Intake:Digital

Developing your own algorithm is a systematic process of breaking a complex problem into a sequence of logical, repeatable steps.  Step-by-Step Development Process Define the Problem: Clearly identify the specific task or challenge the algorithm needs to address. Identify Inputs: Determine what data is available and what form it takes (e.g., numbers, text, images). Identify Outputs: Define exactly what the final result or answer should be. Determine Constraints: Recognize any limitations, such as memory usage, speed requirements, or specific rules for the data. Analyze and Decompose: Break the main problem into smaller, more manageable sub-problems. Consider edge cases, such as empty inputs or  values, to ensure the algorithm is robust. Study existing algorithms for inspiration, as they may offer proven patterns for similar tasks. Design the Logic: Formulate a step-by-step strategy using high-level planning tools. Pseudocode: Write out the logic in plain English to outline the...

Client Domain Hooking - Example Attack – duszynski.eu – Piotr Duszyński Client Domain Hooking - Example Attack Written on May 20, 2019 In my last blog post I have released a paper that described all relevant technical aspects of the ‘Client Domain Hooking’, along with a HTTP Strict Transport Security (HSTS) survey made for the TOP 1000 Alexa websites. In this post I will show how to run a simulated, ‘Client domain Hooking’ attack which will be used to evaluate an example browser-based application security posture. “Prerequisites” In order to execute this attack, you will need the following set-up: any active and registered domain name (we will be using ‘cdh.modlishka.io’ as an example). a valid wildcard TLS certificate for the domain that we own (it can be either bought or obtained from the “Let’s Encrypt” service). latest version of Modlishka v.1.1 reverse proxy. target applications, such as the latest version of Chrome browser and example vulnerable WebView based mobile applications....