Collaborate Disseminate
How to view all SSL certificates for a website using Chrome? When I click the lock icon, it shows only one certificate. The Security tab shows the same – details of only one certificate. How can I see all the certificates on a website? Is … Continue reading How to view all SSL certificates for a website using Google Chrome?
I am developing a modification for a game server. The mod hosts a SocketServer which clients can connect to using a smartphone app, allowing them to chat with other players whilst not physically playing on the server.
In order for a client… Continue reading Is SSL over WebSocket less necessary when a connection is established from a smartphone?
I am currently building a plugin for a modified distribution of Minecraft server software called Spigot.
The primary role of a Minecraft server is to send and receive packets from clients to keep all players in sync. Spigot is a modificati… Continue reading Should I use Secure WebSockets for a game server plugin/extension?
Is it secure to send messages between a WebSocket Server and the Client?
An example of sending messages between a (Socket.io) server, is in Node.js:
socket.on("myMessage", function(msg) {
// "msg" is the message being s… Continue reading Is it secure to send messages between a WS Server and the client?
The PS/2-style port was once about as ubiquitous on PCs as USB connectors are today, and more than a few of us accumulated a fair collection of keyboards and mice …read more Continue reading The Wireless PS/2 Keyboard That Never Was
I’m working with a web application using Server-Sent Events (SSE, EventSource API), similar to WebSockets. However, none of the commonly penetration test tools seem to fully support this.
I’ve tried Burp Professional, OWASP ZAP and mitmpro… Continue reading Intercept and modify Server-Sent Events (EventSource API)
Can anyone help with my payload setup?
[method] metaData-HEAD://caladbolg.uplb.edu.ph HTTP/1.1
Host: sgdo13.itamisama55.tk [crlf][protocol][method][instant_split] port: null-1 [crlf]Connection: Upgrade
Upgrade: websocket, HTTP/1.1
Upgrade:… Continue reading Browsing internet without promo in philippines using websocket vpn [closed]
Goal
Authenticate the Client via HTTP Request.
Authenticate the Client’s WebSocket connection.
Prevent exploitation of WebSocket connection(when a XSS Vulnerability is present on website).
How I’m doing this
Step 1 Client visits the webs… Continue reading Securing a Websocket Connection in case of XSS Vulnerability
I have a use case where I need a factory-reset tablet device to install and run a simple Progressive Web Application (PWA). The tablet will be mounted on a wall inside a company building that may host unaccompanied external visitors from t… Continue reading Protecting a PWA authentication token on a public kiosk device
Minecraft seems to be a game in which anything is possible, both in the virtual world and in the real one. As a sandbox-style game, we’ve seen all kinds of …read more Continue reading Control an IRL Home From Minecraft