Collaborate Disseminate
I see a lot of TCP connections in proxy logs in Splunk e.g. tcp://Google.com. I don’t understand if this is user activity or some file reaching out or some website connecting to Google.
For example: Twitter is blocked in our environment. H… Continue reading TCP connections in proxy logs in splunk [closed]
I was running MQTT broker in my pc and tried to connect to it via mqtt client in same PC. using x509 cert for mutual tls. SSL Handshake was failing with RST from server. This was happening only in my PC.
When I tried to do the same setup i… Continue reading SSL handshake failure | Client hello(success) -> Server ACK (success) -> server RST (connection closed)
When you send the following command to port 8030/tcp of ArcServer UDP, the server will respond with a Ping. Can we consider this behavior safe and without problems?
<map>
<entry>
<jdk.nashorn.internal.objects.Nat… Continue reading The server responds with a Ping from port 8030/tcp of ArcServer UDP [closed]
From what I gathered, the gist of XerXes is doing this (snippet in Python):
with socket(AF_INET, SOCK_STREAM) as s:
s.connect((host, port))
s.send(b"0")
simultaneously, i.e. the opening and closing a large number of… Continue reading Would XerXes be effective without sending anything over the connections it opens?
Please walk through how an attacker can intercept Chrome’s connection to 127.0.0.1:999, as suggested by the warning below.
This warning is consitently displayed across many versions of Chrome in many OSes.
When I click the "learn mor… Continue reading How can non-root intercept privileged loopback ports?
I noticed that discord (text chats) works even if I don’t have a plan on my modem (if I exceed my quota for example, I’ll have to recharge it before being able to use it again.)
Everything else does not work (on the browser) but discord wo… Continue reading Discord works after modem quota limits exceeds [closed]
If two processes on the same machine communicate over TCP, is it possible for different users to listen in on this communication?
I have a tcp server at Google cloud platform. This talks to my clients under a dynamic encryption key that will change after each time they talk.
The only thing that happens between the server and the client is that:
client sends its data… Continue reading What can a hacker do with my tcp connection?
I am a graduate student working on a pen testing lab that I am having the hardest time understanding. I am given a link to a Kali VM and told the following as a preamble to the lab. You were recently hired for a Penetration Tester position… Continue reading Help with a Kali VM lab
I am running the following scan using -sC -sV on a target:
sudo nmap -sC -sV XX.XX.XX.XX
PORT STATE SERVICE VERSION
53/tcp open tcpwrapped
80/tcp open tcpwrapped
443/tcp open tcpwrapped
I understand this could be a firewall or … Continue reading Nmap scan using default script scan and version detection fail [duplicate]