Collaborate Disseminate
I need to perform a TCP traceroute using either the Linux traceroute or another package, but I’m struggling to find a way of making the request from PHP without needing sudo privileges.
Because the URL will be from a user re… Continue reading Safely perform TCP traceroute from user request
So I’ve read this article about using cryptcat to create a backdoor.
But then I was wondering, how is the connection made?
Like according to the tutorial you have to connect the computer’s shell through running cryptcat 19… Continue reading How does cryptcat work?
I’m trying to send a request to an http server hosted on a machine. The http server is in C# and drops any packets that are not from localhost:
public void Request(HttpListenerContext context) {
if(!IPAddress.IsLoopback(… Continue reading How to pass a localhost check for an incoming request?
Drone assassins are cheap, deadly, and at your local store, State Department shamed, MS-ISAC releases advisory advisory PHP vulnerabilities, a nasty piece of CSS code, a Zero-Day bug in CCTV surveillance cameras, and FreeBSD has its own TCP-queue-of-de… Continue reading Drone Assassins, Security Shaming, and Zero-Day – Hack Naked News #189
There are different types of DDoS attacks. As defined by TechTarget, Network-centric or volumetric attacks overload a targeted resource by consuming available bandwidth with packet floods. Protocol attacks target flaws in the… Continue reading TCP protocol Denial-of-service attack
I have an use case where I’m not able to use MQTTS/TLS due to constraint on devices.
Our plan is to perform authentication during MQTT CONNECT, passing a JWT token as a password. If I understand correctly MQTT keep a TCP con… Continue reading MQTT without TLS – prevent publish messages from unauthenticated devices
I am studying about SegmentSmack vulnerability. As far as I understood, the vulnerability is due to the fact the reordering the packets in the out-of-order buffer is a very CPU intensive operation. So a packet which is extrem… Continue reading SegmentSmack exploit
let’s see a scheme:
and I would like to consider two cases:
All IP addresses are public, a cloud is symbol for the Inernet.
The first one
The H has an established TCP connection: C = (210.10.10.10,9999,98.98.98.98,999… Continue reading Injecting a TCP packet into existing connection
An IDS can accept a packet that an end-system rejects. An IDS that does this makes the mistake of believing that the end-system has accepted and processed the packet when it actually hasn’t. An attacker can exploit this co… Continue reading How can Insertion attack ever work and fool an IDS on a TCP connection?
I noticed that my server CPU is super high and the reason is grep “A” command
After a deep look, that what I’ve found in my active internet connections list (netstat -tupn)
tcp 0 0 138.xxx.140.xxx:60752 … Continue reading Weird attack making my server CPU super high