Open Information Security Foundation

01/14/2019

12:02 PM Suricata Security #2770 (Closed): TCP FIN/ACK, RST/ACK in HTTP - detection bypass

Hello, team!
During an investigation of this PCAP dump:
*hxxps://www.joesandbox.com/analysis/95831/1/pcap* (also ... Alexey Vishnyakov

12/11/2018

03:26 PM Suricata Security #2736 (Closed): DNS Golden Transaction ID - detection bypass

Hello, team!
I've found an interesting problem in DNS protocol related to Transaction ID header field
I made a ... Alexey Vishnyakov

11/23/2018

11:39 AM Suricata Bug #2706 (Rejected): Malformed SEQ value in TCP connection - detection bypass

Hello, team!
There is a serious problem in all last (maybe all) Suricata versions. Let me show you a method how to... Alexey Vishnyakov

10/31/2018

02:52 PM Suricata Bug #2655 (Closed): GET/POST HTTP-request with no Content-Length, http_client_body miss

Hello, Team!
We've run into troubles with a few threats variants.
Let's imagine some sort of malware which tries to... Alexey Vishnyakov