Category: Network security

The article analyzes and exploits the Apache Tomcat vulnerability (CVE-2020-1938), allowing unauthorized file access via AJP protocol manipulation.

Through reverse engineering and tools like mitmproxy and Postern, we analyze app encryption to intercept data for testing, leveraging Python and KeySprite.

PowerShell is a cross-platform automation tool with a shell and scripting language, favored for its flexibility. Execution policies control what scripts run.

The article explores extracting TLS keys from Windows applications using SChannel TLS, highlighting its role in securing encrypted sessions for various services.

Author hl0rey explains that using PDO alone doesn’t prevent SQL injection. Direct execution with `query` or `exec` without precompilation is vulnerable.

WireGuard simplifies VPNs with efficient 1-RTT connections and minimal code, earning praise from Linus. It’s both secure and elegantly designed.

MySQL vulnerability: Exploiting the `LOAD DATA LOCAL` command allows a server to read arbitrary client files, posing a security risk.

An IDS detects suspicious network activity in real-time, raises alerts, and supports both host-based and network-based monitoring. Deploy by linking to all traffic.

CVE-2022-26809 is a high-risk vulnerability in ProcessBindAckOrNak(). Corelight’s analysis offers insights into exploiting it, highlighting SMB server interactions.

Faced a Scrapy error due to an incorrect Host. Fixed by commenting out Host, learning it’s crucial in HTTP 1.1 to avoid 400…