If you get requests like this in Burp, and you don’t need or want them…… you need to disable captive portal detection. Eg: GET /success.txt HTTP/1.1 Host: detectportal.firefox.com There isn’t a easy checkbox to configure this, however it is possible to disable using about:config. In a new tab, type about:config in the address bar and …
Continue reading ‘Firefox Captive Portal Detection and Burp Suite’ »
If you want to identify the configuration options for STS etc, you will need to look at HTTP Headers. From Linux you can use curl. For HTTPS sites, you may want to consider the –insecure option if you have other cert issues to contend with.
This affects older systems, however I needed this for a Windows 2000 system the other day. Yep, they are still about. Here is a quick command line to create a null session: How to access shares after creation of null session: A little more info here if your interested.
Seamless window integration of two separate operating systems, with isolated network stacks. Ransomware poses a real risk to every day web surfers. There are multipule attack vectors, drive by downloads, compromised sites and malvertising to name just a few are all huge areas of risk. This leads some to want seperation or sand boxing of …
Continue reading ‘Browser Separation with Integration using VirtualBox’ »
VeraCrypt is a free disk encryption software, that is based on TrueCrypt 7.1a. If you are suffering slow boot up with VeraCrypt, you password takes ages to be accepted or slow pre boot authentication then read on… When I first tested VeraCrypt with Windows 10, I had problems with it taking around a minute to …
Continue reading ‘VeraCrypt takes a minute to pre-boot authenticate’ »
Note to self following a quick setup on a development box…. Setup: To renew: Quick cron hack for renewals: Test with: Thanks to Adam for the head start: https://www.adamcouch.co.uk/2016/02/20/lets-encrypt/ More here: https://letsencrypt.org/
With the inevitable increase of internet connected devices, mainly due to the surge in Internet of Things (IoT) products, the number of vulnerable (or potentially vulnerable) devices is ever increasing. Today we have everything from internet connected thermostats and door bells to toy dolls and cars. Security zones with home NAT/Firewall routers NOTE: All references …
Continue reading ‘Implementing Security Zones with Home Routers for the IoT early years’ »
If you have upgraded to Windows 10, it is likely you will run into problems enabling full disk encryption / system encryption with VeraCrypt due to the GPT configuration of your disk. If your prepared to reload your computer, you can achieve full disk encryption, on Windows 10 home, at no cost. (Providing your disk …
Continue reading ‘VeraCrypt on Windows 10 64bit, now TrueCrypt has gone’ »
With the increasing number of mobile computing devices the fixed desktop PC in the home has been on the decrease, in favour of a mix of mobile platforms. Whilst a number of people use their mobile or tablet devices for browsing the web, there is a large number of laptops in use which do not …
Continue reading ‘The need for Full Disk Encryption (FDE) / System Encryption’ »
In this video Seth Juarez interviews Seth Moore who describes another benefit of the Windows 10 Isolated User Mode, credential theft mitigation. He first describes the kinds of credentials that can be stolen and how a hacker gains access to them. He then describes how the Windows 10 Isolated User Mode prevents the typical techniques …
Continue reading ‘Mitigating Credential Theft using the Windows 10 Isolated User Mode’ »