Someone told me that in WPA2, forward secrecy is achieved by generating ephemeral keys through the handshake’s nonces, but I couldn’t find how WPA3 achieves it exactly (could not find info regarding nonces in WPA3). Could someone shed some…
WiFi Alliance has announced that WPA3 will include SAE protocol, which is based on the Dragonfly handshake, leaving behind the 4-way handshake used in WPA2 that was vulnerable to KRACK.
From what I could gather, the device and the router …
WPA3 uses AES-128 for message encryption in Personal and 192 bits in Enterprise. Thus the secret of communication is kept using this symmetric encryption protocol. As I have understood, security problems in wireless networks usually tend t…
It is safe to make a DMZ to a VirtualBox VM that has pfSense installed with two network cards one on bridge and one on intnet. The DMZ would do this by indicating the ip of pfSense to the router.
Edit: with safe I mean if the other comput…
On Ubuntu, if you use (external) drives formatted as exFAT or NTFS, i.e. not ext4 or something made for the UNIX world, you may end up with a situation where all files are executable.
This is because the file systems may have other concep…
I’m trying to automate scripts of an Android Metasploit payload. I can successfully automate any script on the /post module, however, I’m trying to automate geolocate, dump_calllog and others that are not on the post module. I think from w…
Is there any command on nmap or on some other tool which will stop scan and move on to a different IP on finding a single open port?
Need to perform this for host discovery on few assets which has ping disabled.
Eg: A particular asset ha…
After reading a blog post about the new Roughtime protocol, I am not convinced of the original premise that shorter certificate lifetimes increase security. The claim is that a shorter time somehow reduces the exposure if a secret key is c…
Here’s what I want to do:
I want to use a VPN client on my PC (like TunnelBear).
Then I want to use Snort to sniff traffic before it’s encrypted and after it’s decrypted by VPN.
So basically I want Snort to sit between my OS and the VPN….
The proper way to secure erase a SSD is to issue the SECURITY ERASE UNIT command. Then the SSD controller should send a BLOCK ERASE command to all physical blocks.
One caveat: the SSD has to be connected directly to the SATA interface. Do…
