I need some help in understanding the technique of Genians/Trustwave NAC regarding ARP poisoning.
As seen here Bypassing Trustwave NAC, it looks like a good method, but I don’t simply get it. With ARP poisoning, the NAC device should send …
Is it possible to convert a full raw dump memory and open it in WinDBG ? In order to inspect if they are no malwares, filter process who call particular API, dump each process in memory etc…
Due to the latest news regarding Rowhammer and its applicability to ECC DRAM, I was wondering whether there are any Rowhammer attacks spotted in the wild. Given the various approaches to conduct a Rowhammer attack (on X86, ARM, via JavaScr…
Need some inputs for the CSRF token design to prevent anti-automation.
When a page loads for an user session, a request is given to the server, which would fetch the CSRF token , returned as part of the Get Response of Page Load.
The id…
I am currently trying to figure out just how key hierarchies in a TPM 2.0 work. I read that there are four possible hierarchies (storage, endorsement, platform, null). I also read, that these hierarchies form key trees with a parent key en…
I am trying to detect what is causing my DNS to return fake IP addresses for domains like apple, orange, etc. which obviously don’t exist.
If I do following on my Windows machine:
ipconfig /flushdns – flush DNS cache
ping apple – invoke…
Given scenario:
I have an application (NodeJS) running on Heroku, the database is RDS on Amazon and I use Auth0 for authentication. I don’t have access to passwords of the users, some users use social media logins.
The problem:
The applic…
When running the command hdparm -I /dev/sda the following output is generated.
ATA device, with non-removable media
Model Number: WDC WD10JPVX-75JC3T0
Serial Number: WX51A9324970
Firm…
I am trying to perform a client side attack with Metasploit on a 32 bit Windows 7 Professional N (SP1) victim. I have Windows Defender and Firewall disabled and Java Control Panel Security set at Medium on the victim.
On the attacker machi…
There are weird requests to/from AWS:
and another one to/from 177.143.198.104.bc.googleusercontent.com:
( http://whois.domaintools.com/177.143.198.104 )
I use Ubuntu 18.04 Desktop, web browsers are turned off. How can I found a source? I…
