SIP - The Session Initiation Protocol (RFC 3261)
How SIP (RFC 3261) sets up, modifies, and tears down multimedia sessions using a text request/response model, its elements, layered design, transactions, dialogs, and security.
2026, Jul 20 —- Posts
- Categories
The IPsec and IKE Document Roadmap (RFC 6071)
A guided tour of RFC 6071, the roadmap that maps the sprawling IPsec and IKE RFC landscape - the seven document groups, IPsec-v2 vs v3, IKEv1 vs IKEv2, extensions, and crypto requirement levels.
2026, Jul 20 —ISO 20022 for Trade Services — The tsrv Message Set
How ISO 20022 models bank guarantees and standby letters of credit through the tsrv business area, covering the issuance, amendment, demand, and termination of an undertaking between applicant, guarantor, advising party, and beneficiary.
2026, Jul 17 —ISO 20022 for Trade Services Management — The tsmt Message Set
How ISO 20022 modelled the Bank Payment Obligation and the Trade Services Utility through the tsmt business area, covering the baseline, data set matching, status management, and reporting that drive a conditional interbank payment obligation.
2026, Jul 17 —ISO 20022 for Trade Services Initiation — The tsin Message Set
How ISO 20022 models the corporate-to-bank front end of trade finance through the tsin business area, covering invoice financing, invoice assignment for factoring, party registration and guarantee, and undertaking applications.
2026, Jul 17 —ISO 20022 for Terminal Management — The catm Message Set
How ISO 20022 models the management of payment terminals through the catm business area, covering status reporting, management plans, configuration updates, maintenance delegation, and certificate management between a terminal and its management system.
2026, Jul 17 —ISO 20022 — A Map of the Financial Messaging Standard
An overview of ISO 20022 as a whole, tying together its methodology, message identifier, and Business Application Header with a map of its business areas across payments, securities, cards, trade finance, FX, regulatory, and reference data.
2026, Jul 17 —ISO 20022 for Card Settlement Reporting — The casr Message Set
How ISO 20022 models card settlement reporting through the casr business area, a two-message request-and-response pair that reports settlement positions and totals between card parties on the same protected envelope as the transaction messages.
2026, Jul 17 —ISO 20022 for Securities Settlement — The sese Message Set
How ISO 20022 models securities settlement through the sese business area, from the settlement instruction and its matching, status, and confirmation at a CSD to securities financing, transfers, and the CSDR buy-in advice.
2026, Jul 17 —ISO 20022 for Securities Management — The semt Message Set
A tour of ISO 20022's semt (securities management) business area, the custody reporting layer that carries holdings statements, transaction statements, intra-position movements, penalties, and account queries between an account owner and its custodian or CSD.
2026, Jul 17 —ISO 20022 for Securities Events — The seev Message Set
A tour of ISO 20022's seev (securities events) business area, covering corporate actions, general meetings and proxy voting, shareholder identification, market claims, and buyer protection across the custody chain.
2026, Jul 17 —ISO 20022 for Securities Clearing — The secl Message Set
How ISO 20022 models securities clearing through the secl business area, from trade leg notification and netting to margin, default fund, and buy-in messaging exchanged between a CCP and its clearing members.
2026, Jul 17 —ISO 20022 for Sale to POI — The casp Message Set
How ISO 20022 models the interface between a retailer's sale system and its payment terminal through the casp business area, covering the service, session, device, reconciliation, and reporting messages of the sale-to-POI protocol.
2026, Jul 17 —ISO 20022 for Reference Data — The reda Message Set
A tour of ISO 20022's reda (reference data) business area, the messages that create, maintain, query, and report the static data behind transactions, from securities, parties, and accounts to standing settlement instructions, calendars, and prices.
2026, Jul 17 —ISO 20022 for Payments Clearing and Settlement — The pacs Message Set
How ISO 20022 models interbank payments through the pacs business area, the flagship of the MT-to-MX migration, covering the FIToFI credit transfer, direct debit, payment status, return, and reversal messages that move money between banks.
2026, Jul 17 —ISO 20022 for Card Network Management — The canm Message Set
How ISO 20022 models card network management through the canm business area, a four-message set that keeps the link between a terminal and its acquirer host signed on, keyed, and alive so that card transactions can flow.
2026, Jul 17 —ISO 20022 for Foreign Exchange Trade — The fxtr Message Set
How ISO 20022 models the foreign exchange post-trade process through the fxtr business area, covering trade capture, confirmation and matching, status notification, and net settlement reporting between counterparties and their matching and settlement services.
2026, Jul 17 —ISO 20022 for Card Fraud Reporting — The cafr Message Set
How ISO 20022 models card fraud reporting through the cafr business area, a compact four-message set that lets card parties report fraudulent transactions and communicate their disposition in a structured, machine-readable form.
2026, Jul 17 —ISO 20022 for Card Fee Collection — The cafc Message Set
How ISO 20022 models card fee collection through the cafc business area, a two-message request-and-response pair that collects scheme and service fees between card parties on the same protected envelope as the transaction messages.
2026, Jul 17 —ISO 20022 for Collateral Management — The colr Message Set
How ISO 20022 models collateral management through the colr business area, from margin call and collateral proposal to substitution, interest, disputes, and triparty processing between two counterparties and their custodian.
2026, Jul 17 —ISO 20022 for Cash Management — The camt Message Set
A guided tour of ISO 20022's camt (cash management) business area, from the camt.052/053/054 reporting trio that replaces SWIFT MT940/942/900/910 to payment cancellation, investigations, liquidity, and market-infrastructure query messages.
2026, Jul 17 —ISO 20022 and the Business Application Header — The head Message Set
What the ISO 20022 Business Application Header (head.001) is and why it matters, covering the routing envelope that accompanies every business message, its fields, its signature, and the head.002 business file header that groups many messages.
2026, Jul 17 —ISO 20022 for Regulatory Reporting — The auth Message Set
A guided tour of ISO 20022's auth (authorities) business area, the regulatory-reporting messages that carry MiFIR, EMIR, SFTR, money-market, CCP, and settlement-fails data from firms and infrastructures to their competent authorities.
2026, Jul 17 —ISO 20022 for ATM Management — The caam Message Set
How ISO 20022 models the management of automated teller machines through the caam business area, covering device control, key download, diagnostics, configuration, reconciliation, and exception handling between an ATM and its manager.
2026, Jul 17 —ISO 20022 for ATM Card Transactions — The catp Message Set
How ISO 20022 models ATM card transactions through the catp business area, covering the withdrawal, deposit, transfer, inquiry and PIN management flows between an ATM and its host, and the message-level encryption and MAC that protect them.
2026, Jul 17 —ISO 20022 for Acquirer-to-Issuer Card Transactions — The cain Message Set
How ISO 20022 models the acquirer-to-issuer card rails through the cain business area, the modern successor to ISO 8583, covering authorisation, clearing, reversal, retrieval, and chargeback between an acquirer and an issuer.
2026, Jul 17 —ISO 20022 for Acceptor-to-Acquirer Card Transactions — The caaa Message Set
How ISO 20022 models the merchant-terminal-to-acquirer leg of a card payment through the caaa business area, covering authorisation, completion, cancellation, reconciliation, currency conversion, and batch transfer.
2026, Jul 17 —Windows Domain Persistence - Golden Tickets and the Skeleton Key
How an attacker who already controls a Domain Controller keeps coming back - the Golden Ticket forged from the krbtgt key and the Skeleton Key LSASS backdoor, with detection and mitigation.
2026, Jun 30 —Windows Credentials Protection - LAPS, WDigest, LSA Protection, Credential Guard and Protected Users
How Windows protects credentials at rest and in memory - password policy, LAPS, logon types, disabling WDigest, LSA Protection (RunAsPPL), Credential Guard (VBS), and the Protected Users group.
2026, Jun 30 —Windows Advanced Authentication - Smartcards, Virtual Smartcards and Hello for Business
How Windows replaces passwords with smartcards, TPM-backed virtual smartcards and Windows Hello for Business, the Kerberos PKINIT flow behind them, and why NTLM and ticket theft still apply.
2026, Jun 30 —TLS 1.3 - Overview
Transport Layer Security (TLS) 1.3 is the latest version of the TLS protocol, designed to enhance internet security, speed, and privacy.
2024, Nov 04 —Le protocole WEP et ses vulnérabilités
Cet article présente le protocole Wifi WEP (Wired Equivalent Privacy) en se focalisant sur les aspects sécuritaires (confidentialité, intégrité, authenticité).
2022, Apr 28 —WAH10 - Back-End Components
Questions & Réponses du chapitre 10 du livre The Web Application Hacker's Handbook
2022, Feb 03 —WAH18 - The Application Server
Questions & Réponses du chapitre 18, Attacking the Application Server, du livre The Web Application Hacker's Handbook
2022, Feb 03 —WAH11 - Application Logic
Questions & Réponses du chapitre 11, Attacking Application Logic, du livre The Web Application Hacker's Handbook
2022, Feb 03 —Introduction à Node.JS
Node.JS est un environnement d’exécution (runtime) en Javascript permettant d'exécuter du javascript côté serveur. Il possède un grand nombre de paquets pouvant être installés avec le gestionnaire de package npm.
2021, Jul 11 —Configurer un reverse proxy avec HTTP Apache
Cet article présente la configuration d'un reverse proxy avec HTTP Apache, avec notammment le load balancing et les sticky sessions.
2021, Jun 26 —WPA en bref
Cet article résume les principaux points du protocole WPA, notamment la génération des clés, le contrôle d'intégrité avec MIC et la confidentialité avec TKIP
2021, Jun 15 —Eve-ng en bref
Eve-ng est un outil permettant de simuler des réseaux CISCO. Cet article présente une liste de commandes de base.
2021, Jun 03 —SMTP en bref
Résumé en bref du protocole SMTP, utilisé pour envoyer des emails, ainsi que la présentation de quelques outils (dig, telnet)
2021, May 15 —