Collaborate Disseminate
We’re rebranding our product and as a part of that we need to rename a keystore used by Java for secure XMLRPC connections between our components from OLDBRANDNAME_keystore to NEWBRANDNAME_keystore. Can we safely do this simply by renaming… Continue reading Can I rename a Java keystore file through Windows/Eclipse without having to regenerate it?
I’m currently trying to get a bidirectional TLS 1.2 connection working between 2 local Karaf-based XMLRPC servers that by design only accept POST requests. The environment is Windows 10 and both XMLRPC servers are running in the same JDK: … Continue reading How do I verify the supported ciphersuites of a TLS server that only accepts POST requests?
I learned about about XML-RPC and specifically XML-RPC in WordPress. Now, the safety of XML-RPC in WordPress this is disputed.
But given, that I would like to continue using XML-RPC, in the most save manner, I wonder about t… Continue reading Does the Loginizer WordPress plugin also limit XML-RPC-calls?
Often when I find resources about XML-RPC vulnerabilities with respect to the xmlrpc.php file commonly found exposed on WordPress sites, I find alongside the recommendation to remove or block the xmlrpc.php file that it is also recommended… Continue reading Why might I want to remove the wlwmanifest.xml file in WordPress?
Someone is running a ‘famous’ RPC server, and challenged me to connect to it and gather some information there.
Which server, they didn’t tell.
They provided the address (not disclosing it here) and the port: 8000.
Not knowi… Continue reading find out which RPC
There is a website which I want to audit. That site must have a concrete Virtualhost configuration because if you access to it using the domain name the website is shown, but if you use the ip address the website is not shown… Continue reading Metasploit. Is always replacing domain names with resolved ips on RHOST/RHOSTS?