An attempt to penetrate a system's security in an effort to evaluate the protections in place.

learn more… | top users | synonyms (2)

-5
votes
0answers
44 views

Link to more active security sites? [on hold]

I have a BS/MS in Computer Science and have worked as a developer for 15 years. Currently I have been reading a lot about computer security. Serverfault and Stackoverflow seem to be the go to place ...
0
votes
0answers
25 views

Snoop-it crashes on iOS6 [on hold]

I'm trying to run Snoop-it on an iPhone 5 running iOS 6.1.4 but it crashes immediately after starting: Feb 25 14:18:56 Sogetis-iPhone Snoop-it Config[745]: MS:Notice: Injecting: ...
-2
votes
0answers
32 views

Technical Pentest Name on Intrusion via Enumeration? [on hold]

Okay, first off, it so happens that I was given a penetration test which were rejected by my lower vulnerability researchers (basically coming from the bug bounty family). As a part of my job role, I ...
0
votes
0answers
16 views

theHarvester not exporting report [closed]

./theHarvester.py -d targetdomain -l 1000 -b all -f output I am using theHarvester python application to gather data on a site for pentesting purposes. Which works well. Accept I am unable to save ...
-4
votes
3answers
102 views

Can I do hacking using Windows OS? [closed]

I have searched the web a numerous times but haven't found an explicit answer to my question. I've studied (at school and on my own) computer networks for 2 years, doing active programming for 4 years ...
2
votes
0answers
38 views

OCSP responder penetration testing

I have to do penetration testing on an OCSP responder. Are there any frameworks for OCSP pentesting? since it does not include any web applications to test, should I only run network penetration tests ...
0
votes
1answer
84 views

WPA cracking with Crunch, JTR & Aircrack

Now I assume that everyone knows of aircrack-ng and John The Ripper with it's fantastic ability to pause and resume cracking. With that aside, I want to add Crunch into the mix, however I can't seem ...
1
vote
2answers
62 views

intentionally vulnerable virtualbox or vmware appliances for practicing mobile pentest? [closed]

Is there any virtualbox or vmware appliances or anything like metasploitable that one can use to practice mobile pentest without the real hardware? I can find those for traditional ethernet but what ...
2
votes
1answer
39 views

Best way to do security testing for a server behind nginx proxy [closed]

I'm trying to do some security testing for my server(not a web server) which is sitting behind a nginx proxy. To start with it, I've done some fuzz testing using Sulley. As expected, most of the ...
0
votes
0answers
6 views

Cannot install IDSwakeup due to LibNet [migrated]

So I did download IDSwakeup and installed libnet and hping3 from ubuntu repositories. When I try to "make" IDSwakeup I get the following error: gcc -o iwu iwu.o -lnet ; \ iwu.o: In function `main': ...
3
votes
1answer
21 views

Architecture dependency issue associated with malicious payloads

My question is regarding architectural restrictions associated with backdoor/bind/reverse tcp payloads used typically to gain shell through exploitation. In a situation where the target box ...
1
vote
0answers
53 views

Designing a dictionary attack using hydra on web login page [closed]

I am trying to develop a pentest on a product for a customer that is really interested in implementing good security. Using tamper data I get this information when clicking on the "Login" button in ...
8
votes
1answer
871 views

How can I find my home network's vulnerabilities when opening it for VPN connections

I want to open my home network so I can connect to it via VPN to do things™ while not at home. This concerns me because I am potentially opening doors that I don't know about. What tools can I use ...
0
votes
1answer
79 views

penetration testing first step [closed]

I've started a course about Penetration testing and CEH on cybrary. The course begins with an introduction that quickly describes each step of pentesting. The first step is essentially to gather ...
0
votes
2answers
36 views

To release as Open Source for Audit or to Keep “in house”

For cryptography, it is considered good practice to release the code so others can audit it...is this also true for penetration testing software?
3
votes
1answer
100 views

Proving SQL Injection Vulnerability

I have recently come across what I believe to be a serious flaw in the security of a 3rd party computer program used within my company. Apologies for deliberately keeping details vague, but I hope you ...
1
vote
3answers
73 views

How to organize a CTF?

In the context of an IT event, my team would organize a CTF (Capture The Flag). About the challenges (we’re working on them). I want to have some references on the types and levels of difficulty that ...
0
votes
0answers
12 views

Trying to use mdk3 with Alfa AWUS036NHA, wireshark detects frames but cannot detect network [migrated]

I'm testing out some various tools, trying to get them to work, but I cannot seem to get the MDK3 beacon flooding mode to work. I'm using an Alfa card AWUS036NHA, I believe it has the correct drivers ...
4
votes
1answer
143 views

How do I scan for GHOST remotely?

I'm talking about CVE-2015-0235. I figured there's no Metasploit package for this kind of check yet and I also understood that there's a special VM by Qualys for this test. Do you guys know of any ...
0
votes
0answers
10 views

Is pesexec only useful with administrative credentials? [migrated]

I am an apprentice penetration tester, and I am trying to read as many tutorials and practice as much as I can. Something I continually see reference to is using psexec to execute commands remotely. ...
0
votes
0answers
51 views

How to test backend virus behavior?

I have a website that allows the user to upload files. The front-end (web tier) checks the file extension and first few bytes of the file for the magic number of an acceptable file, but then ...
2
votes
1answer
55 views

How does the Samba misconfigured '/etc/passwd' file security bypass vulnerability work?

I just found this vulnerability on http://www.securityfocus.com/bid/36363/references, which affects several samba server 3.0.xx. Can anyone explain more about this vulnerability? How this bypass ...
0
votes
0answers
31 views

hydra password penetration test syntax [duplicate]

I am trying to penetrate a password on my own website using hydra. Let's say that I know login and password and i just put both there like in sample below: hydra -l admin -p password 123.123.123.123 ...
1
vote
1answer
50 views

Use THC hydra to make dictionary attack on localhost

I have programmed a log in in my webpage and now I want to test it against a dictionary attack. I am using Apache and my website is not online so to access it I connect to localhost/website In hydra I ...
1
vote
2answers
58 views

Is a REST webservice without any authentication or authorization unsecure?

There is a REST-based webservice that has no authentication or authorization whatsoever - anyone that knows an URL of a particular method of this webservice can use it. However, the URLs of methods ...
1
vote
1answer
43 views

Other than synchronizer token, is there any way of protection against CSRF using http headers?

Recently I came across some websites using HTTP Header namely X-XSRF-Token and a cookie with similar name. Is it a better mitigation than using random token based security for CSRF?
0
votes
1answer
80 views

Brute force attacks detection risks

I would like to ask if using brute force attacks on some websites or online services can be risky in any way for the hacker? Let's say that someone is using medusa tool to crack password on his ...
0
votes
0answers
28 views

Bruteforce with Hydra [duplicate]

I'm trying to use a Hydra script in the following scenario on localhost and Linux: After web form login, my app redirects to another page with header(Location: internalpage.php) I use this syntax ...
1
vote
0answers
45 views

SET tool autopwn website type penetration [closed]

I tried to hack my second computer and phone in my local network. I am not very experienced so instead of picking the particular options and payloads i just pressed autopwn to use them all instantly. ...
0
votes
1answer
77 views

Question about padbuster … newbie

New to this type of attack trying to understand this .net oracle padding attack, i'm using this data : padbuster ...
0
votes
0answers
39 views

Cryptographic Testing

Given an algorithm (say, AES), how to create/generate test vectors? I have tried using the NIST test vectors for AES and found it to be working fine with a package of "chilkat". Suppose, for a ...
2
votes
0answers
50 views

Should veil framework produce packed and obfuscated binaries which bypass virustotal?

I have been working with the veil framework to test an internal IDS system I have in place. I have used a public malware sample which produces an 8/53 hit score on Virustotal and run it through the ...
2
votes
3answers
259 views

SIM card malware advice

My goal is to communicate with a sim card via binary sms and upload new firmware and/or talk to sim card api to retrieve data such as gps coordinates etc... I am not sure how to construct these binary ...
4
votes
1answer
70 views

Database Security

Would having the IP address and name of my database visible to the public be a security risk? I have hosting with godaddy, a shared hosting plan. When I connect to my DB, via MS-SQL-MS, I can see the ...
0
votes
1answer
47 views

How I do get the correct the Tamper parameters from an internal web login [closed]

I am doing pentesting for a web application, but I do not know if am using the Tamper Data add on on mozilla correctly. Could anyone explain how to get the following parameters, and where do I need ...
0
votes
1answer
102 views

Upgrade my Dell Inspiron laptop for PenTesting [closed]

I have a Dell Inspiron N5110 & wanna upgrade it to start practising pentesing with virtual machines. What do u suggest from specs below to upgrade (I have Kali Linux, Tails OS, XP, Metasploitable ...
1
vote
1answer
323 views

Hydra from Kali Linux + Tamper http post form syntax of the failure login attempt [duplicate]

I had asked this question in the general forum I think it is more adequate to place it here. ...
1
vote
0answers
129 views

Is hacking my own account illegal? [closed]

I have just learned email hacking and I want to test it. I am well aware that if I hack into any email account, there are chances that my email service provider will track me. So if I hack into my ...
4
votes
4answers
147 views

External Penetration test by third party

I am planning to engage a vendor to do pen test on my external systems. I know that pen test has a set of systematic steps .. just would like to gather some industry experience. Normally, at which ...
-2
votes
1answer
46 views

Why Application Penetration Testing is required? [closed]

I've developed application for receiving payments on my shop site. However, my clients are asking and forcing to complete a penetration testing. Why there is need of penetration testing, when I ...
-8
votes
2answers
243 views

I need to hack my website [closed]

I'm writing a simple web framework for a project of mine and need to ensure that the websites it produces are secure. In order to check this I thought I might as well just try and hack my own website ...
3
votes
1answer
217 views

Security analysis of Dashlane

I've been asked by a user whether I would recommend using the Dashlane password manager. I'm aware that other password managers have had some significant security problems, including XSS and CSRF ...
0
votes
3answers
127 views

Effect of mail bombing

I have option in my application which send an invitation email to another user. Someday ago, one of my friend told me that, attacker can flood any email using this function. And i have checked that ...
2
votes
2answers
103 views

database of URLs used by penetration tools

When someone is using a penetration test tool on my site sometimes I can find out what tool is that by looking at the user agent strings in the logs. But sometimes I can't because the tool uses a ...
0
votes
0answers
142 views

How to root a virtual device in android-sdk?

I was amused to see no one have ever asked such a question here before. After a little research in google I found only a few links to root a device in avd. Somewhere I also read that the sdk is ...
0
votes
3answers
77 views

Screen capture through silent install routed back out port 80

A penetration test was allegedly done through the following method. The tester sent a user a a hyperlink that: Silently installed a piece of software/code/etc through the browser with 0 user ...
0
votes
1answer
104 views

Windows netsh pivoting

I am pentesting a windows box to which I have gained system privileges. This box has two network interfaces. I have been able to reach machines on the second interface via the below netsh command. ...
5
votes
2answers
444 views

The effect of hidden or spoofed service banners on vulnerability scanners

The linked question relates to error pages, although the same information is often available in HTTP headers, if I follow best practise of hiding service banners: Is displaying what server I am ...
0
votes
1answer
80 views

Automated server security testing best practices?

Is there a standard way of automatically testing the basic security of my web server? I've found a couple on-line services, (e.g. http://hackertarget.com/), and they seem ok, but I'd like to start off ...
1
vote
2answers
60 views

What would be a good way to create a security testing schedule?

I've been tasked with creating a formal security testing schedule / calendar for our organisation's applications, as most of our current testing (scans, pentesting, etc) is done ad hoc. I'm wondering ...