04-14-2022: Homomorphic Encryption
PrincipleHomomorphic encryption is a type of encryption which allows one to manipulate data without revealing it what the data truly is. The resulting computations, if decrypted, would be the same had the computations been performed on unencrypted data. Homomorphic encryption is useful for privacy preservation for when you outsource data storage, especially when storing sensitive data. It has the potential to make cloud computing more secure, since we no longer have to expose sensitive data t...
04-14-2022: Homomorphic Encryption
PrincipleHomomorphic encryption is a type of encryption which allows one to manipulate data without revealing it what the data truly is. The resulting computations, if decrypted, would be the same had the computations been performed on unencrypted data. Homomorphic encryption is useful for privacy preservation for when you outsource data storage, especially when storing sensitive data. It has the potential to make cloud computing more secure, since we no longer have to expose sensitive data t...
04-14-2022: Watering Hole Attack
PrincipleA watering hole attack gets its name from the idea of poisoning a central water source, and everyone who takes from that source is affected. Similarly, watering hole attacks infect a genuine website, and everyone who uses that website will be exploited. In this, watering hole attacks have two victimsThe legitimate website that was impregnated with the malicious software.The common/targeted users who use the infected website.Watering hole attacks have been used by authoritarian govern...
04-14-2022: Watering Hole Attack
PrincipleA watering hole attack gets its name from the idea of poisoning a central water source, and everyone who takes from that source is affected. Similarly, watering hole attacks infect a genuine website, and everyone who uses that website will be exploited. In this, watering hole attacks have two victimsThe legitimate website that was impregnated with the malicious software.The common/targeted users who use the infected website.Watering hole attacks have been used by authoritarian govern...
04-14-2022: FFUF
What is FFUFFFUF is a content discovery tool that finds vulnerable end points using wordlists. Syntax:ffuf -u [target ip]/FUZZ/ -w [wordlist path]Make sure to insert the FUZZ keyword into the [[URL]] or IP path to tell FFUF which parameters you want to brute force. FFUF will then run fuzz this endpoint and return the [[HTTP]] responses.Using recursionRecursion, in the simplest terms, is doing the same thing over and over again. In the context of FFUF, we can use recursion to fuzz the specific...
04-14-2022: FFUF
What is FFUFFFUF is a content discovery tool that finds vulnerable end points using wordlists. Syntax:ffuf -u [target ip]/FUZZ/ -w [wordlist path]Make sure to insert the FUZZ keyword into the [[URL]] or IP path to tell FFUF which parameters you want to brute force. FFUF will then run fuzz this endpoint and return the [[HTTP]] responses.Using recursionRecursion, in the simplest terms, is doing the same thing over and over again. In the context of FFUF, we can use recursion to fuzz the specific...
