#dns tunneling

[vpnanswers]

The Domain Name System (DNS) began alongside the internet, connecting users to online assets by easy-to-remember domain names, rather than by IP addresses.

[hitechnectar]

How to Prevent DNS Tunneling?

DNS tunneling is an attack method that encodes data of other programs or protocols in DNS queries and responses, allowing hackers access to the network using the DNS server. The firewall can be configured to detect and block DNS tunneling by creating an application rule that uses a protocol object.

[thesecuritysleuth]

Sunday Roundup: 14th of August 2016

Sunday Round up for the week ending the 14th of August:

Articles:

DNS Tunneling: Getting The Data Out Over Other Peoples’ WiFi: http://hackaday.com/2016/08/07/getting-the-data-out-over-other-peoples-wifi/

Researchers crack open unusually advanced malware that hid for 5 years: http://arstechnica.com/security/2016/08/researchers-crack-open-unusually-advanced-malware-that-hid-for-5-years/

CuckooDroid – Automated Android Malware Analysis: http://www.darknet.org.uk/2016/08/cuckoodroid-automated-android-malware-analysis/

Howto CreateCertGUI: Create Your Own Certificate On Windows (OpenSSL Library): https://blog.didierstevens.com/2016/08/08/howto-createcertgui-create-your-own-certificate-on-windows-openssl-library/

InfoSec Handlers Diary Blog : Looking for the insider : Forensic Artifacts on iOS Messaging App: https://isc.sans.edu/diary/Looking%2Bfor%2Bthe%2Binsider%3A%2BForensic%2BArtifacts%2Bon%2BiOS%2BMessaging%2BApp/21363

Road Warriors: Beware of ‘Video Jacking’: http://krebsonsecurity.com/2016/08/road-warriors-beware-of-video-jacking/

Twitter:

"Magnet AXIOM Adds Forensic Support For Uber" #forensics #feedly https://t.co/0eMIPqwHPS

— The Security Sleuth (@Security_Sleuth) August 7, 2016

"Gain Access To User Credentials Saved In Google Account With UFED Cloud Analyzer" #forensics #feedly https://t.co/KIFnls6mJf

— The Security Sleuth (@Security_Sleuth) August 9, 2016

One way to detect a jailbroken iPhone (swift) #itrtg #infosec https://t.co/TyJEIm3KFP

— The Security Sleuth (@Security_Sleuth) August 9, 2016

"Live Streaming: Public Actions May ‘Never Again Be Private’" #forensics #feedly https://t.co/sHYXlxOjFs

— The Security Sleuth (@Security_Sleuth) August 9, 2016

"How Your Computer Monitor Could Be Hacked To Spy On You" #infosec #feedly https://t.co/NniIAjz39C

— The Security Sleuth (@Security_Sleuth) August 9, 2016

"Malware and Memory Forensics 2017 Schedule (Now with Linux, Mac, and Surge Collect Pro)" #forensics #feedly https://t.co/RUvZerDyfX

— The Security Sleuth (@Security_Sleuth) August 10, 2016

"Almost every Volkswagen sold since 1995 can be unlocked with an Arduino" #informationsecurity #feedly https://t.co/8Ca7hBXKAx

— The Security Sleuth (@Security_Sleuth) August 11, 2016

Read last weeks round up here

If you found some other interesting stuff this week feel free to leave a link to it in the comments section.

[thesecuritysleuth]

Sunday Round up: 12th of June 2016

Sunday Round up for the week ending the 12th of June 2016:

Articles:

Using Splunk to Detect DNS Tunneling: https://www.sans.org/reading-room/whitepapers/malicious/splunk-detect-dns-tunneling-37022

Password Autocorrect Without Compromising Security: https://threatpost.com/password-autocorrect-without-compromising-security/118498/

Website Forgery: http://resources.infosecinstitute.com/category/enterprise/phishing/phishing-tools-techniques/website-forgery/

How to make an Operating System: http://www.freetechbooks.com/how-to-make-an-operating-system-t1029.html

Recovering A Ransomed PDF: https://blog.didierstevens.com/2016/06/07/recovering-a-ransomed-pdf/

Twitter:

"To be smart, work on problems you care about" #computerscience #feedly https://t.co/CIRiqwtQQb

— The Security Sleuth (@Security_Sleuth) June 5, 2016

"Wait...There's More..." #forensics #feedly https://t.co/VmqN0fmWCx

— The Security Sleuth (@Security_Sleuth) June 6, 2016

"Uber Pays Researcher $10K for Login Bypass Exploit" #informationsecurity #feedly https://t.co/e7kf2kXPm9

— The Security Sleuth (@Security_Sleuth) June 7, 2016

"Slicing Into a Point-of-Sale Botnet" #infosec #feedly https://t.co/CvX9EUPI4k

— The Security Sleuth (@Security_Sleuth) June 8, 2016

How Even the FTC’s Lead Technologist Can Get Hacked https://t.co/dQIQ9fWnto via @WIRED

— The Security Sleuth (@Security_Sleuth) June 9, 2016

Read last weeks round up here

If you found some other interesting stuff this week feel free to leave a link to it in the comments section.