Skip to main content

Posts

Social Engineering Attack

Introduction Simply, Social engineering is a process of converting people’s mindsets by being friendly in order to get confidential, private information to execute an attack. It’s not easy to protect systems by using sophisticated hardware and software, security professionals should focus on the weakness of the employees and educate them in order to protect systems from such attacks.  Common Patterns Social engineering attacks involve 4 common patterns. Collect information about the target. Build trust with the target. Exploit the information and execute the attack. Quit without leaving any proof. Importance of attack prevention Social engineering attacks are rapidly increasing and cybercriminals have a high chance of obtaining valuable and sensitive organizational information. It is the most powerful attack which cybercriminals use when they cannot find vulnerabilities in software and hardware systems.  The phishing is the most...
Post a Comment
Read more
Recent posts

Things you should know before purchase a lottery. āļ§ිāļšāļ§් āļ´āļ­āļš් āļ¸ිāļŊāļ¯ී āļœැāļąීāļ¸āļ§ āļ´ෙāļģ āļ”āļļ āļ¯ැāļąāļœāļ­āļēුāļ­ු āļšāļģුāļĢු.

āļ”āļļ āļ¯ැāļąāļ§āļ¸āļ­් āļ§ිāļšāļ§් āļ´āļ­් āļ¸ිāļŊāļ¯ී āļœāļą්āļąා āļšෙāļąෙāļšු āˇ€ිāļē āˇ„ැāļš. āļąො āļ‘āˇƒේāļąāļ¸් āļ§ිāļšāļ§් āļ´āļ­්āˇ€āļŊ āˇƒāļ­්‍āļē āļ…āˇƒāļ­්‍āļē āļ­ාāˇ€ āˇƒොāļēāļąා āļšෙāļąෙāļšු āˇ€ිāļē āˇ„ැāļš. āļ¸ේ āļ”āļļ āˇƒāļ¯āˇ„ා āˇ€āļ§ිāļąා āļšිāļēāˇ€ීāļ¸āļš් āˇ€ීāļ¸ āļ¸āļœේ āļ…āļģāļ¸ුāļĢāļēි. āļ§ිāļšāļ§් āļ¸ිāļŊāļ¯ීāļœැāļąීāļ¸ āļēāļąු āˇƒූāļ¯ුāˇ€āļšි. āļąිāļ­්‍āļēාāļąුāļšූāļŊ āˇƒූāļ¯ුāˇ€āļšි. āˇƒූāļ¯ුāˇ€āļšāļ§ āļ‡āļļ්āļšැāˇ„ි āˇ€ීāļ¸ āļąුāˇ€āļĢāļ§ āˇ„ුāļģු āļšāļ§āļēුāļ­්āļ­āļš් āļąොāˇ€ේ. āļąāļ¸ුāļ­් āļ”āļļ āļ¯ෛāļąිāļšāˇ€ āļ§ිāļšāļ§්āļ´āļ­් āļ¸ිāļŊāļ¯ී āļœāļą්āļąා āļšෙāļąෙāļšු āļąāļ¸් āļ¸ේ āļ…āļ¯āˇ„āˇƒ් āļ¯ැāļš්āˇ€ීāļ¸ āļ”āļļāļ§ āļ§ිāļšāļ§් āļ´āļ­āļš් āļ¸ිāļŊāļ¯ී āļœැāļąීāļ¸āļ§ āļ´āˇ„āˇƒුāˇ€āļš් āˇ€āļąු āļ‡āļ­. āˇ්‍āļģී āļŊංāļšාāˇ€ āļ­ුāļŊ āļ´්‍āļģāļ°ාāļą āˇ€āˇāļēෙāļą් āļ§ිāļšāļ§් āļ´āļ­් āˇ€āļģ්āļœ 3āļš් āļ­ිāļļේ. 1. āļ¯ිāļąුāļ¸් āļ…āļ¯ිāļą āļ§ිāļšāļ§් āļ´āļ­් 2. āļš්āˇ‚āļąිāļš(āˇƒූāļģāļą ) āļ¯ිāļąුāļ¸් āļ‡āļ­ි āļŊොāļ­āļģැāļēි āļ´āļ­් 3. āļŊොāļ§ෝ āˇ€āļģ්āļœāļēේ āļ§ිāļšāļ§් āļ´āļ­්. āļ´්‍āļģāļŽāļ¸āļēෙāļą් āļ¯ිāļąුāļ¸් āļ…āļ¯ිāļą āļŊොāļ­āļģැāļēිāļ´āļ­් āˇƒාāļšāļ ්āļĄා āļšāļģāļ¸ු. āļ¯ිāļąුāļ¸් āļ…āļ¯ිāļą āļŊොāļ­āļģැāļēි āļ´āļ­්āļ¯ āļ´්‍āļģāļ¯ාāļą āˇ€āˇāļēෙāļą් āļšොāļ§āˇƒ් āļ¯ෙāļšāļšāļ§ āļļෙāļ¯ිāļē āˇ„ැāļš. 1. āļšුāļŠා āļĸāļēāļ¸āļŊු āˇƒāˇ„ිāļ­ āļŊොāļ­āļģැāļēිāļ´āļ­්.     āļšුāļŠා āļĸāļēāļ¸āļŊු āˇƒāˇ„ිāļ­ āļŊොāļ­āļģැāļēි āļ´āļ­් āļēāļąු āļŊොāļ­āļģැāļēි āļ´āļ­āļš් āļĸāļēāļœ්‍āļģāˇ„āļąāļē āļšිāļģීāļ¸ේ āˇƒāļ¸්āļˇාāˇ€ිāļ­ාāˇ€ āˇ€ැāļŠි āļŊොāļ­āļģැāļēි āļ´āļ­් āˇ€ේ. āļ¸ේ āˇƒāļ¯āˇ„ා āļļොāˇ„ෝ āˇ€ිāļ§ āļ¯ිāļąුāļ¸් āļ…āļ¯ිāļąු āļŊāļļāļą āļ´āļą්āļ¯ු āˇƒංāļ›්‍āļēාāˇ€ āļ¸ූāļŊිāļšāˇ€āļ¸ āļļāļŊāļ´ාāļąු āļŊැāļļේ. āļ”āļļ āļ¯āļą්āļąා āļ†āļšාāļģāļēāļ§ āļ…ංāļš 10āļšිāļą් āļ…ංāļšāļēāļš් āļ­ෝāļģාāļœැāļąීāļ¸ේ āˇ„ැāļšිāļēාāˇ€āļ§ āˇ€āļŠා āļ…ංāļš 5āļšිāļą් āļ…ංāļšāļēāļš් āļ­ොāļģාāļœැāļąීāļ¸ේ āˇ„ැāļšිāļēාāˇ€ āˇ€ැāļŠිāˇ€ේ. āļŊොāļ­āļģැāļēි āļ´āļ­් āļ¯ිāļąුāļ¸් āļ‡āļ¯ීāļ¸ේāļ¯ී āļāļĸුāˇ€āļ¸ āļ¸ෙāļē āļļāļŊāļ´ාāļēි. āļ‹āļ¯ාāˇ„āļģāļĢāļēāļš...
Post a Comment
Read more

WSO2 Identity Server use as an authorization server

This blog is for the developers who is having a requirement to use WSO2IS as an authorization server. For an example, I'm going to use WSO2 Identity Server to demonstrate this use case. Step 1 :- Checkout a sample application from this[1] git location and build it. Take the .war file which is created inside the  <SAMPLE_HOME>/oauth2/playground2/target directory and deploy it in tomcat server(Its required to be deployed on tomcat 7.x version). Build and deployment details are available in this document[2]. Step 2 :-  Download WSO2 identity server from this link[1] and create a service provider  for sample application.  When you create a service provider, you need to add  service provider name first and click Register  button. Once you create a service  provider, you need to configure call back url for particular application.  Please click on Configure link which is defined under OAuth/OpenID Connect Configuration...
Post a Comment
Read more

How to debug WSO2 Carbon products with Eclipse

When you are doing some customizations, you may have to debug the custom codes. I'm going to give you steps to start the debug with Eclipse. Step 1 :- First you need to start the product with below command. sh wso2server.sh -debug 5005 When you start the server with above command, Server is listening for the port 5005. Step 2 :-  Open the debug configuration window and create a new Remote Java Application. Keep the host as localhost and give the port which you started in the first step. After do the modifications, you can start debug by clicking Debug button in Debug Configuration Window. If you configured correctly, Server will be started without any problem.
Post a Comment
Read more

Configure mysql database with WSO2 Identity Server

One of the main usage of Identity Server is for user management. It gives us a lot of features.List of features are available in this page . Some of them are, Multiple user store support User, password and profile management JDBC, LDAP/AD support Default user store of Identity Server is the embadded LDAP and its a forked implementation of ApacheDS . Other configuration Data, Registry are available in H2 database. Embedded LDAP and H2 database are not recommended in production environment. So; We have to use commercially available databases/LDAP implementations for production. Today I'm going to explain the way to use mysql database with Identity Server. We can do it following few steps. Step 1 :-  Disable embedded LDAP property in embedded-ldap.xml file which is located in <IS_HOME>/repository/conf/identity/ <Property name="enable">false</Property> Step 2 :-  Create a database and generate required tables using provided sql file...
Post a Comment
Read more

Logging parameters in WSO2 ESB Script mediator

Script mediator is helpful in many ways and it can be written in different scripting languages such as JavaScript, Groovy and Ruby. I'm going t o use JavaScript for this example. I'm trying to show you the way that you can use to log some values when you are writing a mediator. This will be helpful when you need to log values when you are writing a complex script mediators. This is a sample script <script language= "js" > var log = mc.getServiceLog(); log.info( "started" ); var temp_auth = mc.getProperty('authheader'); log.info( "temp_auth : " + temp_auth); log.info( "out" ); </script> When you define a " var log = mc.getServiceLog();" variable, you can use log object to display values as below. log.info( "started" ); log.info( "temp_auth : " + temp_auth); This is a sample proxy service <?xml version= "1.0" encod...
Post a Comment
Read more

How to Create a Secondary JDBC user store for Identity Server

WSO2 Identity server comes with embedded LDAP as a primary user store. But its not recommended  to use in production environment. So; you have to use some other products for primary user store(OpenLDAP, AD, JDBC, etc..). You may required some other user store in practical scenarios. So; I'm going to talk about how to create a JDBC user store as a secondary user store with wso2 IS. I'm using wso2 Identity server latest version(current Identity server version is 5.1.0) for this example. Step 1 :- Log in to mysql using below command. Lets create a database first. mysql -u root -proot Create a database as below. create database sampledb; Use newly created database for other operations. use below command. use sampledb; Step 2 :- Then create tables which are required for user store. You can use mysql.sql file which is located in <IS_HOME>/dbscripts/ directory to import tables to newly created database. please use this command source /home/madura/D...
Post a Comment
Read more