Andrea Fortuna
AboutRss
  • May 16, 2018

    Exploiting SUDO for Linux privilege escalation

    Abusing SUDO for fun and profit! The SUDO (Substitute User and Do) command allows users to delegate privileges resources: users can execute specific commands under other users (also root) using their own passwords instead of user’s one or without password… read more »
  • May 14, 2018

    Some thoughts about RDP protocol, from the point of view of cybersecurity

    Microsoft Terminal Services Remote Desktop Protocol (RDP) is a great feature that allows the interactive use or administration of a remote Windows system. However, it can be also used by an attacker, with compromised domain credentials, to move laterally across… read more »
  • May 11, 2018

    "Manhã de Carnaval", a simple fingerstyle guitar rendition

    Often to my guitar students i try to propose both pieces from standard course of study, and small exercises based on modern and famous themes. Usually, I take personally care of the transcription and arrangement of the songs, and today… read more »
  • May 9, 2018

    How to automatically attach tmux in SSH session

    Let us say it frankly: TMUX is a great console tool! TMUX is a terminal multiplexer, allowing a user to access multiple separate terminal sessions inside a single terminal window or remote terminal session: like GNU Screen, but with more… read more »
  • May 7, 2018

    Domain Fronting in a nutshell

    What is Domain Fronting? How it works? How can be used to evade internet censorship? Recently both Google and Amazon announced a change to its own infrastructure in order to avoid the use of domain fronting, the exploitation of a… read more »
  • May 4, 2018

    "13 measures", a brief fingerstyle study for beginners

    When teaching music, one of the biggest challenge is to keep students constantly interested. Playing an instrument is also a muscular exercise, and the muscles must be trained. So, especially at the beginning of the cycle of studies, long technical… read more »
  • May 2, 2018

    Some thoughts about file carving

    File carving is the process of reassembling computer files from fragments in the absence of filesystem metadata. This practice allows searching files or other kinds of objects based on content, rather than on metadata, for example for recovering files and… read more »
  • Apr 30, 2018

    Dumb bug on NTFS.sys triggers a BSOD when Windows attempts to mount a malformed disk image

    The security researcher Marius Tivadar has discovered a vulnerability on Windows NTFS filesystem and published a proof-of-concept code on GitHub that could be used to cause Blue Screen of Death within seconds on most Windows computers. One can generate blue-screen-of-death… read more »
« Previous page Next page »

Andrea Fortuna

  • Andrea Fortuna
  • andrea@andreafortuna.org
  • andreafortuna
  • andrea-fortuna
  • andrea

Cybersecurity expert, software developer, experienced digital forensic analyst, musician