Collaborate Disseminate
Recently, Iran’s government has launched a sort of new censorship system that manipulates bandwidth as I will describe below.
When a user connects to a VPN server and does an Ookla speed test, the download speed is good, but the upload sp… Continue reading Bandwidth limitation in the censorship systems
When it comes to securing your home hosted servers, the most common advice appears to be:
1.Have a VPS with a reverse proxy
2.Tunnel to your home network from the VPS using a VPN like Wireguard
Although I understand 1 (hides IP, DDOS prote… Continue reading Securing home hosted servers (opening ports vs tunnelling)
How would you enforce user PC to only connect to a given network?
Answers need to be OS agnostic.
One weak solution could be to set client-side firewall rules to only allow communications with legit_IP_allowed_network, but this will not pr… Continue reading How would you enforce user to only connect on a given network?
I’m testing the security of a banking app that uses SSL pinning. I was able to bypass it, but now when I setup the proxy, the app is forcing me to update even though it is the latest version. Why is this happening only when I use a proxy? … Continue reading Forded update problem [closed]
By Habiba Rashid
The new feature is specifically meant to help people maintain access to WhatsApp even if they are living in a repressive regime where internet shutdowns are common.
This is a post from HackRead.com Read the original post: WhatsApp Subv… Continue reading WhatsApp Subverts Censorship with New Proxy Feature
I worked for a company where our TLS Private Key was accidentally leaked to the Internet and it was a big mess. The strategy the security team came up for avoiding this in the future was "be more careful who you trust with access to t… Continue reading TLS Private Key Secured with Hardware Fingerprint
Is it right to assume, that when i build up a tunnel with ssh -D from outside my LAN and then access my only locally exposed server via FTP, it can be called ‘safe’? Tunnel is established on the same device, where i configure FileZilla to … Continue reading Securely access server via FTP through SSH tunnel
I have a question about Emotet’s TLS traffic:
Using MITMProxy, I have successfully decrypted TLS traffic with Emotet’s C2 server and can read the contents of the traffic.
https://mitmproxy.org
However, although we were able to see the co… Continue reading How to decrypt Emotet’s TLS traffic by MITMProxy
My setup consists of a public-facing VPS running NGINX, and a local machine running certain services. The VPS and the local machine are connected using WireGuard, and NGINX on the VPS is using WireGuard IPs to serve content from the servic… Continue reading Can a NGINX reverse proxy reveal the backend if serving non-static content?
My setup consists of a public-facing VPS running NGINX, and a local machine running certain services. The VPS and the local machine are connected using WireGuard, and NGINX on the VPS is using WireGuard IPs to serve content from the servic… Continue reading Can a NGINX reverse proxy reveal the backend if serving non-static content?