I’m playing a bit with assembler and I decided to test out how metasploit encodes a payload into Unicode uppercase characters as assembly instructions which are meant to be decoded by itself. So I have written simple shell code consisting …
This Question is about DNSCurve. I thought of DNSCurve as “HTTPS for DNS” (like in this Answer) but had some resent thoughts about the trust-relationship between resolvers and nameservers serving the public-keys.
Here an example to expla…
The second issue is that reverse engineering all boot records is
impractical. Given the job of determining if a single system is
infected with a bootkit, a malware analyst could acquire a disk image
and then reverse engineer the boot bytes to det…
Why can I not do the following with nmap over proxychains?
proxychains nmap -A -v 10.185.11.0/24
Output:
ProxyChains-3.1 (http://proxychains.sf.net)
Starting Nmap 7.60 ( https://nmap.org ) at 2018-08-07 10:12 EEST
NSE: Loaded 146 scripts…
For a security challenge I am supposed to dictionary attack an IMAP service. A rather simple exercise using hydra.
So far I failed, since I’ve given hydra the actual website instead of the mail server. How can I find a sites mail server?…
Just set up my first linode server this last Wednesday, and today I tried to take a look on the nginx access logs, and found this suspicious logs.
47.96.15.13 – – [28/Jul/2018:14:54:05 +0800] “GET /webdav/ HTTP/1.1” 404 6303 “-” “-” “-”
4…
Wanting to avoid bots registering on a website, I might use reCAPTCHA by Google. Since the algorithm behind reCAPTCHA is not open source, I’m wondering what user information they actually collect about the person registering on the website…
I read this question: Is it common to allow local admin access for developers in organizations?
This question makes me wonder. I can see how local admin access is a danger to the machine. But can a computer with a user account with local …
Given that WiFi packets should be encrypted if WPA2 is used, why is it that a deauth attack can be successful? Shouldn’t the machine know that the message is illegitimate due to the fact that it would not be encrypted, having come from a f…
Introduction
Cyber criminals tend to favor cryptocurrencies because they provide
a certain level of anonymity and can be easily monetized. This interest
has increased in recent years, stemming far beyond the desire to
simply use cryptocurrenci…
