maltran - Tool To Download Malware Exercises From MALware-TRaffic-ANalysis.net

This tool was developed with the purpose of furthering and organizing access to traffic analysis exercises and malware files captured and published almost daily. Maltran makes the views and downloads exercises and malspams easier in an extremely simple and organized way. Visit website...

Bypassing NGFW/WAFs using data format obfuscations

A lot of network security solutions today supports a lot data format inside HTTP and other protocols. The main question here is understanding, based on traffic analysis, which data formats such as JSON/Base64/XML/etc should be applied to which field. This is an analytically unsolvable problem...

Malware Network Communication Provides Better Early Warning Signal

Research is expected to be unveiled today that challenges the industry’s current reliance on dynamic malware analysis as the best means of early detection of infections. Instead, researchers from the Georgia Institute of Technology, the IMDEA Software Institute and EURECOM posit that a better...

Netflix's HTTPS Update Can't Combat Passive Traffic Analysis Attacks

Academics argue that Netflix’s recent upgrade to HTTPS is doing little to protect its users from a passive traffic analysis attack. According to Andrew Reed and Michael Kranch, researchers with the U.S. Military Academy at West Point, it wouldn’t take much work for an attacker to capture traffic...

Android Package Inspector: Inspeckage

Inspeckage is a tool developed to offer dynamic analysis of Android applications. By applying hooks to functions of the Android API, Inspeckage will help you understand what an Android application is doing at runtime. Inspeckage will let you interact with some elements of the app, such as...

MIT Anonymity Network Riffle Promises Efficiency, Security

Researchers from MIT believe a new anonymity scheme they’ve devised dubbed Riffle could contend with Tor, claiming it’s every bit as secure as Tor, and bandwidth-efficient, to boot. According to a paper, “Riffle: An Efficient Communication System With Strong Anonymity,” .PDF released this week, t...

Panabit analysis of the traffic management system ten-AT command executed

No description provided by source...

Intercepter-NG v1.9 - Multifunctional Network Toolkit for Android

Intercepter-NG is a multifunctional network toolkit for various types of IT specialists. It has functionality of several famous separate tools and more over offers a good and unique alternative of Wireshark for android. The main features are: Network discovery with OS detection Network traffic...

Technical analysis Potato provided the right principle-vulnerability warning-the black bar safety net

! Graphic unrelated 0×0 0 Preface A while ago included a Potato to mention the right tools, find the tools provide the right posture with the conventional tool are not the same, but with WPAD proxy related, so expand the test and analysis, primarily through the analysis of its network traffic to...

Malware Analysis System: Cuckoo Sandbox

Cuckoo Sandbox is an advanced, extremely modular, and 100% open source automated malware analysis system with infinite application opportunities. By default it is able to: Analyze many different malicious files executables, office documents, pdf files, emails, etc as well as malicious websites...

Vuvuzela - Private Messaging System That Hides Metadata

Vuvuzela is a messaging system that protects the privacy of message contents and message metadata. Users communicating through Vuvuzela do not reveal who they are talking to, even in the presence of powerful nation-state adversaries. Our SOSP 2015 paper explains the system, its threat model,...

The vulnerability of the ScreenOS operating system allows a hacker to decode messages.

The vulnerability of the ScreenOS operating system is related to the implementation of a cryptographic protocol. Exploiting this vulnerability allows a malicious actor to decrypt messages transmitted during a VPN session by analyzing network traffic...

Private Messaging System: Vuvuzela

Vuvuzela is a messaging system that protects the privacy of message contents and message metadata. Users communicating through Vuvuzela do not reveal who they are talking to, even in the presence of powerful nation-state adversaries. Vuvuzela is the first system that provides strong metadata...

Wireshark v2.0 - The World’s Foremost Network Protocol Analyzer

Wireshark is the world’s foremost network protocol analyzer. It lets you capture and interactively browse the traffic running on a computer network. It is the de facto and often de jure standard across many industries and educational institutions. Wireshark development thrives thanks to the...

MobSF (Mobile Security Framework) - Mobile (Android/iOS) Automated Pen-Testing Framework

Mobile Security Framework MobSF is an intelligent, all-in-one open source mobile application Android/iOS automated pen-testing framework capable of performing static and dynamic analysis. We've been depending on multiple tools to carry out reversing, decoding, debugging, code review, and pen-test...

The vulnerability of the Mac OS X operating system, which allows a perpetrator to gain access to protected information

The vulnerability of the Mail Drop extension of the Mail component in the Mac OS X operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain access to protected information by analyzing network traffic at the time of sendin...

Command Execution Vulnerability in Beijing PaiNet Software Traffic Analysis Management System

Beijing Paiwang Software Co., Ltd. is specialized in the development of domestic web application layer traffic monitoring and management engine. A command execution vulnerability exists in the traffic analysis and management system of Beijing PaiNet Software. The vulnerability allows an attacker ...

File Containment Vulnerability in Beijing PaiNet Software Traffic Analysis Management System

Beijing Paiwang Software Co., Ltd. is specialized in the development of domestic web application layer traffic monitoring and management engine. A file inclusion vulnerability exists in the traffic analysis management system of Beijing Pai Networks Software. The vulnerability allows attackers to...

The vulnerability of the OpenSSL library, which allows a hacker to bypass the cryptographic security measures

The vulnerability of the ssl3clienthello function in the OpenSSL library is related to insufficient guarantees for the correct initialization of the pseudorandom number generator before the handshake process. Exploiting this vulnerability allows a malicious actor to bypass cryptographic security...

JVN#79284156: NetFlow Analyzer vulnerable to cross-site request forgery

NetFlow Analyzer provided by Zoho Corporation is a traffic analysis tool. NetFlow Analyzer contains a cross-site request forgery vulnerability. Impact If a user views a malicious page while logged in, various administrative functions may be performed. Solution Update the software build and apply...