Collaborate Disseminate
To hide a restricted location, e.g.
location /secret/ {
allow 10.0.0.0/24;
deny all;
}
one could set
error_page 403 =404 /404.html;
error_page 404 /404.html;
to make impossible to distinguish a non-existing location (404) from a restri… Continue reading How to hide restricted nginx subdomains?
In the 2004 movie "Primer", the a character goes back in time, and there are two copies of him, both with a cell phone. The character receives a phone call initially, and then receives the same phone call again at the same point … Continue reading How would a cellular phone call be connected if there are two phones with the same number? [closed]
Assuming I have a service running with elevated privileges on a host, and another service is listening on a UDP port with access for everyone (0.0.0.0) is it possible to craft a spoofed UDP datagram from localhost so that appears it comes … Continue reading Loopback source IP Spoofing
Facebook Pixel and Google Analytics for example give you an API key to identify tracking requests from your website. But what is to stop someone from grabbing the key, spoofing your domain and submitting their own tracking requests?
Continue reading How do tracking services stop third party requests?
Recently, a lot of my friends have been talking about botnets. They said they’ve created their own. Obviously, I know this is all illegal so I try not to take part in any of it.
But I’ve been wondering how they work. I’ve read some art… Continue reading Why do DDoS attacks spoof DNS source IPs?
I have an interesting situation on my hands. There are people in my neighborhood that have been harassing me for some time now. It appears that these individuals can are receiving my text (sms) messages and iMessages as they literally yell… Continue reading Malicious SMS and iMessage Interception
I am using Google workspace to handle my domain emails. At a certain point, employees started to receive spoofing emails to their @mydomain.com addresses. I blocked these emails and it worked.
However, after I blocked it, employees started… Continue reading Business Email Compromise emails sent to personal email accounts
I found that someone is actively adding video files to a directory on the root of my NAS – lots of things like movies and TV show episodes. And I see upload and download traffic on it. They must have gained control and are torrenting. Who … Continue reading Someone has been using my NAS for torrenting. How can I prank them?
For my web app, I hardcode a reverse DNS detection for common web crawlers. And for detecting them I use their Reverse DNS, which I always check whether it includes i.e. google.com. My questions would be:
Can this be a possible security f… Continue reading Can this logic with regard to checking Reverse DNS records be flawed?
What would happen if I ARP spoofed my router, with that I mean that I make all devices on the network believe that I am the router. As there would be a MAC address conflict would that result in a DOS for all devices on the WiFi?
Continue reading What would happen if I ARP spoofed my router