New answers tagged

1

Common in modern marketing email is the practice of including "tracking pixels." These are small 1x1 transparent images embedded into the email that are hosted on an external web server. When the user opens the message, their email client will download the image from the external server, creating a entry in the external server's logs. However, this method ...


0

Consider installing CSF+LFD wich is a failban-like tool that also protects against SSH brute force attacks, SMTP attacks etc


0

I recommend implementing the mentioned fail2ban or alternatively, considering a Snort or Surricata IDS. They are all able to perform the task of blocking IPs after malicious activity. Blocking IPs that aggressively will require you to implement whitelists for known good hosts to prevent accidental blocking. You should be more lenient and not block after ...


1

Now my question is: If google or any third party will intercept this request, will it also be able to log the password-hash and reset token? Sure,if google or third party sits between you and the network and somehow is able to break ssl/tls then they get all the clear text transmission,you are toast at that point,Not sure how the particular request has ...


0

It is possible to source a packet with an arbitrary IP address, even an invalid IP address. This is commonly done with DDOS attacks. For scanning to be effective, the scanner needs to get the response traffic back. If the scan came from 192.168.2.255, and if the network was 192.168.2.0/24, then the response would be broadcast on that subnet and every host ...


4

Below is a screenshot of an image search at the time of this discussion. The source image from the OP is referenced in numerous websites, and appears to be the subject of discussion due to the image content. The original image appears to be from a vpnMentor blog post: https://www.vpnmentor.com/blog/report-conor-leak/ Looking though https://crt.sh/?q=...


60

The article states that: a connection was discovered to a web filter app built by Conor [Solutions] Given that it was a web filter, and given that it was able to log URLs, we can infer that this was a Man-in-the-Middle (MITM) proxy which decrypted the requests, filtered based on the unencrypted request, and then re-encrypted and forwarded the request to ...


Top 50 recent answers are included