Collaborate Disseminate
I have a program that captures packets on my kali virtual machine and stores them in a queue table by the commands:
iptables -I INPUT -j NFQUEUE –queue-num 0
iptables -I OUTPUT -j NFQUEUE –queue-num 0
So the queue number is 0, and here … Continue reading Using netfilterqueue I can’t ping correctly when modifying a packet and sending it with scapy? [migrated]
While running some traces for one of our production servers, an interesting item kept popping up in our Wireshark:
[Malformed Packet: Laplink: length of contained item exceeds length of containing item]
This is consistently coming from a… Continue reading Wireshark Output | [Malformed Packet: Laplink: length of contained item exceeds length of containing item] from Russian IP
I’m running a pentest and I’ve managed to get man-in-the-middle access between a machine and a domain controller. A process on the machine will log into the DC, as a domain admin, to get a Kerberos ticket. I can see the AS-REQ/AS-REP &… Continue reading How to extract Kerberos ticket from Wireshark?
I am working on building a malware classifier that works by using gray-scale images of the dissasembly files. This method has been outlined in multiple research papers, here is one:
https://ieeexplore.ieee.org/document/7811100
Now, I am ju… Continue reading Is it possible to convert an IP packet into a grayscale image through the help of deep packet inspection? [closed]
I want to use libpcap to listen to the network traffic on another server on my home WiFi network. In this scenario i already know the password and ssid.
I have already changed my network adaptor to be in monitor mode and I can connect and … Continue reading Listening to other network traffic on a known WiFi network using libpcap
I’d like to know if some measure is possible to prevent the capturing of packets that are being sent on Android.
I’d need the solution to work via code (cannot rely on external tools).
Packets are already encrypted, but it would be a nice … Continue reading Is it possible to prevent packet capturing on Android for sent TCP/IP packets?
I read recently about next generation firewalls that use deep-packet-inspection, intrusion-prevention and something the manufacturers call encrypted-traffic-inspection, encrypted-traffic-analytics.
The manufacturers claim the encrypted tra… Continue reading Nextgen firewalls – encrypted traffic inspection
[Benjojo] got interested in where the magic number of 1,500 bytes came from, and shared some background on just how and why it seems to have come to be. In …read more Continue reading Just How Did 1500 Bytes Become the MTU of the Internet?
We have a requirement to verify the below functionality during SSH connection for our SSH clients.
"The TSF shall ensure that, as described in RFC 4253, packets greater than [assignment: number of bytes] bytes in an SSH transport conn… Continue reading Verify if the connection is dropped when max packet size is reached in Paramiko [closed]
I have this configuration:
HOST-A <—> GAT-A <—> MiTM <—> GAT-B <—> HOST-B
I’m doing a security project on MTU-IPsec vulnerabilities and following this guide of Hal-Inria, I’m able to inject a packet to the … Continue reading IPSec MTU DDos attack