An attempt to exploit a weakness in a system, either for nefarious or research reasons. Questions with this tag should be about designing, carrying out, or defending against the attack itself, rather than about the underlying weakness.

learn more… | top users | synonyms

1
vote
0answers
22 views

Simulation vs Formal Analysis of Authentication Protocols

I received a review for my journal paper in which we proposed WOOlim or nspk kind of authentication protocols. We proved the strength of our protocol with rigorous formal methods using CSP and rank ...
0
votes
0answers
25 views

Why isn't ettercap working

I am working on an ARP poisoning/browser redirection project with Ettercap but even if I follow all the steps right it still doesn't work. I tried disabling firewalls too. What I do is: Start ...
0
votes
1answer
87 views

Is Qt framework is under attack or it has something suspicious (only in free version)

I was trying to download Qt framework. I went to its Official site (I'm sure, I checked in Wikipedia) for Visual Studio. But when attempting to download Qt for Windows, my Firefox shows this message: ...
5
votes
0answers
61 views

Is rowhammer comparable to faults caused by radiation?

As far as I know, both rowhammer and radiation based fault injection, can cause arbitrary bit flips in the memory. Are there any differences in matters of possible outcomes of both "attacks" on ...
3
votes
0answers
76 views

Security of the shared secret key for a smart meter (Linky) [closed]

Reading the specs of a new electricity smart meter (called Linky in France), I was surprised about the chosen encryption method (128 bits symmetric key AES), based on a single secret key (called CCC ...
-3
votes
2answers
64 views

What could an attacker feasibly do if he/she compromises a DNS server? [closed]

I know one could impersonate sites and steal credentials but that is about it. Are there any other types of other attacks, and do companies actively check DNS servers to protect their clients? Also, ...
0
votes
2answers
47 views

Repeated “Dos Attack” from remote IPs

I've been having some weird issues with a home network, and it seems to me like I have some vulnerability I don't know about. To be honest, though, I'm not a big network/security guy and I kind of ...
0
votes
1answer
69 views

s this an exploit attempt and where can I analyse it?

Edited: Never mind the MinGW or .bash_history, I can see that is unlikely. Somebody attacking me and those bytes ending up in the frequently used file .bash_history by accident is not that unlikely ...
0
votes
0answers
11 views

stopping router attack script using foreign addresses [duplicate]

I'm not a security expert but I've got someone using a script to attack my router. Sometimes it's every 10 minutes, but since I called the person out, it has increased in frequency. They are blocking ...
1
vote
1answer
35 views

Does this case fit the definition of a replay attack?

I read the definition of a replay attack on Wikipedia. However I don't know if the following case fits the description: An attacker captures a HTTP request sent to a web server, modifies the request ...
0
votes
0answers
3 views

How can I show RSA OAEP IND-CPA secure [migrated]

How can I show, that RSA with OAEP is IND-CPA secure by using G,H one way function?
-1
votes
0answers
57 views

Explanation for these entries in the Suricata fast.log?

We have installed Suricata on our system. We have the following similar lines in our fast.log. Can anyone explain these lines? 03/17/2016-17:18:52.744707 [**] [1:2200075:1] SURICATA UDPv4 invalid ...
25
votes
3answers
3k views

Does using a live CD make you more vulnerable to remote attacks?

Some people recommend the use of a Linux live CD for online banking, but doesn't that make you more vulnerable to network attacks since it's not updated? I tried installing updates and it required me ...
3
votes
1answer
50 views

How can releasing the text of an SQL query compromise security?

I have asked a government agency, under Freedom of Information legislation, to release two SQL queries they ran to produce a table which they published in a report. That is, the agency published ...
0
votes
2answers
201 views

What can I do about being heavily port scanned?

I have two devices connected wirelessly to my Linksys router while running Symantec Endpoint Protection on my computer. A few days ago I started using the internet by connecting the cable directly to ...
4
votes
1answer
104 views

How to automate sending messages about abused internet hosts

I have just looked into the error logs of our web server and I have observed a great increase of SQL injection attacks this year. Those attacks, more than 3000 in 2016, usually look like this: ...
1
vote
1answer
56 views

Attack Challenge/Response Authentication by requesting challenges

If a client/server application uses a challenge/response pattern for authentication, e.g. SCRAM or alike, it often involves the usage of nonces (client nonce and server nonce) for preventing replay ...
62
votes
5answers
8k views

HTTPS web service switched to HTTP. What can go wrong?

I recently visited a website which used to have an HTTPS connection. Now it has just a plain HTTP connection, and the authentication method has changed from user+password to "authenticate with Google ...
2
votes
2answers
56 views

What can a user do in order to protect against CSRF attacks?

If I'm browsing while I'm logged in into my hosting panel or router or any other application, there is a chance of being hacked by a CSRF exploit. So, the question here is about user or client-side ...
11
votes
5answers
3k views

Why do hackers scan for open ports?

So, whenever you hear of the mean little hackers who hack websites you hear of "port scanning". I understand what it is (looking for all open ports / services on a remote machine), however that begs ...
3
votes
3answers
92 views

Is SFTP vulnerable to brute force, bounce, spoof, sniffing and port stealing?

I have been researching FTP and noted that using FTP means you are vulnerable to these types of attacks. I have been looking for an safer alternative and came across SFTP. Is SFTP still vulnerable to ...
1
vote
2answers
35 views

Random autofill [closed]

I was trying to pay for something just now, and when I put my name in the chrome autofill came up and I clicked it. The address that showed up was wrong though but corresponded to the postcode of one ...
1
vote
1answer
27 views

How can you spoof a TCP connection to a device that uses the same initial sequence number for each run of a TCP handshake?

So supposing the TCP implementation on a device always uses the same initial sequence number how could you as an off path attacker exploit this to spoof a connection to this device? So in order to do ...
8
votes
3answers
96 views

Can a TCP connection be terminated by an attacker if SSL/TLS has been used to protect data in the TCP segment?

I understand that SSL/TLS is built on top of TCP. That is after a TCP connection is established, an SSL handshake can be started. When it is completed, all communication will be encrypted and ...
-2
votes
1answer
79 views

Clicking a lot of website links in Google Maps, then sent through multiple URL redirects, and lastly to a page that made my laptop start beeping?

I was in Google maps clicking on all the website links listed in the side panel, looking at every website really fast. Note, they were all tattoo parlors. One of the links I clicked bounced me through ...
1
vote
1answer
62 views

man in the middle attack over internet

I've performed some man in the middle attacks (arp poisoning) using ettercap, stuffs on kali linux and i know how exactly it is working. but i was wondering if this attack could be even performed ...
1
vote
2answers
48 views

Dynamic, Randomized Protocols to Deter Attackers

Imagine a protocol that changed periodically. What if the order of these fields were changed a lot? One point in time the protocol might be { Payload, Checksum, Length, Flags, ID } The next point ...
4
votes
1answer
105 views

“Hacking” account when someone uses your email?

I have, on multiple occasions, received this email from Twitter: Since I have received it multiple times either this person clearly thinks the email is theirs or it's spelled similarly, something to ...
1
vote
1answer
36 views

a sent message for an unknown number without me sending it

there is a message sent from my iPhone to an international number. but i didn't send it and it doesn't appear in my message history. is this possible? how can it happen?
-1
votes
2answers
79 views

How is it possible to receive port scans with destination IP 0.0.0.0?

In my Amazon EC2 I installed a snort to prevent the attacks. I observed some logs TCP Port Scan Source IP is ISP and destination IP is 0.0.0.0. I think 0.0.0.0 is used for in a local network (routing, ...
2
votes
3answers
73 views

Should it considered a risk if an organization's server OS and version information is leaked? [duplicate]

I am assuming that it should be considered a risk because there may be several security issues of various OSes known to hackers. If a hacker gets access into the victim's network, the extra knowledge ...
4
votes
2answers
57 views

Can an attack that does not change the server state be considered a CSRF attack?

From Wikipedia: A real CSRF vulnerability in uTorrent (CVE-2008-6586) exploited the fact that its web console accessible at localhost:8080 allowed mission-critical actions to be executed as a ...
0
votes
0answers
55 views

Prevention of sinkhole attacks

I have read about many approaches to launch and detect sinkhole attacks in wireless (sensor) networks. Yet I couldn't find any (good) articles to read about the prevention/avoidance of sinkhole ...
46
votes
7answers
9k views

How are GPUs used in brute force attacks?

I have read that GPUs can be used in brute force attacks? But how can this be done and is there a need for any other hardware devices (hard disks for instance)? Note: I'm more interested in web ...
1
vote
1answer
70 views

How to avoid abuse of web-server endpoint from a rogue client?

I realized that once a user logs into the application and receives an Auth token there is the potential that they could use that token along with a rogue client to exploit an endpoint that they now ...
1
vote
0answers
59 views

Encrypted Malicious Traffic Database

I was working on a little research project to correctly identify the encrypted traffic pattern generated by various tools/applications for example metasploit (or increase the success rate). I have ...
3
votes
1answer
269 views

Suspicious .js attachment [closed]

I received an email today with the following attachment, and I was hoping to see if anyone could help me understand what it was: //} Expose support vars for convenience support = Sizzle.support = {}; ...
-3
votes
1answer
48 views

SSH and Port Forwarding - what are the possible attacks and how to avoid them? [closed]

What are possible attacks when using SSH and Local or Remote Port Forwarding? What are the threats? I understand that there are many, but what are they? And also, how could they be avoided?
-1
votes
2answers
107 views

How risky is to to use external DNS servers? [closed]

My infrastructure doesn't have an internal DNS server, so I just forward any DNS request to external DNS servers by iptables rules. I wonder how risk that can be, and how easy is it to spoof DNS or ...
4
votes
3answers
135 views

it is possible to make some wifi router out of service without have the connection password?

Lets say i want to make some WiFi router out of service. I can connect to the router and close the WiFi connection or change the password. But in this case i need to have full access to the router. ...
1
vote
0answers
147 views

Attackers on sc.imp.live.com [closed]

"Deceptive site ahead Attackers on sc.imp.live.com may trick you into doing something dangerous like installing software or revealing your personal information (for example, passwords, phone ...
12
votes
5answers
2k views

Unknown process on my ubuntu machine communicating over multiple ports with UDP proto

I have a Django web application where the web app and the postgresql database are hosted on two separate Ubuntu-based machines. On my Database machine (and not my web application), if I run sudo ...
0
votes
1answer
43 views

Responding to a coordinated attack against financial transaction systems [closed]

Imagine a coordinated attack by a large and motivated hacking group, that results in a nation-level compromise of the financial systems we take for granted: credit card payments, accounts at the top ...
69
votes
5answers
15k views

Found suspicious, obfuscated PHP file. Is this a hack attempt on my website? [duplicate]

I just noticed that the top line of my index.php file got changed to what's below. <?php ...
3
votes
2answers
64 views

Chosen-ciphertext attack — basic question

Disclaimer: I'm a beginner with security. Problem: I am reading Applied Cryptography by Schneier. He writes: Question: How can "automatic decryption" work without the deduced key? Does the ...
4
votes
1answer
124 views

JS snippets on my live project do not appear in my code residing on my production server

I have a Django website project that is live (let's call it example.com). It's a forum where users can submit comments and reply to them. It has a Postgresql database, and gunicorn + nginx reverse ...
0
votes
0answers
60 views

Are link-flooding attacks a real threat or only an academic scenario?

I read some papers about link-flooding attacks (i.e. flooding network links) and I wonder if these attacks are really of relevance in the real-world and what makes them so dangerous compared to ...
82
votes
6answers
11k views

Script Kiddies - how do they find my server IP?

I've set up a site on Digital Ocean without a domain yet, so there is only the IP. Despite telling no-one of its existence or advertising it, I get hundreds of notices from fail2ban that various IP's ...
27
votes
4answers
4k views

How do you deal with massive port scans?

This morning I was looking through firewall logs and saw there were about 500 packets marked as port scan. The scanning range was from 1000-1200 5000-5200. The IP address is 85.25.217.47 which seems ...
0
votes
1answer
102 views

What type of attack can bring a website down by serving a redirect loop?

My website has been up for a year and all of a sudden is down with a too many redirect message. www.jdmxchange.com (classifieds for modified cars/parts) I tried to use fiddler to see if it was ...