FTP banner dead drop: analyzing E4del and PINHOLE RAT
How E4del and PINHOLE RAT use the FTP banner as a dead drop to receive commands, with PCAP analysis, Suricata rules and hardening.
> Vulnerabilities
CVEs and related topics
10 articoli
Featured
CSRF: What It Is and How to Defend Your Web Applications
CSRF remains in the OWASP Top 10 and hits applications that look secure. How it really works, with exploit examples and concrete countermeasures to im...
A Single Telegram Sticker Can Hack You: The Unpatched, Zero-Click RCE Vulnerability
A specially crafted animated sticker file can execute remote code on Telegram for Android and Linux with no user interaction at all. ZDI-CAN-30207, CV...
WordPress Password Reset Brute Force: Analysis of a Real Attack and Nginx Countermeasures
A bot requesting dozens of password resets per minute on a WordPress site, with a different user-agent on every request. Here's how to spot it in ngin...
Featured
Prompt injection, cos'è e come difendere i sistemi basati su llm
La prompt injection rappresenta una debolezza strutturale dei sistemi basati su LLM. Quando comandi e dati viaggiano nello stesso canale, basta una fr...
Featured
The Threat of Supply Chain Attacks
Software supply chain attacks are a growing, insidious threat: compromising a single library or DevOps tool is enough to hit thousands of systems. Fro...
Featured
SQL Injection: How It Works and How to Protect Your Applications
SQL Injection is still among the most exploited vulnerabilities. Here's how it really works, with practical examples and concrete solutions for develo...
Featured
What Is Cross-Site Scripting (XSS), What Types Exist and How Do You Protect Against It?
Cross-site scripting (XSS) is a serious vulnerability that lets hackers inject malicious scripts into web applications. Covers prevention, types of XS...
"The Mother of All Breaches" Exposes 26 Billion Records
A massive collection of stolen data, nicknamed "the Mother of All Breaches", has recently been discovered, including 26 billion records from LinkedIn,...
Featured
Types of Malware
There are several types of malware, including spyware, adware, backdoors, ransomware, scareware, rootkits, viruses, trojans and worms, each with a dif...