{"id":1126,"date":"2018-10-16T13:32:59","date_gmt":"2018-10-16T13:32:59","guid":{"rendered":"https:\/\/mchmelar.cz\/?p=1126"},"modified":"2024-12-02T22:38:18","modified_gmt":"2024-12-02T22:38:18","slug":"cybersec-tech-7","status":"publish","type":"post","link":"https:\/\/kb.mchmelar.cz\/?p=1126","title":{"rendered":"Cybersec Tech 7"},"content":{"rendered":"\n<p>How much does Google about us?<br\/>340 request to <g class=\"gr_ gr_8 gr-alert sel gr_spell gr_replaced gr_inline_cards gr_disable_anim_appear ContextualSpelling ins-del multiReplace\" id=\"8\" data-gr-id=\"8\">Google<\/g> servers from android phone per 24 hrs<br\/><a href=\"https:\/\/adssettings.google.com\/authenticated\">https:\/\/adssettings.google.com\/authenticated<\/a><br\/><a href=\"https:\/\/myactivity.google.com\/\">https:\/\/myactivity.google.com\/<\/a><br\/><a href=\"https:\/\/takeout.google.com\/settings\/takeout?pli=1\">https:\/\/takeout.google.com\/settings\/takeout?pli=1<\/a><br\/>87% of income comes from advertisement<\/p>\n\n\n<p><strong>Packages and malware<br\/><\/strong><span style=\"text-decoration: underline;\">.docx<\/span><br\/>Part items (workbook.xml, sheetn.xml, other files )<br\/>Content type items (description of)<br\/>extraction of <g class=\"gr_ gr_286 gr-alert sel gr_gramm gr_replaced gr_inline_cards gr_disable_anim_appear Grammar only-ins replaceWithoutSep\" id=\"286\" data-gr-id=\"286\">the <\/g>document container:<br\/><br\/><\/p>\n\n\n<pre class=\"wp-block-code\"><code>unzip OpenDocument-v1.2.odt <\/code><\/pre>\n\n\n<p>.doc has a &#8220;filesystem&#8221; inside a container<br\/>.doc profiling tools<\/p>\n\n\n<ul><li>OfficeMalScanner\u00a0<\/li><li>DFView (oldschool microsoft OLE structure viewer)<\/li><li>..<br\/><\/li><\/ul>\n\n\n<p><span style=\"text-decoration: underline;\">.pdf<\/span><br\/><\/p>\n\n\n<ul><li>The original look of the document<\/li><li>&#8220;<g class=\"gr_ gr_6 gr-alert sel gr_spell gr_replaced gr_inline_cards gr_disable_anim_appear ContextualSpelling ins-del\" id=\"6\" data-gr-id=\"6\">trustworthy<\/g> and secure&#8221; &#8211; actually not<\/li><li>Flash, javascript and more<\/li><li>exploit kits<\/li><\/ul>\n\n\n<p><span style=\"text-decoration: underline;\"><g class=\"gr_ gr_7 gr-alert gr_spell gr_inline_cards gr_disable_anim_appear ContextualSpelling ins-del multiReplace\" id=\"7\" data-gr-id=\"7\">peedf<\/g>\u00a0<\/span><br\/>with <g class=\"gr_ gr_8 gr-alert gr_spell gr_inline_cards gr_disable_anim_appear ContextualSpelling\" id=\"8\" data-gr-id=\"8\"><g class=\"gr_ gr_11 gr-alert gr_gramm gr_inline_cards gr_disable_anim_appear Punctuation only-ins replaceWithoutSep\" id=\"11\" data-gr-id=\"11\">peedf<\/g><\/g> it is possible to see all <g class=\"gr_ gr_10 gr-alert sel gr_gramm gr_replaced gr_inline_cards gr_disable_anim_appear Grammar only-ins replaceWithoutSep\" id=\"10\" data-gr-id=\"10\">the <\/g>hidden parts<br\/><span style=\"text-decoration: underline;\">Origami framework<br\/>pdf-<g class=\"gr_ gr_9 gr-alert gr_spell gr_inline_cards gr_disable_anim_appear ContextualSpelling\" id=\"9\" data-gr-id=\"9\">xraylite<\/g><br\/>pdf-parser<\/span><\/p>\n\n\n<p>HTML filter bypass<\/p>\n\n\n<p>browser allow any\u00a0<\/p>\n\n\n<p><strong>How to approach\u00a0 infected computer<br\/><\/strong>Preparation (backup copies of data)\u00a0<br\/>If ransomware: pay, https:\/\/www.nomoreransom.org\/cs\/index.html, antiransomware<br\/><strong>Trojanized computer part of Botnet<br\/><\/strong>Wireshark, network traffic<br\/>SNAFU LOOP<\/p>\n\n\n<p><g class=\"gr_ gr_12 gr-alert gr_spell gr_inline_cards gr_run_anim ContextualSpelling ins-del multiReplace\" id=\"12\" data-gr-id=\"12\">OpenIoC<\/g><br\/>Scripting\u00a0<br\/>Suspicious Behaviour<\/p>\n\n\n<p><strong>LAB4<br\/><\/strong>whois command in unix<br\/><\/p>\n\n\n<p><div>https:\/\/thenextweb.com\/hardfork\/2018\/10\/19\/cryptocurrency-attack-report\/<\/div><br\/><br\/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>How much does Google about us?340 request to Google servers from android phone per 24 hrshttps:\/\/adssettings.google.com\/authenticatedhttps:\/\/myactivity.google.com\/https:\/\/takeout.google.com\/settings\/takeout?pli=187% of income comes from advertisement Packages and malware.docxPart items (workbook.xml, sheetn.xml, other files )Content type items (description of)extraction of the document container: .doc has a &#8220;filesystem&#8221; inside a container.doc profiling tools OfficeMalScanner\u00a0 DFView (oldschool microsoft OLE structure viewer) .. .pdf The original look of&#46;&#46;&#46;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[23],"tags":[55],"_links":{"self":[{"href":"https:\/\/kb.mchmelar.cz\/index.php?rest_route=\/wp\/v2\/posts\/1126"}],"collection":[{"href":"https:\/\/kb.mchmelar.cz\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kb.mchmelar.cz\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kb.mchmelar.cz\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/kb.mchmelar.cz\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1126"}],"version-history":[{"count":1,"href":"https:\/\/kb.mchmelar.cz\/index.php?rest_route=\/wp\/v2\/posts\/1126\/revisions"}],"predecessor-version":[{"id":5776,"href":"https:\/\/kb.mchmelar.cz\/index.php?rest_route=\/wp\/v2\/posts\/1126\/revisions\/5776"}],"wp:attachment":[{"href":"https:\/\/kb.mchmelar.cz\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1126"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kb.mchmelar.cz\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1126"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kb.mchmelar.cz\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1126"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}