This PowerShell script can be used to check the status of a plain list of web links that you have copied to your clipboard.
Categories
Powershell check link list
Author: Luki
Categories
Request parameter _sm_by ZScaler
During a DDoS attack, I found a large amount of a HTTP request parameter “_sm_byp=” in my logs. However, this parameter is not native to my app.
_sm_byp=
Modified example:
https://www.example.com:443/manifest.json?_sm_byp=iVVt9H5dRMP8Lb3F
https://www.example.com:443/test.html?_sm_byp=iVVc8ZT1kQFvX6Nr
Categories
MyIP.is: Tool for IP Address Insights
MyIP.is, a handy online tool designed to instantly provide users with their public IP address and additional related information.
One of the cool features of this website is that they are actively involved in managing larger pages, collecting and analyzing IP data, and then compiling a list of malicious players on the web, which is available for free download.
Categories
GitHub CoPilot
I started my journey into GitHub Co-Pilot this week. I was once interested in trying it but scrapped the idea due to the price and the inability to find the 90-day free offer anymore. However, now I have finally begun my journey. I started by installing the GitHub Co-Pilot plugin for Visual Studio Code.
ℹ️ This post is not a comprehensive story or tutorial. It’s more a documentation of thoughts and findings on my journey using GitHub Co-Pilot.
Categories
PHP gethostbyaddr($ip) too slow
Working on a project, I needed to perform reverse DNS lookups of IP addresses in PHP. The native function gethostbyaddr() seems to be very slow. I managed to vastly improve the speed of the lookups by switching to dns_get_record().
gethostbyaddr($ip);
Categories
SANS Internet Storm Center – API
Even as a long-time listener of the daily newscast from SANS Storm Center, I never knew they offer a free API with useful information. The downside is that the API is rather slow, but still useful for IP intelligence.
After a recent penetration test on an Azure website, I received a report stating that I need to disable CBC ciphers in my TLS configuration. I was able to reproduce the issue.
However, I found that on Azure Front Door Standard and Azure Front Door Premium, it’s not possible to configure the cipher order or the selection of ciphers. All of this is fully managed by Microsoft.
Categories
Identify your StatusCake calls
If you’re considering monitoring your website using Statuscake, there are two potential issues you should be aware of. Firstly, Statuscake relies on virtual machine hoster on the internet, and their IP ranges may be impacted by DDoS mitigation efforts. This means that individuals from the same ASN or subnets may be involved in attacking your website. Once you start blocking providers of compute resources on the internet, your monitoring might start to become affected too and become flaky.
Easily find and download SVG Icons from a Azure Portal. If you need to create documentation or platform drawings, it can be very helpful to use the official icons from Azure. Not all of them are contained in the official SVG package.
Categories
Notepad++ remove empty lines
For Windows users, Notepad++ is still one of the most beloved and best text editors. Of course, Visual Studio Code and Notepad also have their place, but each has its benefits and downsides. While analyzing files or preparing text files, I recently came across the challenge of needing to remove a lot of empty lines in a text file. Lo and behold, Notepad++ can do this without any problems.
You find it here in Notepad++ Edit > Line Operations > Remove Empty Lines
