Collaborate Disseminate
So for over 2 weeks, Im receiving what appears a combination of attacks non-stop 24/7.
First this UDP flood at a strangely small rate of 280 Kbps / 110 pps (360 bytes length)
02:29:41.978484 IP (tos 0x0, ttl 48, id 56020, offset 0, flags… Continue reading UDP flood 300 Kbps + SYN probes / other attacks. Flood or DDoS at low rate?
I used CurrPorts to monitor TCP/IP network connections. This image shows when I don’t connect to the Internet but I don’t know why Avast Antivirus established this port. Is it insecure?
This image shows when I connected to… Continue reading Insecure/Obsolete TCP/UDP Ports?
DTLS-UDP is used between client and server.
If the client ends abnormally，how does the server know that the client is gone?
i have read rfc6347 and find nothing about that.
thanks in advance.
Continue reading How to handle UDP abnormally disconnection in DTLS？
In accordance to the recent question Why is TCP more secure than UDP?. How would an “attack” look when it comes to the practical aspect? A great example would be the use of TCP or UDP for Microsoft Remote Desktop (RDP) sessio… Continue reading If TCP is more "secure" than UDP, how would a practical UDP "attack" look, for example during the initiation of a MS RDP connection?
While reading MS SDL (Microsoft Security Development Lifecycle) presentations I found a recommendation to replace UDP with TCP in applications because TCP is more secure than UDP. But both of them are only transport layers, nothing more.
Scenario:
My goal was to allow TeamViewer to connect to my home workstation from my laptop only. So I have tried to bind my laptop’s MAC with an IPtables rule as following,
[arif@arif:~]$ sudo iptables -I INPUT -p tcp –de… Continue reading How to block an application with iptable which use random port
I have read that it is recommended to encapsulate IPsec packets into UDP (port 4500) packets in order to circumvent NAT. Could anyone please provide a detailed explanation of the reasons behind this solution?
I’m learning how to perform a DNS cache poisoning attack, on an isolated VM environment, for educational purposes only.
My setup is a linux machine with Unbound DNS Server configured as a recursive resolver, which I try to … Continue reading Cache not read in DNS Poisoning
I’m learning how to perform a DNS cache poisoning attack (on an isolated VM environment, for educational purposes only).
I have set a linux machine with Unbound DNS Server configured as a recursive resolver, which I try to… Continue reading DNS cache miss (while DNS Poisoning)
so let’s say I had a basic socket, doesn’t give you any information about the user other than the IP address, what would be my options If I wanted to authenticate a user in the most optimal way possible (as in performant),