Billy Demourelle - Cyber Space Station

Cyber Space Station

Sign in Subscribe

Billy Demourelle

CVE-2011-3389: BEAST Attack SSL/TLS Vulnerability - Disabling SSL/TLS 1.0/TLS 1.1

CVE-2011-3389: BEAST Attack SSL/TLS Vulnerability - Disabling SSL/TLS 1.0/TLS 1.1

Introduction SSL(Secure Sockets Layer)/TLS(Transport Layer Security) are cryptographic protocols designed to provide a secure connection over a network. SSL is technically deprecated as it is unsecure, but the term is still commonly used to refer to TLS. This protocol is widely used to secure web browsing, emails,

changedetection.io: Webpage Monitoring for Patch Management

changedetection.io: Webpage Monitoring for Patch Management

Part of my job is monitoring updates for many systems that are released monthly. For the most part, patch Tuesday keeps these updates on a pretty consistent schedule. The concerning updates are the out-of-band updates that are released at anytime, on a as-needed basis, usually to patch a critical process

RustScan - Fast Port Scanning

RustScan - Fast Port Scanning

Port scanning is a widely used penetration testing tool to scan and verify if certain ports are open or vulnerable within a network. The default go-to tool is Nmap but it has been around since 1997 and is currently being out-performed by other tools in terms of scan speed and

Windows Virtualization-Based Security: What is it?

Windows Virtualization-Based Security: What is it?

Windows Virtualization-based Security (VBS) is a security integration that uses virtualization to enhance your device's security. It utilizes Windows hypervisor to create a virtual environment for security features to operate in isolated sections of the operating system. With this feature, the trust boundaries of your computer are changed.

Protecting yourself from Identity Theft

Protecting yourself from Identity Theft

Recently, there have been many data breaches exposing Personally Identifiable Information (PII), making it likely that your full name, email address, home address, phone numbers, credit card numbers, and Social Security Numbers (SSN) are now circulating on the dark web. This information is just waiting for a bad actor to

NetBIOS Vulnerability: Mitigating risks by disabling service

NetBIOS Vulnerability: Mitigating risks by disabling service

NetBIOS(Network Basic Input/Output System) is an old service that allows computers to communicate with each other over a LAN and to identify Windows systems names in TCP/IP. Originating in 1980s, NetBIOS ran over IEEE 802.2 and IPX using NetBIOS Frames (NBF) and NetBIOS over IPX/SPX

CVE-2013-3900: Authenticode Signature Verification - Certificate Padding

CVE-2013-3900: Authenticode Signature Verification - Certificate Padding

Description Microsoft republished a security vulnerability Jan 21, 2022 to re-address an issue that allows remote attackers to execute arbitrary code in the context of the current user by exploiting the WinVerifyTrust function of Windows Server and Windows 10/11. If the user is logged in with administrator creds, an