Skip to content

Project

Wireshark

Open-source network protocol analyzer used to capture and inspect traffic packet by packet.

Known aliases

  • tshark

Current stories

buildOne report1 publisher

TLS 1.3 stops Mishra's Pixel capture short of the payloads his page lists

Praveen Kumar Mishra puts a locked Pixel 8 at 348.4 outbound requests an hour across 42 Alphabet endpoints. His firewall recorded destinations and byte counts, and the SIM hashes and facial-recognition indices he describes sit outside what that capture can show.

Publishers:runtimewire.com

Reality

Evidence32
Adoption
Not scored
Hype gap+55
Incentives55
Confidence62
buildOne report1 publisher

A PROFINET lab in Linux namespaces separates what the capture proves from what the device did

RUGERO Tesla built a PROFINET testbed out of Linux network namespaces and the p-net stack, and the write-up shows where a crafted frame sitting in a capture stops being evidence about the device that received it.

Publishers:dev.to

Reality

Evidence45
Adoption
Not scored
Hype gap+18
Incentives20
Confidence50
securityOne report1 publisher

UAC-0099 hid a nuclear-weapons request in a VBScript comment to stall an LLM code scanner

ESET calls the technique GuardBreaker and notes that this bait, unlike most evasion tricks, is left in plain sight for the models reading the code to find.

Reality

Evidence58
Adoption32
Hype gap+22
Incentives68
Confidence60
buildOne report1 publisher

A fake internet, not a tighter cage: catching a trojan that waits for DNS

FlexenseActivator.exe stays quiet until something answers its connectivity check. Simulating the network, rather than isolating the host harder, is what made the payload observable.

Publishers:dev.to

Reality

Evidence54
Adoption24
Hype gap+24
Incentives32
Confidence52
buildOne report1 publisher

IEC 104's real security boundary is the STARTDT handshake, not port 2404

A packet-level lab study drives an IEC 104 server from a connected socket into data transfer with one unauthenticated frame, then measures what TLS and mTLS actually move.

Publishers:dev.to

Reality

Evidence46
Adoption
Not scored
Hype gap+18
Incentives32
Confidence41
buildOne report1 publisher

Let the model write the CyberChef recipe, let deterministic code do the decode

A dev.to walkthrough of CyberChef for red and blue teams lands on the only defensible split for AI-assisted analysis: the LLM proposes the sequence, the engine executes it.

Publishers:dev.to

Reality

Evidence38
Adoption
Not scored
Hype gap+8
Incentives22
Confidence45