Collaborate Disseminate
I’m not trying to find established TCP connections. I have a Windows 2008 R2 server and my host-based L3 firewall is showing one TCP connection ATTEMPT to a remote address. The connection is not established as the servers are not allowed t… Continue reading Find out what process is trying to initiate a connection in Windows
I have a range of inbound TCP ports open on the firewall, but usually closed on the host machine. I see a handful of unknown connection attempts each day, for which the server returns TCP RST. I wonder, should I configure IPTABLES to sil… Continue reading Should I block outbound TCP RST (on closed ports)?
I know there are now WebSockets, but what is the issue with providing a socket API to allow interacting with existing protocols?
I mean, after all, I can use a hidden flash object to do the same already. Is there an attack v… Continue reading Why no support for TCP Sockets in JavaScript
I’m curious if there are any examples of malformed IP or TCP headers (for example, checksums that don’t match, reserved bits that aren’t zero, or poor header length numbers) used by malware, or that are used in exploits.
Examples that (if… Continue reading Malware / vulnerability that uses or causes malformed IP or TCP Headers
I’m curious if there are any examples of malformed IP or TCP headers (for example, checksums that don’t match, reserved bits that aren’t zero, or poor header length numbers) used by malware, or that are used in exploits.
Examples that (if… Continue reading Malware / vulnerability that uses or causes malformed IP or TCP Headers
I am reviewing for my final exam tomorrow, I came across a past exam question.
An attacker wants to initiate a TCP handshake with a target to make him think E initiated it, attacker knows IP address of E
(B, C, D, R), wh… Continue reading Which systems in a network are able to spoof a TCP handshake?
As far as I understood rpcbind is used for listing active services, and telling the requesting client where to send the RPC request. If a host listens on port 111, one can use rpcinfo to get program numbers and ports and serv… Continue reading Security risk of opening port 111 (rpcbind)?
I was curious how a DoS attack would affect a home router. In particular, I’m interested in how a SYN flood would affect a home router.
The reason I’m interested is due to a Cisco document I read. Within the document, it said SYN flood at… Continue reading How could a SYN flood affect a home router
This question already has an answer here:
Why is TCP more secure than UDP?
9 answers
I am referring to confidentiality no… Continue reading Is TCP more secure than UDP? [duplicate]
I’ve been diving into OSSEC for the last couple of months, but I feel unclear on one of it’s alerts. I’ve provided the alert below. The main difference I see in previous output and current output is that 10108 is no longer be… Continue reading OSSEC, what is it telling me about port changes?