There is a new location attacked on the Exchange, a researcher has revealed Black Hat, and threatening actors are now using servers at risk of RCE bugs. Microsoft Exchange researchers’ honeypots are heavily exploited by ProxyShell: The name of the attack revealed in Black Hat last week that tied up three threats to enable unsuspecting attackers to use remote codes (RCE) and capture passwords. In...
Enrich your websites/apps with APIs; integrate them securely with only a couple of clicks Have you ever wanted to connect API resources to your frontend but do not want to go through the hassle of programming a backend? If you are a developer with an innovative idea that you want to implement quickly and securely but do not need/want to build a server-based backend; you can do that now in just...
Overview In this blog I am going to configure Reverse Proxy & backend servers & automate it using ansible. Description Use Ansible playbook to Configure Reverse Proxy i.e. Haproxy and update it’s configuration file automatically on each time new Managed node (Configured With Apache Webserver) join the inventory. Pre-Requisites Before doing this task you should know concepts like Reverse...
Here’s part six of the computer networking series, I believe the hands-on lab we partook in was a thrill. If you have no idea about what the hands-on lab is or what we did, here’s a link to part one of it. If you have no idea what the computer networking series is all about, here’s a link to part one. Alright without further-ado let’s begin. Photo by Taylor Vick at unsplash.com What is a proxy...
Over-view In this blog, I am going to show how can we configure proxy server & backend servers using Ansible Role. We will study & use the concepts of ansible role, how to create them or how to integrate them as the task proceed further. Pre-Requisites Before going futher you should have some knowledge of following concepts: Ansible Role HAproxy Ansible Playbook Now let’s proceed this...
The Vulnerability Hi guys I’m beya this is my second write-up in case you want the first one here is the link chaining bugs from self XSS to account takeover tow years go I had a pentest contract with a company let’s call it redactflix.com and found a bunch of vuln like CORS, XSS, BOLA,…this vuln I’m going to talk about was completely different. let’s talk a little bit about the service to use a...
A discriminating, next-gen firewall might just be what you need instead 💊 So, how does discrimiNAT compare to Squid then? Sufficient Depth of ChecksSquid: yesproxies terminate incoming connections, read metadata, and launch new outbound connections, therefore, working around the need to carry out more checks because they are acting on the client’s behalfdiscrimiNAT: yesinspects raw...
We build an application which has different microservices and we want to send request to appropriate microservice, make our servers more secure, how can we do that ? We want to control our users traffic, know which websites they open, block some websites for our users, how can we do that ? A forward proxy sits in front of computers. When these computers make requests it accepts all requests and...
If you live in Singapore or Philippines, you must be familiar with Shopee, and you can find almost anything you want on it. Sometimes you want to wait for price cut, and you want to check price everyday through programming. I’m going to show you how to get the latest price of each single product and save your day. The Example below are Shopee’s product links in the basic format. # basic...
“Burp Suite” istemci ve sunucu arasındaki istekleri görüntüleyen, isteklerin üzerinde gerekli değişikleri yapmamıza yarayan bir programdır. Burp Suite çalışmaya başladığı anda local’de (127.0.0.1) vekil sunucu çalıştırılır. Tarayıcıdan da bu vekil sunucuyu dinlenir. Böylece tarayıcıdan sunucuya giden istekler bu vekil sunucu üzerinden gidecektir. Bu yazımızda Burp Suite’i hem Ubuntu 20.04 hem de...