Collaborate Disseminate
I have a service that runs as Windows Service on a device and developed using C#, and uses the gRPC protocol for communication as shown in the below diagram.
The service is running on port 5000 as http://localhost:5000
I am doing a cybers… Continue reading What are possible spoofing attacks on internal services in devices?
We are working on an activity to train staff about security. Is there any way to spoof the company’s guest router and ask staff to provide login credentials (as public wifi does) and when they do that, we will have a list of their password… Continue reading Fake AP for Staff Security Awareness
I’m looking for real-world case studies or papers from people who have been part of a large-scale corporate brand change, from an Information Security perspective: that is, aside from the obvious (increase in phishing, spoofing, etc), what… Continue reading What are the security risks of a corporate rebrand? [closed]
Is it possible for someone to redirect text messages to you from another’s phone? Something weird is going on…over the last few weeks I have received “wrong number”text messages from people with similar motives. They start as “hey (some ra… Continue reading Cell Phone texting
I was learning networking and knew that browsers don’t have algorithms to convert domain names to IPs. It queries a DNS server.
After that, the computer remembers the IP, so next time the domain is referenced, the browser will use the cach… Continue reading DNS local cache spoofing with malware or RAT
This article analyzes different ways of the spoofing email addresses through changing the From header, which provides information about the sender’s name and address. Continue reading Email spoofing: how attackers impersonate legitimate senders
I recently tested the NTP Time Synchronization Attack as desribed and demonstrated by Jose Selvi in 2015.
Basically, the attack was mostly used to send the victim’s clock in the future, so the already cached HTTP Strict Transport Security … Continue reading How did ntpd got pacthed to prevent NTP time synchronization attacks?
My bank (let’s call it theBank; it’s a trusted bank in a Scandinavian country) uses among other methods SMS prompts. When performing an action (e.g. payment), you are sent an SMS containing a code prompt. To complete the action, you must t… Continue reading How can a phishing attempt SMS be sent by the same number as the legitimate company? [duplicate]
I was reading the Wikipedia article about TAO and there is written that:
Details on a program titled QUANTUMSQUIRREL indicate NSA ability to masquerade as any routable IPv4 or IPv6 host. This enables an NSA computer to generate false geog… Continue reading How does the NSA "masquerade as any routable IPv4 or IPv6 host"?
Is it possible to spoof the IP once a TCP handshake was performed successfully?
For example:
Perform the handshake
Use the session with the same IP which performed handshake but on
different machine and network then send a request e.g PO… Continue reading Spoof IP address after a TCP handshake established