Understanding HTTPS Man-in-the-Middle Attacks: Tools and Techniques for Analyzing Website Traffic
Whistle and other tools leverage HTTPS man-in-the-middle attacks to intercept traffic, decrypting it via trusted certificates for debugging purposes.
Category: Network security
Kali 1.0 VM: Installing Easy-Creds for FakeAP Attacks on Android & iPhone Devices
Kali 1.0 with easy-creds and NETGEAR card targets Android/iPhone for phishing via FakeAP, capturing network traffic and images. Adjust ettercap configs.
How to Deceive a Network: Understanding the Risks and Legal Implications
The process outlines how to deceive a device into routing data through an attacker using ARP poisoning to intercept and manipulate traffic.
Decrypting Behinder Webshell: Challenges and Solutions for Financial Institutions
In 2019, during exercises at a financial institution, multiple attack teams used the Behinder webshell. Despite IDS alerts, details were hidden. Behinder, a…
Understanding HTTPS Authentication: Preventing DNS Hijacking and Man-in-the-Middle Attacks
This content explains DNS hijacking attacks, where attackers redirect users to phishing sites. HTTPS authentication helps secure logins and prevent these risks.
Understanding Domain Fronting: Techniques, Applications, and Security Implications
Domain Fronting conceals traffic by using different domain names at various layers, bypassing censorship and firewall checks via HTTPS.
RDP Brute Force: Understanding Attacks and Enhancing Security Measures
After discovering RDP brute force attacks on a Windows Server 2012 R2, the user implemented defenses like disabling SMBv1, configuring account lockout policies,…
Understanding Mining Trojans: Monero Targeted Cyber Attacks and Prevention Strategies
Mining Trojans exploit computer power for Monero mining by embedding malicious software. Common signs include high CPU usage and can be detected with…
Comprehensive Penetration Testing Checklist for PC Clients: Tools, Techniques, and Case Studies
The project focuses on penetration testing for PC clients using CS architecture, combining personal experiences and resources to create a checklist. The goal…
Understanding XXE Vulnerability: Exploiting XML External Entity Injection
XXE vulnerability, triggered by unfiltered XML uploads, can lead to file reading, command execution, and network attacks by exploiting XML’s structure.
Load More