On Wednesday 3 October 2018 the Apache Software Foundation has released information about an Open Redirect vulnerability in Apache Struts 2. The vulnerability received identifier CVE-2018-11784. The vulnerability announcements describes the vulnerability as follows: When the default servlet returned a redirect to a …

Read More

With both WannaCry and NotPetya using MS17-010 for propagation it is important to be able to detect servers which are vulnerable. This vulnerability has been assigned CVE-2017-0143. The vulnerability is also often nicknamed EternalBlue. This page explains how you can scan for it from a Windows machine using nmap. The …

Read More

On March 6, 2017, Apache disclosed a vulnerability in the Jakarta multipart parser used in Apache Struts2 that could allow an attacker to execute commands remotely on the targeted system using a crafted Content-Type header value. This vulnerability has been assigned CVE-ID CVE-2017-5638. This page explains how you can …

Read More

Not everyone is vulnerable to the potential attack vector that researchers from INRIA, a French research institute, and Microsoft disclosed recently. In order to be vulnerable, the computer or server must support a class of deliberately weak export cipher suites. Support for these weak algorithms has remained in many …

Read More

Researchers from the Google Security Team have published findings about a vulnerability in SSL 3.0. CVE-­2014­-3566 has been allocated for this protocol vulnerability. It is possible to use nmap to scan for the presence of this vulnerability by doing a scan on the supported SSL/TLS protocols. This post shows how to scan for the POODLE weakness using nmap.

Read More

You may have heard of “Heartbleed”, a flaw in OpenSSL that could allow the theft of data normally protected by SSL/TLS encryption. It is possible to scan for the presence of this vulnerability using different methods. This page explains how you can scan for it from a Windows machine using nmap. Added April 15th, 2014: …

Read More

This article presents the HTML5 LocalStorage (and SessionStorage) objects and discusses some security implcations and recommendations. Furthermore JavaScript examples are given on how HTML5 can be easily used. What is HTML5 Web Storage or LocalStorage? With HTML5, web pages can store data locally within the user’s …

Read More

Stompy is a fairly advanced entropy verifier for session cookies, XSRF tokens, OTPs, and other random data. It goes well beyond FIPS-140-2, performing n-dimensional spectral testing as well. What’s so cool about stompy? Stompy aims to be a quick and mostly automated tool to provide a first line of assessment and …

Read More

You can use the following commands to scan a netblock for the presence of systems with an SNMP service which still use the community strings “public” and/or “private”. nmap -P0 -v -sU -p 161 -oA snmp_scan 192.168.0.1/24 for i in *.gnmap do for j in $(grep ‘161/open/’ $i | awk ‘{ print $2 }’) do echo $j snmpwalk -v2c -c …

Read More

How to enable the Windows Firewall, even though Domain Policies are prohibiting you from enabling it… Consider the following scenario: you have a Windows XP laptop which is connected to a Windows Domain. In order to avoid having connectivity issues, the Domain Admins decided that it would be best to fully disable the …

Read More