Collaborate Disseminate
On Debian, Linux, I am using netstat to monitor connections. After waking my system from sleep, I noticed a change in one of the connections, using port 6667 for irssi (identified by PID).
I like to suspend my computer and w… Continue reading Connection changes after waking from sleep
I have a Samsung Smart TV running Tizen OS, and out of curiosity I scanned it with Nmap. I found multiple open ports. One of those ports is running a “display” service. Does this mean it can cast its own screen, or that i can… Continue reading I have found ports on my Samsung smart tv running a display service. What can I do with it?
Assuming I perform a TCP hijacking attack, by having access to the wire on which packets are being transmitted. In practice, the party to which I’m sending the hijack packet is going to receive the data of the specific sequen… Continue reading TCP Hijacking and conflicting data handling on the OS level
I have set up a experimental setup which consists of:
Windows PC with ethernet cable;
Arduino shield (connected to Windows machine with USB) with LTE
connectivity sending data using TCP/IP to ngrok;
VirtualBox with Kali Lin… Continue reading Question about hping3, TCP and ngrok
A developer running Docker for Windows needs to enable the option “Expose daemon on tcp://localhost:2375 without TLS” in Docker setting > General tab.
There is a warning:
Exposing daemon on TCP without TLS helps legacy … Continue reading What are the risks of exposing the Docker for Windows daemon on localhost?
I’m currently studying how to do honeypot detection and was wondering if a possible lead is to analyse how honeypots implement their TCP/IP protocol.
I’ve been looking through the source code for a number of the honeypots (… Continue reading Honeypot detection: How is TCP/IP implemented on honeypots?
I have a websocket server, where client credentials get validated upon connecting and are never bothered again, since connections are stored in memory. I was wondering, a TCP connection is basically identified by local addres… Continue reading Websocket connection spoofing
I am taking part in a practice sandbox, and have a pcap file in Wireshark: with the traffic depicting a Vertical Port Scan. Is there anyway to find out the “victim”‘s Operating System? The packets are all TCP SYNs, and I trie… Continue reading Determine victim of port scan’s OS
SYN cookies do not ordinarily allow the use of the TCP options field,
since this information is usually stored alongside SYN queue entries.
What does it mean? Why it is considered as a limitation?
This question already has an answer here:
How to identify if a field is encrypted?
3 answers
This is a follow up of this … Continue reading Confirming a tcp connection is encrypted not just encoded? [duplicate]