Tag Info

New answers tagged

0

You could use a loop to continuously call lsof to see all of the open network connections, log it to a file then grep through it for port 80. That would show you the process opening the socket and the user it's running as. It could go something like: #!/bin/bash # monitor.sh while true; do date lsof -i -P sleep 1 done To use it: $ chmod +x ...


-1

Having assessed the risk of turning my iptables off for a few minutes, these would be my first steps: stop the iptables process to allow the open-source app to initiate a connection home (again, only if you feel safe doing this) run netstat -lntp | less. This list should tell you the destination IPs that your box is connecting to. If you find the ones you ...


0

What you are wanting to do is a relatively complex set of actions. That the tools to do this cost money should not be a surprise. You can try the two WMIF mentions, but they obviously have limitations. In order to acquire a forensically sound image, you need to use proper forensic tools. Some cost a lot because they have to follow strict rigour in order to ...


0

Perhaps use one of: NIST Computer Security Incident Handling Guide SANS Security Incident Handling in Small Organizations ISO/IEC 27035:2011 Information technology — Security techniques — Information security incident management as a basis for your own policy/procedures.


0

You can try with iFunBox or iExplorer, but the really juicy stuff isn't available that easily. Most forensic tools go through a process which involves having the iPhone do a backup through iTunes, and then the tool will analyze the files stored in the backup. Without having forensic tools available, you can try one of many tools like this: ...


1

From the example you show, you don't continue far -- what is shown is not a valid RSA key pair, only something which superficially looked like one in the eyes of the tool you used. Assuming you actually obtain a valid RSA key (you don't, apparently, but let's suppose that you find one), then your best bet would probably be to assemble the key with a small ...


0

It seems you are asking how to use the key to decrypt the Truecrypt volume with the key. This should point you in the right direction.


2

You can try to decrypt things using these keys :) First of all I would try to decrypt the hard disk (TrueCrypt) using the keys. Regarding OpenPGP you should know that the 2048-bit RSA key is only used to decrypt a symmetric key, which can be used to decrypt the message. It's a matter of performance. You you can try decrypting the message with one of the ...


0

You could always set up a honeypot in conjunction with not broadcasting your SSID (service set identifier). An attacker would not know the real AP exists, thus attack the honeypot which you can log to varying degrees based on how much knowledge you have. A simple google search will wield you with many tools. MAC address filtering is a good security feature ...



Top 50 recent answers are included