The DMZ

« first day (2046 days earlier) ← previous day next day → last day (3139 days later) »

O'Niel

00:28

OWASP is a reputable security organisation, right? Are these OWASP tools: owasp.org/index.php/Source_Code_Analysis_Tools good to analyse source-codes on vulnerabilities?

Other alternatives to scan PHP and ASP.NET source code?

Matt Clendenen

00:46

My wireless card is on channel 2 but I am picking up beacon frames from aps on channel 1 using scapy sniff?

IanC

I'm a complete beginner to infosec, but I read somewhere that if you are monitoring one channel you might intercept packets from close channels @Matt

because frequencies are close, so if you're in channel 2 you might get some "interference" from channel 1 or 3

Matt Clendenen

Thank you @IanC. I am a newcomer to infosec as well. Your info makes sense since the channels I'm intercepting seem to be on the same 20Mhz. Would you possibly know the URL or source of your info?

IanC

01:02

@MattClendenen I dont have the exactly link where I read it, but making a quick search I found this:
http://compnetworking.about.com/od/wifihomenetworking/qt/wifichannel.htm

It isn't completely related to your issue, but it mentions channel overlaping

Matt Clendenen

@IanC just to share information read the last comment of this link. security.stackexchange.com/questions/130764/…

@IanC he is saying that channel overlapping only causes interference. Not intercepting a recognizable message. So I'm back to square one haha

IanC

maybe small packets can "survive" during those overlaps? I'm not sure :p

I think it's unlikely you would be able to communicate with a AP in another channel, but maybe small packets can still pass the boundaries between close frequency channels

you didn't find anything on the stackexchange when looking for "channel overlaping"?

Matt Clendenen

01:24

Nothing that explains what is happening... but I could be doing something wrong I guess I'll figure it out.

IanC

01:35

@MattClendenen, maybe someone more experienced will answer your doubt, post it on the website (I think the chat itself isn't as active)

IanC

02:16

@MattClendenen, just realized the question you sent me was actually yours! my bad :p

Matt Clendenen

02:32

@IanC haha no worries

15 hours later…

Xander

17:12

@O'Niel OWASP is indeed a reputable organization. "Good" when referring to static analysis tools is highly dependent on the skill of the individuals operating and tuning the tools. I can't speak to the tools that analyze PHP code, but for .NET the "free" pickings are pretty slim. There are some good commercial tools though.