Tag Info

Hot answers tagged

4

Sadly I think that such situation isn't new and isn't going to disappear in the near future. I don't know if you ever read the Hacker Manifesto? This text was written in the eighties, but chances are that you will recognize yourself in some aspect of this text... It is interesting in your text that you first explain that you had difficulties to make friend, ...


4

BurpSuite will not intercept server responses by default and display them to you. To enable this functionality go to: Proxy -> Options -> Intercept Server Responses And make sure to check the box next to Intercept responses based on the following rules Then either select one of the displayed rules or add one like the highlighted one below: Also make ...


3

I don't know for you but I always felt like Android especially is not safe. Is somebody - the government or other - able to listen to my microphone, or access my hard drive remotely? Why do you think Android might be especially vulnerable? I expect the NSA has the tools to snoop in on practically anything connected to the Internet. I'm wondering if ...


3

In general, for penetration testing, you must have acute and precise notions of how computers work. You must basically understand how things go "under the hood". For instance, you do not need to be a god of assembly programming, but you must have some notion of how, conceptually, a buffer overflow can result in hostile hijack of your server from remote ...


3

Firefox takes hashes of various page parameters (mainly URL segments) and passes them back as part of Google's SafeBrowsing scheme. It cannot readily identify parameters or other information that you pass to the target - it's just used to check against a list of known attack domains. As per these instructions, you can turn SafeBrowse off: Firefox button ...


2

The commenter, paj28, is correct: don't submit these to VirusTotal. Test them against the HIPS and AV systems you are specifically targeting in a VM-guest environment. I prefer using Vagrant along with the Packer and Boxcutter tools to "mock up" things in a lab. Hyperion is great, but don't combine it with Pescrambler necessarily. You only need one cryptor, ...


1

Having both the OSCP and eCPPT Gold qualifications I thought I'd offer my input on this question. Note that I took eCPPT as exam only and did not do the course. Are either of these certifications recognizable and accredited? OSCP is widely recognised within the security community. eCPPT not so much. However, judging from the eCPPT exam, the course ...


1

If I understand the PTES correctly, OSINT occurs in the process first, including the element Internet Footprint, and finally Footprinting. This document correlates tools to those processes -- https://github.com/leebaird/discover/blob/master/notes/metasploit/Analysis%20of%20MSF%20Relative%20to%20PTES.pdf -- pages 5 to the mid-bottom of page 10 are OSINT, ...


1

I think the problem is the routes and protocol used. Try, to ping server use Packer equal the '0' in LAN, and internte ping: try hping use diffent flag: "-O --tcpoff Set fake tcp data offset. Normal data offset is tcphdrlen / 4." or "-2 --udp UDP mode, by default hping2 will send udp to target host's port 0. UDP header tunable options are ...



Only top voted, non community-wiki answers of a minimum length are eligible