Collaborate Disseminate
I recently came across a topic of network steganography, mostly connected with modifying the headers of IP, TCP, ICMP. I was looking for some real-world examples of malware that uses it. I only found two ICMP related examples – Nanolocker … Continue reading Real-world application of network steganography
I recently saw this article of a version of Mirai being spread to Android based devices via ADB enabled. My question relates to how Mirai does scanning.
Lets assume I have a Android based device (like tablet or smart TV) in my home behind … Continue reading Can Mirai scan reach devices behind routers?
Imagine a user has an ip of 1.2.3.4
The server the user intends to connect to has an ip of 2.3.4.5
An attacker has a machine with a promiscuous network card on the user’s local network.
The attacker also has a server on a seperate network … Continue reading What prevents this specific type of attack from being viable?
I want to Debug Android Application using ADB over Internet.
Well when we start adb daemon in our phone with:
adb tcpip 5555
Its scope is within the WiFi network, But If I want to Debug Application or use frameworks like Scrcpy, Ghost,et… Continue reading How to make ADB run over internet? Main point I don,t have WiFi access to start port Forwarding, I am using 4G Network!
I understand that SYN flood is effective due to how protocol works, waiting around 75 seconds before closing the connection.
What about ACK flood, what does it happen on the destination side that makes this attack effective (hypothetically… Continue reading Why ACK flood is effective?
Why is it considered insecure for an NFS export to allow connections originating from high ports? Compare the manual:
exportfs understands the following export options:
secure
This option requires that requests originate on an Internet po… Continue reading What is insecure about the "insecure" option of NFS exports?
I am making an Honeypot right now in golang that reports IPs (ipabusedb) when they access unauthorized an port ex: UDP/37810. Now to my problem how do I listen to every udp port easy? I dont want to make 65500 sockets for each udp/tcp port… Continue reading Golang Honeypot (Detecting unauthorized connections to ports tcp/udp)
Is it possible to spoof the IP once a TCP handshake was performed successfully?
For example:
Perform the handshake
Use the session with the same IP which performed handshake but on
different machine and network then send a request e.g PO… Continue reading Spoof IP address after a TCP handshake established
I have a question for my security class related to the TCP handshake. The question is:
A hacker just set up a TCP connection with a web server in Chicago, Illinois, claiming he is coming in with a source IP address that
clearly belongs to… Continue reading Speed of TCP handshake to prove an IP is spoofed [closed]
For some experiments I have conducted using the Mininet SDN, I test with varying network parameters — specifically in my case, network link delay and packet loss.
However, the feasibility of my experiments involving these parameters truly… Continue reading How is latency (link delay) and packet loss (network jitter) implemented in Mininet? Are they realistic? [closed]