Collaborate Disseminate
Many outline access keys use a random port but some do 443, I’ve found out since port 443 is for http its harder to find out that port is using a vpn.
So the question is, why don’t other Outline servers use port 443 instead of a random por… Continue reading Best port to setup Outline VPN for obfuscation
We are not IT security specialists but we are very curious to know more about a scam we received through mail.
We received a mail with a HTML file attached. The subject of the mail looked very clickbaity.
The title was: Webshop will remove… Continue reading Who can we read the contents of the variable? Which format is used? [closed]
I’m looking for a specific answer regarding the TLS handshake in a scenario of domain-fronting.
Following hensonsecurity and zscaler blogs I have noticed that a detailed description regarding the re-direct / routing scheme is missing when … Continue reading DomainFronting – re-routing and SSL certificats
This year, ransomware is no less active than before: cybercriminals continue to threaten nationwide retailers and enterprises, old variants of malware return while the new ones develop. Continue reading New ransomware trends in 2022
so i just learn to bypass detection of OS command injection. i am try to use bashfucator to obfuscate the command.
bashfuscator -c ‘cat /etc/passwd’ -s 1 -t 1 –no-mangling –layers 1
result:
[+] Mutators used: String/Hex Hash
[+] Paylo… Continue reading bashfuscator]- how to run obfuscated command with ‘bash -c’
I am reading about implementing UUIDs in URLs instead of incremental IDs to reduce attack vectors using obfuscation. I plan to create a UUID from an incremental ID and store the UUID which would be used to access the data.
As per the speci… Continue reading UUIDs replacing inremental IDs in URLs
I see that HTTPS uses symmetric encryption for the file transfer, often AES. I also read that AES uses padding to help obfuscate the data itself. Though I am curious how powerful that padding is when downloading files.
If a server has a pu… Continue reading Is it possible to eavesdrop HTTPS encryptions by file size?
I’m participating to some bug bounty programs and I found some interest thinks in a javascript file. The problem is that the code is obfuscated.
What do you do when you see this ? Do you skip it, or clean it ?
Continue reading As an attacker, what do you do when you see an obfuscated js?
I’m not an expert on this topic but I know a little about hashing and encryption which is why I tried the algos mentioned above. I have reason to believe they correlate with the colors down below but other than the algos I listed above I’m… Continue reading Any ideas on what might have been used to encode/hash/encrypt these? I’ve tried base64, base32, MD5 and SHA1 [closed]
How we took part in the Machine Learning Security Evasion Competition (MLSEC) — a series of trials testing contestants’ ability to create and attack machine learning models. Continue reading How we took part in MLSEC and (almost) won