The DMZ

A serious place where infosec is discussed PS we don't do hard...
Jun 8, 2016 11:23
I'd like to ask recommendation on open source Network Access Control systems. I read packetFence and FreeNac are open source.Are they good? any others to be considered?
Jun 8, 2016 11:20
Hey Folks, How are ya?
Dec 22, 2014 19:39
@raz the source IP is Telegram server
Dec 22, 2014 18:38
@raz I don't understand what u mean, sorry?
Dec 22, 2014 18:37
@DavidFreitag maybe I don't know what for these packets are. I see their info. as continuation data!!
Dec 22, 2014 18:34
@DavidFreitag I didn't get it, sorry
Dec 22, 2014 18:34
I don't have time to do much work...too much pressure and too many works to do in short time
Dec 22, 2014 18:34
@DavidFreitag Yess, to prove it, Telegram doesn't mention the usage of SSL, yet I found many SSL packets in the communication between the device and their server
Dec 22, 2014 18:32
I don't have to bother decrypting them
Dec 22, 2014 18:32
@raz Now I got what I wanted....I got the data packets...I know it's encrypted according to the telegram website explanation
Dec 22, 2014 17:43
@raz [updates] I changed the wifi I'm using and now I captured the msgs packets for telegram msgs that's the [post,http] ones
Dec 22, 2014 15:50
HTTP, post
Dec 22, 2014 15:50
@raz Coz telegram claims to use HTTP,TCP to send the encrypted msgs....But I see many SSL ones!!!
Dec 22, 2014 15:49
@Ohnana oh thanks man ;)
Dec 22, 2014 15:49
I was working on telegram but I only captured the ACK, and TCP reassembled PDU packets...But the msg packets are missing
Dec 22, 2014 15:47
appreciate it
Dec 22, 2014 15:47
@raz thanks buddy
Dec 22, 2014 15:46
@raz so the app. perhaps encrypt it first using whatever algorithm then send it in SSL,maybe
Dec 22, 2014 15:46
@raz okay....Got it now
Dec 22, 2014 15:44
@RoryAlsop loool
Dec 22, 2014 15:44
@raz So SSL doesn't implement encryption over the data?
Dec 22, 2014 15:43
too*
Dec 22, 2014 15:43
@RoryAlsop MMA..works to?
Dec 22, 2014 15:42
@RoryAlsop hahaha...maybe
Dec 22, 2014 15:42
@ sorry whats UTF?
Dec 22, 2014 15:40
@raz I see
Dec 22, 2014 15:40
@raz you mean the SSL packets at wireshark capture?
Dec 22, 2014 15:39
Okay... @RoryAlsop @raz @Ohnana @DavidFreitag and others thanks a lot
Dec 22, 2014 15:37
@DavidFreitag I saw the wiresharks packets using SSL, doesn't that mean it's encrypted ?
Dec 22, 2014 15:30
So. it seems no hope to find their encryption algorithm....I mean no reviews or discussions ?..and I don't papers would do that
Dec 22, 2014 15:27
@Simon okay, sure :)
Dec 22, 2014 15:26
@Ohnana hahahah...I know I wont be able to do it...at lease not before computers vanish
Dec 22, 2014 15:24
@raz in that case you only can read the msg if you hack the server....but you can't read it if it's transiting (client--> server, server --> client?
Dec 22, 2014 15:23
But the thing is that-for now-I'm doing this for crypto class I need to explain about thier encryption..and if it's encrypted I don't have to decrypt it..But I'd love to do that later on..heheh
Dec 22, 2014 15:20
This is great for me to learn thanks anyway
Dec 22, 2014 15:20
BTW does my phone needs to be rooted?
Dec 22, 2014 15:19
@RоryMcCune I see...
Dec 22, 2014 15:19
@RоryMcCune Thanks alot by the way
Dec 22, 2014 15:18
@RоryMcCune So in this case all the work would be at the mobile phone..and no need for wireshark?
Dec 22, 2014 15:14
VPN alike
Dec 22, 2014 15:14
@raz Do you mean they send it in encrypted channel as plain txts?
Dec 22, 2014 15:13
But which one?
Dec 22, 2014 15:13
Because SSL implements various encryption algorithms,isnt?
Dec 22, 2014 15:12
@raz indeed
Dec 22, 2014 15:11
algorithm
Dec 22, 2014 15:11
@Noordung Thanks buddy
Dec 22, 2014 15:11
But I still need to know the alog.
Dec 22, 2014 15:10
So far I found from wireshark it uses SSL
 
Jan 12, 2016 16:00
Hello