Collaborate Disseminate
I am currently investigating the PEDICOM vulnerability CVE-2019-11687 where I am trying to reassemble the P-DATA DICOM fragments from a PCAP. Since the vulnerability takes advantage of writing bytes onto the header, I want to investigate t… Continue reading Does the DICOM file header gets lost when transferred over the network?
So there is a lot (hundreds to thousands) of logs showed up with messages Built outbound TCP Connection (event id ASA-302013) and then Teardown TCP Connection (event id ASA-302014) with the same source and destination IP address.
Here is o… Continue reading TCP Built Outbound Connection and Teardown
someone is always sending to me this weird file, is this something interesting?
Dangerous?
Or important?
https://filebin.net/smldvglpbmojt6fj/0?t=ut7accln
Thanks
Continue reading Weird file sent over and over by someone [closed]
When a browser communicates with a webserver it opens a port for the communication on the client. If that port is opened, then I guess an attacker can try to inject their data through it. Is there something in the TCP standard that protect… Continue reading What protects the TCP connection from injections? [closed]
I’m trying to replay a pcap file recorded from my first server online.
In order to make some tests , i successfully changed the IP source and destination, mac source and destination. The pcap file contain mostly UDP packets. To do it I hav… Continue reading Replay pcap with tcpreplay
I’m a cybersecurity student and I’m eager to understand the basic processes of an SSH session. I wrote down the stages to the best of my ability but need help understanding what happens right after the TCP handshake and right before the Di… Continue reading When connecting via SSH, does the Diffie-Hellman key exchange take place over an unencrypted TCP session or does encryption occur before the exchange?
What I mean is what protocol are best to DOS something like TCP, UDP, HTTP?
Continue reading What is the most powerful type of DDOS/DOS attack?
I just found out a bindshell backdoor, but I don’t know how to access/connect to it using Metasploit.
I’m a beginner with exploiting; is there a way to access the backdoor? I tried to search for “bindshell” on Metasploit but I didn’t fi… Continue reading What is bindshell backdoor?
I heard that Microsoft DS is a port that is commonly used by hackers to hack computers due to its ability to transfer files.
How do they transfer files with Microsoft DS?
Do they need an exploit to let the malware run?
I heard hackers’ top ports to hack computers through are port 80 and port 443. How do they do this though aren’t port 80 and port 443 just for HTTP requests such as GET, POST?