NIST SP 800-33 2.0.1 says that “availability” part of the CIA triad protects against intentional or accidental attempts to either:
perform unauthorized deletion of data or
otherwise cause a denial of service or data
This makes it pret…
First Hand Details
TEG (The Equation Group) is NSA’s team of hackers who’d write code to exploit systems worldwide. Some of the private files were recently dropped by a group called Shadow Brokers and they’ve auctioned it in exchange for B…
I created a android payload with public IP (android/meterpreter/reverse_https).
The stdapi commands(ls,cd,webcam_snap etc) are showing when the victim is in the same network.
But when I try to connect over the Internet( i.e. victim is in…
On Mac OS X, is it possible to limit an application’s accessible hosts by using sandbox-exec?
I can easily do it via a firewall app, but I would prefer to do it via the native sandbox mechanism in certain cases.
So far I’ve tried by usin…
When you first connect to an SSH server that is not contained inside your known_hosts file your SSH client displays the fingerprint of the public key that the server gave. I found from this question here that as a client you are able to sp…
This is a scenario I have at work.
We’re receiving emails with .p7s attached files from a single user of a company(hence the company domain for eg. abc.com) our users interact with via mail. We use IBM Lotus Notes for our email.
There are …
Ransomware is a common method of cyber extortion for financial gain
that typically involves users being unable to interact with their
files, applications or systems until a ransom is paid. Accessibility
of cryptocurrency such as Bitcoin has direc…
Ransomware is a common method of cyber extortion for financial gain
that typically involves users being unable to interact with their
files, applications or systems until a ransom is paid. Accessibility
of cryptocurrency such as Bitcoin has direc…
Is there a way to sanitize or scape strings to secure put data in a object into script or DOM like:
var myObj = JSON.parse({someObject: value})
someElement.innerHTML(‘<div data-id=”‘+myObj.someObject+'”>’ + ‘+myObj.someObject+’)?
…
There are websites which claim to do “DNS leak tests”. I don’t care so much about DNS leaks but am curious, how does the website know which DNS server I am using? I guessed it would be a header sent in the HTTP request but wasn’t able to f…
