Microsoft Office 365 user enumeration and Burp Suite: a how to guide
Hello folks, I've put together a quick how to guide on how to perform user enumeration on Microsoft Office 365. Enjoy it here !
Posts
A tool to detect Slow HTTP DoS attacks on pcap files
Hello everybody, I wrote a python tool to detect Slow HTTP DoS attacks on pcap files: slowdos_detector . This is ideal for post-mortem analysis on captured traffic (pcap files). If you are curious about how to test it, you could leverage slowhttptest to launch an HTTP DoS attack on your test server, capture the traffic and then use slowdos_detector to show offending HTTP transactions. Enjoy it and ping me if you have questions, issues or suggestions.
An introduction to HTTP Security Headers
Hello all, It is being a while since my last post. March this year I had a talk at the Confraria0day conference about HTTP Security Headers. I made the slides available here . I hope it helps and let me know if you want to discuss it.