Nov 6, 2020

Where are the DoH clients?

The development of encrypted DNS, specifically DNS-over-HTTPS (DoH), has attracted a relatively large amount of interest to a previously quiet corner of the Internet protocol world.

Here're a list of DoH client of choices:

  • Mozilla Firefox
  • Google Chrome
  • Google Android
  • Microsoft Edge
  • Apple IOS 

Links:

  • https://blog.apnic.net/2020/10/30/an-update-on-developments-with-dns-over-https/

Nov 1, 2020

Quick CVE Checking at Kenna

Earlier, I created a python script that allow me to check the number of vulnerable host based on CVE.

Today I just released second version of the script that show both the vulnerable host and vulnerabilities from Kenna, based on CVE.

If you specify the verbose output option, it will show both active and inactive count for Closed, Open, Risk_Accepted, and False_Positive category.

kenna-cve
kenna-cve-win.exe -h

I also released a Win32 version that allow me to run on my Windows platform (uploaded to GitHub). 

Try this and see:

c:\> kenna-cve-win.exe -v -c 2020-1337

Oct 31, 2020

JSON/CSV in Python

Two simple tutorials to convert between JSON and CSV data.

How to convert JSON to CSV


How to convert CSV to JSON

Links:

  • https://www.youtube.com/watch?v=YLCSVv46ERo
  • https://www.youtube.com/watch?v=LeFDBRAhRls

Oct 9, 2020

Automating Information Security with Python

Just completed my SEC573 training (since Aug 2020), and passed the GIAC Python Coder (GPYC) certification.

Syllabus:

  1. SEC573.1: Essentials Workshop with pyWars
  2. SEC573.2: Essentials Workshop with MORE pyWars
  3. SEC573.3: Defensive Python
  4. SEC573.4: Forensics Python
  5. SEC573.5: Offensive Python

Link: Automating Information Security with Python | SANS SEC573

Oct 1, 2020

Kenna CVE Check

Today I created a small python script that allow me to check the number of vulnerable host in Kenna based on a CVE ID.

It helps me to check on how many hosts contain a particular CVE vulnerability, whether it is Closed, or Open, or Risk_Accepted, or False_Positive.

But I'm thinking to improve the script later by including the vulnerability count for both active/inactive hosts.