Collaborate Disseminate
Various tools, such as WAFW00F, can be used to detect the presence, and often even the type, of WAF deployed on a website.
And according to this article:
[WAF fingerprinting] works by analysing the responses received from a target web app… Continue reading Is WAF fingerprinting a security threat, and can it be obfuscated?
Downloaded a fresh tor browser instance to test if the fingerprint is unique. (Signature was verified)
https://amiunique.org says that the browser fingerprint is unique
https://coveryourtracks.eff.org/ says that the browser fingerprint is … Continue reading Why is my browser fingerprint unique when running a fresh TOR browser installation?
Downloaded a fresh tor browser instance to test if the fingerprint is unique. (Signature was verified)
https://amiunique.org says that the browser fingerprint is unique
https://coveryourtracks.eff.org/ says that the browser fingerprint is … Continue reading Why is my browser fingerprint unique when running a fresh TOR browser installation?
In a layered enterprise security architecture with a Web Application Firewall (WAF) deployed in the DMZ, should there be shared responsibility between the WAF and application layer/ microservices for mitigations the WAF supports, specifica… Continue reading WAF vs. Application Layer for Bot Mitigation
A website from a faraway and foreign country blocked my google account so that even when I try to create other accounts with different emails I am still blocked from doing so on the signup page.
I manage to circumvent this with Tor. Throug… Continue reading What traces a Website can use to block you? [closed]
I know that the TZ variable aka TimeZone can be read by servers, especially with fingerprinting.
What are the exposed variables to browser’s ?
Continue reading Which system variables are exposed from browser JavaScript context?
I know that wget and curl can mitigate fingerprinting (aside from http header and user agent), but will yt-dlp give away more data?
Setup: I clear cache and history in firefox, then visit reddit.com in a private window and browse/read three very specific subreddits while NOT logged in. Then, I close that private window entirely and re-open a new one. When I visit re… Continue reading How does reddit maintain visit history after clearing cache, cookies and de-fingerprinting? [closed]
I am trying to understand how does engines like Shodan is able to fingerprint remote Bacnet devices with the responses as shown in the screenshot below.
I tried using a sample python code using BAC0 library.
import BAC0
bacnet = BAC0.lite… Continue reading Fingerprinting Remote BACnet devices
I played around with the about:config settings in the Tor and Firefox browser and tried to test it on Cover Your Tracks.
The lowest point I got was with 5 bits of identifiable information, with Tor while using the following modifcations:
a… Continue reading How do I get the lowest amount of identifiable information on Cover Your Tracks with a Firefox based browser (Tor)? [closed]