HTTP vs TCP Is TCP more secure than UDP?Yes, but we have to be very clear about what we are talking about when we are talking about "security" and not generalise this statement to upper layer protocols. Currently, security is often associated to the CIA triad:Confidentiality. Integrity. Availability. The version 4 of…
Answered Mar 30, 2022 · 1.9K Views Read answer →
Most of the time these events are noisy in a large user environment with a password change policy. Most of the time this happens when an account's password is expired and it is tied with some application/service/task which keeps trying to login again and again. If you have a SIEM or log management solution, you can…
Answered Mar 29, 2022 · 1.3K Views Read answer →
To begin with, Wifi spoofing is named as Evil Twin attack. You can find more information about it if you search as "Evil Twin Attack" rather than "Wifi Spoofing". I have found a good article about the attack: What is evil twin?. Plus, there is a good explanation about how to commit it on Null-Byte.WonderHowTo. ( for…
Answered Mar 29, 2022 · 1.4K Views Read answer →
There are a few ways to protect RDP over internet. Best practice is don't use public port #3389. Translate it to something different. Is the best way to decrease hack attempts. Allow only certain IPs(or range of IPs) address to public IP. Use smart routers. I use mikrotik…
Answered Mar 28, 2022 · 495 Views Read answer →
There are two things you should consider in this piece of code regarding the ARC injection: The first one is the type of the variable pwStatus, the second one is the value of the strcmp return address. The goal is to overwrite the strcmp return address to make the pwStatus variable to be always true, because of…
Answered Mar 24, 2022 · 459 Views Read answer →
You are probably fine but better to be safe. If your IP address is dynamic I recommend changing it ASAP. Make sure you have the person blocked and reported first. Be sure to save any evidence you wish to keep before blocking and reporting them. Possible Issues? An exposed private IP can lead to location tracking down…
Answered Mar 22, 2022 · 2.5K Views Read answer →
You cannot calculate a Single Loss Expectancy (SLE) without an actual, historical, estimated, or guess-estimated Exposure Factor (EF). I think what is lacking in most INFOSEC Risk Management training materials that cover quantitative analysis, is that they don't give much guidance on how to translate the generic risk…
Answered Mar 16, 2022 · 527 Views Read answer →
Script Kiddie vs Elite Hackers Wikipedia on Script kiddies (emphasis mine): In hacker culture a script kiddie or skiddie, (also known as skid, script bunny, script kitty,) are unskilled individuals who use scripts or programs developed by others to attack computer systems and networks and deface websites. It is…
Answered Mar 14, 2022 · 2.6K Views Read answer →
Even-though there are a lot of email addresses available on the internet. There is a fair share of them which are discarded. This email from adultsexmeet is a way to check for the "active" email address. In addition, not all of us would check spam emails and click it. So, this would also gather the email addresses of…
Answered Mar 14, 2022 · 250 Views Read answer →
Before using password special characters, you should know that entropy is not a property of passwords. It is a property of password generation methods (or more generally, a property of probability distributions). Specifically, it is the expected number of bits of information that an attacker would need in order to…
Answered Mar 1, 2022 · 521 Views Read answer →
There is, in fact, no such thing as "salted MD5" or "salted SHA-1". MD5 and SHA-1 are well-defined hash functions, which take as input a sequence of bits of (almost) arbitrary length, and output a sequence of bits of fixed length (128 and 160 bits, respectively). There is no salt anywhere in the definitions of MD5 and…
Answered Mar 1, 2022 · 405 Views Read answer →
All this is quite simple to work around, just turn Teredo off. From 'Accessories', run 'Command Prompt' with a right-click 'run as Administrator', then when you get the command prompt, type in: etsh interface teredo set state disable then exit and close the CMD prompt window. You will need a reboot to effect the…
Answered Feb 28, 2022 · 891 Views Read answer →
Learners asking and answering questions on the same topics — follow their questions and join in.
Cyber Security learner
170Questions 203AnswersCyber Security learner
156Questions 179AnswersCyber Security learner
140Questions 158AnswersCyber Security learner
114Questions 142AnswersCyber Security learner
105Questions 141AnswersSalesforce learner
103Questions 162AnswersGuides, tips and career advice on Cyber Security from JanBask experts.
Cyber Security The Ultimate Guide to SOC Analyst Certifications: Entry-Level to Senior
Not sure which SOC analyst certification to take first? Compare Security+, CySA+, SC-200, and hands-on certs with costs, study…
Cyber Security GRC Analyst Certification Guide: Best Certs, Costs, and the Right Order
Which GRC analyst certification should you take first? Compare Security+, CGRC, CRISC, CISA, and GRCP by cost, experience needed,…
Cyber Security Penetration Tester Certification Guide: Best Certs & Order (2026)
Which penetration testing certification should you take first? Compare Security+, eJPT, PenTest+, CEH, and OSCP by cost, exam…
Cyber Security Ethical Hacker Certification Guide: Best Certs, Costs (2026)
Which ethical hacker certification should you take first? Compare Security+, eJPT, CEH, PenTest+, PNPT, and OSCP by cost, exam…
Free tutorials and interview questions from industry experts — learn the skill, then get ready to prove it.
Step-by-step Cyber Security guides from industry experts
Common Cyber Security interview questions, answered
