AutoRecon is a multi-threaded network reconnaissance tool which
performs automated enumeration of services. It is intended as a
time-saving tool for use in CTFs and other penetration testing
environments (e.g. OSCP).
https://github.com/T…
Is pass a real alternative to Keepass in terms of security?
While Keepass has its own built-in encryption, pass relies on GPG to secure your passwords. GPG is obviously recognized as providing excellent security for transferring data over …
We have a java application which allows users to upload attachments and save it on the server. The application has a content security policy defined like this:
base-uri ‘self’; child-src ‘self’; form-action ‘self’; frame-ancestors ‘self’; …
Almost every beginners (noob friendly) tutorial written for Stack based buffer overflow explains when using mona module to locate a safe reliable memory address for our EIP to JMP to our shellcode should have Rebase, Safe SEH, ASLR disable…
I am using python requests library to make HTTP calls. However website bot detection is using JA3 fingerprint verification and blocking me.
Is there any way I can spoof the JA3 signature.
I have an application Foo that exposes a web-based portal as well as a REST API service via HTTPS.
When a human user connects to the app Foo to use its web-based portal, the human user is first redirected to an OAuth2-based login page. Onc…
I’m working on a website and I noticed that if I go to the following URL: website.com/page?alert() this message is reflected in the action form. I tried to close the action attribute using double quotes in order to try a classic like &quo…
We are evaluating how to improve security on our RFID System. Our system was reviewed by someone finding the point that there are duplicate Tags we must get rid of.
So the first idea was to read the UID to ensure that the used tag is not a…
There are so many tools such as testssl, sslyze to test the TLS configurations on webservers. I wanted to know, why aren’t there any tool that checks the TLS client side? What makes it difficult?
I installed kali linux, that comes with John the ripper. I have a password-protected zip file. I’m pretty sure the password is complex. I first convert the zip into a hash:
sudo zip2john FILE_LOCATION > zippedzip.txt
It took around 20 …
