skdx: Blogger

Showing posts with label Blogger. Show all posts

What is a WebRTC leak? What is the WebRTC technology?

<h1 style="font-family: "OpenSans Bold"; line-height: initial;">What is a WebRTC leak?</h1><div style="color: #444444; font-family: "OpenSans Regular", Raleway, sans-serif; font-size: 14px;">A WebRTC leak, like a DNS-leak, is the capability to get your real address even while you are using some anonymization services.</div><h2 style="font-family: "OpenSans Bold"; line-height: initial; padding-top: 20px;">What is the WebRTC technology?</h2><div style="color: #444444; font-family: "OpenSans Regular", Raleway, sans-serif; font-size: 14px;">WebRTC (Web Real-Time Communication) is a technology that allows you to organize the flow of data between browsers. It is currently supported by Firefox and Chrome, as well as all browsers that are based on Chrome. The technology basically allows voice and video communication in browsers.</div><div style="color: #444444; font-family: "OpenSans Regular", Raleway, sans-serif; font-size: 14px;">The leak of the IP address (local and external) occurs by calling the command using WebRTC. Typically, this command is called by javascript.</div><div style="color: #444444; font-family: "OpenSans Regular", Raleway, sans-serif; font-size: 14px;">There are two solutions for this problem - prohibiting the execution of all scripts in the browser and/or disabling the WebRTC technology in the browser.</div>

What is a WebRTC leak? What is the WebRTC technology?

What is a WebRTC leak? A WebRTC leak, like a DNS-leak, is the capability to get your real address even while you are using some anonymizatio...

6:24 PM

SSL OR TLS?

<h2 style="background-color: white; border: 0px; box-sizing: inherit; clear: both; color: #444340; font-family: Yrsa, sans-serif; font-size: 23px; font-weight: inherit; margin: 0px 0px 0.4em; outline: 0px; padding: 0px; vertical-align: baseline;">SSL or TLS?</h2><div style="background-color: white; border: 0px; box-sizing: inherit; color: #444340; font-family: "Source Sans Pro", Helvetica, sans-serif; font-size: 16px; margin-bottom: 1.6em; outline: 0px; padding: 0px; vertical-align: baseline;">New versions of SSL have been released to ensure more secure data transmission, and TLS (Transport Layer Security) is just the updated version of SSL. Previous changes were reflected in the name by adding the number of versions, for example, SSLv2.0 or SSLv3.0. However, instead of naming the next version SSLv4.0, it was called TLSv1.0.</div><div style="background-color: white; border: 0px; box-sizing: inherit; color: #444340; font-family: "Source Sans Pro", Helvetica, sans-serif; font-size: 16px; margin-bottom: 1.6em; outline: 0px; padding: 0px; vertical-align: baseline;">As SSL is more commonly used, it is referred to while talking about securing transmitted data, even if the TLS version is actually used.</div>

SSL OR TLS?

SSL or TLS? New versions of SSL have been released to ensure more secure data transmission, and TLS (Transport Layer Security) is just the u...

9:05 AM

How to recognize SSL-secured websites? SSL certificate A-Z

<h2 style="font-family: "OpenSans Bold"; line-height: initial; padding-top: 20px;">How to recognize SSL-secured websites?</h2><div style="color: #444444; font-family: "OpenSans Regular", Raleway, sans-serif; font-size: 14px;">Websites use SSL technology to let their customers feel confident while providing their personal data, for example, while purchasing online. To let you easily see whether the website you are visiting is a trusted one or not, browsers give you visual cues such as an icon of a lock next to the address bar or the whole bar green.</div><div style="color: #444444; font-family: "OpenSans Regular", Raleway, sans-serif; font-size: 14px;">The lock icon means that a website is SSL-secured, while a green address bar implies that a website uses Extended Validation SSL. Another distinctive feature of SSL is that the websites that use it begin not with http but with https.</div><div style="color: #444444; font-family: "OpenSans Regular", Raleway, sans-serif; font-size: 14px;"><img class="text-image" src="https://whatismyip.li/images/ssl/ssl-img.png?cb=041" style="height: 197.927px; width: 288px;" /></div><h2 style="font-family: "OpenSans Bold"; line-height: initial; padding-top: 20px;">How does it work?</h2><div style="color: #444444; font-family: "OpenSans Regular", Raleway, sans-serif; font-size: 14px;">All browsers are capable of interacting with SSL-secured web servers, but to make this interaction happen, the browser and the server need an SSL certificate (a small data file used to link a cryptographic key with details of an organization or site) for establishing a secure connection. Therefore, when a browser tries to access an SSL-secured website, an ‘SSL Handshake’ process takes place, which is instant and invisible for users.</div><div style="color: #444444; font-family: "OpenSans Regular", Raleway, sans-serif; font-size: 14px;">Setting up the SSL connection requires three keys; they are the public, private, and session ones. It works this way: any data encrypted with the private key can be decrypted by the public key solely, and vice versa. However, as such an encryption process is quite power-consuming, it is used only during the SSL Handshake, after which a symmetric session key is created. Thus, when the secure connection is established, the transmitted data is encrypted with this session key.</div><h2 style="font-family: "OpenSans Bold"; line-height: initial; padding-top: 20px;">SSL or TLS?</h2><div style="color: #444444; font-family: "OpenSans Regular", Raleway, sans-serif; font-size: 14px;">New versions of SSL have been released to ensure more secure data transmission, and TLS (Transport Layer Security) is just the updated version of SSL. Previous changes were reflected in the name by adding the number of versions, for example, SSLv2.0 or SSLv3.0. However, instead of naming the next version SSLv4.0, it was called TLSv1.0.</div><div style="color: #444444; font-family: "OpenSans Regular", Raleway, sans-serif; font-size: 14px;">As SSL is more commonly used, it is referred to while talking about securing transmitted data, even if the TLS version is actually used.</div>

How to recognize SSL-secured websites? SSL certificate A-Z

How to recognize SSL-secured websites? Websites use SSL technology to let their customers feel confident while providing their personal data...

9:00 AM

What is an SSL Certificate and Why It Is Important?

What is an SSL Certificate and Why It Is Important?

What is an SSL Certificate and Why It Is Important? Secure Sockets Layer (SSL) is an encryption protocol, a security technology, used for es...

8:52 AM

Acunetix Release Web Site Security Pen Testing Tools Free

<header class="entry-header" style="background-color: white; box-sizing: border-box; color: #333333; font-family: "Open Sans", "Helvetica Neue", Helvetica, Arial, sans-serif; font-size: 30px; margin: 20px 0px; outline: 0px !important; padding-bottom: 0px; padding-top: 8px;"><h1 class="entry-title" style="box-sizing: border-box; color: inherit; font-family: inherit; font-size: 24px; height: auto; line-height: 1.1; margin: 0px 0px 10px; outline: 0px !important; overflow: visible; text-overflow: clip;">Acunetix Release Web Site Security Pen Testing Tools Free</h1></header><div class="entry-content" style="background-color: white; box-sizing: border-box; color: #333333; font-family: "Open Sans", "Helvetica Neue", Helvetica, Arial, sans-serif; font-size: 14px; outline: 0px !important;"><h2 style="box-sizing: border-box; color: inherit; font-family: inherit; font-size: 21px; font-weight: 400; line-height: 1.1; margin-bottom: 10px; margin-top: 20px; outline: 0px !important;">HTTP editor, fuzzer and sniffer tools help pen testers identify vulnerabilities</h2><div style="box-sizing: border-box; margin-bottom: 10px; outline: 0px !important; text-align: justify;">London, UK – January 2016 – Hot on the release of Acunetix Version 11, pioneering web application security software Acunetix, now delivering Manual Pen Testing Tools at no cost. Penetration testers can make use of an HTTP Editor to modify or craft HTTP requests and analyze responses; intercept and modify HTTP traffic on the fly using the integrated HTTP Sniffer; fuzz test HTTP requests using the HTTP Fuzzer and test Blind SQL Injection vulnerabilities further using the Blind SQL Injector, among others.</div><blockquote style="border-left: 5px solid rgb(238, 238, 238); box-sizing: border-box; font-size: inherit; margin: 0px 0px 20px; outline: 0px !important; padding: 10px 20px;"><div style="box-sizing: border-box; outline: 0px !important; text-align: justify;">“Acunetix has for the past decade been an excellent resource in the pentester’s tool kit. Prior to Acunetix v11, these Manual Pen Testing Tools were only available to Acunetix Customers. By releasing our manual tools separately, we aim to facilitate veteran testers as well as up and coming security researchers by making it easy to manually test web applications for logical flaws among others,” added Nicholas Sciberras, CTO, Acunetix.</div></blockquote><div style="box-sizing: border-box; margin-bottom: 10px; outline: 0px !important; text-align: justify;"><img alt="free manual tools" class="alignnone size-full wp-image-16786" height="693" sizes="(max-width: 986px) 100vw, 986px" src="https://www.acunetix.com/wp-content/uploads/2017/01/image00-2.png" srcset="https://www.acunetix.com/wp-content/uploads/2017/01/image00-2.png 986w, https://www.acunetix.com/wp-content/uploads/2017/01/image00-2-300x211.png 300w, https://www.acunetix.com/wp-content/uploads/2017/01/image00-2-768x540.png 768w, https://www.acunetix.com/wp-content/uploads/2017/01/image00-2-910x640.png 910w, https://www.acunetix.com/wp-content/uploads/2017/01/image00-2-100x70.png 100w" style="border-radius: 4px; border: 0px; box-sizing: border-box; height: auto; max-width: 100%; outline: 0px !important; vertical-align: middle;" width="986" /></div><div style="box-sizing: border-box; margin-bottom: 10px; outline: 0px !important; text-align: justify;"><span style="box-sizing: border-box; font-weight: 700; outline: 0px !important;"><a href="https://www.acunetix.com/blog/docs/http-editor/" style="background: 0px 0px; box-sizing: border-box; color: #e31e25; outline: 0px !important; text-decoration-line: none; transition: all 0.2s ease-in 0s;">HTTP Editor</a>:</span> Allows you to create, analyze and edit client HTTP requests; as well as inspect server responses. It also includes an encoding and decoding tool to encode/decode text and URL’s to MD5 hashes, UTF-7 and other formats.</div><div style="box-sizing: border-box; margin-bottom: 10px; outline: 0px !important; text-align: justify;"><span style="box-sizing: border-box; font-weight: 700; outline: 0px !important;"><a href="https://www.acunetix.com/blog/docs/http-sniffer/" style="background: 0px 0px; box-sizing: border-box; color: #e31e25; outline: 0px !important; text-decoration-line: none; transition: all 0.2s ease-in 0s;">HTTP Sniffer</a>:</span> A proxy that allows you to analyze HTTP requests and responses, and edit these while they are in transit. The HTTP sniffer can also be used to manually crawl a site, and use the manual crawl to seed an Acunetix scan.</div><div style="box-sizing: border-box; margin-bottom: 10px; outline: 0px !important; text-align: justify;"><span style="box-sizing: border-box; font-weight: 700; outline: 0px !important;"><a href="https://www.acunetix.com/blog/docs/http-fuzzer/" style="background: 0px 0px; box-sizing: border-box; color: #e31e25; outline: 0px !important; text-decoration-line: none; transition: all 0.2s ease-in 0s;">HTTP Fuzzer</a>:</span> A tool which allows you to automatically send a large number of HTTP requests including invalid, unexpected and random data to a website, to test input validation and handling of invalid data by the web application.</div><div style="box-sizing: border-box; margin-bottom: 10px; outline: 0px !important; text-align: justify;"><span style="box-sizing: border-box; font-weight: 700; outline: 0px !important;"><a href="https://www.acunetix.com/blog/docs/blind-sql-injector/" style="background: 0px 0px; box-sizing: border-box; color: #e31e25; outline: 0px !important; text-decoration-line: none; transition: all 0.2s ease-in 0s;">Blind SQL Injector</a>:</span> An automated database data exfiltration tool. By using Blind SQL injection vulnerabilities discovered when scanning a website, it is possible to demonstrate the serious impact a Blind SQL injection vulnerability can have on the website. Used to enumerate databases, tables, fields and dump data from the vulnerable web application.</div><div style="box-sizing: border-box; margin-bottom: 10px; outline: 0px !important; text-align: justify;"><span style="box-sizing: border-box; font-weight: 700; outline: 0px !important;"><a href="https://www.acunetix.com/blog/docs/subdomain-scanner/" style="background: 0px 0px; box-sizing: border-box; color: #e31e25; outline: 0px !important; text-decoration-line: none; transition: all 0.2s ease-in 0s;">Subdomain Scanner</a>:</span> Scans a top-level domain to discover subdomains configured in its hierarchy, by using the target domain’s DNS server, or any other DNS server specified by the user. While scanning, this tool will also automatically identify and inform the user if the domain being scanned is using some kind of wildcard characters, such as *.domain.com.</div><div style="box-sizing: border-box; margin-bottom: 10px; outline: 0px !important; text-align: justify;"><span style="box-sizing: border-box; font-weight: 700; outline: 0px !important;"><a href="https://www.acunetix.com/blog/docs/target-finder/" style="background: 0px 0px; box-sizing: border-box; color: #e31e25; outline: 0px !important; text-decoration-line: none; transition: all 0.2s ease-in 0s;">Target Finder</a>:</span> An IP range / port scanner which can be used to discover running web servers on a given IP or within a specified range of IPs. The list of ports on which the web servers are listening can also be configured. The default ports the scanner will scan are port 80 for HTTP and port 443 for SSL.</div><div style="box-sizing: border-box; margin-bottom: 10px; outline: 0px !important; text-align: justify;"><span style="box-sizing: border-box; font-weight: 700; outline: 0px !important;"><a href="https://www.acunetix.com/blog/docs/authentication-tester/" style="background: 0px 0px; box-sizing: border-box; color: #e31e25; outline: 0px !important; text-decoration-line: none; transition: all 0.2s ease-in 0s;">Authentication Tester</a>:</span> Used to test the strength of both usernames and passwords within HTTP and web forms authentication environments via a dictionary attack.</div><h3 style="box-sizing: border-box; color: inherit; font-family: inherit; font-size: 18px; font-weight: 400; line-height: 1.1; margin-bottom: 10px; margin-top: 20px; outline: 0px !important;"><a href="https://www.acunetix.com/vulnerability-scanner/free-manual-pen-testing-tools/" style="background: 0px 0px; box-sizing: border-box; color: #e31e25; outline: 0px !important; text-decoration-line: none; transition: all 0.2s ease-in 0s;">Download the FREE Manual Pen Testing Tools</a></h3><h2 style="box-sizing: border-box; color: inherit; font-family: inherit; font-size: 21px; font-weight: 400; line-height: 1.1; margin-bottom: 10px; margin-top: 20px; outline: 0px !important;">About Acunetix</h2><div style="box-sizing: border-box; margin-bottom: 10px; outline: 0px !important; text-align: justify;">User-friendly and competitively priced, Acunetix leads the market in automatic web security testing technology that comprehensively scans and audits complex, authenticated, HTML5 and JavaScript-heavy websites among others. Acunetix detects over 3000 types of web application vulnerabilities and is the industry leader in detecting the largest variety of SQL injection and XSS vulnerabilities, including Out-of-band SQL injection and DOM-based XSS. Acunetix beats competing products in many areas; including speed, limiting false positives and the ability to access restricted areas with ease. Acunetix also has the most advanced detection of WordPress vulnerabilities and a wide range of management and regulatory reports including ISO 27001 and PCI compliance. Acunetix also includes integrated vulnerability management features to extend the enterprise’s ability to comprehensively manage, prioritise and control vulnerability threats. Acunetix is available on premises or as an online solution.</div><h2 style="box-sizing: border-box; color: inherit; font-family: inherit; font-size: 21px; font-weight: 400; line-height: 1.1; margin-bottom: 10px; margin-top: 20px; outline: 0px !important;">Acunetix, the company</h2><div style="box-sizing: border-box; margin-bottom: 10px; outline: 0px !important; text-align: justify;">Founded in 2004 to combat the alarming rise in web application attacks, Acunetix is the market leader, and a pioneer in automated web application security technology. Acunetix products and technologies are depended on globally by individual pen-testers and consultants all the way to large organizations. It is the tool of choice for many customers in the Government, Military, Educational, Telecommunications, Banking, Finance, and E-Commerce sectors, including many Fortune 500 companies, such as the Pentagon, Nike, Disney, Adobe and many more.</div></div>

Search This Blog

Blog Archive

Labels

Report Abuse

Pages

About Me

What is a WebRTC leak? What is the WebRTC technology?

SSL OR TLS?

How to recognize SSL-secured websites? SSL certificate A-Z

What is an SSL Certificate and Why It Is Important?

Acunetix Release Web Site Security Pen Testing Tools Free

Good Morning

ওহে বালক পড়িও না নারীর প্রেমে😜নারী যখন দিবে বাঁশ বুঝিবে তখন লাগে কেমন তার ক্রাস😍😍

পাপকে ঘৃনা করো,পাপিকে নয়❌ যে ছেলে পড়ালেখা ভালোবাসে😍 ম্যাম কে নয় 😂

---হেলো ফেসবুক জনতা-বাসী😊☺ -- আপনারা সবাই কেমন আছেন😘😍

Good Morning

Good Morning

Good Morning

Good Morning

Good Morning