Reputation
Top tag
Next privilege 75 Rep.
Set bounties
Badges
3
Newest
 Supporter
Impact
~6k people reached

Dec
16
comment Secured router bridged with a less secure router
@Motivated the best thing you can do is block all inbound traffic originating from the internet/ISP modem and only allow outbound traffic from your LAN. If you need to host a server then you will have to setup a DMZ and properly isolate the server from the rest of the network. Furthermore, I'd restrict outbound traffic to ports 80, 443, and 53.
Dec
3
comment Secured router bridged with a less secure router
@Motivated if you're using the ISP's modem/router as the gateway for your internal network then the ISP can remotely access your internal network. One way of circumventing that is by placing a router/firewall between the ISP's modem/gateway and the internal lan which restricts traffic. My comment was more in terms of self-defence. Not anonymization.
Nov
26
comment Secured router bridged with a less secure router
I think there are a few incorrect assumptions in your setup. The first being hidden SSIDs are more secure than broadcasted SSIDs (See blogs.technet.com/b/networking/archive/2008/02/08/…). The second being that MAC filtering trumps WPA2-PSK (or maybe I'm assuming you're not using WPA2-PSK). MAC filtering is pretty trivial to bypass if you know what you're doing. Also, as @schroeder said, what are you trying to defend against? Wireless attacks? Internet attacks? ISP snooping? etc.
Jun
1
comment How to find live hosts on my network?
nmap -PR 10.0.1.0/24 -sn will perform an ARP sweep of the network. NMAP's website has detailed information on nmap host discovery. I highly recommend you use this as a reference.
May
31
comment Why wouldn't the reverse shell connect back using the same port that exploited the server?
There is a metasploit payload module called linux/x86/shell_find_port that does exactly what you're describing. It takes the client's source port as an option, which it then later uses to search memory for a sockaddr_in structure belonging to the client with the same port number. However, I've had more luck with this payload in the past: link. It uses a neat trick with the dup, dup2, and execve system calls to create a one-way shell. That's provided your target is linux, of course!
May
22
comment How can I execute a XSS with these conditions?
@Quentin: there are plenty of other ways to get around that like <img src=somethingWrong onerror=alert('hi')>. HTML is really flexible and the possibilities for getting around naive anti-XSS implementations are endless.
Feb
3
comment Maltego transform samples
As for the raw data types this might be a space that might need some improvement in Canari. There is some support for some of the primitives like String, Integer, Float, Enums, etc. in Canari. Take a look at the canari.maltego.entities package in the project to see how they come into play. I will have to add support for the other stuff. That stuff is still unknown and might be a good side-project :)