Collaborate Disseminate
I’m a web developer (LEMP stack), but am looking to change professional course to security (which I know is an incredibly broad subject). Ideally, I’d like to be a pen tester. Looking at Offensive Security’s OSCP course page, one of the … Continue reading Learning TCP/IP – where should one start? [closed]
I am new to this, so I applogise if this is a silly question!
I have created a reverse shell on a Windows box using an exploit script and the following MSFVENOM to create a reverse shell.
msfvenom -a x86 –platform Windows -p windows/she… Continue reading Spawned reverse shell will not run additional commands
In a packet capture I observed server is still sending data even after sending RST, ACK, How is that possible?
Continue reading Server sending data after sending RST, ACK?
I read on Wikipedia’s Article on SNMP
SNMPv1 and v2 are vulnerable to IP spoofing attacks, whether it runs
over TCP or UDP, and is a subject to bypassing device access lists
that might have been implemented to restrict SNMP access… Continue reading Why is SNMP vulnerable to IP Spoofing?
From what I can see, most firewalls seem to focus on tcp and udp. Why is that? Is it impossible or at least very unlikely for malware to use other protocols/custom protocols?
Given three parties (all in the same LAN): A client, a server, and a MITM. The client and server communicate wirelessly, and don’t encrypt their messages. The MITM can see the messages, but question is: could he modify the packets sent fro… Continue reading Is it possible to intercept and modify a wireless TCP transmission?
How do you prevent someone from doing an TCP reset attack between client and host without having acess to host?
I am trying to solve a CTF for fun and learning purposes.
In one of the challenges I establish a connection wit… Continue reading TCP reset attack / forged TCP reset prevention
I am new in the field of IT and stuff like that and I am learning but I don’t understand how and where can I apply my knowledge about TCP IP. simply what can I do with my knowledge about TCP IP. I apologize if my question sou… Continue reading What can I do with my knowledge for tcp ip [closed]
I’m studying to pentest, so I basically start with networking, programming, and pentest methods, but in a book called The Basics of Hacking and Penetration Testing on Port Scanning, she says that “she tries to log on to any r… Continue reading Any tips from a book on traffic analysis? [closed]
In my software both the server and the client sends unencrypted TCP keepalive messages to be able to detect the broken pipe within a reasonable time. It also uses TLS 1.3 encryption with OpenSSL 1.1.1.
Are there any security… Continue reading What are the security concerns about using unencrypted TCP keepalive with TLS?