their own honeypots as part of the quarantine environment. Users just have to forward the honeypot's HTTP requests to the environment's backend server (backend processes will automatically scrub and forward data to the analysis dashboard - ELK stack). 3. The Library - Retraining Sequence to Reinforce the Brains | Smart isn't really smart till you can keep learning. As new payloads and attack vectors emerge, it is important to upgrade detection capabilities in order to ensure security. Hence, a retraining function is built into NGWAF to ensure defenders are able to train the machine learning model to detect those newer payloads. Retraining of datasets is one of the main features in NGWAF. On our dashboard, users can insert new dataset for retraining, to strengthen and improve the quality of NGWAF detection of malicious payloads.

___________________________
@hacking_Attack
@Hacking_Video

This can be achieved in the following steps: Create a new dataset (.csv) for upload in the following format (empty column, training data, label). You can refer to patch_sqli.csv as an example. Navigate to http://localhost:8088 to view NGWAF admin panel. Select the "Import Dataset" tab and upload the training set you have created

___________________________
@hacking_Attack
@Hacking_Video

Confirm that the training set have been uploaded successfully under the "Manage Datasets" tab.

___________________________
@hacking_Attack
@Hacking_Video

Under "Manage Model" tab, select the dataset(s) you want to retrain the model on and click on the "UPDATE WAF MODEL" button. 

___________________________
@hacking_Attack
@Hacking_Video

Congrats! The model should finish re-training after some time.

___________________________
@hacking_Attack
@Hacking_Video

4. Additional Features: NGWAF uses ELK stack to capture logs of network data that passes through NGWAF, allowing users to monitor the traffic that passes through the NGWAF for further analysis.

___________________________
@hacking_Attack
@Hacking_Video

Google VRP (Acquisitions) — [Insecure Direct Object Reference] 2nd
https://caesarevan23.medium.com/google-vrp-acquisitions-insecure-direct-object-reference-2nd-2ece9b185ade?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hi All!, Yuuppp…It’s me again! XD. As the title suggests, I will share how I found the [Insecure Direct Object Reference] vulnerability in…Continue reading on Medium » (https://caesarevan23.medium.com/google-vrp-acquisitions-insecure-direct-object-reference-2nd-2ece9b185ade?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Templates (thm) writeup

https://cdn-images-1.medium.com/max/600/1*D0GhtgkWWS3p7uwHSH1Htw.png
Starting with nmap:

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Round Up Your Posse

A Saturday Serial Series:

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Symfonos: OSCP (Walkthough)

https://cdn-images-1.medium.com/max/812/1*t9divhapXpDJmOFizG8nqA.png
This is another post on vulnhub CTF “called “bronchi”. It’s a root boot challenge where you have to find flags to finish the task assigned…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video