In many dictatorships SIM card cloning is used by the police (working together with the telco) to spy on dissidents, journalists etc. Some people say that you need the authentication key on the SIM card to clone it so that physic…
Traditional computer forensics and cyber investigations are as relevant in the cloud as they are in on-premise environments, but the methods in which to access and perform such investigations differ. This post will describe some of the challenges of br…
Do modern (versions of) operating systems, primarily Android and iOS on mobile, still send targeted or directed probe requests when searching for Wi-Fi networks to connect to?
Such targeted or directed probe requests contain the SSIDs of …
Let’s assume we are talking about top 10 most used web browsers: Usage share of web browsers
https://www.cgisecurity.com/questions/httptrace.shtml
‘TRACE’ is a HTTP request method used for debugging which echo’s back
input back …
I was assisting a man at the public library who was unable to login to his gmail account. He typed in his password and was prompted for a phone number, presumably so a code to be sent which would then have to entered in order to proceed wi…
With the deprecation of TLS 1.0 on the horizon, I’m curious how others are handling connectivity and mail delivery issues for dated client environments.
Lets face it, there are more environments live on the internet running deprecated pro…
For MFA I now use Authy (owned by Twilio) instead of Google Authenticator. I find Authy more convenient because it syncs your accounts between several devices and several authy installations which Google Authenticator will not do. Authy al…
Introduction
If a software vulnerability can be detected and remedied, then a
potential intrusion is prevented. While not all software
vulnerabilities are known, 86
percent of vulnerabilities leading to a data breach were
patchable, though t…
Introduction
If a software vulnerability can be detected and remedied, then a
potential intrusion is prevented. While not all software
vulnerabilities are known, 86
percent of vulnerabilities leading to a data breach were
patchable, though t…
Most of examples for extracting files through XXE OOB (Out of Band) sets up a listening HTTP server and listens to incoming request on the URL requested. However, since the URL length is limited to something like 2048, how would you extrac…
