Tokom decembra primećena je sumnjiva aktivnost na mreži koja potiče sa IP adrese unutar jednog državnog ASN-a. Nekoliko nezavisnih bezbednosnih servisa označilo je ovu IP adresu kao malicioznu, zbo...
Ova poruka se masovno širi i stiže do gotovo svih inboxa, jer je pažljivo maskirana, pa čak ni Gmail-ov anti-spam sistem nije uspeo da je detektuje. Nisam imao pristup celom headeru emaila, ali je ...
During a recent reconnaissance using Shodan, the focus was on identifying open and potentially vulnerable services in Serbia, particularly on TCP port 1433, commonly used by Microsoft SQL Server. W...
In the “CanYouSee?” CTF challenge, I was given an image and asked to find a hidden flag. At first, the image didn’t show anything unusual, but by carefully examining the file, I was able to uncover...
The first step in any CTF or penetration test is to perform reconnaissance. I used Nmap, port scanner, to identify what services the target machine was running and what ports were open. nmap -sV -...
As always, I began with an nmap scan to identify open ports and running services on the target machine. nmap -sV -vv 10.10.95.234 PORT STATE SERVICE REASON VERSION 21/tcp open ftp...
Like any other student, I have to spend a lot of time on my computer for multiple reasons. Be it for taking care of personal projects, school tasks, or even conducting research; I depend on my comp...
When I was a kid, I loved visiting my grandparents’ house. It wasn’t just about getting spoiled with snacks or hearing Grandpa’s never-ending stories from the good old days — it was about the one t...
In this analysis, I explored a .pcap file downloaded from MalwareTrafficAnalysis.net, a valuable resource offering real-world network traffic captures from malware infections. My objective was to e...
Introduction Hello everyone, in this Medium blog, I’m going to write about analyzing malicious traffic with a couple of tools that can be useful for further investigations. For this, I’ll start by...