Collaborate Disseminate
By Richard Bejtlich, Principal Security Strategist, Corelight This post contains a warning and a solution for anyone using BPF syntax when filtering traffic for network security monitoring. Introduction I have been writing material for the Zeek docume… Continue reading Mixed VLAN tags and BPF syntax
I have a Python client and server communicating over a TCP socket – they send and receive a certain set of standardized string commands to each other.
How can I prevent a hacker from creating their own client that sends the same kind of st… Continue reading How Can I Prevent Hackers From Spoofing TCP messages onto my server?
I am using python requests library to make HTTP calls. However website bot detection is using JA3 fingerprint verification and blocking me.
Is there any way I can spoof the JA3 signature.
I was reading documentation about HTTP/3, and in the article, they sed that they are no longer TLS or TCP.
So it’s mean that a web site with no SSL 80 will be changed to what port and 443 will be replaced with what port? Also how CA will m… Continue reading HTTP/3 No more TLS or TCP
I just set up a lab with bwapp and wanted to jump straight into webshell.
I used Unrestricted file upload vuln –> uploaded my perfect shell created with msfvenom.
My only problem is that my session doesn’t seem persistent as I’m gettin… Continue reading Meterpreter Session died [Bwapp]
I’m currently doing research on evasion attacks that seek to bypass a Deep-learning based Network Intrusion Detection System.
In order to achieve this, I need to know what the constraints are for the TCP window size field in the TCP packet… Continue reading What happens if a sender changes the TCP window size over multiple packets that have the same ACK number?
Assuming there is a powerful adversary who can arbitrarily manipulate the sequence number of each tcp packet, then the following packet-reorder attack should be possible, right?
Assuming the packet the attacker wants to disorder has the tc… Continue reading Can TLS defeat the manipulation of TCP sequence numbers?
I am using bettercap command line to perform a Man in the Middle attack on my LAN network with an EDUCATIONAL purpose (of course!).
I want to intercept the TCP traffic, with the intention to view on my terminal the TLS certificate,public … Continue reading Bettercap TCP proxy upstream server
I am making an android application where everytime a user opens the main page, he/she will be assigned a unique id that isn’t visible to client as it is simply stored in a variable. The server is in node.js and i have implemented custom pr… Continue reading Implementing tls in custom protocol between android and node js
I’m use the ms f venom to make a payload app for android and i share the app to may another phone with it own network then i install the app but there was no reaction in my listener phone
for host i use my listener IP that was in the info… Continue reading metasploit payload