An attempt by a threat to exploit a weakness in a system.
5
votes
2answers
900 views
Need help identifying the OSX process that's generating strange network traffic
Since the past few days, I noticed that my router was a bit slow, and was restarting by itself at times. When looked at it's logs, they had entries like:
Friday Jul 13 13:09:02 2012 1 Blocked by DoS ...
5
votes
3answers
568 views
How to use and create attack graphs
I am trying to learn more about attack graphs and how they can be used. I have read a little bit about them from some simple Google searches and believe that they could be a useful tool for work. I ...
5
votes
2answers
87 views
Password list generation
I've found during a lot of recent pen-tests that companies will use passwords like
c0mp4ny@b(
for a company called "company abc"
Is there any quick and easy way to generate a list of passwords ...
5
votes
4answers
4k views
How to trace a DDOS attack on a dedicated server and block it?
I have a dedicated server and I'm hosting a game, and the web page (using Apache) for account registering.
The server is being ddosed since 8 months ago till today. I've tried to talk with the server ...
5
votes
2answers
316 views
Is this a DNS attack?
The following graph shows the UDP DNS queries/sec (blue) and DNS responses/sec (red) of traffic passing a router over the preiod of 4 days. DNS query is a DNS packet with query/response flag set to 0 ...
5
votes
1answer
140 views
Cufon or Prototype as an attack vector for Blackhole exploit kit?
I've been asked to look into the security of a client site that's apparently throwing antiviral messages when visited.
Specifics:
It's being detected as a Blackhole exploit kit inside of a Cufon ...
5
votes
1answer
342 views
Trying to prevent Cisco toll fraud
A little back story on the setup first; We have a Cisco VoIP setup at our remote office(where I'm at) and the main CCM/CCX/Unity setup is at the parent company across the US in Connecticut. We have ...
4
votes
4answers
2k views
How to catch a gmail hacker/money-scammer? (in conversation with one right now!)
My friend's GMail account was recently hacked and the perpetrator sent out one of those classic "help I was mugged, I need money" style e-mails. (Edit: I know it's legit; my friend called me to tell ...
4
votes
8answers
5k views
How to simulate DDoS attacks from the Internet?
The idea behind security tests is easy. You want to know what a hacker can do - you hire a security expert who acts like a hacker to see how far he can get. You want to know what an evil admin can do ...
4
votes
2answers
245 views
How can I find out who owns a block of IPs?
I'm currently going through the logs on my apache install for potential intrustions, and I'm finding a lot of hits for SQL injections and exploit testing, from 173.212.195.* . I'm now trying to find ...
4
votes
4answers
182 views
What kind of attacks result in an attacker only being able to leak a site's database?
Of the public disclosures I've seen from recently compromised sites, it seems common for only the database to be leaked, rather than the application code, or rather than a complete takeover. Is this ...
4
votes
3answers
378 views
How do I protect myself against the attacks in this php script?
Due to a vulnerability in how PHP was installed (Shared VPS with PHP installed as an Apache module instead of CGI) and hence how OSCommerce was configured (with security of 777 on certain ...
4
votes
4answers
343 views
Received a Kindle from a stranger, what are the risks?
While getting a coffee today, a man walked up to me and offered me a kindle. he said he no longer wanted it and that he was looking to give it away. An avid reader, I accepted. It has no accounts on ...
4
votes
2answers
269 views
Are there volatile memory chips which dont retain data after power off?
It was demonstrated that dram modules can retain information up to 10 min after power off in certain conditions. My question - are there memory types which will retain data 10 sec at max even if being ...
4
votes
6answers
1k views
Retrieving OSx Keychain passwords
I have a computer forensics style osx login.keychain file that I am trying to find the passwords from.
I have a very weak mac which I used crowbarkc on to try and brute force but the horsepower is ...
4
votes
4answers
159 views
Security risk of adding a HTTP Header with server identifier
We are about to deploy a web application to a web farm of quite a few web servers. During our testing we have found issues happening in one of the servers but not in others. Most of them because of ...
4
votes
3answers
311 views
VGA/HDMI Based Attack
Can I attack a PC via the VGA port? Is VGA one way or does it accept data from the other side?
How about HDMI or DVI?
And if so, are there known malware or PoCs to do that? or is it theoretically ...
4
votes
2answers
8k views
How do hackers take advantage of open ports as a vector for an attack?
It is widespread knowledge, and therefore a common practice, to close open ports on any machines connected to the internet.
If for example, a typical program uses port xyz as it's communication ...
4
votes
4answers
871 views
Comparing penetration testing suites
I've been using Backtrack for a while now. I was wondering if there is anything better, or on par with, that is worth looking into. Thoughts?
4
votes
3answers
333 views
Create a page to experiment with SQL injection [closed]
This semester, I have taken a course on Information Security and my project for this course is to implement an SQL injection to obtain admin privileges. For this I first download Havij software ...
4
votes
2answers
496 views
How effective is an IDS at catching targeted attacks
I have recently become very familiar with IBM Site Protector. As I understand things, Site Protector is in the top tier of IPS/IDS systems, used by some of the largest Fortune 500 companies.
I was ...
4
votes
3answers
183 views
Most informative DEF CON talk?
I didn't make it to DEF CON this last year...
I'd like to know what you thought was the most interesting/informative presentation and possibly a link to more information on the topic.
[mod - ...
4
votes
3answers
145 views
Are CSRF Attacks Really Blind
I'm new to CSRF attacks but don't see how they are always blind.
Let's say we are dealing with a site where the asset we need to protect is the HTTP response. Something like SurveyMonkey or ...
4
votes
1answer
745 views
What is a Shrink Wrap code attack?
On my C|EH course I have heard about term "Shrink Wrap Code Attack", but we've only mentioned it. Now trying to do some research and refresh the topics, I can't seem to find serious description of ...
4
votes
1answer
443 views
How to prevent CSRF if you want to include Flash plugins in your form like Uploadify in your form?
What is CSRF?
I need a basic definition that is not just lifted from Wikipedia.
I understand SQL injection, XSS, cookie poisoning, but I just cannot wrap my mind around this.
I am using a ...
4
votes
1answer
103 views
Computational Feasibility of finding 'Good Links' of the following format
I recently stumbled upon this and am checking here to see if what I am proposing is indeed feasible and can be considered a breach of privacy.
For obvious reasons I am not revealing the website ...
4
votes
1answer
229 views
How secure is NFC on mobile devices?
Near field communication is becoming more commonly available in modern mobile devices, such as smartphones and tablets. This functionality can be used to communicate between such devices, or with ...
4
votes
2answers
139 views
Most secure response for a server to return to a user scanning for exploits
I have ASP.NET servers hosted in IIS, regularly i see bots attempting to scan my server searching for outdated versions of phpMyAdmin, mysql etc.
Currently these requests all return 404 because ...
4
votes
1answer
1k views
What is packet drop, packet loss and how Packet drop attack works?
I confused with the three terms:
Packet drop.
Packet loss.
Packet drop attack.
I understand Packet drop as the prameter the application (e.g. Skype) allows to drop packets and still keeping ...
4
votes
3answers
123 views
Does allowing everyone know when a server process was started pose a security risk?
I recently found that in Microsoft .NET framework an impersonated thread is not allowed to request "time at which the current process was started". This could be done intentionally or this could be ...
4
votes
2answers
334 views
Memory Dumping - Cause for concern in Virtualization?
Recently, I started exploring threats to Virtual machines in general. The first question that popped into my head was whether a host machine can dump its entire memory onto a file, and inspect the ...
4
votes
1answer
999 views
Are SSL encrypted requests vulnerable to Replay Attacks?
Are SSL encrypted requests vulnerable to Replay Attacks? If so, what are good options to prevent this?
4
votes
2answers
162 views
Can a MitM attack occur on an ISP's local exchange or street wiring cabinet?
If an attacker were to dig up the 'outgoing feed' from my local exchange or the street cabinet, could they sniff my entire neighborhood's network traffic? Or is this infrastructure secured against ...
4
votes
1answer
242 views
How do I check the code of a Chrome extension to make sure it's not stealing my info?
I've been reading more and more about just how much access browser extensions can have to your data. This is a little unsettling, so I'm curious if there is a way to Vet these extensions and make sure ...
4
votes
1answer
236 views
Attacks against HIDS software running on the same machine
I am interested in the attacks that could be used to compromise or disable HIDS software such as Tripwire or Samhain. I understand that ideally checks should be run periodically and the database ...
3
votes
2answers
423 views
An attack from my Employer
I am working in an ISP company as a junior support specialist.
Recently, I have a serious suspicions that one of our "head" stuff member is compromising me by being able to control(see) my traffic..
...
3
votes
3answers
357 views
Wireless security attack techniques
Before I ask for some advice, please don't assume I'm a script kiddie or such. This is for one of my wireless security class (CSS 1015).
It's a Saturday class and only 6 students are in the class ...
3
votes
4answers
645 views
What are the chances of a database being hacked?
How often do websites (and their databases) get hacked? Hacked as in user accounts stolen, tables flushed, and all in all, damage done to the database.
I'm talking about e-commerce websites, and ...
3
votes
2answers
648 views
I'm currently receiving a targeted attack
Since yesterday, I receive forged mails which are targeted at me. They use personal information, seem to come from one of my friends and only contain links to these web sites:
http ...
3
votes
5answers
142 views
Can SSL requests be proxied by issuing a second certificate?
Alice wants to login to her account at https://www.bobsbank.com/. However she clicks on a malicious link in an email and instead gets sent to the malicious site https://www.charliesbank.com/. The ...
3
votes
3answers
229 views
Is this a web attack I should be concerned about - trying to enter code for form vars
I have a created a simple CGI script running on a web server where a user can login using a username and password. The username and password are entered via a html form and the form POST's the data ...
3
votes
4answers
169 views
Attack where browser URL appears valid
I remember reading about an attack where the "location bar" in a user's browser displays a valid URL (e.g. https://www.paypal.com/), but the traffic is really being directed to or intercepted by an ...
3
votes
3answers
244 views
TLS Renegotiation Indication Extension vulnerability
I am trying to understand the TLS Renegotiation Indication Extension from the RFC.
I can understand that it is related to the fact that the renegotiation is send under the encrypted stream but can not ...
3
votes
2answers
541 views
Reverse shell connections
Why are reverse shell connections so popular in the event of a successful intrusion? Many "hacking" videos show this and it is often seen in practice.
Would not most servers restrict outgoing ...
3
votes
2answers
405 views
Is this an example of XSS attack?
A scripter sees on certain web pages it's technically possible to include markup like HTML and CSS/JS. It's technically possible to submit a javascript or iframe and have it display to the visitor ...
3
votes
3answers
18k views
Is Teredo in my router a back door?
I use the school computer, which I bought from school, administered by the IT-department. I opened a port to my computer when I stumbled upon this:
It points to my computer IP. (I have a static IP ...
3
votes
2answers
1k views
Some questions about penetration testing distribution Backtrack 5
I know just the basics of backtrack and I want to ask some questions about it:
Can you attack an ftp server using backtrack? an email server?
I have a Centos virtual private server and backtrack is ...
3
votes
1answer
202 views
Could Stock Exchange be shut down by HFT attack vector?
First of all, stock, not stack exchange.
I just read this post on Krypt3ia. In short, it says that HFT attack vector in combination with DDoS is possible new nemesis for stock exchange IT systems. ...
3
votes
2answers
146 views
Ftp constantly asked for a .exe file, what can i do?
I rent a web server ("service") at a web hosting site which recently i assume got hacked but i am unsure how... I know it got hacked because recently out of the blue certain files and folder appeared ...
3
votes
3answers
5k views
How to prevent my website from getting malware injection attacks?
I found that my website is banned as malware website by Google. When I checked the code, I found some code injected to many files on my server. I cleaned everything manually editing all files in my ...
