|
You are here |
juffalow.com | ||
| | | | |
badoption.eu
|
|
| | | | | ZipJar, a little bit unexpected attack chain The upcoming from the .zip TLDs from Google brought some discussion about attack vectors. Most of those attack vectors are not completely new, like using an "@" to split between username and host. While playing a little bit around, an unexpected attack chain appeared, involving a .zip TLD, Windows Explorer, WebDAV and a jar file. Some further reading and research: https://www.kaspersky.com/blog/zip-mov-domain-extension-confusion/48254/ https://www.mandiant.com/resources/blog/url-obfuscation-schema-abuse https://mrd0x.com/file-archiver-in-the-browser/ | |
| | | | |
www.aligelenler.com
|
|
| | | | | Open Source Software and Database Technologies, Java, J2EE | |
| | | | |
muffsec.com
|
|
| | | | | ||
| | | | |
www.tumfatig.net
|
|
| | | The OpenBSD virtual machine daemon works pretty well with Linux VMs nowadays. This was time for me to see if I could replace the Synology Docker service with some Docker host provided by vmd(8). | ||