Network Security - ITperfection - Network Security

Metasploit Framework

Tech20202020-09-24T10:28:50+00:00Categories: Network Security|Tags: cyber security, CyberSecurity, Datastore, DRM-free ebook, Dynamic payloads, Exploit, Global datastore, IPS, Metasploit, Metasploit Framework, Meterpreter payloads, Module datastore, Network Security, Nop generator, Payload, Penetration Testing, pentester, Post-exploitation code, Static payloads, Varonis Cyber Workshop|

A kind of penetration testing aid is the Metasploit Project. This open-source framework allows testing via command line alterations or GUI. The Metasploit Framework is a Ruby-based, modular penetration testing platform that enables a pentester (hacker) to writes, tests, and executes exploit code. In other words, the Metasploit framework is a very powerful tool which can [...]

Zero-day Vulnerabilities and Zero-day Exploits

Tech20202020-09-24T10:32:09+00:00Categories: Network Security|Tags: Cyber Attacks, cyber crime, cyber security, CyberSecurity, ITperfection, Malware, Network Attacks, Network Security, Next-Generation Firewall, Zero-day, Zero-day Exploits, Zero-day Vulnerability|

Zero-day is a flaw in software, hardware or firmware that it has the potential to be exploited by cybercriminals. In other words, zero-day is a vulnerability in a system or device that has been disclosed but is not yet patched. A zero day exploit is a cyber-attack that occurs on the same day a weakness [...]

Penetration Testing

Tech20202020-09-24T10:36:23+00:00Categories: Network Security|Tags: Black box pen test, blind pen test, clear-box pen test, Cyber Attacks, cyber crime, cyber security, CyberSecurity, External pen test, Firewall, Gray box pen test, internal pen test, IPS, ITperfection, logic-driven pen test, Network Security, open-box pen test, PCI DSS, Penetration Testing, Phishing Attack, Silverlight, Targeted Pen test, White box pen test|

A penetration test (pen test or pentest and or ethical hacking) is a simulated cyber-attack against a computer system to check for exploitable vulnerabilities. You should not be confused it with a vulnerability assessment. Source: en.wikipedia.org In fact, this test simulates a real-world attack to determine how any defenses will fare and the possible magnitude [...]

ManageEngine ADAudit

Tech20202020-09-24T11:34:03+00:00Categories: Microsoft, Network Administration, Network Security|Tags: Active Directory, cyber crime, cyber security, CyberSecurity, Domain Controller, FISMA, GDPR, GLBA, HIPAA, ManageEngine ADAudit, Microsoft Windows, Network Monitoring, Network Security, PCI DSS, SOX, Syslog, Windows Server|

In this post, we'll take a look at ManageEngine ADAudit to help you understand the different aspects of this network product. You can use ManageEngine ADAudit to ensure critical resources in the network like the Domain Controllers are audited, monitored and reported with the entire information on AD objects (like Users, Groups, GPOs, Computers, OUs, etc.). [...]

Broadcast Storm

Tech20202020-09-02T05:50:23+00:00Categories: Network Security|Tags: Broadcast Storm, DHCP, ITperfection, network configuration, Network loops, network management, Network Monitoring, network storm, Spanning Tree Protocol, STP|

A broadcast storm is also known as a network storm. It is an abnormally high number of broadcast packets within a short period of time. The broadcast storm is one of the major deficiencies in computer network systems and it can shut down entire network in seconds. When different nodes are sending/broadcasting data over a [...]

Wireshark

Tech20202020-09-24T11:37:32+00:00Categories: Network Monitoring, Network Security|Tags: cyber security, CyberSecurity, Data Capturing, Ecnryption, Ethermet, HDLC, IDS, ITperfection, NCI, Network Attacks, Network Monitoring, Network Security, Network traffic analyzing, OSI Model, PPP, Sniffing, tcpdump, TLS, USB, VOIP, WinDump, Wireshark|

Wireshark is a network packet analyzer. This software one of the best packet analyzers available today and is available for free, and it is open source. This software, formerly known as Ethereal but the project was renamed Wireshark in May 2006 due to trademark issues. Sources: wireshark.org and en.wikipedia.org Wireshark is cross-platform and it runs [...]

SSL and TLS

Tech20202020-09-24T11:41:19+00:00Categories: Computer & Network Concepts, Network Security|Tags: Cryptography, Cyber Attacks, cyber crime, cyber security, CyberSecurity, Domain Validation certificate, DV SSL, Encryption, EV SSL, Extended Validation, FTPS, HTTP, HTTPS, ITperfection, Network Attacks, Network Security, Organization Validated SSL, OV SSL, Secure Sockets Layer, Single Domain SSL, SSL, TLS, Transport Layer Security, Unified Communications, Webmail, Wildcard SSL|

In this post, we'll take a look at SSL protocol and TLS protocol to help you understand the different aspects of these protocols. One of the most important topics in Cyber-security course is web secure. What’s SSL? SSL (Secure Sockets Layer) is a protocol for establishing authenticated and encrypted links between networked computers. [...]

Wireless Security Protocols

Tech20202020-09-26T05:59:54+00:00Categories: Network Security|Tags: AES, Authentication, Cyber Attacks, cyber crime, cyber security, CyberSecurity, EAP, Encryption, Extensible Authentication Protocol, ITperfection, Man-in-the-middle attack, Network Attacks, Network Security, NIST, SAE, Simultaneous Authentication of Equals, TKIP, WEP, Wi-Fi Protected Access, Wired Equivalent Privacy, Wireless Security Protocols, WPA, WPA2, WPA2-Enterprise, WPA2-Perosnal, WPA2-PSK, WPA3, WPA3-Enterprise, WPA3-Personal, WSP|

Wireless security is the prevention of unauthorized access or damage to computers or data using wireless networks, which include Wi-Fi networks. In this post, we'll take a look at wireless security protocols to help you understand the different aspects of these protocols. Source: en.wikipedia.org There are several types of wireless security Protocol that you’ll come [...]

Syslog

Tech20202020-09-01T12:49:52+00:00Categories: Network Monitoring, Network Security|Tags: cyber security, CyberSecurity, Facility Value, ITperfection, Network Monitoring, Network Security, PRI, Severity Value, Syslog, Syslog application, Syslog content, Syslog Listener, Syslog Message, Syslog server, Syslog transport|

Syslog stands for “System Logging Protocol,” Syslog used for system management and security auditing as well as general informational, analysis, and debugging messages. Syslog is a way for network devices to send event messages to a logging server. This protocol can be used to log different types of events. For example, a router might send [...]