Collaborate Disseminate
It would be heartening to think that cybersecurity has advanced since the 1990s, but some things never change. Vulnerabilities that some of us first saw in 1996 are still with us. If you don’t believe me, just take a look at the news. Last month, Virgi… Continue reading Cybercriminals Are Infiltrating Netgear Routers with Ancient Attack Methods
One of the tools I expect to see gain in popularity in the wild is DNS rebinding. DNS rebinding is a technique that turns a victim’s browser into a proxy for attacking private networks. Attackers can change the IP associated with a domain name af… Continue reading Practical Attacks with DNS Rebinding
Recently WebRTC has been in the news as a way to scan internal networks using a regular webpage. We’ve seen some interesting uses of this functionality such as The New York Times scanning your internal network to detect bots. The idea of a random webpage on the internet being able to scan your internal network for live… Read More Continue reading sonar.js – A Framework for Scanning and Exploiting Internal Hosts With a Webpage