Install rita on firewalla

Firewalla Gold is already running Bro/Zeek on the device. To enhance your network security analysis capabilities, you can integrate RITA (Real Intelligence Threat Analytics) into your Firewalla Gold setup. RITA is an open-source framework designed to detect and analyze network intrusions by processing Bro/Zeek logs. In this blog post, we’ll walk you through the steps to install MongoDB and RITA, and configure the system to import Bro/Zeek logs using a cron job.

Read More

Stack Based buffer overflows on linux x86

For code to be executed in CPU it need to first reverse a stuck or buffer in the memory. The idea behind Buffer overflow is inserting more data input a input field then the program expected, there by overflowing the buffer that have been created and write to other registers. The goal here for a hacker is to overwrite the return address with code to execute commands as the program.

Read More