Collaborate Disseminate
I found apparently successful logins from a foreign ip-address to our cyrus-imap server:
Nov 24 08:16:20 server-1 cyrus/imaps[12101]: starttls: TLSv1.2 with cipher ECDHE-RSA-AES256-SHA (256/256 bits new) no authentication
Nov 24 08:16:20 s… Continue reading Strange cyrus/imaps Logins without valid password
I was wondering how this works.
We have a marketing site in Holland where people can sell second hand goods.
Rumor goes that there is a lot of phishing going on there and XSS code is used in the images that are uploaded to the site for mal… Continue reading XSS on marketing websites like craigslist. How does this work on a technical level?
I know that to start the BYOB server you need to put
python server.py –host PRIVATEIPADDRESS –port 8080
But, after –host I put the private IP address, but won’t that not work if the attacker and target are on different networks as a pr… Continue reading Does BYOB Botnet work when target and attacker are on different networks?
I’m in the planning/design stages of a project which will incorporate an internal server that communicates with internal clients. A quick summary of how this server will behave is as follows: end-users will make calls/commands to the serve… Continue reading Is SSL Always Required When Communicating With Internal Client/Servers?
Microsoft Windows systems create snapshots or backup copies of files on your hard drive…
For more visit TheWindowsClub.com. Continue reading How to use Vssadmin command-line to manage VSS in Windows 10
If you’re interested in SDR and digital signal processing but don’t know where to start, you’re in luck. Ben Hillburn, president of the GNU Radio Project, recently tweeted about an online curriculum for learning SDR and DSP using Python. The course was developed by Dr. Mark Lichtman, who was a …read more
I need to perform sensitive REST API calls between 2 server applications that I am writing. To do this I need to be able authenticate the server that is performing the sensitive API calls.
The current architecture + what I need to add in o… Continue reading Server to server authentication
I purchased Identity Guard to monitor my financial accounts. Plaid is the integrator for Identity Guard. I added my bank to the Identity Guard monitoring service and successfully completed the link.
Over the past 18 hours, I received two… Continue reading Amazon server IP address logged into my bank account – Is this Plaid? [closed]
Numerous websites allow us to build and execute C code from web browsers (repl.it, onlinegdb.com, ideone.com…). For my own application (education purposes) I would like to do the same on my web backend.
My current solution is to use an A… Continue reading Build and execute code on a sandboxed environment?
I once heard that the author of the early NES emulator "Nesticle", clearly a very intelligent person, baffingly used some kind of exploitable "Samba" or "SMB" server running in his home with its source code (a… Continue reading Why do people, even programmers and geeks, seem to almost feel the urge to "give hackers a fair chance" at stealing their data? [closed]