http – Is there a tool to test if my web server follows relevant RFCs?

Is there a tool to test if my web server follows relevant RFCs?

So, I create a web server my self. And I want to know if I had made any mistake in following the RFCs. It would be too hard to test stuff just using telnet and openssl s_client.

So, if there is a tool that requests the web server with requests that are not valid, and tells me if there are situations where my web server doesn’t follow rules, or returns invalid HTTP responses.

c++ – Creating an external tool to edit Unreal project optimization settings

INTRO

I am creating a C++ app that will help users to set up optimization settings in the Unreal game engine. I want to let the program make all this work on its own. This application is being written for Windows 10 platform (maybe it will be cross-platform in the future).


PROBLEM DESCRIPTION

To make the program working as intended, I must be able to change configuration files, add some UE objects to the project and call editor functions (e.g. rebuild lights).


MY SOLUTION

I can parse some of the .ini files and edit them. However, the real problem is with UE objects and editor functions. One of the possible ways is to get symbols from the .dll and run that function in a separate process. Another way is to use the actual UE4 code for these tasks.


QUESTION

Is there any easier and safer way to achieve what I need?

“Crowbar” brute-force tool giving “success” result to every username/password combination for RDP

I am trying to use “Crowbar” to brute-force RDP login information. The command I am running (on Kali Linux) is:

sudo crowbar -b rdp -U usernames.txt -C rdp_passlist.txt -s <Target IP>

and the result is Crowbar saying every username/password combination is correct:

2021-04-14 15:36:12 START
2021-04-14 15:36:12 Crowbar v0.4.1
2021-04-14 15:36:12 Trying <Target IP>:3389
2021-04-14 15:36:14 RDP-SUCCESS : <Target IP>:3389 - 3d:123456
2021-04-14 15:36:14 RDP-SUCCESS : <Target IP>:3389 - 3d:12345
2021-04-14 15:36:14 RDP-SUCCESS : <Target IP>:3389 - 3d:iloveyou
2021-04-14 15:36:14 RDP-SUCCESS : <Target IP>:3389 - 3d:123456789

And so on (the actual IP is replaced by <Target IP>). None of the “successful” username/password pairs actually work. What am I doing wrong?

tool recommendation – Does anyone know a good system for building a city?

tool recommendation – Does anyone know a good system for building a city? – Role-playing Games Stack Exchange

applications – tool for generating instruction trace for Android apps

I want to get the instruction trace for an Android apps.(i.e I want to get the address of the isntruction which are getting executed for an app) without modifying the apk.

Things which android provides it requires the app to be debuggable, but I wanted to target the apps which are there over the Google play store.

I have tried pintool (but it has discontinued the support) and the version which I have used, I am getting the syntax error when I attach a pin with the apk.

I have also tried valgrind but it is giving segmentation fault when I executed a very basic Hello world app by passing the equivalent *.odex file as an input to it.

Can someone suggest a working tool which helps in getting instruction trace for the Android apps?

Thanks a lot for helping it in my research journey.

reverse engineering – Tool for restoring firmware image from dumps taken from broken eMMC

Description of the problem:

I have a 4GB eMMC chip that is “broken” which causes the device (TV) to not boot.
After soldering this chip to an adapter I am able to dump it.
When comparing the dumps, I can see that there are many differences between the dumps. Some portions are completely identical though.
My hope is to use some tool to compare all of the dumps (however many I might need) and restore an image of the original firmware. This is based on my assumption that statistically (over many runs) every bit would be read correctly and would thus allow me to piece together a complete and correct image.

Is there a tool for a task like this?

I imagine that it wouldn’t be too hard to write a basic python script to do this task but maybe there is already a pre-made tool.

Also, are there good tools to visualize differences is large binary files?

More info on the eMMC: it’s a H26M31003GMR
My guess as to why it broke is that the firmware is poorly written and too much data get’s written to the eMMC causing it to fail eventually.

Here’s an example of the data:

Difference example

  • First dump byte: 11000000
  • Second dump byte: 10000000
  • Difference: 1 Bit

eMMC connected via SD interface

SIEM-like tool for pcaps

Is there any tool that accepts a packet capture file as input and displays all the network traffic in a similar way to how a SIEM displays log information? I’m looking for a summary of the ports and IPs to get a good overview of a packet capture.

usability – What is the best heatmap tool for tracking multiplatform devices?

We’re looking for heatmap tool that provide analytics and can implemented in web, android, & iOS. Previously we used Smartlook for heatmap, but it doesn’t work properly in our website. The tool could be free or paid.

Could you please share what tool you use and try to present it’s strong and weak points?

docker – Running a dockerized security tool against a dockerized service

I’m looking for advice on taking several different docker containers that contain various security tools and running them against containers that have services for testing.

If I have two containers, (web app and a backend service) and various tools how would you handle best building them as needing? I’m newer to setting up something like this and building pipelines so pointing me in the right direction would be great.

virtualbox – New ISO created with Windows Media Creation Tool reports files missing (WinSetup.dll)

I downloaded Windows Media Creation Tool yesterday and followed the instructions for creation a standard Windows 10 64-Bit ISO. The media was created successfully (it must have been right? The “Validation” that took a half hour or so didn’t report any errors) and resides on my hard drive (not on a USB stick or a burned DVD).

Having successfully created my Windows 10 install media file, and following this tutorial (https://www.linkedin.com/learning/learning-virtualbox-2/installing-windows-10-in-virtualbox), I attempted to install Windows 10 on VirtualBox. The installer launches and I can choose my language, but when I click “setup” I immediately get the following error:

Install Windows

Windows could not load required file WinSetup.dll. The file may be
corrupt. To install Windows, restart the installation.

Error code: 0xC1

I researched about the error online, but didn’t find any solutions. Here are some of the interesting notes I gathered:

Reddit wonders why Windows Media Creation Tool doesn't work

Now, it took forever for the media to download, build, and verify (even with 100 Mb high speed internet) and I rather not go through that process again just to troubleshoot.

MY SYSTEM

Host: Windows 10 Home 64-bit

MY QUESTION

  1. Is there a known issue with Windows Media Creation Tool not working correctly? I’ve seen stuff online that hint at this, but no full blown articles declaring that WMCT is faulty.

  2. What exactly is causing this error and how do I fix it? Strangely, I’ve found the following advice on several forums:

Try a different USB drive, or grab an ISO from here and use Rufus to
create the USB drive

https://tb.rg-adguard.net/public.php

https://rufus.ie/

a. Is that site even trustworthy?

DreamProxies - Cheapest USA Elite Private Proxies 100 Private Proxies 200 Private Proxies 400 Private Proxies 1000 Private Proxies 2000 Private Proxies ExtraProxies.com - Buy Cheap Private Proxies Buy 50 Private Proxies Buy 100 Private Proxies Buy 200 Private Proxies Buy 500 Private Proxies Buy 1000 Private Proxies Buy 2000 Private Proxies ProxiesLive Proxies-free.com New Proxy Lists Every Day Proxies123