An attempt by a threat to exploit a weakness in a system.

learn more… | top users | synonyms

2
votes
1answer
225 views

Can I perform WEP cracking from several laptops against 1 AP

I have successfully being able to perform WEP key cracking attack using aircrack tool. I want to allow my students to test this in a lab environment. They will be working fro their own laptops against ...
2
votes
1answer
248 views

Facebook iOS SDK Authentication

The Facebook iOS SDK only needs your bundle & app IDs of your iOS app to match those of your Facebook app. If I find out an app's app ID, can't I just create another iOS app with that app's ...
1
vote
1answer
136 views

How does an attacker authenticate to a service using just the hash of the user (after performing a pth attack)

Let's say the attacker got the username and the password's hash. How can he use it when authenticating to some service in its domain with NTLM , for example? How can he send the request as the ...
0
votes
1answer
41 views

Worst-case scenario OPEN URL REDIRECTION and why google not covering it in bug bounty

OPEN URL REDIRECTION as per in my opinion can be proved very dangerous by crafting attacks such as phishing. But it seems like google thinks it as a very low level bug and does not provide any ...
0
votes
1answer
76 views

Have team viewer id of machine that hacked in, any way to trace this without the authorities?

I read a post answer to similar question. I am wondering if there is any list I could access re teamviewer id's, as the police are being very ho hum about this. many thanks, seriously hacked in ...
1
vote
0answers
43 views

The simplest way to emulate TCP-IP protocol violation / anomaly attacks

Reading up upon security on web applications I did not found that much info on TCP-IP and in particular HTTP/UDP protocol violation / anomaly attacks. My question: What is the general mechanism of ...
1
vote
0answers
100 views

Anyone seen weird messages in their logs?

I've been reading over the logs on my honeypot and discovered the following messages that seem to be either gibberish or a cypher message: kernel: v0 neigfradn tt kernel: [2108296.63083] devc nt nee ...
1
vote
0answers
998 views

Whole system ACK flood attack making internet slow

Over the past few days, I'm noticing that the log of my wireless router is showing an ACK flood attack from various IP addresses. I use a D-Link DIR-600L. I've searched through the internet, also ...
1
vote
0answers
106 views

Disable HNAP on D-Link router

I'm concerned that Home Network Administration Protocol (HNAP) is a serious vulnerability that exposes consumer network routers to remote management by malicious entities such as government ...
1
vote
0answers
3k views

Linux Hydra issue - random correct password success

I have an issue with Hydra when i use it. First let me inform that, i read multible guides, tries the excact same command lines as in guides directly supported by the Damn Vulnerable Web Application ...
0
votes
0answers
122 views

My Ipv6 is under attack by the smurf6?

when i go to whatsmyip.org under my host name i get "Your.Ipv6.Is.Under.Attack.By.The.Smurf6.Info" what does this mean? I'm using private internet access as my vpn so i'm guessing PIA is under some ...
0
votes
0answers
73 views

Perform THC-Hydra Dictionary attack on Microsoft forefront TMG login

I work as an IT consultant in a High School. Recently, a student was able to gain access to a teacher's account on the school intranet. When questioned, he simply stated that he "hacked" the system ...
0
votes
0answers
112 views

Apple ID phishing lead to my router infected?

For future visitors, I will try to be as general as possible, but I must include details to give you a full picture. As my Apple ID's security email address belongs to my brother, he forwarded an ...
0
votes
0answers
86 views

How to avoid cloaking attacks?

A few days ago, we found a lot of web pages on Google with the name of our web sites, for example http://website.com/public/our_agency_name.asp. Every day we find more of this kind of URL. Looking ...