I am thinking about building a Linux Snort machine that can listen to both WAN and LAN traffic.
Setup I am thinking about:
Snort computer with two NICs
One NIC connected to hub/tap outside firewall (WAN)
One NIC connected to hub/tap insi…
I would like to secure an AWS root account with a hardware MFA device, which seems to be simple enough, but I also want a backup device to store in a different location. AWS doesn’t seem to support multiple MFA devices on the same account,…
I want to automate ingestion of DMARC failure reports, both aggregate and forensic. Unfortunately, I don’t have a mailbox set up to collect them yet. Does anyone know where I can find sample DMARC failure reports, so I can get scripting?
…
Is there any way to find out what selectors are used by a domain in their DKIM record without access to an e-mail send from that domain?
So to clarify, let’s say I know example.com has DKIM implemented.
I cannot receive an e-mail from exa…
I (Matthew Haigh) recently contributed to FLARE’s FakeNet-NG
network simulator by adding content-based protocol detection and
configuration. This feature is useful for analyzing malware that uses
a protocol over a non-standard port; for example, …
I (Matthew Haigh) recently contributed to FLARE’s FakeNet-NG
network simulator by adding content-based protocol detection and
configuration. This feature is useful for analyzing malware that uses
a protocol over a non-standard port; for example, …
In a command injection you trick a service into doing something for you that it would not normally do. Does that mean that command injections are examples of (exploiting) confused deputies? Does the reverse also hold?
More generally, are …
To which (STRIDE/CIA+AAA) security category do command injection attacks belong?
Or is my question too simplistic? Does it depend on the specifics of the injection attack (trying to get at confidential information, trying to cause a denial…
Lets say I have server A (a web server). Users initially use an external provider such as Google to get authenticated on that server. An entry is created in my database saying that this user has logged in before and has confirmed their acc…
For research purposes, I’m conducting an ethical phishing attack in my institution. I have permission from the institution for the same. I’ve created the phishing site and the email content, and I’ll be recording who and how many users vis…
