@ConorMancone > Targeting someone in particular also means targeting their particular browser, and if they are using a browser without a known zero-day vulnerability then it is quite literally impossible.
I wouldn't say that. Most browser 0days are actually library 0days.
If I have an imlib2 0day, it'll work on Chrome, Firefox, Opera, etc.
@forest Good call. I put in a comment about plugins (mentioned Flash in particular, as it's probably the most well-known and relevant example).
@forest Oooh, do tell...
@MechMK1 How's work going Mech? I presume your report finally finished itself? How long do you guys typically "attack" a target? Does it vary much or is it usually 1-2 weeks per target?
There are no rules about how often you should change passwords. Your password rotation should depend about 2 parameters:
Exposure to risk
Severity
It's exactly the same scheme as a Risk Matrix. For each of your passwords on each website, define a risk score, after that just think about how lo...
Such questions are certainly allowed in general, but a specific question may get closed for various reasons. Just about anything is allowed in chat though
I'm rather new to this whole security concept but the prof doesn't seem to like entertaining questions from students
@ConorMancone ok thank you for the heads up
Some of you have not completed Networking module yet, and thus may not familiar with the role of port numbers in a client-server connection and communication. A service offered by a server can be accessed via some predefined port number. For instance, consider a SMTP email server, which listens to port number 25. If a client wants to communicate with the server for a SMTP communication, the client sends packets to the server’s IP address at port number 25. The server responses by sending packets to the client’s IP address at another port number selected by the client, which is greater than …
Gosh actually the qns is pretty long
do you guys mind I post it as an official qns and link it here?
I'm preparing for an introductory information security examination in university and this is one of the tutorial question on Firewall design.
My concerns for the provided solution is how do you define the rules for the firewalls in terms of the source port and the destination ports as well as th...
I have wrote the full question here, my main concerns come from the labelling of the destination and the source port given in the solution
and how they thought of the partitioning
I'm still fine-tuning the post to the standards of the site, so bear with me if something seems amiss
Alright, I guess I'm done with the fine-tuning. My first question will be the thought process, like how will you guys draw out the plan before partitioning the entities into firewalls
@MechMK1 In that case you should be able to write up a script to automatically run all your tests and write the report. When I started that comment I was being sarcastic but with such limited time, given the realistic expectations for results, I feel like you actually could squeeze that into a pre-canned report (not that it needs to look auto-generated)
There are no rules about how often you should change passwords. Your password rotation should depend about 2 parameters:
Exposure to risk
Severity
It's exactly the same scheme as a Risk Matrix. For each of your passwords on each website, define a risk score, after that just think about how lo...
