An attempt by a threat to exploit a weakness in a system.

learn more… | top users | synonyms

1
vote
2answers
137 views

Attack using weird characters followed by some javascript in a URL?

I'm seeing a very weird attack this morning from a pile of VPS instances spread out across the US. The URLs look like this: /js/bundles/,!0):this.element.propAttr( ...
-5
votes
0answers
18 views

how to write fragmented attack code? [on hold]

what kind of attack of fragmented attack do? is all kinds of attack be rewritten into fragmented attack code? what kind of attack that fragmented attack can not do? where do fragmented packet ...
-8
votes
1answer
50 views

How to attack a web page to gain username and password of any or specific user? [on hold]

Web page does not use SSL. Server uses SQL. Given that passwords are not stored in plaintext in database. I want to find out methods to do so.
-7
votes
1answer
43 views

How to attack on a web page to gain username and password? [on hold]

In a situation where a web page is not using SSL and someone wants to attack to gain the username and password. How it can be done? Given the situations: Passwords are not stored in plain text. ...
-2
votes
4answers
144 views

My wifi has been hacked [on hold]

The hacker has complete control of my computer; opening and shutting programs at will. Deleting files that display the remote user ip address. We have changed the password several times; but no ...
1
vote
0answers
101 views

Deobfuscated Malicious PHP Code Comprehensively [closed]

I found 3 php files in a htaccess-password-protected upload folder on my server: 1. default_folders.php 2. factory.php 3. HMAC.php Each of them contains a variable string, eg: ...
18
votes
5answers
3k views

The Perfect Mousetrap - Can a sandbox system be designed such that it's identical to an actual computer? [duplicate]

In testing suspicious files for malware, the typical method is to search for known malicious code. This is why zero-day malware attacks can be so dangerous — their malicious code is previously unknown ...
0
votes
0answers
26 views

Processes and tools for identifying security vulnerabilities [on hold]

I was wondering about the processes and tools which are used to identify security vulnerabilities. One of the main methods I know of are using vulnerability scanners, which are used on running ...
1
vote
3answers
97 views

What type of attack is this?

Attacker purchasing something from e-store when attempting to tamper with requests and change the transaction amount value. What type of attack is this? How to prevent this kind of attack as the bank ...
0
votes
1answer
79 views

What are the main differences between a Metasploit vulnerability/exploit attack and a “R.A.T.” attack?

I explain myself: To attack with a vulnerability & exploit it with Metasploit, you have first to find a vulnerability listed. Then once you have it, you set up the whole thing and end up with a ...
3
votes
1answer
249 views

Is my server being used as a proxy or being attacked?

I have an Ubuntu, Apache, Passenger, and Rails 4 project on AWS EC2. I am a beginner full stack developer and am unfamiliar with the security and server side of my project. Recently, my site was ...
3
votes
2answers
78 views

Are cars with keyless proximity-based entry protected against range extenders?

Some cars unlock whenever the key fob is within a certain distance. Do such systems generally guarantee the maximum distance in a secure fashion (namely, by requiring the fob to respond within a ...
15
votes
3answers
678 views

What prevents people getting charged over NFC in crowded places?

I don't have an NFC-enabled device and I couldn't find any information about this in Google. What is it that protects me against an attacker with a portable NFC terminal charging payments by just ...
-4
votes
0answers
47 views

Can BitTorrent be exploited? With the help of Immunity debugger or other methods? [closed]

I need help in this question for my college project. Please help I just need the code for exploiting bittorrent.
1
vote
0answers
25 views

How to disable Symbolic link creation option to users in cPanel server? [closed]

In shared hosting server, one user is trying to upload 100s of symbolic link files and trying to access files out side. Mostly it is for malicious purpose. In this image, you can see 100s of symlink ...
1
vote
1answer
129 views

Passwords propagation, Password Trend and Word Generator in Human Mind

Some passwords like "123456", "admin" are outrageously popular, so are the leet transformations and concatenation of digits. The users seem to pick up the password suggestions or just copy the ...
0
votes
0answers
35 views

Slow internet, IP Flood? [duplicate]

Lately, I've been getting slow internet. I checked wireshark and noticed I keep receiving in matter of seconds thousands of UDP packets that my computer does not respond to, and here's the twist: ...
4
votes
1answer
59 views

Security risk: Digitally sign communications for SMB

I have a computer (Windows) on a network where an industrial process is controlled. There is an option in Local Security Policy >> Local Policies >> Security Options >> "Microsoft network client: ...
2
votes
0answers
24 views

Information on the Elderwood Project/Platform [closed]

I've read Symantec's whitepaper on the Elderwood Project and the blog update on the Elderwood Platform. They both make for a very interesting read, especially in the zero-day exploit meta-analysis ...
79
votes
12answers
11k views

What is different about being targeted by a professional attacker?

It is often said that security tools such as firewalls, antivirus programs, etc. are only effective against random, untargeted attacks. If you are specifically targeted by an intentional, professional ...
3
votes
1answer
70 views

(httpd log files) What kind of attack is? How can I prevent it? [duplicate]

In my log files I see hundreds of these registers. I have to say that the client ip changes sometimes. So there are 3 or 4 ips sending this requests... The othersite.something (that I ommited) is ...
114
votes
8answers
13k views

Are “man in the middle” attacks extremely rare?

In "Some thoughts on the iPhone contact list controversy and app security", cdixon blog Chris Dixon makes a statement about web security Many commentators have suggested that a primary security ...
1
vote
2answers
84 views

Is Great Cannon essentially a JavaScript injection attack?

I was reading an article on Great Cannon at Ars Technica (http://arstechnica.com/security/2015/04/meet-great-cannon-the-man-in-the-middle-weapon-china-used-on-github/) and it seems to me that this is ...
0
votes
1answer
29 views

DNS resolution attacks by flooding spoofed replies

Each DNS request has an ID of 16bits. In the event that an adversary is unable to sniff the query, a way to spoof the DNS reply is to flood the resolver with many replies. Request from victim Query ...
0
votes
0answers
14 views

Does NDP (Neighbor Discovery Protocol) reduce ARP (Address Resolution Protocol) attacks?

I read the comparison of NDP with ARP but am uncertain if NDP does reduce any amounts of ARP attacks, given that with NDP, ARP is not used for address resolution. For the discussion to be specific, ...
3
votes
1answer
95 views

Enterprise Security : Where to Start? [closed]

I am trying to start self studying of Enterprise Security Context, but always feeling kind of lost among all the specs and standards etc. Unlike software development, this really is a challenge as far ...
2
votes
1answer
386 views

Facebook iOS SDK Authentication

The Facebook iOS SDK only needs your bundle & app IDs of your iOS app to match those of your Facebook app. If I find out an app's app ID, can't I just create another iOS app with that app's ...
4
votes
2answers
50 views

What's a term to describe multiple shoulder surfing attacks to uncover different parts of the password?

Is there an existing term that describes shoulder surfing attacks where the adversary observes a different part of the password each time, to eventually construct the whole password? An example ...
1
vote
3answers
981 views

How to prevent attacks to server

I have 3 CentOS server configured for my applications. Recently I recognized that there is so many attacks to my servers. I have so many logs about attempt to login to my servers using sshd from ...
2
votes
1answer
53 views

Ideas on how I can fragment captured network traffic?

I am trying to create a lab environment where I can analyze common IDS solutions (starting with Snort specifically) and their ability to reassemble fragmented IP trains. I have a collection of ...
2
votes
2answers
47 views

Classifying Reflected and DOM-based XSS

Having referenced Difference between DOM & Reflected XSS , I observed that certain attacks could be both DOM-based and Reflected XSS. I wish to find out if my understand is accurate, or they ...
1
vote
1answer
196 views

How to check if my usb drives are vulnerable by BAD USB

Mark pointed out that only one chip type is vulnerable to BAD USB, id like to check if mine are, am using only Kingston flash drives here so can you tell me if they are, or if there exists a list ...
0
votes
2answers
58 views

How to exploit Open Redirect Vulnerability?

Redirect/Forward attack code: <?php $redirectUrl = $_GET['url']; header("Location: $redirectUrl"); ?> exploit (Sends user from your page to evil page) : example.com/?url=example.com/faq.php ...
0
votes
0answers
25 views

Buffer overflow lab problem [migrated]

Since our security course doesn't have a lab, i'm trying to solve the Seed project's lab . http://www.cis.syr.edu/~wedu/seed/Labs_12.04/Software/Buffer_Overflow/Buffer_Overflow.pdf But there seems ...
1
vote
1answer
144 views

Is my ISP hacking me? [closed]

Today I was trying to enter my routers admin page. I put the default IP address starting with 192.168. I couldn't login so ran ipconfig, and I discovered that I was assigned a Class A address. I was ...
6
votes
2answers
45 views

Could an attacker prevent IIS from logging requests

I've had an attacker try to gain access to one of my websites through a form using what looks like a blind SQL inject. It is a huge form, and every possible permutation of values has been tried - in ...
1
vote
3answers
125 views

Trouble understand login vulnerabilities

I'm testing my own web page with the following vulnerabilities. #1: Form escapes ' to \' So if a user tries to enter the following information: username: 'or'1=1 password: m username will ...
-2
votes
3answers
109 views

Is it possible to perform a MITM attack with a smartphone?

Will be possible to perform a MITM attack using a smartphone? If yes, that is very dangerous. Is it really a danger attack? Shorted : Is possible to perform a useful MITM attack to a victim using a ...
2
votes
1answer
36 views

DNS Rebinding attack - does this attack require victim to use an attacker's DNS server for resolution? How will that happen?

Usually a preferred DNS server will be set in router's configuration and it will be either the organization's server or some trusted public server. So how would attacker get the victim to use his DNS ...
3
votes
1answer
148 views

POODLE vulnerability in Safari

I have been trying to mitigate POODLE on client side in my organization. I disabled SSL3 in most browsers but couldn't disable it in Safari. Apple released a Security Update 2014-005, which, ...
18
votes
5answers
16k views

Can I detect a MITM attack?

Based on this question here: Are "man in the middle" attacks extremely rare? Is it possible to detect man-in-the-middle attacks, and if so, how would one go about it? In addition, what if ...
0
votes
1answer
132 views

Router detecting constant ack flood attacks and port scans

I first noticed this yesterday in my logs - while I was configuring the router settings, so I don't know how long it's been going on. What should I do? I reconfigured my router with more secure ...
1
vote
0answers
50 views

How can I launch DHCP starvation attack in WLAN?

In WLAN, due to MAC association on Access Point (AP), I can't send the DHCPDISCOVER messages using random MAC addresses. But if I keep my original MAC address as the source ethernet MAC a and random ...
1
vote
1answer
95 views

Detecting web app attacks by parsing log files [duplicate]

Following up on this question as the answers are now 5 years old: Can I detect web app attacks by viewing my Apache log file? My boss has tasked me with analyzing our access.log and error.log files ...
2
votes
4answers
197 views

What would you call an attack where authenticated user modifies other users information on web app?

Authenticated user on web app, using other people's id to update or change their information. So basically the web app is not checking for person who is logged in against the person who he/she is ...
9
votes
4answers
5k views

In light of the FREAK TLS vulnerability, why do so many servers still offer RSA-EXPORT keys?

Ars Technica is reporting on a new attack against HTTPS. Called FREAK, the devices reported as vulnerable include iPhones, Android devices, and Macs running OS X. The attack (as has been clarified ...
3
votes
1answer
77 views

How it is dangerous that the ntp service listen to all IPs on Linux?

When I run the following command I get that the following output: netstat -atpun | grep ntp udp 0 0 172.16.0.1:123 0.0.0.0:* 7734/ntpd udp ...
4
votes
1answer
367 views

POODLE and TLS…not SSL

In December there was a new attack surface of POODLE against TLS 1.0 (think this also covers 1.1 and 1.2?). Anyway, as a system administrator for Windows Server 2008/2012 what can we do do prevent ...
-2
votes
1answer
101 views

Possible Injection to PHP PDO

Expert says that PDO is one of secure scripting from mysql injection. I have read the manual about it and do some little research. And here, I'm trying to get ID value from URL paramater, as in: ...
1
vote
1answer
83 views

Prevent cold boot attack on running laptop by overwriting ram [closed]

I'd like to use my laptop as a recording device when I leave home, but there would still be the possibility for a cold boot attack or with DDR3 RAM even warm boot attack is possible as I have read. ...