An attempt by a threat to exploit a weakness in a system.

learn more… | top users | synonyms

5
votes
2answers
227 views

Escalating from Apache shell to root

I have one noob question.I tried to exploit shellshock on my Slackware linux server, but after I connect with reverse shell and User Agent I get that I am apache user and apache user don't have too ...
1
vote
1answer
36 views

Why a sleep() function inside a C-Styled comment /**/ would get interpreted by MySQL

I came along this blind SQl injection time based payload and I really want to understand how it works ...
1
vote
1answer
87 views

Can't I forge an SSL certificate? [duplicate]

I read What's keeping a malicious man in the middle server from forging a valid certificate?, but when the client goes to verify the certificate, can't an attacker intercept that connection and say ...
6
votes
2answers
2k views

What is the meaning of “something AND 1=0” command in SQL?

I have read somewhere that in SQL injection attacks the attackers use such keywords into application entry points. Whats the purpose of doing this?
1
vote
3answers
82 views

How do attackers find the database technology used by a web application?

These days there are several database technologies are available for data storage purpose. While performing injection attacks, how do attackers actually identify the database used by a website? If ...
5
votes
2answers
112 views

Strange escape codes in a GET request - is this a known attack?

I recently came across some entries in nginx's access logs that resemble the following: ##.##.##.## - - [24/Sep/2014:01:21:51 -0400] "GET /767/browser-wars-side-show-ho ...
1
vote
1answer
75 views

Worst-case scenario OPEN URL REDIRECTION and why google not covering it in bug bounty

OPEN URL REDIRECTION as per in my opinion can be proved very dangerous by crafting attacks such as phishing. But it seems like google thinks it as a very low level bug and does not provide any ...
1
vote
0answers
35 views

Kerberos v4 replay attack vs. sliding time window

Just wondering about a replay attack against Kerberos v4. So v5 has a replay cache that takes note of tickets to prevent replay attacks. Kerberos v4 does not have a replay cache, though. Say, I ...
8
votes
4answers
725 views

Can anti-CSRF token prevent bruteforce attack?

I am not much experienced with brute force attacks but I was wondering Suppose, you have a website www.example.com and you want to do brute force attack on that login form but that login form is ...
1
vote
0answers
48 views

The simplest way to emulate TCP-IP protocol violation / anomaly attacks

Reading up upon security on web applications I did not found that much info on TCP-IP and in particular HTTP/UDP protocol violation / anomaly attacks. My question: What is the general mechanism of ...
0
votes
3answers
142 views

What are the differences between dictionary attack and brute force attack?

Can someone explain the major differences between a Brute force attack and a Dictionary attack. Does the term rainbow table has any relation with these?
1
vote
1answer
63 views

Can windows passwords be recovered from the windows pagefile?

I was reading reasons for clearing page files on workstations with one reason listed is that passwords can be stored in the pagefile and therefore should be cleared upon reboot in the case of somebody ...
1
vote
2answers
54 views

If TLS compression is not supported is a site still vulnerable to attacks such as BREACH?

I have read that BREACH was a side channel compression attack against TLS however focuses on HTTP response compression. If a site has disabled support for TLS compression does that still mean it can ...
0
votes
3answers
217 views

How to search for evidence of Camfecting (webcam hacking)?

I'm worried about camfecting (webcam hacking). The camera light on my mac (running OSX) is not on, but it isn't hard wired so that doesn't say a lot. I've ran a virus scan but no signs. Now my idea ...
2
votes
4answers
109 views

Online Shop got hacked, fixed but is still under attack - what to do?

an xt-commerce-based online shop from a friend of mine got hacked recently. The attacker mailed that the shop is vulnerable, he showed the extracted data (basically he dumped the databases and cracked ...
-1
votes
1answer
59 views

Where can I find good word list for MySQL 5? [closed]

I wonder where can I find good collections of dictionaries which can be used for MySQL 5 dictionary attack? I just need MySQL 5 word lists / dictionaries. I found a lot of MD5, SHA1, etc. but not ...
2
votes
2answers
748 views

I ran a netstat on my server and port 80 is listening, does that mean it is open and vulnerable to attacks? [closed]

Sorry I am just getting into Web Development and trying to learn more about servers and PHP, so I downloaded the LAMP stack on an Ubuntu14 OS and started an apache2 server. tcp6 0 0 :::80 ...
0
votes
4answers
122 views

More specific name for an inside attack

I have a scenario where I evaluate two different types of attacks on a distributed network of nodes (you may also call it a multi agent system). On the one hand the attacker is able to read incoming ...
0
votes
1answer
86 views

Have team viewer id of machine that hacked in, any way to trace this without the authorities?

I read a post answer to similar question. I am wondering if there is any list I could access re teamviewer id's, as the police are being very ho hum about this. many thanks, seriously hacked in ...
-1
votes
1answer
168 views

Hacking Gmail with 92 Percent Success - Does popular GUI framework designs reveal UI state change ?

The media has been claiming for the last 2 days that GMail can be hacked . http://www.cnet.com/news/researchers-find-way-to-hack-gmail-with-92-percent-success-rate/ They have based their ...
0
votes
1answer
37 views

Context-dependent attacker

In the context of the following statement what is meant by context-dependent attacker? The MySQL Client contains an overflow condition in client/mysql.cc. The issue is triggered as user-supplied ...
4
votes
4answers
1k views

Is this an attack and how can I fix it?

I don't know where to start in searching the forum for existing threads that might cover my issues. I recently received a spoof email pretending to be from a client for whom I've just started to do ...
4
votes
2answers
984 views

Extract AES key by comparing plaintext and encrypted data

Is there a kind of analysis which would enable me to get AES key which was used for encrypting arbitrary data while I have both original and encrypted version of data ? The problem is that the AES ...
0
votes
1answer
46 views

Basis Authentication Protocol: a concrete attack

Below is an informal protocol narration of a simple authentication protocol. A sends to B a signed hash of message M, B's name and a nonce N. B knows that the message M is intended for him, that it ...
1
vote
1answer
56 views

How to deal with misbehaving clients on an authoritative server?

My coworker and I are developing an authoritative server for an MMO. We can't agree on how to handle "misbehaving" clients. Misbehaving, in this case, means clients who send "odd" requests that might ...
0
votes
0answers
138 views

My Ipv6 is under attack by the smurf6?

when i go to whatsmyip.org under my host name i get "Your.Ipv6.Is.Under.Attack.By.The.Smurf6.Info" what does this mean? I'm using private internet access as my vpn so i'm guessing PIA is under some ...
1
vote
3answers
186 views

As a non-security professional how should I respond when told my site is insecure?

We have a website, and somebody wrote us an email claiming we are insecure! What should I do
2
votes
1answer
240 views

How difficult is the USB firmware attack? [closed]

Not really new but it's all over the news right now. You can hack a USB firmware to run an attack by emulating a keyboard. I wonder how difficult it is create an USB thumb that emulates a keyboard. ...
0
votes
1answer
33 views

Antivirus false positive

I'm adding new features to an old Borland C++ VCL application using Borland 2006 IDE. I'm finding that upon adding a single line of code, and building, the exe is being quarantined since Sophos is ...
1
vote
2answers
82 views

Is there any way to log in with a hash?

I've understood that the following steps are taken when I log in to a site: 1. My password is hashed 2. The hash is compared to what's stored in the database. 3. If the hashes are equal, I can log in. ...
0
votes
2answers
78 views

Do dictionary attacks only use specific entries from a dictionary, or combinations of an entry?

If I wanted to crack a password, "cba", but the dictionary I was using only had abc in it, does a dictionary attack try all combinations of abc? abc, acb, bca, bac, cba, cab Or would cba have to be ...
0
votes
0answers
78 views

Perform THC-Hydra Dictionary attack on Microsoft forefront TMG login

I work as an IT consultant in a High School. Recently, a student was able to gain access to a teacher's account on the school intranet. When questioned, he simply stated that he "hacked" the system ...
0
votes
0answers
120 views

Apple ID phishing lead to my router infected?

For future visitors, I will try to be as general as possible, but I must include details to give you a full picture. As my Apple ID's security email address belongs to my brother, he forwarded an ...
1
vote
1answer
100 views

How common are mitm attacks behind an ISP?

Yes. Of course using https everywhere is best. But sometimes that's not an option. In those cases, I'd like to make an informed decision. Is there any information about their prevalence? Or would that ...
2
votes
1answer
103 views

How to detect if a user is logged in to a specific website?

I just learn about tabnabbing. Tabnabbing is a computer exploit and phishing attack, which persuades users to submit their login details and passwords to popular websites by impersonating ...
-2
votes
1answer
62 views

Prevent Replay attacks via timestamp while client clock is not adjusted [closed]

I'm going to send my timestamp to server and server will check if it is in a given interval. What if My mobile clock is not adjusted (say it gives 2:00 pm while now it is 2:00 am). now I lost the ...
1
vote
2answers
55 views

Is it possible to implement a secure game without having a reliable arbiter?

N players are playing a perfect information game (the kind of game where everyone knows moves of everyone) by making moves by turn (P1, P2, ..., Pn, P1, ..., Pn, ... till the game will finish). Game ...
0
votes
2answers
56 views

How would you construct an XSRF attack using an iframe?

I know that you can easily trigger a series of POST/GET to a target website using an iframe as I have done it in the past to manipulate session variable on my sites. My question is more about : what ...
2
votes
1answer
350 views

Norse: Cyber Attack Map

This application analyzes web traffic and then beautifully displays attacks on a global map. How does it intercept web traffic so it can analyze it? Isn't web traffic private to everyone except to ...
0
votes
3answers
96 views

Is This A Website Attack/Vuln Test?

I have a specific IP that has been iterating through the directories on my site testing for something. Here is an example of what it keeps trying to hit: ...
1
vote
0answers
100 views

Anyone seen weird messages in their logs?

I've been reading over the logs on my honeypot and discovered the following messages that seem to be either gibberish or a cypher message: kernel: v0 neigfradn tt kernel: [2108296.63083] devc nt nee ...
0
votes
0answers
88 views

How to avoid cloaking attacks?

A few days ago, we found a lot of web pages on Google with the name of our web sites, for example http://website.com/public/our_agency_name.asp. Every day we find more of this kind of URL. Looking ...
1
vote
1answer
167 views

When SSL detect a replay attack?

Suppose an attacker records all messages of a SSL handshake (RSA one-way), and starts a replay attack. When (after which message) can the server possibly detect the attack? Now suppose the attacker ...
1
vote
2answers
249 views

How to prevent attacks to server

I have 3 CentOS server configured for my applications. Recently I recognized that there is so many attacks to my servers. I have so many logs about attempt to login to my servers using sshd from ...
2
votes
1answer
185 views

How are Ajax requests vulnerable to CSRF attacks if the Same-origin policy is applied?

What I know about CSRF is that a malicious website tricks a normal user into issuing a request to a trusted website using a form. I understand that is possible because we can post forms to different ...
3
votes
2answers
102 views

WHOIS Contact Details Abused

The system for the internet and the way people can abuse it is getting worse and worse. I am having several issues with people abusing the information within my WHOIS, which if I remember is protected ...
3
votes
3answers
255 views

PHP IP check as security?

Would just like some input on a PHP script I'm writing. It's just a simple script that only myself should be able to access. I don't have a dynamic IP address, so this isn't an issue for me, but I'm ...
0
votes
1answer
91 views

My Control Panel and online IP addess tools report different results for my IP address [closed]

Control Panel says it's 192.168.1.1; Google, whatismyipaddress.com etc. says it's 75.92.141.32 When I put the IP address reported online in my address bar I get a Nokia login page, but my ISP is ...
0
votes
0answers
32 views

Hashing / How easy is it to infer the original input if the a slight variation of the input, the hash result and the hashing algorithms are known [duplicate]

Given that I have an initial input that is publicly known (e.g. "ABCDEFGHIJ") a slight variation of (1) (e.g. "BACDEFGHIJ") that is used as the input to a hashing algorithm (3) an modern one-way ...
3
votes
1answer
154 views

SSH MITM attack underway

UPDATE: The source of this problem has thankfully turned out to be a buggy mobile SSH client used on 2 different devices not a MITM attack. However, I'd still appreciate a full answer to the original ...