Pwnagotchi - Deep Reinforcement Learning instrumenting bettercap for WiFi pwning.
navigation Pwnagotchi: Deep Reinforcement Learning for WiFi pwning! Pwnagotchi is an A2C-based “AI†powered by bettercap and running on a Raspberry Pi Zero W that learns from its surrounding WiFi environment in order to maximize the crackable WPA key material it captures (either through passive sniffing or by performing deauthentication and association attacks). This material is collected on disk
パスワードä¿å˜ã®ãƒ™ã‚¹ãƒˆãƒ—ラクティス㨠bcrypt ã®ãƒ¡ãƒ¢æ›¸ã | tech - 氾濫原
考ãˆã¦ã¿ã‚‹ã¨ã»ã¨ã‚“ã©ãƒ‘スワードをä¿å˜ã™ã‚‹ã‚³ãƒ¼ãƒ‰ã‚’書ã„ãŸã“ã¨ãŒãªã„。ç¾çŠ¶ã®ãƒ™ã‚¹ãƒˆãƒ—ラクティスを知らãªã‹ã£ãŸã®ã§ãƒ¡ãƒ¢æ›¸ã。 ç¾çŠ¶ã§ã¯ bcrypt 使ã†ã®ãŒã„ã„ã¿ãŸã„。b 㯠Blowfish ã® b。 Modular Crypt Format ã¨ã„ã†ãƒ•ã‚©ãƒ¼ãƒžãƒƒãƒˆã¨ã‚³ãƒ³ãƒ‘ãƒã®å‡ºåŠ›ã‚’ã™ã‚‹ã€‚crypt (3) ã¯ã‚‚ã¨ã‚‚㨠DES ã®çŸã„フォーマットã ãŒã€å¼±ã™ãŽãŸãŸã‚ md5 æ‹¡å¼µãªã‚ŠSHA512 æ‹¡å¼µãªã©ãŒå˜åœ¨ã—ã¦ã„る。(htpasswd ã§ã‚‚使ã‚ã‚Œã¦ã„ã‚‹ã®ã§è¦‹ãŸã“ã¨ã‚る人ã¯å¤šã„ã ã‚ã†) ã“れ㮠Blowflish を使ã£ãŸã‚‚ã®ãŒ bcrypt ã§ã€prefix ã« $2$, $2a$, $2x$, $2y$ $2b$ ãŒã¤ã„ã¦ã„る。prefix ã®é•ã„ã¯ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã®é•ã„ã§ã‚ã‚Šã€ç¾åœ¨ã¯ 2b を使ã†ã®ãŒè‰¯ã„。ストレッãƒãƒ³ã‚°å›žæ•°ã‚‚出力ã«å«ã¾ã‚Œã‚‹ã®ã§ã€ã‚ã‚‹ã¨ã急ã«ã‚¹ãƒˆãƒ¬ãƒƒãƒãƒ³ã‚°å›žæ•°ã‚’増やã—ã¦ã‚‚特ã«å•é¡Œ
Roughtime: Securing Time with Digital Signatures
When you visit a secure website, it offers you a TLS certificate that asserts its identity. Every certificate has an expiration date, and when it’s passed due, it is no longer valid. The idea is almost as old as the web itself: limiting the lifetime of certificates is meant to reduce the risk in case a TLS server’s secret key is compromised. Certificates aren’t the only cryptographic artifacts tha
roughtime - Git at Google
dd52936 Fix undefined behavior (unaligned write) in protocol.cc by Drew Fisher · 3 years ago master51f6971 go/protocol: fix out of order tag detection by Ben Linsay · 5 years ago0174f2b Test the number of replies matches the number of nonces. by David Benjamin · 4 years, 8 months ago74350dc Even out levels with existing tree nodes. by David Benjamin · 4 years, 8 months agoe85e216 Fix build with ne
[WARNING] Intel Skylake/Kaby Lake processors: broken hyper-threading
[WARNING] Intel Skylake/Kaby Lake processors: broken hyper-threading To: [email protected], [email protected] Subject: [WARNING] Intel Skylake/Kaby Lake processors: broken hyper-threading From: Henrique de Moraes Holschuh <[email protected]> Date: Sun, 25 Jun 2017 09:19:36 -0300 Message-id: <[🔎] [email protected].net> This warning advisory is relevant for
HSTS (HTTP Strict Transport Security) ã®å°Žå…¥ - Qiita
HTTPã§æŽ¥ç¶šã—ãŸéš›ã«ã€å¼·åˆ¶çš„ã«HTTPSã¸ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã—ã€ä»¥é™ã®ãã®ãƒ‰ãƒ¡ã‚¤ãƒ³ã¸ã®æŽ¥ç¶šã¯ã™ã¹ã¦HTTPSã¨ã™ã‚‹æ©Ÿèƒ½ãŒHSTS (HTTP Strict Transport Security) ã§ã‚る。RFC6797ã§æ¨™æº–化ã•ã‚Œã¦ã„る。 ã“ã‚Œã¯HTTPヘッダã«ä»¥ä¸‹ã‚’å«ã‚€ã“ã¨ã§å®Ÿç¾ã•ã‚Œã‚‹ã€‚ Strict-Transport-Security:max-age=有効期間秒数;includeSubDomains max-ageã§ã¯HTTPSã§é€šä¿¡ã™ã‚‹æœŸé–“ã‚’è¨å®šã™ã‚‹ã€‚ã¾ãŸã€includeSubDomainsを指定ã™ã‚‹ã“ã¨ã§ã€ã‚µãƒ–ドメインã«ã‚‚HSTSãŒé©ç”¨ã•ã‚Œã‚‹ã‚ˆã†ã«è¨å®šã§ãる。 HSTSã®ã‚µãƒãƒ¼ãƒˆã¯ã€2015å¹´6月9æ—¥ã«ãƒžã‚¤ã‚¯ãƒã‚½ãƒ•ãƒˆãŒIEã¸ã®ã‚µãƒãƒ¼ãƒˆã‚’è¿½åŠ ã—ãŸã“ã¨ã§ã€ã™ã¹ã¦ã®ãƒ¡ã‚¸ãƒ£ãƒ¼ãƒ–ラウザã«ãŠã„ã¦ã‚µãƒãƒ¼ãƒˆãŒå®Œäº†ã—ã€HTTPサーãƒãƒ¼ã¨ã—ã¦ã‚‚Apacheを始ã‚ã¨ã—è¨å®šãŒå¯èƒ½ã 。 Apacheã®è¨å®š A
Upgrade your SSH keys!
Whether you're a software developer or a sysadmin, I bet you're using SSH keys. Pushing your commits to GitHub or managing your Unix systems, it's best practice to do this over SSH with public key authentication rather than passwords. However, as time flies, many of you are using older keys and not aware of the need to generate fresh ones to protect your privates much better. In this post I'll dem
Reverse engineering and removing Pokémon GO’s certificate pinning
Reverse engineering and removing Pokémon GO’s certificate pinning Discussion links: X | Reddit | Hacker News Update: Due to new security improvements in new versions of Pokémon GO, this method may no longer work. Hello everyone, this is one of my first attempts at tinkering around on the Android platform. After spending so many years reverse engineering PowerPC executables on the Xbox 360 platform
How To Protect SSH With Two-Factor Authentication | DigitalOcean
Status: Deprecated This article is deprecated and no longer maintained. Reason This article duplicates more recent, accurate content. See Instead This article may still be useful as a reference, but may not work or follow best practices. Please see How To Set Up Multi-Factor Authentication for SSH on Ubuntu 16.04 instead. Introduction To protect your SSH server with an two-factor authentication, y
TOTP SSH port fluxing
Some people change their SSH port on their servers so that it is slightly harder to find for bots or other nasties and while that is generally viewed as an action of security through obscurity it does work very well at killing a lot of the automated logins you always see in /var/log/auth.log. However what if we could go take this to a ridiculous level? What if we could use TOTP codes that are norm
ã‚ãªãŸã®ã‚µãƒ¼ãƒã¯æœ¬å½“ã«å®‰å…¨ã§ã™ã‹ï¼Ÿä»Šã‚‚ã£ã¨ã‚‚イケã¦ã‚‹è„†å¼±æ€§æ¤œçŸ¥ãƒ„ールVulsを使ã£ã¦ã¿ãŸ - Qiita
ã¯ã˜ã‚㫠サーãƒç®¡ç†ã‚’ã—ã¦ã„る身ã¨ã—ã¦ã¯ã€ ã‚»ã‚ュリティ ã¯å¸¸ã«ä»˜ãã¾ã¨ã†æ‚ªé”ã¿ãŸã„ãªã‚‚ã®ã§ã€ã“ã®ã‚»ã‚ュリティã«é–¢ã—ã¦ã¯ä½•ã‚’ã©ã“ã¾ã§é ‘張れã°ã„ã„ã®ã‹ä¸é€æ˜Žãªéƒ¨åˆ†ãŒå¤šã„。 脆弱性ã«é–¢ã—ã¦ã¯ã€CVEãªã©ã€æ¯Žæ—¥æƒ…å ±ã¯å…¥ã£ã¦ãã‚‹ãŒã€ãã‚ŒãŒã©ã®ã‚µãƒ¼ãƒã®ä½•ã«é–¢é€£ã—ãŸã‚‚ã®ãªã®ã‹ãªã‚“ã¦ã„ã¡ã„ã¡èª¿ã¹ã¦ã‚‰ã‚Œãªã„ã—ã€ã©ã®è„†å¼±æ€§ãŒã™ãã«å¯¾å¿œã—ãªã‘ã‚Œã°ã„ã‘ãªã„ã‚‚ã®ã§ã€ã©ã®è„†å¼±æ€§ãŒã‚ã¨ã‚ã¨å¯¾å¿œã™ã‚Œã°ã„ã„ã‚‚ã®ãªã®ã‹ãªã‚“ã¦ã‚ã‹ã‚‰ãªã„。 実際ã®ã¨ã“ã‚ã€å¤§ããªè©±é¡Œã«ãªã£ãŸè„†å¼±æ€§ãらã„ã—ã‹ç·Šæ€¥ã§å¯¾å¿œã—ã¦ãªã„ã¨ã„ã†äººã¯å¤šã„ã®ã§ã¯ãªã„ã‹ã¨æ€ã†ã€‚ ãã‚“ãªä¸ã€æº€ã‚’æŒã—ã¦ç™»å ´ã—ãŸã®ãŒ vuls !! å„サーãƒã®è„†å¼±æ€§æƒ…å ±ã‚’å–å¾—ã—ã¦ã€å€‹ã€…ã®ã‚µãƒ¼ãƒãã‚Œãžã‚Œã§ã©ã‚“ãªè„†å¼±æ€§ãŒã‚ã‚Šã€ã©ã®ãらã„ã‚„ã°ã„脆弱性ãªã®ã‹ã‚’検知ã§ãるよã†ã«ãªã£ãŸï¼ 今回ã¯ã“ã®vulsを紹介ã—ã¾ã™ã€‚ Vulsã¨ã¯ å…¬å¼ã§ãƒã‚´ãŒç™ºè¡¨ã•ã‚ŒãŸã®ã§ã€å·®ã—替ãˆã¾ã—㟠公å¼ãƒ‰ã‚ュメント:
AirDrop経由ã§æ‚ªæ„ã‚るアプリを無æ–インストール出æ¥ã‚‹è„†å¼±æ€§ãŒå ±å‘Šã€å¯¾å‡¦æ³•ã‚‚公開
AirDrop Exploit ãƒãƒƒã‚«ãƒ¼ã§ã‚‚ã‚ã‚‹Mark Dowdæ°ãŒã€AirDropã®ãƒã‚°ã‚’利用ã—ã¦ã‚·ã‚¹ãƒ†ãƒ ファイルã«ã‚¢ã‚¯ã‚»ã‚¹ï¼†ç„¡æ–ã§ã‚¢ãƒ—リやウイルス（マルウェアã®æ§˜ãªã‚¢ãƒ—リ）をインストール出æ¥ã¦ã—ã¾ã†è„†å¼±æ€§ã«ã¤ã„ã¦å ±å‘Šã—ã¦ã„ã¾ã™ã€‚ 一連ã®æµã‚Œã‚’撮影ã—ãŸãƒ‡ãƒ¢å‹•ç”»ãŒå…¬é–‹ã•ã‚Œã¦ã„ã¾ã™ã®ã§ã€ã¾ãšã¯ã“ã¡ã‚‰ã‚’ã©ã†ãžã€‚ 対象 iOS Mac 脆弱性を悪用ã™ã‚‹éš›ã®æµã‚Œ 対象ã®iPhoneã«å¯¾ã—ã€AirDropã§å®Ÿè¡Œãƒ•ã‚¡ã‚¤ãƒ«ã‚’é€ä¿¡ å—ã‘å–りを「許å¯ã€ã—よã†ãŒã€Œæ‹’å¦ã€ã—よã†ãŒã€é€ä¿¡ã•ã‚Œã¦ããŸæ™‚点ã§ä»•è¾¼ã¿ã¯å®Œäº†ã€‚AirDropをオンã«ã—ã¦ã„ã‚‹ã ã‘ã§ã€é€ã‚‰ã‚Œã¦ãã‚‹å¯èƒ½æ€§ãŒã‚る状態ã§ã™ã€‚ å†èµ·å‹•ï¼ˆãƒªãƒ–ート）ãŒè¡Œã‚れるã¨ã€æ½œä¼ã—ã¦ã„ãŸãƒ•ã‚¡ã‚¤ãƒ«ãŒå‹•ä½œã‚’開始 å‰æ‰‹é †ã§é€ä¿¡ã•ã‚Œã¦ããŸç‰©ã¯ã€Œå†èµ·å‹•ã€ãŒå®Ÿè¡Œã•ã‚Œã‚‹ã¾ã§ã®é–“ã€ãƒ‡ãƒã‚¤ã‚¹å†…ã§æ½œä¼ã—ã€å¾…機状態ã¨ãªã‚Šã¾ã™ã€‚ ユーザーã«ã‚ˆã‚‹å†èµ·å‹•ã€ã‚‚ã—ãã¯ä½•ã‚‰ã‹ã®ã‚¿ã‚¤ãƒŸãƒ³ã‚°ã§ã®å†èµ·å‹•ãŒ
Blog: bashã®è„†å¼±æ€§ãŒãƒ¤ãƒã™ãŽã‚‹ä»¶ – x86-64.jp - ãã‚Šã™ç ”
Browse by time: December 2018 (1) December 2016 (1) December 2015 (1) January 2015 (1) September 2014 (2) July 2014 (2) April 2014 (1) February 2014 (1) January 2014 (3) December 2013 (2) September 2013 (3) June 2013 (1) May 2013 (1) April 2013 (1) March 2013 (2) February 2013 (5) ã‚„ã£ã¨æ›´æ–°ã™ã‚‹æ°—ã«ãªã£ãŸã€‚ ã‚‚ã㘠0. 産æ¥ã§èª¬æ˜Ž 1. ç†è«–ç·¨ 2. 攻撃編 3. パッム4. çµè«– 0. 産æ¥ã§èª¬æ˜Ž bash㌠アホ㧠地çƒãŒãƒ¤ãƒã‚¤ 1. ç†è«–ç·¨ bashã®é–¢æ•°æ©Ÿèƒ½ã¯ã€ç’°å¢ƒå¤‰æ•°ã®ä¸ã§ã‚‚使ãˆã‚‹ä»•æ§˜ã«ãªã£ã¦ã„ã¾ã™
ランã‚ング
ランã‚ング
ランã‚ング
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
Protecting your data, no matter where you go on the web
GitHub - snyk/zip-slip-vulnerability: Zip Slip Vulnerability (Arbitrary file write through archive extraction)
Made by Many
Pegaswitch.com – Your wonderful world of knowledge
GitHub - gopasspw/gopass: The slightly more awesome standard unix password manager for teams
Let your loved ones know you’re safe with our new personal safety app
http://www.getsafe.org/about
{{#tags}}- {{label}}
{{/tags}}