0
votes
0answers
2 views

Stealing OAuth2 Tokens from IoT Devices

As I am delving into different forms of session authentication and persistence, I started to question how tokens are stored and the risk of a token being compromised. The scenario I have in mind is as ...
0
votes
0answers
8 views

When do system access policies start to become source of security incidents?

Consider the assumption we are dealing with systems handling secret information which is crucial for an organization's existence. I would like to know what is a good balance between security ...
4
votes
4answers
55 views

Could malware move during a scan to avoid detection?

I think every AV-Scanner is using some pretictable recursive scan to search files for malware. Couldn't malware easily detect a scan and just move to an already checked location, determined by knowing ...
2
votes
2answers
26 views

Can you access Google Drive documents if you have the absolute path to the file?

I have been digging into Google Drive while I am trying to investigate a proper way to protect files on a site. In my experience if a user has the URL to a file they can access it without any ...
-5
votes
0answers
20 views

Should Free and Open Source Software and Hardware be Legally Manadated to Protect Users' Digital Rights? [on hold]

In light of the advent of the Purism Librem 15, and the Novena laptops, is it time to consider legally mandating the manufacture of Free and Open Source Hardware and Software, in order to uphold ...
-1
votes
1answer
16 views

Exploit php array and string using url variable

I get this php error after requesting /main/located?location=usa&time=' on my site. array(0) { } string(8) "||| LOCATION I tried several methods to inject something, but all failed.. What do ...
2
votes
1answer
66 views

How to ensure that a person whose identity has been verified from an I.D. is the author of their exam answers?

Background We are designing a computer based test system where the examinees use their own computers to write their answers. The examinees' computers are booted to a custom Linux OS from USB drives ...
1
vote
0answers
7 views

SNORT sfportscan alert format

How can I modify the output alert from sfportscan ? Ex : output alert_csv: /var/log/snort/portscan.log timestamp,src,dst,dstport,msg OBS: I can set output for default alert file with this method ?
-1
votes
3answers
40 views

What security problems are there with enabling directory listing on my webserver? [duplicate]

I want to to ensure that every file on my webserver is secured. The problems I am having right now: If you go to my website, and enter a url like mywebsite.com/img/ if there is no index page in ...
2
votes
5answers
55 views

Famous XSS attacks over JavaScript

I'm about to graduate in "Computer Science", and I'm writing thesis about the Javascript vulnerabilities. In particular, I'm analyzing the JS vulnerabilities that allow XSS attacks. I would like to ...
0
votes
0answers
20 views

Port Scanning - States definition

I am currently reading the "NMAP Network Scanning" book by Gordon Fyodor Lyon. On page 77 there is a description on how NMAP categorizes the ports based on host's responses (or not). What would help ...
0
votes
1answer
26 views

Centralized local hosted web based password manager

In our company we have more than 100 employers and everyone use several online applications daily. To access all of this sites they need a password which was now stored very insecurely. so I'm ...
1
vote
1answer
38 views

Adding SSL to existing applications

We need to strengthen the network communication between our systems, a mix of Windows, Linux and Embedded devices, written in C++ and C#. What we want to achieve is to prevent interception of our ...
0
votes
0answers
21 views

Get java code to check AP isolation is enabled? [migrated]

I am building a chat application in Java socket programming to communicate locally like IP messenger. When AP isolation is enabled I get only my IP and gateway.gateway. That's why I can't chat to ...
9
votes
2answers
485 views

Security Implications of Neglecting the Extra Byte for NULL Termination in C/C++ Arrays

Please Consider: English is my second language. On the Security Now! podcast episode 518 (HORNET: A Fix for TOR?), at the 27:51 mark Steve Gibson quotes an example of vulnerable code in C/C++: ...
1
vote
0answers
21 views

OpenVPN redirect-gateway def1 bypass-dhcp not working on 3G [on hold]

Edit I followed @begueradj advice in comments and posted the question on ServerFault : http://serverfault.com/questions/709340/openvpn-redirect-gateway-not-working-on-3g-cellular Original Question ...
4
votes
2answers
88 views

Connected cars: Skills needed for a security specialist

Connected cars are being mass produced by many car manufactures such as Audi, GM, Honda and Hyundai (Founding members of the Open Automotive Alliance). Recently I have read a scaring article about ...
4
votes
3answers
81 views

What to do when iPhone is successfully phished

My girlfriend watched "some" pages on her iPhone and facebook.you-won.com page appeared. She didn't know how to get rid of that JavaScript alert, so she clicked OK. After that she closed the page, and ...
1
vote
2answers
47 views

Website Visited by Unresolved Ip

My Website is flooded with unknown visiters Awstats says that my website getting thousands of hits in few seconds. I am using robots.txt and .htaccess, but the problem stays there. Please help me ...
11
votes
3answers
2k views

How can people send me spam emails from the future?

Is this an exploit of the email system of some sort? I receive a great deal of spam every day, and my accounts in Yahoo and Gmail sometimes show me spam emails from the future. Yes, the future. ...
2
votes
1answer
80 views

Would the Stagefright vulnerability existing in Android be able to run on other phones?

I saw a question about Android's "Stagefright" vulnerability, and I got to thinking: other OS'es pre-process MMS messages to make it easier to view. iOS does it and shows a preview. Even BREW OS (the ...
1
vote
0answers
11 views

Is XSP suitable for Internet facing, production hosts? (either self hosted, as an Apache plugin, or FastCGI)

XSP is portable version of ASP.NET that allows for operation on OSX, Linux, and Windows. It's an alternative to IIS, and hosts its own web server, or can plug into existing web servers such as ...
2
votes
2answers
59 views

Where in a TLS connection can I get the signature of the content sent by the server?

I want to be able to prove that a given content returned by a HTTPS server was in fact served. I have looked over the whole TLS protocol and I found I can use ServerKeyExchange to get the server's ...
5
votes
1answer
42 views

VirtualBox: Ubuntu With or Without Virtual Hard Drive

I've been working on a setup using VirtualBox that uses the Whonix Gateway as a Tor middlebox and I am planning on using Ubuntu for the workstation. I don't plan on storing any information on the ...
0
votes
1answer
38 views

Use RSA Encryption With ASP.NET

My goal is to implement asymmetric encryption in an ASP.NET website to secure user-entered Social Security Numbers. I want to encrypt the SSNs with a public key, and only display a masked version, to ...
0
votes
0answers
38 views

Distribution of a public key with a dotnet client application?

I have a pretty good understanding of X509 cryptography etc, from my career in the smart card industry. So I know that the card scheme (e.g. Visa, MasterCard) is the highest level of trust - they sign ...
0
votes
2answers
91 views

Safety of Encryption Keys

I'm trying to figure out the best way to encrypt passwords for a forums site I'm working on. I've decided I'm going to use an encryption such as blowfish. From my understanding, you have a key, and ...
1
vote
1answer
88 views

What security practices should I keep in mind during development? [on hold]

I am beginning to develop apps for Android and iOS that make API calls to a PHP web application that I will be developing. Users will be required to sign up with a username, password, and (optional) ...
0
votes
1answer
16 views

hping3 - Ignoring not responding ports

Is there a way to ignore the not responding ports in the scan report? james@ahoi:~$ sudo hping3 -q --scan 1-1000 -S 192.168.0.1 Scanning 192.168.0.1 (192.168.0.1), port 1-1000 1000 ports to scan, use ...
1
vote
2answers
39 views

Conflict between cipher-suite and certificate

When capturing my SSL session (using Chrome) I have noticed that the server chose TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (0xc02b) as the cipher-suite and the certificate signedcertificate signature ...
3
votes
0answers
40 views

How to really treat security between peers in WebRTC

Recently I've been implementing WebRTC in my project and would like to add security and privacy to the couple. I then decided to search on and found something if it is really necessary to impose ...
0
votes
0answers
17 views

Export detailed reports from Rips Vulnerability Scanner 0.55

I am using RIPS 0.55 to scan for static source code vulnerabilities. Currently when running it at the directory level it just gives the category and the list of files. Is there a way to extract ...
0
votes
0answers
17 views

Does OAUth 2 allow authentication without UI (to an account with hard coded credentials)? [migrated]

Note: this question is not about authenticating to an account after receiving a valid access token. This is about the first leg in the authentication process that would obtain the valid access token. ...
-3
votes
0answers
40 views

XSS filter evasion when “less than” followed by an English character is filtered [on hold]

In a recent penetration test, I encountered an XSS filter that allows <,> to pass without encoding, but blocks <a, for example. The filter allows < <_ <, <ש, but DOESN'T allow ...
2
votes
3answers
39 views

What is the precise difference between a signature based vs behavior based antivirus?

I do not understand very well the difference between signature based vs behavior based antiviruses. Please clarify the distinction between the two.
1
vote
2answers
39 views

How dangerous is it to use textmods from internet sources?

I have been playing a game (.exe file downloaded from Internet) that supports the use of Textmods (altering of the game code in terms of textures) so long as they only affect visuals, and not actual ...
1
vote
1answer
51 views

Diffie Hellman parameters still calculating after 24 hours

I have a fresh install of Arch Linux on a RaspberryPi model B. I'm setting up OpenVPN and using easy-rsa with OpenSSL 1.0.2d to generate initial keys and certificates. All went fine until I ran ...
1
vote
3answers
93 views

How does a hash which contains algorithm to choose can be secure?

I was thinking about creating my own hash+salt function, something like sha1(password + md5(login)), then I read here (part 4) that creating it's own hash+salt function is a bad idea, because if the ...
2
votes
3answers
213 views

Decrypt Java Payload

I found some destructive activity on my JBoss server and after a lot of google searching I found this exploit https://www.exploit-db.com/exploits/36575/ . I know the attacker uses this exploit to ...
3
votes
2answers
560 views

HTML Input of type text for passwords

A site (I won't name it) is using an input of type text for its password field in an HTML form. The onfocus method then changes those characters to dots. Is there a security breach here ? Or is it ...
36
votes
1answer
4k views

How exactly does the Stagefright Vulnerability work on Android?

Digital Trends describes the Stagefright Vulnerability thus: The exploit in question happens when a hacker sends a MMS message containing a video that includes malware code. What’s most alarming ...
5
votes
2answers
66 views

SSL Handshake failure when antivirus is enabled

This is a problem related to SSL handshake failures when an anti-virus (Kaspersky) is in between. From WireShark, I am able to notice the SSL handshake successful (i.e towards the end client ...
4
votes
1answer
56 views

Router DNS getting automatically changed

I don't know if this is the correct forum where to ask, but I didn't find anything more appropriate. I have a TP-Link router model TD-W8951ND, and three months ago I noticed that the network was ...
-2
votes
0answers
21 views

Operating VirtualBox 5 on old Pentium 4 32bit CPU with 4GB RAM [migrated]

Trying to operate VirtualBox 5 on old Pentium 4 32bit CPU with 4GB RAM. But spinning up 32bit Linux/Ubuntu VMs is so slow. Have adjusted allocation of RAM and hard drive settings and still too slow. ...
5
votes
2answers
63 views

Detect when I do brute force attack and block the connection

My server (Ubuntu + LAMP) is infected, as I receive security alerts from the sites attacked from my IP. your Server/Customer with the IP: ********** has attacked one of our servers/partners. The ...
2
votes
1answer
82 views

how do we encrypt 100bits of plain text to get 100bits cypher text using DES?

We have a scenario like that we need to encrypt 100 bits of plain text using encryption algorithm like DES (algorithm takes 64bits plain text block and generate 64 bits of cypher text block, key using ...
2
votes
2answers
38 views

When should I drop a packet with ICMP type 3, code 9 or 10, TCP RST, or TCP ACK?

This answer says there are a few ways of dealing with a blocked packet at a firewall: At each of these levels a 1st IP packet (and any other protocol packet as an ESP or AH packet) might receive ...
8
votes
4answers
1k views

Filtered ports - What exactly filters them?

By the NMAP definition, unfiltered ports are the ones which cannot be determined to be open or closed since packet filtering prevents its probes from reaching the port. (ISBN 9780979958717 pag. 77) ...
1
vote
0answers
23 views

how to configure naxsi to accept json format in rest apis?

For example one of my APIs is: Post request: /api/v0/login body: { "username":"xxx@ggg.com", "password":"eeeee" } I want to secure this API with naxsi, I could not find anywhere to config naxsi ...
42
votes
3answers
4k views

How can common users defend against the StageFright vulnerability?

I was just informed of the StageFright vulnerability in Android devices. A specially crafted MMS message can gain access to data on the phone; so presumably it's a buffer overflow with subsequent ...

15 30 50 per page