startup script file. For maintenance and troubleshooting purposes, the product does support a user account. As in the case of… Continue reading Obfuscation of scripts
How to obfuscate ssh connection using obfsproxy (obfs4proxy) ?
What is the configuration on Linux for obfs4proxy and openssh-server (ex. /etc/ssh/sshd_config) ? (server-side)
What is the configuration on Windows/Linux for obfs4proxy and po… Continue reading How to mask ssh using obfsproxy? [migrated]
Many outline access keys use a random port but some do 443, I’ve found out since port 443 is for http its harder to find out that port is using a vpn.
So the question is, why don’t other Outline servers use port 443 instead of a random por… Continue reading Best port to setup Outline VPN for obfuscation
We are not IT security specialists but we are very curious to know more about a scam we received through mail.
We received a mail with a HTML file attached. The subject of the mail looked very clickbaity.
The title was: Webshop will remove… Continue reading Who can we read the contents of the variable? Which format is used? [closed]
I’m looking for a specific answer regarding the TLS handshake in a scenario of domain-fronting.
Following hensonsecurity and zscaler blogs I have noticed that a detailed description regarding the re-direct / routing scheme is missing when … Continue reading DomainFronting – re-routing and SSL certificats
This year, ransomware is no less active than before: cybercriminals continue to threaten nationwide retailers and enterprises, old variants of malware return while the new ones develop. Continue reading New ransomware trends in 2022
so i just learn to bypass detection of OS command injection. i am try to use bashfucator to obfuscate the command.
bashfuscator -c ‘cat /etc/passwd’ -s 1 -t 1 –no-mangling –layers 1
result:
[+] Mutators used: String/Hex Hash
[+] Paylo… Continue reading bashfuscator]- how to run obfuscated command with ‘bash -c’
I am reading about implementing UUIDs in URLs instead of incremental IDs to reduce attack vectors using obfuscation. I plan to create a UUID from an incremental ID and store the UUID which would be used to access the data.
As per the speci… Continue reading UUIDs replacing inremental IDs in URLs