An attempt to exploit a weakness in a system, either for nefarious or research reasons. Questions with this tag should be about designing, carrying out, or defending against the attack itself, rather than about the underlying weakness.

learn more… | top users | synonyms

6
votes
3answers
81 views

Can a TCP connection be terminated by an attacker if SSL/TLS has been used to protect data in the TCP segment?

I understand that SSL/TLS is built on top of TCP. That is after a TCP connection is established, an SSL handshake can be started. When it is completed, all communication will be encrypted and ...
3
votes
2answers
616 views

Facebook iOS SDK Authentication

The Facebook iOS SDK only needs your bundle & app IDs of your iOS app to match those of your Facebook app. If I find out an app's app ID, can't I just create another iOS app with that app's ...
0
votes
2answers
126 views

What can I do about being heavily port scanned?

I have two devices connected wirelessly to my Linksys router while running Symantec Endpoint Protection on my computer. A few days ago I started using the internet by connecting the cable directly to ...
3
votes
1answer
102 views

JS snippets on my live project do not appear in my code residing on my production server

I have a Django website project that is live (let's call it example.com). It's a forum where users can submit comments and reply to them. It has a Postgresql database, and gunicorn + nginx reverse ...
0
votes
1answer
99 views

What type of attack can bring a website down by serving a redirect loop?

My website has been up for a year and all of a sudden is down with a too many redirect message. www.jdmxchange.com (classifieds for modified cars/parts) I tried to use fiddler to see if it was ...
-1
votes
1answer
67 views

Oversized XML attack in axis 1.4

How can we prevent oversized XML attack in webservice implemented with Apache Axis 1.4?
-2
votes
1answer
56 views

What is a transient attack?

I just faced a problem of an IP is taking forever to respond, i had been told it might be a transient attack.... I tried googling it, but cant really find more info. Can anyone kindly explain to me ...
2
votes
0answers
150 views

Is the process Wslxrqjet.exe, tagged 'Google Chrome', malicious?

Multiple instances (between 3 and 15) of this of this process Wslxrqjet.exe are running on my Windows 8 system at all times. Windows Task Manager 'Description' field for all instances is "Google ...
2
votes
0answers
265 views

Older Cell / Smart phones were susceptible to bluesnarfing / bluetooth attacks, Why specifically are smartphones secure from this attack now?

Older cell / smart phones were susceptible to bluesnarfing / Bluetooth attacks, Nokia phones in particular. But now in days, modern smart phone and cell phones that use Bluetooth technology for ...
1
vote
0answers
57 views

Encrypted Malicious Traffic Database

I was working on a little research project to correctly identify the encrypted traffic pattern generated by various tools/applications for example metasploit (or increase the success rate). I have ...
1
vote
0answers
44 views

How to find which domain in my VPS triggered a DDoS attack with WP xmlrpc

Today, my data center suspended my VPS for DDoS attack reasons. They say one of my clients, that has WordPress website, started a DDOS attack to another websites using xmlrpc. But I don't know which ...
1
vote
0answers
97 views

What is an Origin Error Attack?

Similar to my previous question here, however I thought it was best to ask two separate questions rather than combining them into one. From The Forrester Wave™: DDoS Services Providers, Q3 2015 ...
1
vote
0answers
125 views

Buffer overflow and register contents?

I am doing an exam practice question, suppose I have a function like; void func(char* arg) { char buf[32]; strcpy(buf, arg); } command break func: -buf begins at 0xbffebfb0 -(gdb) x/2wx ...
1
vote
0answers
144 views

How can I launch DHCP starvation attack in WLAN?

In WLAN, due to MAC association on Access Point (AP), I can't send the DHCPDISCOVER messages using random MAC addresses. But if I keep my original MAC address as the source ethernet MAC a and random ...
1
vote
0answers
825 views

How Modification attacks works?

Theoretically... In Active attacks we have "modification attack"...ie "In a message modification attack, an intruder alters packet header addresses to direct a message to a different destination or ...
1
vote
0answers
108 views

Example of a hacking attempt that failed because of a bug?

We hear all the time in popular press (and increasingly, in government publications + scholarly articles) about how "cyberattacks" make us insecure, because we have so many vulnerabilities (mostly ...
1
vote
0answers
129 views

Anyone seen weird messages in their logs?

I've been reading over the logs on my honeypot and discovered the following messages that seem to be either gibberish or a cypher message: kernel: v0 neigfradn tt kernel: [2108296.63083] devc nt nee ...
1
vote
0answers
212 views

How to avoid cloaking attacks?

A few days ago, we found a lot of web pages on Google with the name of our web sites, for example http://website.com/public/our_agency_name.asp. Every day we find more of this kind of URL. Looking ...
1
vote
0answers
182 views

How does an attacker authenticate to a service using just the hash of the user (after performing a pth attack)

Let's say the attacker got the username and the password's hash. How can he use it when authenticating to some service in its domain with NTLM , for example? How can he send the request as the ...
1
vote
0answers
3k views

Whole system ACK flood attack making internet slow

Over the past few days, I'm noticing that the log of my wireless router is showing an ACK flood attack from various IP addresses. I use a D-Link DIR-600L. I've searched through the internet, also ...
1
vote
0answers
5k views

Linux Hydra issue - random correct password success

I have an issue with Hydra when I use it. I have tried the same command lines given in guides directly supported by the Damn Vulnerable Web Application (DVWA) v1.8. Ok so.. here is my attempt ...
0
votes
0answers
54 views

Prevention of sinkhole attacks

I have read about many approaches to launch and detect sinkhole attacks in wireless (sensor) networks. Yet I couldn't find any (good) articles to read about the prevention/avoidance of sinkhole ...
0
votes
0answers
57 views

Are link-flooding attacks a real threat or only an academic scenario?

I read some papers about link-flooding attacks (i.e. flooding network links) and I wonder if these attacks are really of relevance in the real-world and what makes them so dangerous compared to ...
0
votes
0answers
30 views

Is there a way for someone to block an email from reaching its recipient?

I don't know if this can be done with people who can email spoof your contacts but I've been noticing that my emails just aren't getting to where it needs to go. In the same vein, I also don't get ...
0
votes
0answers
65 views

SSH attempt blocked now ECDSA keys changed

Last night I had an external IP tried to access my server over SSH. The attempt was blocked as it failed to authorise in the number of times and time limit that I'd specified. Doing a whois on the ip ...
0
votes
0answers
47 views

CPU instruction encoding on x86 that is free from ROP attacks

x86 has a dense instruction encoding, and thus enables ROP attacks. Are there any CPU instruction encoding schemes that are free from these attacks?
0
votes
0answers
41 views

Behaviour of DNS query packet

When the configured name server resolver is not reachable, the query packet will retransmitted after certain t times (in windows, every 1 seconds until 8 seconds,max). The behaviour of the legitimate ...
0
votes
0answers
78 views

Wifi Pineapple :Modifying white list by client

If wifi pineapple maintains a whitelist with specific ssid's, then it responds to only those ssid probes.Is there any method or tools by which I can access/modify/interact with wifi pineapple's white ...
0
votes
0answers
50 views

Possible to run snort without modifiers?

Is there anyway (e.g some command line argument) with which we can tell snort to run and perform detection but without caring for the rule modifiers if there are any ? e.g alert tcp any any -> ...
0
votes
0answers
287 views

Victim loses Internet connection during MITM attack

I tried to do MITM attack on my network. I enabled ettercap, marked my router as TARGET1 and my second computer as TARGET2. Then I enabled 'ARP Spoofing'. I do not know why - but after this operation ...
0
votes
0answers
181 views

The simplest way to emulate TCP-IP protocol violation / anomaly attacks

Reading up upon security on web applications I did not found that much info on TCP-IP and in particular HTTP/UDP protocol violation / anomaly attacks. My question: What is the general mechanism of ...
-1
votes
0answers
21 views

Explanation for these entries in the Suricata fast.log?

We have installed Suricata on our system. We have the following similar lines in our fast.log. Can anyone explain these lines? 03/17/2016-17:18:52.744707 [**] [1:2200075:1] SURICATA UDPv4 invalid ...
-1
votes
0answers
31 views

How to do DNS query spoofing?

I was reading out OpenDNS amplification DDoS attack and it says attacker use DNS query spoofing redirected to Victim server. How do i do query spoofing, I wanted to test that in my LAB. is there any ...