prevention of an attack vector (e.g. XSS, HPP, CSRF)

learn more… | top users | synonyms

8
votes
4answers
2k views

Fake UserAgent visitor attack?

Not sure if I should report it here, but within my website I collect each request in DB, and from time to time view these records. Among data collected are user agent, reqested url, referrer (i.e. ...
14
votes
4answers
2k views

What are the security issues with “eval()” in JavaScript?

Every time that someone mentions eval(), everyone says that there are "security issues" with it, but nobody ever goes into detail about what they are. Most modern browsers seem to be able to debug ...
-2
votes
0answers
18 views

Are there possible attack vectors while downloading packages or sources via terminal from the Ubuntu servers

I am planning to harden my systems security by installing DNS Crypt. To do so i would have to add the Developers repository key afterwards download and install the package, all via terminal. Already ...
3
votes
2answers
47 views

Is it possible to take over the victim's system only by DNS attacks?

I found this article and it describes some DNS attacks. Those are mainly targeting login credentials, banking information, and so forth. By redirecting the victim to a malicious site it could be also ...
3
votes
2answers
54 views

A question regarding DNS attacks

When would a DNS attack actually happen? Is it already possible when i connect my pc to the router which is connected to my isp's modem and has received their DNS servers, or later when i am trying ...
5
votes
2answers
177 views

Can a Windows 7 PC with folder sharing and remote desktop disabled, still be penetrated by a rogue computer on the same WiFi or LAN?

Assume the network is already penetrated, and the attacker already fully controls another PC. Other than setting up a proxy to intercept traffic from all other systems on the network and use that to ...
-4
votes
1answer
64 views

MPR I suppose somehow I found a way to make a super hacker angry with me [closed]

I suppose somehow I found a way to make a super hacker angry with me. I've lost three cellphones. It might have all started with the iPhone 4 getting locked then both androids to simlock. And I'm at ...
3
votes
2answers
75 views

How to sanitize archive files?

I am looking for a way to make sure that a particular archive file does not contain any sort of malicious code. From time to time new vulnerabilities pop up (e.g. gzip, 7zip) so I though a good idea ...
0
votes
2answers
209 views

Is it safe to auto-fill credit card numbers using Chrome?

Is it safe to auto fill credit card numbers using Chrome? Does it safely store the credit card information? As far as my understanding goes, it just shows asterisk values but on click it reveals the ...
0
votes
2answers
47 views

Precauations for web application security audit

We have planned to give our web application to a third party vendor,what were the precautionary measures which we need to take care before giving our application to third party vendor? As the vendor ...
2
votes
4answers
63 views

Preventing phishing of few critical websites

Suppose $S$ is a set of known websites which are very important. Assume there is an anti-phishing tool company $A$ which is aware of such websites. Can the company A reliably develop an anti-phishing ...
0
votes
1answer
155 views

CORS & CSRF Prevention for an REST based API

I'm currently trying to wrap my head around how to prevent CSRF. My first solution was to use a token which is suggested everywhere. That would of course fix this problem: <img ...
-3
votes
1answer
55 views

Attack Vectors an ISP could use

Id like to protect myself as good as possible from my ISP. I am aware of the fact that they could forward my requests to possible fake Websites containing malicious scripts or plug-in content. ...
2
votes
1answer
60 views

explanation of an nmap behaviour

I'm testing some vulnerabilities on a machine which has the port 22333 opened (it's used as the ssh port, and I can connect to it without any problem and the telned command get connected): $ telnet ...
6
votes
3answers
292 views

Random URL string: What kind of attack is this, and what can be done to stop it?

I work for a company that has a public facing website for our customers. In the past several weeks, we have been seeing a series of log entries that look like this: The controller for path ...
0
votes
1answer
86 views

What is safebrowsing.google.com ?Does it impact the security testing?

I recently security tested my web application using Firefox browser and while pentesting my webapplication i noticed safebrowsing.google.com,while i diged more about it ,i could able to retreive only ...
1
vote
0answers
23 views

how IKE (Internet Key Exchange) protocol reacts to the replay attack?

I mean how IKE in any mode (quick,aggressive, main) responds to an attacker that tries to replay one or more messages?
5
votes
2answers
83 views

Possible way to extract sudo password from running system via the clipboard

I use to copy and paste my sudo password from a KeePass file so I guess the plain text user password will be saved in RAM at some point when I use it, for example, to accept an update. Is that right? ...
2
votes
1answer
53 views

Boot Attacks possible on encryption keys used in virtual machines

Is it possible for an attacker to restore passwords or encryption keys that one has used in a virtual machine the same way like restoring keys that have been used in a standard system applying a boot ...
11
votes
4answers
2k views

Are short usernames a security concern?

I was somewhat suprised that the sysadmin approved a one-letter username like "m" and my username is also short ("nik"). I think that if usernames are brute force attacked then the username should ...
18
votes
5answers
3k views

The Perfect Mousetrap - Can a sandbox system be designed such that it's identical to an actual computer? [duplicate]

In testing suspicious files for malware, the typical method is to search for known malicious code. This is why zero-day malware attacks can be so dangerous — their malicious code is previously unknown ...
1
vote
3answers
119 views

What type of attack is this?

Attacker purchasing something from e-store when attempting to tamper with requests and change the transaction amount value. What type of attack is this? How to prevent this kind of attack as the bank ...
3
votes
1answer
94 views

(httpd log files) What kind of attack is? How can I prevent it? [duplicate]

In my log files I see hundreds of these registers. I have to say that the client ip changes sometimes. So there are 3 or 4 ips sending this requests... The othersite.something (that I ommited) is ...
0
votes
0answers
37 views

Does NDP (Neighbor Discovery Protocol) reduce ARP (Address Resolution Protocol) attacks?

I read the comparison of NDP with ARP but am uncertain if NDP does reduce any amounts of ARP attacks, given that with NDP, ARP is not used for address resolution. For the discussion to be specific, ...
3
votes
1answer
116 views

Enterprise Security : Where to Start? [closed]

I am trying to start self studying of Enterprise Security Context, but always feeling kind of lost among all the specs and standards etc. Unlike software development, this really is a challenge as far ...
1
vote
0answers
35 views

Use cases for IPC security windows communication

There are two processes on windows machine. One is in user space and second is a service. User space process sends data to service. Because iam starting to think about securing somehow communication ...
1
vote
1answer
66 views

Attack coming from multiple IPs

I have an attack coming to a specific path repeatedly - every 10 minutes or so, the same exact address gets pinged. I know this because I keep getting an error message in my Drupal logs about an ...
1
vote
0answers
37 views

Possible exploit while MPLS parsing with Bottom of Stack bit

My current task to parse MPLS label in a packet and store them in to a list. When I check packets with MPLS: One can understand it is the last MPLS header by checking Bottom of Stack bit. If ...
0
votes
2answers
68 views

How to prevent yourself from exploitable browser?

If we suppose that an attacker has a zero-day vulnerability for a major browser, and can exploit this vulnerability. How can a Linux/Ubuntu user secure themselves from downloading malware (like ...
0
votes
1answer
361 views

Recent “attack” to my server that might be using shellshock exploit

I just notice this repeated entry in nginx log: 31.184.194.114 - - [04/Mar/2015:10:29:53 +0700] "GET /cgi-bin/up.cgi HTTP/1.1" 301 178 "-" "() { :;};/usr/bin/perl -e 'print \x22Content-Type: ...
0
votes
1answer
73 views

DDoS Detection devices available in the market? [closed]

Wanted to know what DDoS detection devices are currently available in the market.My organisation has its dedicated firewalls and routers.But we wanted to know if there are any devices in the market ...
1
vote
0answers
102 views

Can a Radius server mitigate an ARP spoofing attack?

I'm helping my school network administrator to try to find a way to mitigate a current ARP spoofing attack on our wifi network. We detected an unknown host (MAC address seem to change, he is probably ...
1
vote
1answer
64 views

Retrieve anonymous credentials

Background A registration process to acquire an anonymous, verified account goes like this: Registrant provides proof of individuality to a Registrar. Registrar verifies proof, ensures no prior ...
0
votes
1answer
102 views

Why use one URL for all “pages” on my site?

I have heard that I should (A) use one URL for all "pages" on my site, such that what page is shown is determined by the session state, and (B) don't use an extension like .php. One curious fellow ...
-6
votes
1answer
65 views

network IDS capabilities for attack detection [closed]

Is a Network Intrusion Detection System (NIDS) (pattern matching, protocol analysis or behavior analysis) able to detect buffer overflow in the network traffic?
-1
votes
1answer
303 views

Hack to change the webpage of a website? [closed]

Recently, there is a website by Malaysia Airline got hacked and their main page has been defaced, below is a link to that article ...
8
votes
1answer
202 views

Setting up own enterprise SOC

the other day I was talking with a service provider (MSSP) who have experience with operating SOC (security operations centre) 24x7. Their price was rather steep (in the millions range). I don't ...
0
votes
0answers
165 views

Is there any method to prevent/trace ddos attack?

I have a debian linux server which run a few online game services. I have some competitors in this area and i think one of them is behind the ddos attacks. I have full access to the router, so I set ...
0
votes
1answer
62 views

MITRE's UEFI 'Extreme Privilege Escalation' and HP's SureStart [closed]

This is MITRE's powerpoint presentation version of their report: http://www.mitre.org/sites/default/files/publications/14-2221-extreme-escalation-presentation.pdf Page 54 is a straight pull from HP ...
-1
votes
1answer
59 views

Mitigate DDos on Windows box

I would love to know, If you know some way to mitigate DDos/Dos attacks on Windows. In Linux we can Mitigate using the IPTables Almighty, but I wonder If there is something like that in Windows. ...
31
votes
9answers
7k views

Is it bad to have cameras using a static IP address?

I am about to move in a new house, and I would like to install some security cameras. The contractor told me that in order for me to check the videos recorded by the cameras in real time when I am ...
0
votes
3answers
114 views

Can the packets of a wireless network be sniffed by a user who is not present in that network?

1.If an user knows the frequency used by a wireless network, is he able to collect the packets from that network? Those packets may be encrypted, but can he collect those packets? 2.If the user has ...
2
votes
2answers
114 views

How is this MITM attack being performed and what steps can I take against it?

Today, when I tried to access the internet (google on HTTPS), my browser (Google Chrome) gave me the following error: I am on my own home Wi-Fi, which has WEP. When I tried to reload google on ...
0
votes
1answer
34 views

Does a constantly dynamic cluster of short-lived instances reduce attack surface?

The 4am Idea The general idea is that every instance that gets launched on my cluster is preloaded with a 'suicide script' that after a preset Time To Live (say, 27 minutes) launches a replacement ...
0
votes
1answer
40 views

Is it possible to hide behind a hostname to purposefully effect SEO?

Reference forum questions and a couple answers posted on 10 December 2014 What are these unknown visits to my private, unlisted webpage? One of the answers contained this phrase: "Given the fact ...
3
votes
1answer
111 views

PHP max_input_vars security expectations

Considering a site that handles large POST data, would it be unreasonable and dangerous to set the php.ini max_input_vars to something like 100000? I know this is a vector for DOS attacks, but don't ...
1
vote
0answers
130 views

Additional options to protect from bad USB devices in ubuntu

In addiition to the solution options in the other threads How to prevent BadUSB attacks on linux desktop Protecting against bad USB in ubuntu i wanted to ask if it is possible in ubuntu somehow to ...
0
votes
1answer
140 views

How to prevent outgoing UDP attacks?

My server has been the target from hackers 3 times in the last month, and the attack seem to follow the same pattern. The attack another site from my server using UDP connection. The report from my ...
0
votes
1answer
107 views

csh http shellshock on a windows 2008 server

My company's McAfee system detected many "http CSH bash ShellShock code injection attacks" attempts on a Windows 2008 server running Apache Tomcat Coyote. Does this config present a potential attack ...
1
vote
3answers
2k views

What is a salami attack?

Can someone give a clear definition of a Salami Attack? In the book Security in Computing (4th Edition) by Charles P. Pfleeger. It is stated as a attack to data integrity and I quote the passage: ...