In the past months I’ve been using Security Onion in relation to one of my school projects and lately to[…]
Read moreCategory: Security and Privacy In-Depth
Information Security and Privacy down to technical specifics. Includes research and analysis, projects and more.
Intercepting and modifying HTTP uploads
Sniffing traffic is relatively easy enough. You just fire Wireshark up and look at the packets. Intercepting traffic and modifying[…]
Read moreHospital Wifi security review
I managed to land in Denmarks second largest hospital, the Odense University Hospital (refered as OUH in danish). Since i’ve[…]
Read moreCategorizing IP addresses when monitoring
When monitoring a network one must keep in mind different known or unknown IP addresses. For a monitoring system setup[…]
Read moreProtect against ARP-spoofing
In a previous article i’ve talked about how you can sniff traffic on LAN using ARP. In this article we[…]
Read moreUnderstanding the Snort architecture
Snort first started as a packet sniffer. Another common example of a packet sniffer is tcpdump, or its graphical big[…]
Read moreSniff traffic from LAN using ARP
What is ARP ARP stands for Adress Resolution Protocol. It is the protocol that associates MAC addresses with IP addresses.[…]
Read moreWhat to do with PCAP files?
PCAP stands for Packet CAPture. A PCAP file holds network traffic/packet information, captured in a certain period. Uses Network forensics[…]
Read moreSmoothSec vs SecurityOnion
While looking for the Snort GUI that will suit my needs, i came across various software and linux distros. Two[…]
Read moreSnort tunning
It is basically useless to run great pieces of software if they are not configured according to user/system needs. An out[…]
Read more