An attempt by a threat to exploit a weakness in a system.
5
votes
8answers
5k views
How to simulate DDoS attacks from the Internet?
The idea behind security tests is easy. You want to know what a hacker can do - you hire a security expert who acts like a hacker to see how far he can get. You want to know what an evil admin can do ...
2
votes
1answer
289 views
Need assistance diagnosing hacked website
Despite all my work to harden my website, someone has managed to hack it.
When loading the homepage in IE8, the page appears to load normally. Then, the status bar briefly displays a request to a ...
5
votes
5answers
2k views
What kind of attacks against home router's NAT do exist?
I always thought NAT was some kind of a security feature and I still think it is, because if it didn't existed the internet, respectively the clients behind NATs, would be even more insecure, since ...
3
votes
2answers
1k views
Some questions about penetration testing distribution Backtrack 5
I know just the basics of backtrack and I want to ask some questions about it:
Can you attack an ftp server using backtrack? an email server?
I have a Centos virtual private server and backtrack is ...
2
votes
1answer
2k views
How to Prevent This `Intrusion.Win.MSSQL.worm.Helkern`?
Sometimes my kaspersky Internet Security blocks this attack.
What is this and how can I prevent/solve it for ever?
3
votes
2answers
399 views
ICMP redirects and source routing in the wild?
Theoretically, ICMP redirect messages (IPv4 and IPv6) and source routing (IPv4) / routing headers (IPv6) are very dangerous. However, I'm curious as to if attacks using these features really work in ...
1
vote
2answers
393 views
How effective have statistical methods been at breaking encryption?
If we look at how statistical engines run on-line translators, and how they are built, we see that they look at a new language and run a statistical model over it searching for what's probably the ...
1
vote
1answer
227 views
Information on the phpMyAdmin probe?
Various IP addresses call various domains looking for various paths that might lead to PHP My Admin/scripts/setup.php
One of those IP addresses is 74.63.212.48 which I just now found out I could ...
3
votes
2answers
571 views
Reverse shell connections
Why are reverse shell connections so popular in the event of a successful intrusion? Many "hacking" videos show this and it is often seen in practice.
Would not most servers restrict outgoing ...
11
votes
8answers
713 views
Randomizing MAC addresses on bootup
Since it is possible to set custom MAC addresses, wouldn't it make sense to have a new one as often as possible/convenient (i.e. on bootup)?
It would seem that is useful to both attacker and victim ...
48
votes
7answers
38k views
Can webcams be turned on without the indicator light?
I want to know how secure I am.
I've made a series of pentests in my network and one of the things I've tried was to record webcam and microphone.
Recording an end-user's microphone seems to be a ...
5
votes
3answers
659 views
Attack vectors for brute-forcing website passwords
When talking about password security, a lot of discussion centers on the risk of a password being guessed in a brute-force attack. For websites where a user has registered an account, what are the ...
5
votes
3answers
353 views
How to respond to attack made from my dedicated server?
There was a sudden unusual peak of outbound traffic from my hosted dedicated server (OS - Windows Server 2008 R2). The hoster threatened to block the server if the problem is not solved.
There are an ...
7
votes
1answer
113 views
What should be included in the ground rules for an attack review?
I've drafted some ground rules for a call for adversarial attack-review. I've tried to cover the following topics:
Link to the policy that I want to enforce.
Link to a minimal testbed and ...
3
votes
1answer
206 views
Could Stock Exchange be shut down by HFT attack vector?
First of all, stock, not stack exchange.
I just read this post on Krypt3ia. In short, it says that HFT attack vector in combination with DDoS is possible new nemesis for stock exchange IT systems. ...
3
votes
2answers
418 views
Is this an example of XSS attack?
A scripter sees on certain web pages it's technically possible to include markup like HTML and CSS/JS. It's technically possible to submit a javascript or iframe and have it display to the visitor ...
5
votes
5answers
1k views
What password cracking software is commonly used?
I am curious to know how secure my passwords are.
What password cracking software is commonly used?
Preferably open source.
EDIT: I am actually looking to crack my passwords used on services I ...
7
votes
6answers
968 views
Facebook account keeps getting hacked, can't seem to figure out why or how?
One of my mate, she has a lot of friends on Facebook, uses it for marketing.
Her account keeps getting broken into. Her password gets reset and/or gets locked for changing resetting password too many ...
1
vote
1answer
117 views
WebServices Security [closed]
Do we have any good resources on WebServices Security? Any book, pdfs, articles and even the detail answers regarding the securing web services would be appreciated.
10
votes
2answers
193 views
security implications of NULL dereference
Suppose we have code like this:
struct somedata {
int a;
int b;
};
struct somedata *data;
/* ... */
data = malloc(sizeof(struct somedata));
data->a = something;
Now, as you can see, NULL ...
2
votes
4answers
662 views
What are the chances of a database being hacked?
How often do websites (and their databases) get hacked? Hacked as in user accounts stolen, tables flushed, and all in all, damage done to the database.
I'm talking about e-commerce websites, and ...
4
votes
4answers
890 views
Comparing penetration testing suites
I've been using Backtrack for a while now. I was wondering if there is anything better, or on par with, that is worth looking into. Thoughts?
1
vote
2answers
354 views
Sun ILOM / Out of band management security concerns
I would like to get some outside opinion on this if possible, although I do not know what to ask.
Sun ILOM is an Out-of-band management system. I understand it is a separate OS on the box that is ...
10
votes
4answers
305 views
Resources for data on security incidents
What resources exist to research data on actual security incidents?
I would prefer an online resource but offline resources are acceptable. The cost of access should be less than $100 (US) for ...
6
votes
1answer
496 views
I can receive all PADI packets for PPPoE connections of my ISP, is that a problem?
for debugging why my router wasn't connecting to pppoe i've tried to connect via the pc, it worked, then i started wireshark just to see what was going on, and i've seen that i can read all the PADI ...
7
votes
2answers
1k views
Strange STP traffic in my network, possible MitM attack?
I live at a student dorm, where we are connected to a student network. The administrators of this network have forgotten to disable STP broadcast on non-infrastructure ports.
Periodically, I lose my ...
4
votes
4answers
173 views
Attack where browser URL appears valid
I remember reading about an attack where the "location bar" in a user's browser displays a valid URL (e.g. https://www.paypal.com/), but the traffic is really being directed to or intercepted by an ...
11
votes
4answers
2k views
Security of passphrase-protected private key
If an attacker obtains a private key that was created with no passphrase, he obviously gains access to everything protected with that key. How secure are private keys set up with a passphrase? If an ...
4
votes
3answers
382 views
How do I protect myself against the attacks in this php script?
Due to a vulnerability in how PHP was installed (Shared VPS with PHP installed as an Apache module instead of CGI) and hence how OSCommerce was configured (with security of 777 on certain ...
6
votes
1answer
196 views
Collision attacks on OCB?
I've been looking into the OCB cipher mode and everything I hear sounds good. I was planning on implementing it.
Everything except for this lone voice, that is: Collision attacks on OCB:
We ...
19
votes
3answers
2k views
How do DoS/DDoS work?
In the last days one could frequently read about attacks from anonymous and LulzSec against different platforms like Sony or HBGary etc. Yesterday for example they DDoS'ed soca.gov.uk and jhw.gov.cn. ...
18
votes
2answers
663 views
A phone call hack
The other day, I got a call from a relative with an email problem. After a bit more discussion, it turns out that two days previously, a man phoned my relative:
stated he was from microsoft;
asked ...
5
votes
1answer
3k views
Testing SQL injection using sqlmap
I'm just started using sqlmap ( http://sqlmap.sourceforge.net ) to test for possible sql injection attacks.
I got a website which is vulnerable:
C:\Python27>python xxx\sqlmap\sqlmap.py -u ...
7
votes
2answers
222 views
Profiling attackers via adaptive games: “Strange game, the only winning move is not to play”
Use of Game Design to Profile Attackers:
Interested in any research that links concepts in game design to security systems in an effort to profile the attacker's identity, motives, skills, etc.; if ...
13
votes
5answers
5k views
Security risk of PING?
I have been told that PING presents a security risk, and it's a good idea to disable/block it on production web servers. Some research tells me that there are indeed security risks. Is it common ...
10
votes
1answer
336 views
Public XSLT & XML playground (with PHP DOMDocument, etc.) Security Risks?
Let's say I want to set up a sandbox or playground in PHP that users can use to create (or paste in) XML and XSLT, then transform the XML via the XSLT (by means of PHP 5's DOMDocument and related ...
2
votes
1answer
272 views
The impact of the Sony attacks on the security industry [closed]
First of all there was the PSN hack, which was compromised due to a vulnerable version of Apache and no Firewall and using a developer console. Then Sony Greece fell due to an SQL Injection attack. ...
4
votes
1answer
242 views
Attacks against HIDS software running on the same machine
I am interested in the attacks that could be used to compromise or disable HIDS software such as Tripwire or Samhain. I understand that ideally checks should be run periodically and the database ...
10
votes
5answers
847 views
SQL Injection in a Non-Web Application
Does someone know of a good example of a SQL Injection vulnerability that isn't in a web application? What is the user input for this attack? I am looking for a real vulnerability, not speculation. ...
10
votes
5answers
468 views
How to best defend against Targeted Attacks?
We have seen this attack method grow as part of Advanced Persistent Threats (operation Aurora against Google or the G20 French Finance ministry attacks come to mind) but I have no doubt that even ...
8
votes
1answer
140 views
Long running SMTP session
I recently noticed an SMTP session on my server which started when a remote host connected but never seemed to result in any emails being delivered. I could see that it was probably a SPAM site and so ...
41
votes
6answers
6k views
SQL injection — but why isn't escape quotes safe anymore?
I haven't seen this question asked, and feel it's a valuable bit of information to have, especially because this is a huge source of mystery and confusion.
Raw SQL
When you're writing SQL -- for ...
2
votes
2answers
167 views
What steps can I take to identify what type of compromise of my computer has occured
I got involved in a strange scenario today :-) . Some 'UDPAgent.exe' file/worm/virus was trying to access my collegue's system and the antivirum program was showing that this particular thing is ...
8
votes
4answers
371 views
CAM table attack in 2011?
Today's switches are vulnerable to CAM Table attack?
https://secure.wikimedia.org/wikipedia/en/wiki/CAM_Table
2
votes
1answer
1k views
What is an active attack?
Browsing through the site I encountered this Is there a way to negotiate a secret between 2 parties with no prior knowledge?
What is an active attack then?
3
votes
3answers
3k views
Facebook spam / phishing attempt?
I got this sent by a friend on facebook and i dont think its a genuine message
___ shared a link on your Wall.
This will leave you speechless)
...
18
votes
1answer
1k views
Collision rate for different hash algorithms
Is there any collision rate measure for popular hashing algorithms (md5, crc32, sha-*)?
If that depends only from output size, it's quite trivial to measure, but I suppose that depends also of ...
13
votes
4answers
257 views
What should I look at in the event of a major vendor suffering compromise with unspecified impact?
The specific example I have in mind here is the breach of RSA in March 2011 where attackers got away with critical information which could be the seed information which is used to generate the ...
5
votes
3answers
573 views
How to use and create attack graphs
I am trying to learn more about attack graphs and how they can be used. I have read a little bit about them from some simple Google searches and believe that they could be a useful tool for work. I ...
5
votes
3answers
279 views
Web server file sniffing
What is it called when a user tries several attempts to figure out the files and folder structure on a web server?
For example, the attacker will run http://example.com/test.jpg to determine if ...
