JWTs typically include an audience claim. I’ve read in many places (articles, code examples, the spec itself) that you must check that the token is intended for you and not another audience.
I’m happy enough to accept that. I’m not plann…
I use google drive’s OAuth Credentials (client_secrets, credentials, settings.yaml etc), to enable access of my google drive account to my python scripts. I only upload files to my google drive account. But I was wondering what else could …
I found an open port on a “Kartina Quattro” (https://www.kartina.tv/article/247-kartina-quattro). It’s a device for watching russian TV channels.
The port number is 31337 and the Service is called Elite.
After some research I found out …
In early 2019, FireEye Threat Intelligence identified a spear
phishing email targeting government entities in Ukraine. The spear
phishing email included a malicious LNK file with PowerShell script to
download the second-stage payload from the com…
In early 2019, FireEye Threat Intelligence identified a spear
phishing email targeting government entities in Ukraine. The spear
phishing email included a malicious LNK file with PowerShell script to
download the second-stage payload from the com…
I am trying to execute an attack that requires a full-duplex MiTM position. This is the reason why I choose to use Ettercap. I have picked DHCP spoofing as the attack of choice.
The problem that I am facing is that Ettercap executes the …
Adobe Flash is one of the most exploited software components of the
last decade. Its complexity and ubiquity make it an obvious target for
attackers. Public sources list more than
one
thousand CVEs being assigned to the Flash Player alon…
Adobe Flash is one of the most exploited software components of the
last decade. Its complexity and ubiquity make it an obvious target for
attackers. Public sources list more than
one
thousand CVEs being assigned to the Flash Player alon…
I got a call from a call centre today which convinced me that they were calling from BT. They made me download TeamViewer which was unresponsive so I downloaded supermo instead. After this they gained access to my computer and asked me to …
We are creating an OpenId Provider (using Identity Server 4) that has the ability to federate authentication to other IdPs based on email (eg, we first ask for email and then determine how to authenticate you, potentially by redirecting yo…
