## There are many purposes to hide your IP – When Google pulled out of China, there were a lot of Chinese who used public VPNs to bypass blocking– There is a situation where you have to hide your IP inevitably in order to execute Real PT composed of Red Team– It may be used
Financial Sector Wireless LAN Security Guide – Financial Security Institute, 2010.12 Financial Sector Wireless LAN Security Guide-Financial Security Institute, 2010.12 Chapter 1 OverviewSection 1 BackgroundSection 2 PurposeSection 3 Scope Chapter 2 Status of Wireless LAN Services Section 1 Wireless LAN Technical Standards and Status1. Wireless LAN technical standards2. Status of wireless LAN services3. Major national
Creating a 6-Digit Numeric Password for Various Lock Devices Source: Wendy Boswell of the LifeHacker blog → If you forget the password, subtract the digits you added from the number that is written down. The result is the password.This method can also be applied when creating 4-digit and 5-digit numeric passwords. Creating Passwords of Simple
There was a consulting request from the client company for the AD security policy. AD security policy can be seen from various points of view from design of AD to account management, but since the total number of accounts is over 100,000, this consulting focused on identifying the latest issue, abnormal account, and suggesting improvement
Vulnerability examples Inadequate authorization checks gaps/weaknesses that allow unauthorized users to view, modify, or delete sensitive information without going through a valid authentication process when submitting a request to a website. For example, when you edit an article on an ad, the following HTTP request is sent. The website creates a unique profile for each
Vulnerability example Web sites use open source tools to help manage and edit web files. Since the code is open source, security vulnerabilities can also be easily discovered, Therefore, developers/individuals need to be careful when using open source because security is open to all. Once an attacker has confirmed that an open source library
Vulnerability examples Many IoT devices such as dual-mode routers, IP cameras, and door locks provide their management services, such as providing information or changing settings, through web pages using HTTP. These management pages come from CGI files that are already compiled into the firmware. These CGI files, when needed as specific inputs in the
Vulnerability Examples SQL injection is an attack technique in which an attacker exploits security vulnerabilities toinject and execute arbitrary SQL statements, thereby manipulating the database to performabnormal operations. There are attack types such as Error SQL Injection, Blind SQLInjection, and Union based SQL Injection. For example, in the code in the figure below, the
Cross-site scripting (XSS) is an attack method that contains malicious scripts on a web page and is placed on the user’s side. For example, if an unverified external input value is used to create a dynamic web page, visitors to that web page will immediately see the attacker’s identity and information about the target web