Collaborate Disseminate
Recently i wanted to play a bit with TCP/UDP networking (and touch some custom HTTP server impl) on C# and found out that i’m getting requests from totally unknown dudes, such as this one:
FROM: [::ffff:149.129.139.48]:52306
[ANS]
PO… Continue reading Intensive 586 (ms-shuttle) port scan/exploit/hacking attempts
By Gary Fisk, Sales Engineer, Corelight I love origin stories – the tales of grand plans, unforeseen circumstances, and necessity that creates something new. These strange times have resulted in something new from Corelight, and I’d like to share how i… Continue reading Who’s your fridge talking to at night?
Overall Google’s Chrome 87 release fixed 33 security vulnerabilities. Continue reading Google Chrome 87 Closes High-Severity ‘NAT Slipstreaming’ Hole
By Seth Hall, Co-Founder & Chief Evangelist, Corelight Zeek has been the darling of security defenders looking to get deep visibility into network traffic. Over the last two decades, Zeek has become a household name – widely used by enterprise orga… Continue reading Small, fast and easy. Pick any three.
I have an application that communicates with the server through a TCP TLS 1.2 connection. The app probably uses certificate pinning. I want to intercept this traffic.
Is there any way to decrypt the traffic except extracting master secret … Continue reading Intercepting TLS 1.2 connections
Assuming no one is able to inspect or MITM in the network. Can I see it as a way to ensure the source IP in packet’s header is the real source of the packet, so a kind of authentication ?
Continue reading Is TCP’s 3-way handshake a kind of mutual authentication?
as a college task I have to exploit a web service that my teacher has set up. But I’m clueless on how to proceed. After I find how to exploit it I have to leave a text message at "the place that is accessible to everyone by default&qu… Continue reading Open TCP port exploit with MSFConsole [closed]
nmap -sN <ip_address> sends a TCP packet to the IP with null flag values. This scan is supposed to evade firewalls.
There are several things I don’t quite get about this command though:
I noticed on wireshark that the server on whic… Continue reading I can’t understand nmap’s Null TCP Scan (-sN option) [closed]
By Ben Reardon, Corelight Security Researcher This month’s Microsoft Patch Tuesday included a severe Remote Code Execution vulnerability in the way that Windows TCP/IP handles IPv6 “Router Advertisement” ICMP messages. Due to the severity and wide scop… Continue reading Community detection: CVE-2020-16898
Are you familiar with the Element chat system of https://app.element.io ? Are you familiar with its connections to Matrix.org (for a free account)? Is there a way that I can sniff this traffic on the OS when I hit the enter key on a messag… Continue reading How To Validate Secure Traffic from Chrome with Element To Matrix.org on Linux