Collaborate Disseminate
Normally, the Windows 7 Dnscache service will communicate via UDP on port 53 and via TCP on port 80. I have observed and logged this behaviour for over a decade.
Suddenly, a Win7 box tried to communicate via TCP on port 53 (destination po… Continue reading Atypical Dnscache service behaviour in Windows [closed]
Why error checking for the IP header is done twice, first in the IP header and second in the TCP header using Pseudo Ip header? is there some security benefit? What would be the issue if we do not include the pseudo IP header in the TCP he… Continue reading Why Pseudo IP header is included in the TCP checksum? [closed]
I read this blog (cached version) (and the related cached tweet) about replacing TCP/IP with blockchain.
Tweet:
The Internet has a serious fundamental flaw: the transmission control protocol/internet protocol (TCP/IP)—the primary engine u… Continue reading Disadvantages of replacing TCP/IP with blockchain
What are those settings for, and which options would be the best for security?
Continue reading What Are These Adapter TCP/IP Settings For? [closed]
I recently came across a topic of network steganography, mostly connected with modifying the headers of IP, TCP, ICMP. I was looking for some real-world examples of malware that uses it. I only found two ICMP related examples – Nanolocker … Continue reading Real-world application of network steganography
I recently saw this article of a version of Mirai being spread to Android based devices via ADB enabled. My question relates to how Mirai does scanning.
Lets assume I have a Android based device (like tablet or smart TV) in my home behind … Continue reading Can Mirai scan reach devices behind routers?
Imagine a user has an ip of 1.2.3.4
The server the user intends to connect to has an ip of 2.3.4.5
An attacker has a machine with a promiscuous network card on the user’s local network.
The attacker also has a server on a seperate network … Continue reading What prevents this specific type of attack from being viable?
I want to Debug Android Application using ADB over Internet.
Well when we start adb daemon in our phone with:
adb tcpip 5555
Its scope is within the WiFi network, But If I want to Debug Application or use frameworks like Scrcpy, Ghost,et… Continue reading How to make ADB run over internet? Main point I don,t have WiFi access to start port Forwarding, I am using 4G Network!
I understand that SYN flood is effective due to how protocol works, waiting around 75 seconds before closing the connection.
What about ACK flood, what does it happen on the destination side that makes this attack effective (hypothetically… Continue reading Why ACK flood is effective?
Why is it considered insecure for an NFS export to allow connections originating from high ports? Compare the manual:
exportfs understands the following export options:
secure
This option requires that requests originate on an Internet po… Continue reading What is insecure about the "insecure" option of NFS exports?