Follow the evidence.

RMA and Naval Group team up for Naval Cyber Security

Today representatives from the Royal Military Academy, Naval Group, Howest, NVISO and PR0PH3CY signed a partnership agreement to create the Naval Cyber Alliance.

Laravel migrations tips

When developing a Laravel application, it’s quite common to run the development (and test) version with a SQLite database, and the production version with a MySQL database. Normally, the migrations will take care of creating the correct database schema. However, there are a few caveats.

CYLAB at the DIGILIENCE Conference

Members of the Cyber Defence Lab attended this year’s edition of the “Digital Transformation, Cybersecurity, And Resilience DIGILIENCE 2024” that was held in Sofia, Bulgaria. They presented two papers in the field of Blockchain and Cyber Situation Awareness in Complex Systems.

Installing Nextcloud Ubuntu client

Use phpunit to test your PHP project

So you are developing some PHP code? Beter make sure it works as expected! In this blog post we will show how to quickly get started with phpunit to automatically test your code…

Are SMS messages vulnerable in 5G ?

This blog discusses the security of SMS in the context of 5G. In a preceding blog (https://cylab.be/blog/171/sms-based-2-factor-authentication-is-insecure), we already addressed the issue of SMS interception in 2G/3G networks and its potential consequences for 2-Factor Authentication. Here, we analyze the situation within the 5G ecosystem.

Share on Mastodon with shareon.js

With recent events on Twitter, the micro-blogging network Mastodon has gained a lot of interest. Unlike Twitter, Mastodon is free and open-source software. Moreover, Mastodon uses a decentralized approach: the Mastodon network is composed of multiple instances managed by different suppliers, each with its own code of conduct, terms of service, privacy policy, privacy options, and moderation policies. If you want to support the network, here is ho...

Manage Open WebUI users and roles with Keycloak

In a previous blog post I have presented you how to install and get started with Keycloak for central Identity Management. We can now continue and integrate Keycloak with client applications. In this blog post I will illustrate the process with Open WebUI.

The P4 language - The basics of P4 language

Programming Protocol-independent Packet Processors (P4) is a domain-specific language for network devices, specifying how data plane devices (switches, NICs, routers, filters, etc.) process packets. P4 programs are designed to be implementation-independent: they can be compiled against many different types of execution machines such as general-purpose CPUs, FPGAs, system(s)-on-chip, network processors, and ASICs.

Web shells and the dangers of unrestricted file upload

In previous blog posts, we have already illustrated two web application vulnerabilities: brute force login cracking and SQL injection. In this post we illustrate a 3rd vulnerability, unrestricted file upload, and show how it can be exploited using a web shell.

Create a Linux kernel module

In a previous blog post, I presented how to build your own Linux kernel. This time I will show how to create, compile and load a very simple kernel module…

Offensive eBPF - Simulating a Full Disk

The most effective Denial of Service attacks don’t always require flooding a network or physically filling a hard drive. Sometimes, they just require a well-placed lie. Imagine a system administrator looking at df -h and seeing Terabytes of free space, while every critical service crashes with “No space left on device”. This is the power of kernel-level deception. In this post, we will demonstrate how to use eBPF not to fix a system, but to break...

How to set up a proof of concept Wi-Fi mesh network

Introduction

Firewall Automation with OPNSense API and PHP

OPNsense is a powerful open-source firewall and network security platform that offers a wide range of features and tools for securing your network. One of the key benefits of OPNsense is its extensive API, which allows developers and administrators to automate and integrate various tasks and workflows into their existing infrastructure. In this blog post, we’ll explore how to interact with the OPNsense API using PHP and cURL, and demonstrate how...

Enhance your workflow: create custom /commit commands in OpenCode

Next to its native powerful capabilities, OpenCode allows to easily create new slash commands. We’ll illustrate this by creating a /commit command.

Continuous Deployment with GitLab and Laravel Envoy

There are multiple ways to implement Continuous Deployment (CD) for a Laravel project. The current trends consists in deploying containers to a kubernetes cluster. In this blog post however, we will present the good old way: we will use Laravel Envoy to deploy our code directly to our server(s). This method has the advantage of simplicity as it does not require to build containers, nor does it require a kubernetes cluster: Laravel Envoy uses a si...

Hardening Apache

The example below provides some sound configuration parameters for Apache, to help protect your web application. These values can naturally be tweaked for your particular app.

[VMWare] pointer invisible after update in guest Kali

After running a apt upgrade in your kali vm in VMWare, you might have been surprised to see your cursor disappear.

GHOSTS v8.0 Implementation: Orchestrating Realistic Traffic for PoC Attack Simulation and Log Monitoring

In red-blue team attack scenarios, testing threats and attacks on isolated machines can make detection overly simplistic. This is because the attacks are the only activity on the network, which does not accurately reflect real-world conditions. In reality, cyberattacks often occur during working hours and blend seamlessly with normal user activities. The larger the organization, the more extensive the network, making it increasingly challenging t...

2022 in numbers

Another year has passed, with once again some achievements! Here is 2022@cylab.be…

Using Laravel with a SQLite database

For a development environment or for small web applications, a SQLite database may be perfectly sufficient to store your data. It is also much lighter than a full blown MySQL database.

Centralized Identity and Access Management (IAM) : First steps with Keycloak and OIDC

In today’s digital landscape, applications and web services tend to multiply. Securing access to your applications and managing user identities can quickly become a serious burden. Keycloak, a robust open-source Identity and Access Management (IAM) solution, allows to centrally manage authentication, authorization, and user management. In this blog post, we’ll walk you through the process of setting up Keycloak using Docker and Docker Compose, co...

Healthcare Cyberattacks Hit Harder, Cost More

Proofpoint Stops the Attacks Traditional Defenses Miss in the AI Era