The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
1answer
36 views

How to maintain validity of user credentials?

In an example scenario consider that; I am a customer of organisation and I have two separate accounts with two different departments X and Y. I can login in to each department's website by using ...
5
votes
2answers
818 views

Appropriate response to 2014 Russian Security Breach (CyberVor)

The report from Hold Security says that 1.2 billion sets of credentials are in the possession of this party. I have a feeling that this report may be a hoax or a partial hoax due to grammatical errors ...
2
votes
1answer
68 views

Hard Coded Credentials in Equipment Serviced by Many People

According to National Public Radio, Ruben Santamarta has reported that gear aboard airliners and accessible through on-board WiFi or in-flight entertainment equipment uses hard-coded login ...
0
votes
2answers
65 views

securely storing password in a file

I am working on making a log file for a small application. If an error occurs in the application then I have to send a mail to a person. I've figured out the code to send a mail to a person, but I ...
2
votes
1answer
65 views

Credential In Windows [closed]

How can I view the Credentials stored in Windows? Is there any possible way to view the stored password? I can just export them..
1
vote
0answers
36 views

Storing Tenants Cloud Keys In a Database

Imagine you are building a public service where you need to store the customer's cloud credentials(like their aws secret and access keys) in your database to regularly use by your backend services in ...
0
votes
2answers
155 views

How to scan a website using Nessus with login credentials

I have scanned my website using Nessus.But I need to scan it as logged in user since most of the urls are accessible only if we are logged in.How can I set website login credentials in Nessus?
2
votes
1answer
56 views

/WEB-INF/web.xml showing MySQL credentials?

I found the file /WEB-INF/web.xml on a domain I'm associated with. The XML file contains: <database> <jndi-name>jdbc/mysql</jndi-name> <driver> ...
1
vote
2answers
65 views

Proving SSL need

I need to prove the need we have to install SSL certificates in our webservers. For that I've been requested to try obtaining sample credentials (in lab enviroment) during a http authentication ...
1
vote
0answers
64 views

Can ophcrack crack credential files

i have obtained some credential files from another pc and would like to decrypt the credential files. These are the ones found under local/roaming profile in Appdata folder ...
2
votes
0answers
182 views

copying roaming profile credential file of another computer

I am trying to recover login information of another computer. I have managed to copy the local/roaming profile credential files located in C:\users\%username%\APPDATA\local\Microsoft\Credentials\ and ...
1
vote
0answers
85 views

How should I authenticate my SPA frontend with my API since I´ve got no authentication process in the site?

We are designing a web site for selling financial products online. The following is a high level description of the components: Our frontend will be a SPA built with AngularJs. The frontend will ...
0
votes
1answer
130 views

What are the implications of storing sensitive data in bookmarklets?

While discussing alternatives for asking the browser to remember your password, one guy suggested using a bookmarklet to store users' credentials. The original answer is in portuguese, but I'll ...
8
votes
2answers
355 views

Are userid and password needed in order to pentest a website?

We are a company that has many web applications developed in ASP.NET. Our Internet service provider (Telefonica) wants to test our web sites looking for vulnerabilities. For that, they are asking us ...
1
vote
1answer
230 views

how to pass credentials across applications securely?

To simplify the user experience , if we want to design a system such that the user login password for the desktop account itself can be shared with various applications like chat/email/skype etc. ...
3
votes
2answers
159 views

How are WPA Keys stored on a router?

Should the router only store a hash of my encryption key or is it stored as plaintext? I believe (but not certain) that the WPA key is itself an encryption key, buy shouldn't that be encrypted like ...
0
votes
2answers
65 views

How to alert webmaster if he does not put contact address

i found a session cookie that contains user status with two parameters NO for standard users when altering this to YES you become a Premium user and you can download content restricted to premium ...
4
votes
1answer
131 views

Keeping a user's passwords, but can't hash them

I'm making a web application to provide intermediary service for customers to facilitate their interaction with a set of other web applications. A simplified example would be to let a user access his ...
0
votes
1answer
128 views

Credential (et al) storage on Android - And general application credential storage inquiry [closed]

Please read before assuming this should go in another forum (like an android forum) - this is a Security question. Here is the scenario: Developing an health care based android application that has ...