7 posts about

Root DNS Servers Experienced DDoS Attack with 5 Million Queries per Second

A report from Root [DNS] Server Operations or rootops published on December 4th, 2015 stated that the Internet Domain Name System’s root name servers received a high rate of DNS queries over two separate intervals. The incidents occurred on November 30, 2015 and December 1st, 2015. The queries were “well-formed, valid DNS messages for a single domain...
Read More

Quick Nmap ping sweep and output to grep-able format

Start with laying out what range of IP addresses you want to scan. I’d suggest keeping it limited to your specific targets. Then run this as root: nmap -sn -v -oG nmapped.txt -sn (No port scan) .This option tells Nmap not to do a port scan after host discovery, and only print...
Read More

PingSweep with Scapy

Want to get a bit geekier with your ping sweeps? Python Scapy can be used to create, modify, send, and intercept network packets and any TCP/IP layer. Here is a simple ping sweep script with Python Scapy: !/usr/bin/python from scapy.all import * TIMEOUT = 2 conf.verb = 0 for ip in range(201, 256): #Change it...
Read More

SSL3 Vulnerability code-named 'Poodle'

SSL version 3 is still being supported across all platforms. That is , even though this encryption mechanism for the web is 15 years old, almost as old as Windows XP. Google researchers revealed today that SSL 3 might be vulnerable to Man in the Middle (MITM) attacks. Basically, an attacker who sits between you and your service provider...
Read More

Information Leakage

Contents 1)     Introduction. 2 2)     Information Leakage. 2 3)     Types of Information Leakage. 4 a) Intentional Leaks. 4 i) Internal Agents. 5 ii) External Agents. 6 b) Accidental Leaks. 6 4)     Exploitation Channels. 8 a) Electronic Mail 8 b) Hard Copy. 9 c) Improper Configuration of Security Systems. 9 i) Network and System Firewalls. 9 ii) Intrusion Detection...
Read More

The author would love to hear your comments. Let us discuss at Twitter @hashtaginfosec.