Collaborate Disseminate
I am attending training later this summer related to AD pentesting. As such, I wanted to ask for book recommendations which detail (in full or in part) the security aspects of Active Directory. The more detailed the better.
… Continue reading Good book detailing the security aspects of Microsoft Active Directory [on hold]
I try to understand the messages of the Noise Protocol Framework. The handshakes are based on Diffie-Hellmann key exchange.
This is an example for a handshake pattern:
-> e
<- e, ee, s, es
I try to formalize the hand… Continue reading How to Formalize Noise Protocol Messages
Described here
I have been thinking about this for a while. Under no illusions that this is secure as I’ve described it, given my lack of expertise. Rather, curious about where the weaknesses might be. I am aware of the rela… Continue reading Please critique this proposed password management protocol?
When the user first logs in, he fetches his TGT from the KDC along with the session key. I get why Sa (session key) is encrypted with Ka (user’s key). But why is TGT also encrypted with Ka. TGT is already pretty unbreakable o… Continue reading In Kerberos authentication protocol, why is the TGT encrypted using the user’s key Ka?
Researchers have found several vulnerabilities in the WPA3 Wi-Fi security protocol: The design flaws we discovered can be divided in two categories. The first category consists of downgrade attacks against WPA3-capable devices, and the second category … Continue reading Vulnerabilities in the WPA3 Wi-Fi Security Protocol
Researchers have found several vulnerabilities in the WPA3 Wi-Fi security protocol: The design flaws we discovered can be divided in two categories. The first category consists of downgrade attacks against WPA3-capable devices, and the second category consists of weaknesses in the Dragonfly handshake of WPA3, which in the Wi-Fi standard is better known as the Simultaneous Authentication of Equals (SAE)… Continue reading Vulnerabilities in the WPA3 Wi-Fi Security Protocol
I need two devices to communicate in plain sight and I want to know what to ask for. Nothing is secret so no need to encrypt. However, I need the source to be authenticated to prevent bad actors from sending false communicati… Continue reading Is there such a thing as an Authenticated Protocol?
I want to test a specific device connected to different networks using fuzzing. For each network interface, there are different services listening using different protocols, with open specification.
As i can not fuzz every n… Continue reading Criteria for selecting fields and network protocols for fuzzing
This is the first class I’m having on security and one of the concepts discussed is the SET protocol. I’ve read about it in many different sources and although I came into many unknown terms, after looking into them one by on… Continue reading Trouble trying to understand SET protocol
Note: This question is follow-on from comments on this answer that were broad enough to be a separate question.
As far as I understand, KeeLoq is a block cipher designed for use in the automotive industry, specifically for k… Continue reading How does the KeeLoq block cipher work?