Articles inside the category: Articles

Written By :
on : Friday, 1 Feb, 2008

Programming with Libpcap – Sniffing the Network From Our Own Application

Since the first message was sent over the ARPANET in 1969, computer networks have changed a great deal. Back then, networks were small and problems were solved using simple diagnostic tools. As these networks got more complex, the need for management and troubleshooting increased. Author: Luis Martin Garcia Source: Hakin9 2/2008 http://hakin9.org What you will learn...
  • The principles of packet capture
  • How to capture packets using libpcap
  • Aspects to consider when writing a packet capture application
What you should know...
  • The C programming language
  • The basics of networking and the OSI Reference Model
  • How common protocols like Ethernet, TCP/IP or ARP work
Nowadays, computer networks are usually large and diverse systems that
Written By :
on : Friday, 1 Feb, 2008

Alternate Data Streams or “Doctor Jekyll and Mr. Hyde” Move to NTFS

Introduced in Windows NT, the NTFS file system brought about a new concept: multiple streams into a single file known as Alternate Data Streams – abbreviated as ADS in this article. Supporting multiple streams of data into a single file within the NTFS file system is known by very few specialists and may prove to be underestimated in time. Author: Laic Aurelian Source: Hakin9 1/2009 http://hakin9.org What you will learn...
  • How to create, delete or view ADS
  • How can we use the ADS for our own benefit
  • What are malicious uses of ADS
What you should know...
  • Visual Basic Script language
The main characteristic of ADS is invisibility. When you read
Tagged with: , , ,
Written By :
on : Friday, 1 Feb, 2008

Storming SIP Security

VoIP is a hot and steadily gaining market share in the phone business. As people constantly seek to make long distance calls cheaper, they are moving away from relying on the traditional telephone companies and heading more towards Voice over
Written By :
on : Friday, 1 Feb, 2008

One Time Password – New Dimensions in Security

There has been a sharp increase in e-commerce and online banking transactions in recent times. Remote access to the office network has resulted in ease and convenience of work. Due to this, there is increase in online network access usage.
Written By :
on : Friday, 1 Feb, 2008

CounterSpy v.2 from Sunbelt

Security is not a static wall to guard our selves from the other side. It is a continuous process of shielding, guarding and improvising the various areas of weaknesses and possible compromise. Unlike the olden days where the castles are
Written By :
on : Tuesday, 1 Jan, 2008

Secure Dual-Master Database Replication with MySQL

Due to the more common use of databases as a backend systems of web-applications, the overall importance MySQL increases. This freely available database is used for private web sites as well as small business applications. Such applications will often cross
Written By :
on : Tuesday, 1 Jan, 2008

Blind Attack Against the Path-MTU Discovery Mechanism

This article describes a blind attack against TCP’s Path-MTU Discovery mechanism that allows an off-path attacker to affect the performance of a TCP connection established between two remote end-points, sometimes to the extent of provoking a Denial of Service (DoS)
Written By :
on : Tuesday, 1 Jan, 2008

Remote and Local File Inclusion Explained

I have always found RFI and LFI to be one of the most interesting concepts in terms of web exploitation. Although it may normally be interpreted as the most common, script kiddie-esque form of exploitation, I find this to be
Written By :
on : Tuesday, 1 Jan, 2008

Wireless Vulnerabilities and Cracking with the Aircrack Suite

Have you ever wondered just how vulnerable your wireless network was? Ever felt that maybe someone else has access to your wireless network? It is quite possible, and if you would like to know how they did it, read on! Author: Stephen
Written By :
on : Tuesday, 1 Jan, 2008

Rogue Binaries – How to Own the Software

Everybody has heard about open-source programs having a backdoor somewhere inside the code. We hear about Linux packages or even whole Linux distributions that have been modified and replaced. But not everybody knows that – in case of already compiled
Written By :
on : Tuesday, 1 Jan, 2008

Sniffing SSL/TLS Connections Through Fake Certificate Injection

When sensitive information must be sent through an insecure network like the Internet, one of the most important things is to encrypt the data ensuring confidentiality, data integrity, prevent data tampering and to ensure non-repudiation. Author: Michele Orrù Source: Hakin9 1/2008 http://hakin9.org What you will
Written By :
on : Tuesday, 1 Jan, 2008

Axence nVision Professional

Managing a large corporate network can be difficult. With widespread use of DHCP servers and loose security controls any user can join and leave as they see fit. With Axence's nVision network monitoring is a breeze. This tool is best