Full Skyway Support Library
What is the DDOS potential NTP Attack, what is the risk and how can you mitigate that risk?
What is it? Network Time Protocol (NTP) is used to synchronize your computer clock with other computers on the Internet. By far the most common use of NTP is for one computer to ask "what time is it?" of another computer. But NTP has many other, less used,...
What is the DDOS potential netbios Attack, what is the risk and how can you mitigate that risk?
What is it? Network Basic Input/Output System (NetBIOS) is the mechanism that Microsoft Windows systems use to share resources, particularly file and printer shares. NetBIOS uses ports 137, 138 and 139. Why is it a risk? Using a command called NBSTAT (link below), an...
What is the DDOS potential LDAP Attack, what is the risk and how can you mitigate that risk?
What is it? Lightweight Directory Access Protocol (LDAP) allows remote users to lookup directory data. An LDAP Directory usually contains information about users, but may also contain data about printers, servers, conference rooms, other equipment, etc. LDAP is the...
What is the DDOS potential http Attack, what is the risk and how can you mitigate that risk?
What is it? This vulnerability is (sort of) mis-named; it might be more accurately called "TCP Middlebox Reflection Vulnerability." Although the vulnerability was detected on the HTTP Port (80), these attacks can occur on any port. A "middlebox" is any device that...
What is the brute-force telnet Attack, what is the risk and how can you mitigate that risk?
Brute-force attacks against telnet attempt to gain unauthorized access by systematically trying many combinations of usernames and passwords until the correct one is found. Risk If successful, attackers gain remote access to systems, allowing them to steal data,...
What is a Malware Vulnerability, what is the risk and how can you mitigate that risk?
What is it? Malware is any "malicious software." Malware can steal, encrypt, or delete your data, alter or hijack core computer functions, and spy on your computer activity without your knowledge or permission. Most modern malware contains advanced capabilities that...
What is the Rsync (remote synchronization) Vulnerability, what is the risk and how can you mitigate that risk?
What is it? Rsync (remote synchronization) has been used for over two decades to move and mirror file systems between computers on a network; it is often used for maintaining a backup because it only transfers differences between the two systems; it's very efficient....
What is the Building Automation and Control Network (BACnet) Vulnerability, what is the risk and how can you mitigate that risk?
What is it? Building Automation and Control Network (BACnet) is a common building automation system protocol that offers Alarm and event monitoring, remote device management and computer file and terminal access. The default port for BACnet traffic is 47808 Why is it...
What is the MQTT Vulnerability, what is the risk and how can you mitigate that risk?
What is it? MQTT (which originally was an acronym for Message Queue Telemetry Transport, but since 2013 doesn't actually stand for anything according to Wikipedia) is a protocol use for remote sensor and control (the Internet of Things - IoT); particulraly for...
What is the MS-SQL Server Resolution Service Vulnerability, what is the risk and how can you mitigate that risk?
What is it? MS-SQL Server Resolution Service (MC-SQLR) facilitates connections over the Internet to MS SQL database servers. Why is it a risk? A Denial of Service attack (DoS) is when an attacker attempts to overwhelm a victim's server. A Distributed Denial of Service...