An attempt by a threat to exploit a weakness in a system.
3
votes
3answers
5k views
How to prevent my website from getting malware injection attacks?
I found that my website is banned as malware website by Google. When I checked the code, I found some code injected to many files on my server. I cleaned everything manually editing all files in my ...
3
votes
3answers
291 views
Is this a symptom of an attack (DoS/DDoS)?
I work for an e-commerce website in my country and this is the second time we suffer an attack. At least, looks like one.
We have a search functionality in our website and the supposed attacker is ...
3
votes
1answer
350 views
challenge-responce and man-in-the-middle
Is man in the middle attack possible in a typical challenge-response based authentication? For a typical reference one can go through this paper.
My question is that is it possible for an intruder to ...
3
votes
3answers
3k views
Facebook spam / phishing attempt?
I got this sent by a friend on facebook and i dont think its a genuine message
___ shared a link on your Wall.
This will leave you speechless)
...
3
votes
2answers
4k views
Disabling windows firewall remotely
i use metasploit for pentesting windows 2003 sp2 server but when windows firewall is on i am not able to perform pentest successfully is there any way to disable firewall remotly?
3
votes
3answers
551 views
Is there a method to detect an active man-in-the-middle?
Suposing an attacker that has gained access to the router. Is there a way, for the victim, to notice that is being attacked?
I think one of my friends is a victim of this kind of attack. How can I be ...
3
votes
2answers
728 views
SMS / voice call interception with a fake base station
This answer to a similar topic describes in a detailed way how vulnerable SMS and voice calls are in terms of decryption. In order to do so, an attacker needs to set up a fake base station located ...
3
votes
1answer
178 views
How to get informed in metasploit when a user does a reverse shell to my computer
I sometimes do reverse shells on metasploit but I'm not sure when my target will actually execute the payload. I would like an alarm of some sort to tell me when he does. this can easily be done in a ...
3
votes
1answer
192 views
Odd user registered and strange behavior. Is it sinister?
I am running a number of web sites. They are all Drupal based, if that is relevant. Recently I have noticed something odd. All my sites have a user registered with the name "zctonglin". I presume ...
3
votes
1answer
201 views
what is the difference between virus, worm, trojan and other malware [closed]
Looking through the questions in IT security, I found out that there is no answer which cover this question in depth.
I am aware of the answer and just hope to see something detailed about:
main ...
3
votes
2answers
449 views
How to use attack trees and attack graphs
I am trying to understand how attack trees\graphs can be used in the security process. I read a lot of papers presenting the topic and how this reppresentation can be useful, but I really don't ...
3
votes
1answer
109 views
Vulnerabilities of having one path of app accessible only via HTTPS but others via HTTP?
Imagine example.com that is accessible via HTTP and HTTPS. Most of content at site isn't secure and it won't be bad if it will be read by attacker. One of paths - example.com/secure_zone is accessible ...
3
votes
2answers
377 views
ICMP redirects and source routing in the wild?
Theoretically, ICMP redirect messages (IPv4 and IPv6) and source routing (IPv4) / routing headers (IPv6) are very dangerous. However, I'm curious as to if attacks using these features really work in ...
2
votes
2answers
302 views
Is it a weakness to be able to see server side scripting?
Are languages such as Cold Fusion and PHP less secure because they are embedded in HTML which is sent to a client? Someone told me they are less secure because they lack abstraction.
CLARIFICATION: ...
2
votes
1answer
220 views
secure website against the ping of death attacks
Any programmer is interested in securing his website. So I found this
http://www.youtube.com/watch?v=DB4eMFrQYiY&feature=youtube_gdata_player
which talks about crashing a website using cmd only. ...
2
votes
6answers
903 views
Efficient way for finding XSS vulnerabilities?
Manual (reliable) way: Put string containing characters that have special meaning in HTML into some parameter of HTTP request, look for this string in HTTP response (and possibly) in other places ...
2
votes
3answers
3k views
Does X-Content-Type-Options really prevent content sniffing attacks?
In Tangled Web Michal Zalewski says:
Refrain from using Content-Type: application/octet-stream and use application/binary instead, especially for unknown document types. Refrain from returning ...
2
votes
2answers
368 views
How does the Yahoo webmail exploit work?
I got an email (referring to me by name) from somebody I knew a while ago and the email itself was just two/three lines containing a bit-ly link. Although it seemed like it actually could be ...
2
votes
2answers
320 views
SSH : Remote Host Identification Changed
As part of my daily routine, I was SSH'ing to one of the corporate servers.
However this time I was presented with following message
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ ...
2
votes
2answers
185 views
Can an attacker slow down my server without compromising it?
We have a Linux server with WHM/cPanel which has been running without problems for almost 3 years now.
Yesterday, the server became unresponsive (it was definitely there though) for around an hour. ...
2
votes
4answers
212 views
Can public keys be a security risk when performing password-less SSH logins?
Some companies use monitoring software such as nagios or icinga. In order to perform checks on the servers, they often need password-less SSH logins.
The servers being checked put the public key of ...
2
votes
2answers
168 views
What are stolen passwords used for?
Say there is a line of business application which has username/password datatable in the DB. Personal email address is not stored, and usernames are assigned by an administrator. Someone gains access ...
2
votes
1answer
288 views
Need assistance diagnosing hacked website
Despite all my work to harden my website, someone has managed to hack it.
When loading the homepage in IE8, the page appears to load normally. Then, the status bar briefly displays a request to a ...
2
votes
1answer
162 views
How does Binding Images with Malicious Patches happen?
Well I don't know if this technique is still used, but about 5-7 years ago it was a popular way to deliver a malicious patch (Sub-7 , bifrost etc ..) to a victim.
There used to be a program that ...
2
votes
2answers
164 views
Attacks surrounding /etc/hosts/
Although /etc/hosts/ is a file that comes up a lot in security, I am surprised to find there is no discussion here on this forum that describes how this can be used for an attack.
Thinking about it, ...
2
votes
2answers
364 views
Difference between masquerading and replay attacks?
I know that masquerading is to impersonate a false identity and replaying is the same wherein unauthorized person uses the credentials of the authorized one to have the privileges.Then what is the ...
2
votes
3answers
119 views
I want to implement a new type of security feature over several platforms
I want to make a security feature that will go farther in discouraging people from looking through a secure system or server than what I have seen being implemented.
Specifically, is there a way (or ...
2
votes
2answers
164 views
What steps can I take to identify what type of compromise of my computer has occured
I got involved in a strange scenario today :-) . Some 'UDPAgent.exe' file/worm/virus was trying to access my collegue's system and the antivirum program was showing that this particular thing is ...
2
votes
1answer
71 views
Voice Call Safety
When i was dealing with an assistant of my bank through mobile call, she asked me to insert my bank login code after a beep.
I was wondering if this procedure is secure against a malicious agent who ...
2
votes
1answer
272 views
The impact of the Sony attacks on the security industry [closed]
First of all there was the PSN hack, which was compromised due to a vulnerable version of Apache and no Firewall and using a developer console. Then Sony Greece fell due to an SQL Injection attack. ...
2
votes
1answer
163 views
solaris equivalent of /proc/self/environ LFI
I need to exploit a Solaris vulnerability for class, but we never dealt with Solaris before and I never installed it.
Does Solaris have an equivalent to Linux's /proc/self/environ, exposing a ...
2
votes
1answer
134 views
amd64 safer than 686-pae?
Apart from stronger ALSR entropy...
Is a system using amd64 any safer than 686-pae?
What are the advantages, if any?
2
votes
1answer
2k views
How to Prevent This `Intrusion.Win.MSSQL.worm.Helkern`?
Sometimes my kaspersky Internet Security blocks this attack.
What is this and how can I prevent/solve it for ever?
2
votes
1answer
169 views
White-Box Cryptography Questions and References
I have recently started reading about White-Box Cryptography and looking at references/papers/web sites. A have a few questions I was hoping to get guidance on.
As far as I can tell, WBC has ...
2
votes
1answer
164 views
Can JavaScript defeat source port randomization?
Can malicious JavaScript defeat source-port randomization in browsers?
I am reading a research paper which seems to claim that the answer is yes:
many browsers seem to always assign a random ...
2
votes
1answer
1k views
What is an active attack?
Browsing through the site I encountered this Is there a way to negotiate a secret between 2 parties with no prior knowledge?
What is an active attack then?
2
votes
3answers
80 views
How good is validating source with request.referer than checksum?
I have 2 portals(both are under my control & domain names are different)
In 1st portal, there is a link on click of which User can directly get logged into 2nd portal.
Link which will be hit in ...
2
votes
2answers
221 views
DNS cache poisoning
What are the things the attacker needs to know from the victim to perform DNS cache poisoning ?
for example : IP , Port number and Transaction number
what else ?
2
votes
1answer
93 views
Is it safe to invoke PHP GD functions if you don't know whether file is a valid image?
There is image upload function in web application. After image is uploaded, it's resized using functions from PHP GD like imagecopyresampled and others. Before invocation of PHP GD's functions there ...
2
votes
2answers
63 views
Does the CVSS impact score correpond to probability?
From http://nvd.nist.gov/cvsseq2.htm , I noticed that the CVSS standard attributes the following impact values for confidentiality, integrity and availability: 0 for none impact , 0.275 for partial ...
2
votes
1answer
92 views
ISP security compared to enterprise
I've just started reading IT Security, and found some interesting reads on man-in-the-middle and different types of "attacks" that could be used by an enterprise to intercept communications on their ...
2
votes
1answer
290 views
What attacks use enabled Apache's PATH_INFO?
In Tangled Web Michal Zalewski says:
If you are not using path-based parameter passing (such as PATH_INFO), consider disabling this feature.
He gave only one example of this vulnerability. There ...
2
votes
1answer
277 views
Categories of attacks in Snort
Is there any category for Snort rules that classifies them according to attcks such as U2R, R2L, .. ?!!
Or how many well known attacks can it finds?!
1
vote
4answers
5k views
how safe is the 256 bit encryption used in bank transactions
Most of the banks use a 128 bit or 256 bit encryption. What does this mean? Does it mean that the keys used in ssl are 128 bit long or what?
If they are the ssl key lengths then 128 bit rsa keys are ...
1
vote
1answer
146 views
uninstall and reinstall after hacking [closed]
My computer has been hacked. If I uninstall and reinstall do I loose my files?
The facebook tech tried to sell me a number of pkgs ranged $149-$299 and told me that my account was hacked as was my ...
1
vote
5answers
306 views
Site backdoor & eval()
I'm running a Joomla 1.7 site which was hacked today. Below script did the hack.
...
1
vote
2answers
494 views
SUN Remote Procedure Call Port 111 [closed]
I have found on my machine port 111 is open. This is listed as RPC.
I understand there are possible attacks on this port. How can my machine be attacked if port 111 is open?
How can I secure this ...
1
vote
4answers
309 views
Can you tell if your computer was hacked and pictures stolen from 2-6 months ago?
Can a home computer, not wireless, be hacked from the outside and have pictures copied? Can I track and see if that happened?
1
vote
2answers
2k views
Kernel Intrusion on home broadband router - what does it mean?
My home broadband connection has been up and down all day, I took a look at the router logs and saw the following:
Mar 27 12:22:30 kernel: Intrusion -> IN=atm1 OUT= ...
1
vote
3answers
1k views
What is HTTP GET/POST Flooding Attack?
I want to know what is HTTP GET/POST flood attack and what are their major differences and mitigation strategies ?
I searched a lot but I really can't find some good articles nor examples about this ...
