I got an empty email in my language (Hebrew) with only a title that can be translated to I am still waiting for your feedback (original: עדיין מחכה למשוב שלך)
Since my gmail handle multiple accounts (by forward and by user\pass) I tried t…
I read this page: Category:OWASP Best Practices: Use of Web Application Firewalls, and I found that WAF cannot generally detect logical attacks.
We know each web application has a number of input parameters. I think these input parameter…
Introduction
We’re proud to release a new plug-in for IDA Pro users –
SimplifyGraph – to help automate creation of groups of nodes in the
IDA’s disassembly graph view. Code and binaries are available from the
FireEye GitHub
repo. Prior to th…
Introduction
We’re proud to release a new plug-in for IDA Pro users –
SimplifyGraph – to help automate creation of groups of nodes in the
IDA’s disassembly graph view. Code and binaries are available from the
FireEye GitHub
repo. Prior to th…
I want to add more data to alert file. Right now the data that our analyst team sees is very minimal and we are not giving access to them to our snort backend server.
Our design is like centos /var/log/snort/alert mapped to kibana and if t…
I have read on multiple websites about an Anti-detect browser used to anonymize web surfing better. Can I achieve a similar level of anonymity without installing the software and just changing system and browser settings myself? I just don…
A client recently received an email that was spoofed in a way that I’d never seen before. The following are the anonymised, relevant details from the email’s headers:
authentication-results: spf=none (sender IP is 74.208.4.197) smtp.mail…
I need to use a USB analyzer. I’ve been looking at a couple of different options. This one came up. As far as I can tell, it’s not open source, but seems to be quite popular. Seeing that the data transfer is very sensitive, I want to make …
I currently found something interesting when browsing my iPhone app’s cache.db file.
There is a table called cfurl_cache_receiver_data and there is a column called receiver_data. This contains all the HTTP Request response that my app rec…
I have this (stripped down) Perl database query, and I wonder if this can be exploited in any way. This is from a challenge, so I know things could be done different, the task is to exploit this.
To my knowledge it uses prepared statement…
