An attempt by a threat to exploit a weakness in a system.
1
vote
3answers
1k views
How should I defend against TightVNC brute-force attacks?
How should I defend against this type of attack? This is a tightvnc logfile excerpt from a linode cloud server running Ubuntu 12.04 (Precise) with the ubuntu-desktop package added to the bare server. ...
1
vote
1answer
116 views
WebServices Security [closed]
Do we have any good resources on WebServices Security? Any book, pdfs, articles and even the detail answers regarding the securing web services would be appreciated.
1
vote
2answers
377 views
How effective have statistical methods been at breaking encryption?
If we look at how statistical engines run on-line translators, and how they are built, we see that they look at a new language and run a statistical model over it searching for what's probably the ...
1
vote
2answers
122 views
I am still logged in using a browser X, can CSRF attack work when I use another (default) browser Y on the same machine?
I am still logged in using a browser X, can CSRF attack work when I use another (default) browser Y on the same machine?
Edit
Assume the web server has CSRF vulnerability. No hidden token checking ...
1
vote
3answers
398 views
Disadvantages of HTTP GET/POST Flooding Attack?
I asked about What is HTTP GET/POST Flooding Attack? recently and I got a few detailed answers about what they are and how they work.
Now I want to find out what are the disadvantages of them.
1
vote
2answers
354 views
How is iptables useful to prevent attacks against a LAN?
I need some advice securing a LAN using iptables.
I've found lots of examples on how to secure single host with iptables, including scanning ports, attacking using ICMP-flood and TCP-flood. These ...
1
vote
3answers
808 views
MITM: tools for intercepting and modifying traffic?
I want to carry out a MITM attack to modify traffic, so I can strip out/modify things in the request.
For example:
When I receive a request on port 25, I want to be able to intercept all the ...
1
vote
2answers
217 views
Secure against HTTP FLOOD ATTACK
What is the best way to defend your web site against HTTP FLOOD POST/GET ATTACK ?
1
vote
1answer
106 views
How to know what's the type of an attack and from whom is sent?
I'm currently running a game server on a dedicated Windows 7 machine and it is being attacked.
How do I know what kind of attack it is and from whom is sent?
When he attacks, the RDP freezes and the ...
1
vote
1answer
510 views
HTTPS and cache injection
I understand the downside of this attack and what wrong can be done.
But I dont understand how is it done ?
Well, I need to educate myself, any pointers would be useful.
1
vote
1answer
357 views
syn flood size per second
Given the size of a TCP packet is 60 bytes, there is a SYN Flood attack on a computer made by a 100 Mb bandwidth, the question is how many syn packets are sent in a second? Is there any formula for ...
1
vote
3answers
237 views
If the encryption algorithm broken or analysed, can an attacker find my password?
If the encryption algorithm broken or analysed, can the attacker know what my password was?
1
vote
1answer
64 views
Bypass va_randomize_space and stack-protector
Is a program compiled with the GCC -fstack-protector option and running in a Linux environment with the va_randomize_space kernel variable set to 1, totally protected against buffer overflow attacks?
...
1
vote
1answer
191 views
Different Security Issues Depending on OS? [closed]
I'm interested in learning more about OS specific security issues if there are any. I'm very new to this topic but I want to learn more about if there are specific security vulnerabilities associated ...
1
vote
1answer
175 views
Determining the target address in a heap overflow
For a heap overflow to occur and arbitrary code to be executed, the function free() performs the step :
hdr->next->next->prev = hdr->next->prev
I understand that the address of ...
1
vote
1answer
410 views
How to fix the audit failure in our web server
We noticed that we are getting the following audit failure logs in our web server. The workstation is not in our network.
Can anybody help me how to isolate and prevent this from happening?
An ...
1
vote
1answer
400 views
Example of attack trees in the web application security analysis
Here I am again asking for some informations about attack trees usage in web application analysis.
For my master thesis I decided to study the usage of this formalism in order to reppresent attacks ...
1
vote
2answers
202 views
Wireless LAN router fingerprinting
Does anyone know of a database that lists the range of MAC addresses that are assigned to each particular brand of router? I would like to use this information for fingerprinting.
I know I can find ...
1
vote
1answer
180 views
types of intrusions on host [closed]
I am implementing an IDS and just want to know that what are the possibilities with which the intrusion can occur.I am just doing a literature survey over the atacks possible so I want to know that ...
1
vote
2answers
344 views
Sun ILOM / Out of band management security concerns
I would like to get some outside opinion on this if possible, although I do not know what to ask.
Sun ILOM is an Out-of-band management system. I understand it is a separate OS on the box that is ...
1
vote
1answer
85 views
What does the Local exactly mean in CVSS?
CVSS (http://www.first.org/cvss/) provides the keyword local in the base vector.
The definition given by FIRST is somehow not so clear for me: Local: Exploiting the vulnerability requires either ...
1
vote
1answer
280 views
Are there Bluetooth attacks on Smartphones that will not notify the user of the attack?
Are there Bluetooth attacks on Smartphones that will not notify the user of the attack?
Specifically forcing a reset or opening an application.
1
vote
1answer
125 views
What are security risks of serving user uploaded files without Content-Disposition?
Imagine a server that serves untrusted user-provided files and allows other users to download them. Under some circumstances server can be tricked to return responses to download file requests without ...
1
vote
1answer
157 views
SNMP trap by legitimate program?
Is there any way to tell if this SNMP trap is something created by a legitimate program?
Update: Hex Dump
0000000: 30 82 00 ec 02 01 00 04 06 70 75 62 6c 69 63 a4 82 00 dd 06 82 00 09 2b 06 ...
1
vote
1answer
2k views
How to use http-get-form in THC-Hydra?
I've been messing with Hydra (Brute Force) to solve the "Damn Vulnerable Web App"
brute force section but the problem is when I use http-get-form it said:
Warning: child 1 seems to have died, ...
1
vote
2answers
711 views
Microsoft ASMX Web Services Test form available on remote machines
I have been doing some research about Web Services security. I noticed that some sites are using Ajax and JQuery to consume ASMX WebServices. I navigated to the Web Service EndPoint and I realized ...
1
vote
1answer
225 views
Information on the phpMyAdmin probe?
Various IP addresses call various domains looking for various paths that might lead to PHP My Admin/scripts/setup.php
One of those IP addresses is 74.63.212.48 which I just now found out I could ...
1
vote
0answers
68 views
Are there any case studies for a large (think Twitter or Facebook) Web application vulvnerability so severe it caused a total shutdown of services? [closed]
I'm looking for either a case study, or an article from a news source that discusses the vulnerability and methods for recoverability.
1
vote
0answers
295 views
what the differences between cyber security, information security, computer forensics, digital forensics [closed]
what is the purpose or difference between of master cyber security, information security, computer forensics, digital forensics .i will to be computer investigator who is the best. Thanks
1
vote
1answer
180 views
Are there any test cases to ensure the “web-attacks.rules” snort file works correctly?
I have set up an free evaluation Confluence Server on my local host and have configured "snort.conf" to point to my localhost as "HOME_NET" environment variable.
I tried to test the ICMP rule by ...
1
vote
0answers
219 views
Unauthorised Perl Scripts [closed]
One of my servers just had the memory exhausted by a load of Perl scripts, we use plesk and they seem to have appeared under the /var/www/vhosts/domainexample.com/cgi-bin/ directory, I managed to stop ...
1
vote
1answer
577 views
How can log poisoning be successful with a Local File Inclusion attack?
I just read a paper about Local File Inclusion on exploit-db.com, it can be found here. One technique with LFI is log poisoning as you may know already. You do an HTTP GET request that contains PHP ...
0
votes
3answers
120 views
How to retrieve a site whose server is running Linux
I'm struggling to find a way to retrieve through Google a list of sites having Linux as their server operating system.
Actually, I'd like to be able to test the following command:
nmap -O ...
0
votes
1answer
455 views
Is this Ubuntu server configuration secure?
I'm new to Linux and security matters. I have a vps with Ubuntu 12.04 server and I wonder how secure this server is.
I set up ssh passwordless login and disabled ssh login for root. I update security ...
0
votes
3answers
357 views
Are Facebook, Yahoo, Google, etc. hackable?
Just to be clear, I am not asking how to hack in these services, I am just curious. Let me try to explain.
Since I know a little bit about computers, people automatically assume I know how to have, ...
0
votes
1answer
116 views
Real-time Operation systems and attacks
I'm interested on kind of attacks which can be used on 'Industry Control Systems'.
I only have found that following malwares:
switching-off/disablement the systems
stole the information
What ...
0
votes
2answers
136 views
How can I encrypt something user provided without risk of the key being exposed?
So, let's say I have a theoretical service. User has some text they want to encrypt. They pass it to me, and I encrypt it. Then, only I should be able to decrypt it afterwards. Another kicker, it must ...
0
votes
3answers
921 views
Demo of web site that is vulnerable to command injection
I'm looking for a demonstration web site that shows an example of a web site that is vulnerable to command injection: where I can inject something and get the web site to run a shell command. (This ...
0
votes
1answer
2k views
If a router has port 5060 open, and I know that there is unencrypted SIP traffic going through this port, how could one take advantage of this
Ok so an Nmap scan against an IP address shows that port 5060 is open. I know that 5060 indicates that this is SIP traffic. Also, 5060 indiciates that this is unencrypted traffic, where if the port ...
0
votes
1answer
244 views
Can active attacks really decrypt a particular AES-256, CBC, PKCS#7 encrypted file?
I recently found out that active attacks are a threat against AES-256, CBC mode, padded with PKCS#7 (the CBC mode in particular. I should supposedly change to EAX to guard against these attacks).
...
0
votes
2answers
78 views
Looking for information about CVE-2006-6876 vulnerability
In order to study vulnerabilities of a SIP server and the impacts of DOS attacks on the QoS of VoIP service, I have found this vulnerability which can be exploited to cause DoS on SIP server.
But I ...
0
votes
1answer
625 views
More information about CVE-2012-0883 vulnerability
I need to have more details about CVE-2012-0883 vulnerability published on : http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-0883
Second, I need to know , what mean DSos mentioned on the ...
0
votes
1answer
116 views
why CVSS give a score of 0.66 for a full impact on CIA?
By visiting: http://nvd.nist.gov/cvsseq2.htm I noticed that the CVSS attributes the following impact values for confidentiality, integrity and availability:
none : 0.0
partial impact : ...
0
votes
1answer
147 views
What type of attack should be used in order to pass this authentication
I am practicing the Astalavista Wargames and i came across this challenge. The question is:
Bob wrote a piece of software but the password verification doesn't seem to work. You must find a way to
log ...
0
votes
1answer
116 views
What is the method used in the New York Times attack? [closed]
In the recent New York Times attacks, how did the attackers gain access to the server?
Additionally, is there any evidence that these attacks were launched by China, aside from the proxy?
0
votes
2answers
435 views
How to encode letters in multipart/form-data to include CR/LF characters?
Part of HTTP request that should be sent to server with Content-Type: multipart/form-data; looks like:
------WebKitFormBoundaryQ7KGYev31biaJTW8
Content-Disposition: form-data; name="subject"
...
0
votes
1answer
98 views
How can I remotely detect versions? [closed]
I want to know how to remotely detect a software version.
Once attacker knows the version installed, he can exploit published vulnerabilities. So it will be useful to know it when doing penetration ...
0
votes
2answers
1k views
Snort false positive?
I've set up snort and am configuring it for my network. I have one vpn server making a connection to my dns/AD server. This connection sets off:
GPL SHELLCODE x86 inc ebx NOOP
The payload is as ...
0
votes
2answers
4k views
How to conduct DDoS attack practically? [duplicate]
Possible Duplicate:
How to simulate DDoS attacks from the Internet?
I want to conduct a DDoS attack. Can anyone please tell how can i conduct it? What are the latest DDos attacks? What are ...
0
votes
2answers
113 views
WPS vulnerability scanning for handshakes to detect the attack
I was able to sniff the EAP packets from the attacker machine with a wireless card on p-mode, however i was not able to sniff this data off the user using the same card under windows.
Wireshark, did ...
