Snippets Set Up IKEv2 VPN Server and Clients Compared to IKE version 1, IKEv2 contains improvements such as Standard Mobility support through MOBIKE and improved reliability. This is my personal snippet to set up IKEv2 VPN server & clients for multiple servers.
Snippets Configure IPsec/XAuth VPN Clients IPsec/XAuth mode is also called "Cisco IPsec". This mode is generally faster than IPsec/L2TP with less overhead. IPsec/XAuth ("Cisco IPsec") is natively supported by Android, iOS, and MacOS. There is no additional software to install for them.
Snippets Configure IPsec/L2TP VPN Clients This is the next part after you successfully set up your own IPsec VPN server. Following these steps allow you to configure your Android, iOS, MacOS, and Linux machine using IPsec/L2TP VPN.
Snippets IPsec (L2TP, XAuth, IKEv2) VPN Server Auto Setup Since PPTP VPN no longer supported by Apple's built-in VPN client on macOS Sierra and iOS 10. I have to use other VPN protocols to access my internal networks. These gems allow us automatically configure IPsec VPN server setup.
Security Trying Gmail Confidential Mode for G Suite Users Gmail confidential mode allow G Suite users sending emails with expiration date, in additional, the recipients won't be able to forward, copy, print, or download email content or attachments and sender can be revoke email message any time.
Security ZombieLoad: Serious Intel Processors Security Flaw Security researchers discovered security flaw in Intel processors allows malicious hacker to steal any data that's been recently accessed by the processor. Almost every computer with an Intel chips since 2011 (Ivy Bridge) are affected by the vulnerabilities.
Security Compromised Zimbra Server Running zmcat/dblaunchs Malware 100% CPU Usage Recent Zimbra XXE / SSRF Vulnerability Disclosure (CVE-2019-9670) being actively exploited. Security researcher An Trinh details his findings regarding a vulnerability which, if exploited, could allow an attacker to RCE on an affected Zimbra system.
Security Cloudflare Reverse Proxies are Dumping Uninitialized Memory Between 22 Sep 2016 – 18 Feb 2017 passwords, private messages, API keys, and other sensitive data were leaked by Cloudflare to random requesters. Data was cached by search engines, and may have been collected by random adversaries over the past few months. Many people call this issue Cloudbleed.
How To's Firewall iptables Port Knocking Berbagi tips untuk meningkatkan keamanan server dengan menggunakan teknik port knocking. Port knocking adalah sebuah cara untuk membuka port tertentu dengan cara mengirimkan paket ke sedetetan port2 tertentu yang telah ditentukan sebelumnya.
Security Spoofing SSL MITM Attack Juniper SSL VPN & UAC Kemungkinan melakukan man-in-the-middle attack untuk melakukan spoofing SSL server pada Juniper SSL VPN & UAC.
How To's SSH Client - Server (Security & Simplicity) Berbagi trik untuk sedikit lebih memperketat akses SSH dengan men-disable root akses SSH, mengubah port default dan menggunakan public dan private key. Juga trik agar proses memanage server(s) menjadi lebih mudah dan simple.
Networking TCP/IP - 3 Way Handshake - MITM - Session Hijacking Konsep dasar TCP/IP 3 way handshake , network sniffing, MITM, session hijacking yang dikemas dalam cerita kehidupan sehari-hari agar lebih mudah dimengerti.
Security Sekilas Tentang DNS Hijacking Bagaimana secara teknis DNS hijacking itu dilakukan, bukan tutorial mengenai penggunaan tools / teknik nyata seorang attacker melakukan DNS Hijacking.
Stories Pelajaran dari MyBB FB Connect Plugin XSS Attack Artikel ini bertujuan untuk sharing pengetahuan saja bagaimana cara 'backtracking' attacker, khususnya yang memanfaatkan aplikasi Facebook.
Codes malcode-finder.py, Searches for Files Contains Dangerous Command Tool pertama saya yang ditulis menggunakan bahasa Python. Fungsinya untuk mencari "command2" berbahaya yang mungkin bisa dimanfaatkan oleh attacker untuk mendapatkan "akses lebih" dalam sebuah sistem.
