Collaborate Disseminate
This week, Critical Code execution flaws, WordPress working on wiping older versions from existence, Multiple serious flaws in Drupal, TCP/IP flaws leave IoT gear open to mass hijacking, jQuery plugin actively exploited for at least three years, Flaw i… Continue reading LibSSH, WordPress, and LIVE555 – Hack Naked News #194
I am trying to scan a bunch of IPs for their http-title.
Now the problem I have is that nmap pretty much never follows any redirects.
Usually the title I want is behind that redirect though.
For example I try to run nmap lik… Continue reading Nmap not following redirect when using "http-title" script
I need to perform a TCP traceroute using either the Linux traceroute or another package, but I’m struggling to find a way of making the request from PHP without needing sudo privileges.
Because the URL will be from a user re… Continue reading Safely perform TCP traceroute from user request
So I’ve read this article about using cryptcat to create a backdoor.
But then I was wondering, how is the connection made?
Like according to the tutorial you have to connect the computer’s shell through running cryptcat 19… Continue reading How does cryptcat work?
I’m trying to send a request to an http server hosted on a machine. The http server is in C# and drops any packets that are not from localhost:
public void Request(HttpListenerContext context) {
if(!IPAddress.IsLoopback(… Continue reading How to pass a localhost check for an incoming request?
Drone assassins are cheap, deadly, and at your local store, State Department shamed, MS-ISAC releases advisory advisory PHP vulnerabilities, a nasty piece of CSS code, a Zero-Day bug in CCTV surveillance cameras, and FreeBSD has its own TCP-queue-of-de… Continue reading Drone Assassins, Security Shaming, and Zero-Day – Hack Naked News #189
There are different types of DDoS attacks. As defined by TechTarget, Network-centric or volumetric attacks overload a targeted resource by consuming available bandwidth with packet floods. Protocol attacks target flaws in the… Continue reading TCP protocol Denial-of-service attack
I have an use case where I’m not able to use MQTTS/TLS due to constraint on devices.
Our plan is to perform authentication during MQTT CONNECT, passing a JWT token as a password. If I understand correctly MQTT keep a TCP con… Continue reading MQTT without TLS – prevent publish messages from unauthenticated devices
I am studying about SegmentSmack vulnerability. As far as I understood, the vulnerability is due to the fact the reordering the packets in the out-of-order buffer is a very CPU intensive operation. So a packet which is extrem… Continue reading SegmentSmack exploit
let’s see a scheme:
and I would like to consider two cases:
All IP addresses are public, a cloud is symbol for the Inernet.
The first one
The H has an established TCP connection: C = (210.10.10.10,9999,98.98.98.98,999… Continue reading Injecting a TCP packet into existing connection