Introduction
In 2016, FLARE introduced
FakeNet-NG, an open-source network analysis tool written in
Python. FakeNet-NG allows security analysts to observe and interact
with network applications using standard or custom protocols on a
single Win…
Introduction
In 2016, FLARE introduced
FakeNet-NG, an open-source network analysis tool written in
Python. FakeNet-NG allows security analysts to observe and interact
with network applications using standard or custom protocols on a
single Win…
I am testing a web application and found a redirect function which seems to be insecure. If I visit a non-existing page, then I am getting redirected to login page of application. However the redirect function can be exploited by setting c…
Recently, a group named the ShadowBrokers published several remote server exploits targeting various protocols on older versions of Windows. In this post we are going to look at the EternalChampion exploit in detail to see what vulnerabilities it explo…
My problem is that I have some windows programs I want to monitor with the following structure in the logs filename:
Program name%Y%m%d_%timestamp.log
Where %timestamp is formed by the concatenation of hours, minutes, seconds and millise…
I’m trying to understand how NSEC and NSEC3 records work in DNSSEC. When I query for an non-existent domain with supports NSEC3, I get the following output
$ dig +dnssec NSEC3 gggg.icann.org. | grep -F “NSEC3” | grep -Fv “RRSIG NSEC3”
…
I have a very uncommon scenario. I have a Windows 10 laptop with a specific configuration. On that configuration, there is a user (local user, not domain user) which I don’t know its password. I want to migrate that user to another Windows…
Introduction
The following blog discusses a couple of common techniques that
malware uses to obscure its access to the Windows API. In both forms
examined, analysts must calculate the API start address and resolve
the symbol from the runtime pro…
Introduction
The following blog discusses a couple of common techniques that
malware uses to obscure its access to the Windows API. In both forms
examined, analysts must calculate the API start address and resolve
the symbol from the runtime pro…
I have a ZTE Modem router (ZXHN H108N V2.5) using it to get internet connection for a home PC. I opened the security tab and chose "firewall".
I found that the option: "enable anti-hacking" is unchecked.
According to ZT…
