Resources

SNORT – First Line of Defense for Web application attacks

As described in SNORT official web site, “SNORT is an open source network intrusion prevention and detection system utilizing a rule-driven language, which combines the benefits of signature, protocol and anomaly based inspection methods”. SNORT is most widely used open source IDS till date. Many UTMs uses SNORT to provide services to their clients. SNORT has introduced inline mode which can be used to drop packets. Thus using inline mode, SNORT can be used as firewall as well. Let us go over all modes in which SNORT can be run. More...

Inside Out of Sharing mechanism in Windows

Most of the organization use shares to exchange some files or they share some resources like printer. But did we ever dig in to the details how Windows does this? Which protocols windows uses? This paper covers the information about the protocols windows uses to connect to the share on network. What are those protocols and under what circumstances windows uses which protocol? Which are the ports used by these protocols? How to disable these protocols on windows machines? More...

Writing NASL Script

Nessus is one of the highly respected vulnerability scanners in the security world today. Looking at the history of Nessus, Nessus project was started way back in 1998 by Mr. Renaud Deraison. From 1998 till today, nessus has become a mature vulnerability scanner with some unique features. Nessus has won numerous awards, including the 2002 Network Computing "Well Connected" award and PC Magazine's 2003 "Open Source Product of the Year" award. More...