Category: Network security

Using ARP scanning, the attack obtained the target’s IP on a C-class network. ProFTPD exploitation and script execution led to root access.

Sysmon log recording identifies a hacker using Godzilla to gain RDP privileges by exploiting a weak phpmyadmin password, accessing webshell, and creating a…

In 2021, a routine security analysis using situational awareness led to a mining worm discovery. It was resolved using manual security analysis and…

A vulnerability scan revealed qdPM 9.2 with a 0-day flaw leaking database credentials (qdpmAdmin/UcVQCMQk2STVeS6J). No other 0-day vulnerabilities were found in OpenSSH, Apache,…

Vulnerability assessment revealed open ports (22, 80, 8082) on target IP. Nmap scans and directory busting found a vulnerable MantisBT installation via default…

Various vulnerabilities, including Sensitive Information Leak, were resolved across multiple systems, enhancing security.

Intranet penetration involves detecting reverse shell attacks using traffic analysis, focusing on plaintext data and TCP characteristics, exemplified by NC and Wireshark.

Malicious software analysis identifies cyber threats. Use tools like ProcDOT and Wireshark to monitor activities, enhancing security against malware attacks.

SCCM deployment can be exploited for privilege escalation if installers allow user interaction. Tools like Process Explorer and Wireshark reveal potential vulnerabilities.

Yang Xiuzhang, influenced by Guizhou’s mountains, left IT/aerospace to teach at Guizhou Finance and Economics University, focusing on packet capturing with tools like…