Ethical hacking and penetration testing

How two-factor authentication works Two-factor authentication is needed to enhance the protection of user information. With it, you can protect the login to your email account, e-wallet, various services related to money and their substitutes. The principle of two-factor authentication is that it requires confirmation of the user's identity usingRead More

This article focuses on the metadata in the LibreOffice files. This office suite is free, its source code is open, it is cross-platform and quite popular. It has good compatibility with MS Office and is generally a very good alternative to MS Office. If you are concerned with anonymity issuesRead More

Metadata in Word files The MS Word file and, in general, all MS Office documents contain a lot of metadata. And further: If you need to extract metadata from MS Word files without opening the file in Word, you can use special utilities. Actually the popular mat tool, which isRead More

What is an Autonomous System (AS) To understand what the concept of ‘Autonomous Systems’ is for, you need to have an idea about the routing of data on the Internet. The structure of the network of an Internet provider or a large organization can be simply represented as a setRead More

Table of contents 1. What is trace routing. Why do we need tracing routes 2. How tracing routes works 3. Trace route types 4. Tracing software 5. traceroute 5.1 How to use traceroute 5.2 Traceroute methods 5.3 How to speed up tracing. How to disable reverse IP to host name translation during tracing 5.4 IPv6 tracing 5.5 HowRead More

It all started with the fact that I became interested in how to find files created or modified in a system in a certain period of time. For example, how do you know which files in the /etc folder were changed in the last day or in the last week?Read More

Quite often, Internet service providers use NAT to reduce consumption of public IP addresses. As a result, it turns out that many users have one public IP address. There is not much difference to users (especially if they don’t need a public IP, for example, for a web server), butRead More

How to accelerate web application scanning via multi-threading Typical web application scanners that are used security audit of sites consume quite a few resources: I mean CPU, RAM, and even bandwidth. However, they work for a long time – the bottleneck is the speed of the response of the remoteRead More

Danger-zone is a tool to correlate data between domains, IPs and email addresses, present it as a graph and store everything into Elasticsearch and JSON files. I bumped into this program in the article “OSINT tool for visualizing relationships between domains, IPs and email addresses”, in which the following programRead More

Subdomain discovery is an important part of information gathering. More details about subdomains in the article “How to search subdomains and build graphs of network structure with Amass” (although Amass itself was updated to version 3, and examples of commands in that article are given for Amass 2.x – therefore,Read More