The innermost IP header is my publicly routable IP address that has been encapsulated. The outermost IP header is what is used for routing purposes.
When using a public VPN over the internet, the outermost IP header would be that off the…
I’m trying to intercept requests using OWASP ZAP proxy and Burp Suite. My current configuration is my android phone (One Plus 5 Android Oreo 8.1) has installed both certificate from ZAP and Burp. But issue arise when I’ve changed my ZAP ce…
I’m trying to intercept requests using OWASP ZAP proxy and Burp Suite. My current configuration is my android phone (One Plus 5 Android Oreo 8.1) has installed both certificate from ZAP and Burp. But issue arise when I’ve changed my ZAP ce…
First, let me assure you that I have read a number of posts on the topic before asking this question, but I am still confused and would appreciate more insights.
So, here’s the premise:
There is a client application that authenticates t…
I have a doubt regarding iOS application pentest.
I am pentesting one iOS application. The application is protected by MDM software.
Installation Process – Once I install the MDM on iPhone device and provide the VPN server credentials then…
The scenario is: you have refresh token that is valid for a longer period of time and an access token that is valid for a shorter period of time.
The setup: There is a client, application server and authentication server.
The client st…
I created a number of profiles with separate subkeys for authentication, signature, and encryption while primary keys are saved on USB Stick. It’s working alright but I was wondering if there are some good methods to link to a primary key …
I am talking about this password – 23##24$$25%%26 and the similar ones consisting of special characters appearing in a pattern, which the users these days use a lot.
At work (finance company), I was creating a list of bad passwords that u…
The security of Microsoft’s cloud services is a top priority for us. One of the technologies that is central to cloud security is Microsoft Hyper-V which we use to isolate tenants from one another in the cloud. Given the importance of this technology, …
Suppose that I have a WiFi adapter that is in range of several APs and clients, all sharing the same channel and all using WPA2 encryption. I know all their passwords. I’d like to sniff on all of them simultaneously. As I understand, I can…
