// Topic collection
56 entries for this tag
// Fast route
If you are exploring materials on this topic, the next step can be the topics catalog, the homepage with work areas, or the service pages directly.
2026-10-21
HTTPS protects data in transit, but it knows nothing about what’s inside the request. Most attacks against websites happen over a fully encrypted connection and exploit HTTP itself: how proxies and applications parse the …
Read more2026-10-12
JA3 and JA4 — methods to obtain a short TLS client fingerprint from its initial ClientHello message. Different programs — Chrome, Firefox, curl, the Python requests library, the Go client, a malicious program — form …
Read more2026-10-09
The user types example.ru in the address bar without a scheme, follows an old http://… link, or opens a decade-old bookmark. In all these cases the first request may go over plain HTTP, and the site owner’s job is …
Read more2026-10-05
Under the phrase “TLS type” people usually mean different things: protocol version (1.2 or 1.3), cipher suite, certificate type (DV, OV, EV) or a scheme where the client also presents a certificate (mTLS). In this part — …
Read more2026-10-02
HTTPS — this is HTTP transmitted inside a TLS (Transport Layer Security) connection. TLS solves three problems: it encrypts data so they cannot be read in transit; it verifies integrity so they cannot be altered; and it …
Read more2026-09-28
Headers are the metadata of an HTTP message: lines like Name: value between the start-line and the body. From them the server understands which site is requested, in what format and language to return the response, who …
Read more2026-09-22
Bitwarden CLI — the official command-line utility bw for working with a Bitwarden vault: find a password in the terminal, get a secret in a script, pass it to a CI/CD pipeline. The code is open-source, the utility is …
Read more2026-09-22
A few days ago I investigated a production server compromise. Not a theoretical one — a real one, with a Monero miner, a C2 agent and a backdoor. The attack was completely automated. No one was specifically hunting that …
Read more2026-09-22
Modern CAPTCHA has long ceased to be just an “exercise in recognizing crooked letters.” Today it’s a full-fledged anti-bot mechanism that analyzes not only the explicit user action but also the context …
Read more2026-09-22
Netcat (nc) reads and writes data over TCP and UDP connections. With one small utility it’s convenient to check a port, grab a service banner, transfer a file between machines, or create a temporary tunnel. Below — …
Read more