Collaborate Disseminate
I have a WCF (Windows Communication Foundation) application using the netTcpBinding.
Server configuration:
<netTcpBinding>
<binding name="defaultNetTcpBinding">
<security mode="Transport">
… Continue reading How can I ascertain that .NET NegotiateStream [MS-NNS] established a secure connection?
As I understand it, there is no internet protocol that provides true broadcast like in say a card game or a partially synchronous network assumption. How close can internet protocols come though?
We’ve many parties playing some card game…. Continue reading Outgoing messages while under massive denial-of-service attack
Recently i wanted to play a bit with TCP/UDP networking (and touch some custom HTTP server impl) on C# and found out that i’m getting requests from totally unknown dudes, such as this one:
FROM: [::ffff:149.129.139.48]:52306
[ANS]
PO… Continue reading Intensive 586 (ms-shuttle) port scan/exploit/hacking attempts
By Gary Fisk, Sales Engineer, Corelight I love origin stories – the tales of grand plans, unforeseen circumstances, and necessity that creates something new. These strange times have resulted in something new from Corelight, and I’d like to share how i… Continue reading Who’s your fridge talking to at night?
Overall Google’s Chrome 87 release fixed 33 security vulnerabilities. Continue reading Google Chrome 87 Closes High-Severity ‘NAT Slipstreaming’ Hole
By Seth Hall, Co-Founder & Chief Evangelist, Corelight Zeek has been the darling of security defenders looking to get deep visibility into network traffic. Over the last two decades, Zeek has become a household name – widely used by enterprise orga… Continue reading Small, fast and easy. Pick any three.
I have an application that communicates with the server through a TCP TLS 1.2 connection. The app probably uses certificate pinning. I want to intercept this traffic.
Is there any way to decrypt the traffic except extracting master secret … Continue reading Intercepting TLS 1.2 connections
Assuming no one is able to inspect or MITM in the network. Can I see it as a way to ensure the source IP in packet’s header is the real source of the packet, so a kind of authentication ?
Continue reading Is TCP’s 3-way handshake a kind of mutual authentication?
as a college task I have to exploit a web service that my teacher has set up. But I’m clueless on how to proceed. After I find how to exploit it I have to leave a text message at "the place that is accessible to everyone by default&qu… Continue reading Open TCP port exploit with MSFConsole [closed]
nmap -sN <ip_address> sends a TCP packet to the IP with null flag values. This scan is supposed to evade firewalls.
There are several things I don’t quite get about this command though:
I noticed on wireshark that the server on whic… Continue reading I can’t understand nmap’s Null TCP Scan (-sN option) [closed]