Collaborate Disseminate
I recently tested the NTP Time Synchronization Attack as desribed and demonstrated by Jose Selvi in 2015.
Basically, the attack was mostly used to send the victim’s clock in the future, so the already cached HTTP Strict Transport Security … Continue reading How did ntpd got pacthed to prevent NTP time synchronization attacks?
My bank (let’s call it theBank; it’s a trusted bank in a Scandinavian country) uses among other methods SMS prompts. When performing an action (e.g. payment), you are sent an SMS containing a code prompt. To complete the action, you must t… Continue reading How can a phishing attempt SMS be sent by the same number as the legitimate company? [duplicate]
I was reading the Wikipedia article about TAO and there is written that:
Details on a program titled QUANTUMSQUIRREL indicate NSA ability to masquerade as any routable IPv4 or IPv6 host. This enables an NSA computer to generate false geog… Continue reading How does the NSA "masquerade as any routable IPv4 or IPv6 host"?
Is it possible to spoof the IP once a TCP handshake was performed successfully?
For example:
Perform the handshake
Use the session with the same IP which performed handshake but on
different machine and network then send a request e.g PO… Continue reading Spoof IP address after a TCP handshake established
I have been a victim of a fraud where my solicitor’s email address was used to dupe me out of a house purchase deposit. How do I determine where the emails originated from – did the crooks use emails from my inbox (hotmail) that somehow go… Continue reading SPF fail, DKIM pass, where did the emails originate from [closed]
I was thinking of the following scenario :
a network is behind a router (performing NAT) and firewall
this firewall denies all unsollicited incoming packet
a user on a computer of the network opens a browser, types in “http://www.company1… Continue reading Prevent IP session hijacking
Currently I have access to a restriced wifi network with my Laptop.
I want to "shift" this access by letting my Router impersonate my Laptop.
The laptop runs Manjaro
The Router(Mirouter 4c) OpenWrt.
I was able to spoof the MAC … Continue reading Impersonating own wifi devices [closed]
Security researcher Ahmed Hassan has shown that spoofing the Android’s “People Nearby” feature allows him to pinpoint the physical location of Telegram users:
Using readily available software and a rooted Android device, he’s able to spoof the location his device reports to Telegram servers. By using just three different locations and measuring the corresponding distance reported by People Nearby, he is able to pinpoint a user’s precise location.
[…]
A proof-of-concept video the researcher sent to Telegram showed how he could discern the address of a People Nearby user when he used a free GPS spoofing app to make his phone report just three different locations. He then drew a circle around each of the three locations with a radius of the distance reported by Telegram. The user’s precise location was where all three intersected…
STRIDE threat modeling is an important tool in a security expert’s arsenal. Threat modeling provides security teams with a practical framework for dealing with a threat. For example, the STRIDE model offers a proven methodology of next steps. It can suggest what defenses to include, the likely attacker’s profile, likely attack vectors and the assets […]
The post What is STRIDE and How Does It Anticipate Cyberattacks? appeared first on Security Intelligence.
Continue reading What is STRIDE and How Does It Anticipate Cyberattacks?
We recently received an email from a self described "white hat hacker" purporting to be from our own organization.
According to the mail headers, spf, dmarc, dkim and arc all passed okay and gmail didn’t flag it in anyway.
We use… Continue reading SPF/DMARC for shared email provider (gmail) – how did this email pass SPF?