0
votes
0answers
6 views

What dashboards are really helpful in a Security Operations Center(SOC)

How effective are the current dashboards projected on big screens (or even viewed in desktops) in a SOC Center ? Are the eye candy geographical maps, histograms of top-k hosts/malware/files etc. , pie ...
0
votes
0answers
7 views

Difference between Architecture review and a Design review

As the question says, I would like to know the difference(s) between an Architecture review and a Design review. If someone could explain the two using an example, such as an Architecture review of a ...
0
votes
0answers
2 views

Tracing stolen android tablet via MAC address

I lost my tablet , but I can see that the tablet is connected to the network on my router: :So I know the MAC address but I am unable to trace my tablet using this information and I am running out of ...
0
votes
0answers
11 views

Computer Security

In the ideal block cipher with 64-bit blocks, there are 2^64! possible keys. How many bits one needs in order to represent the keys in binary? Show your calculation steps.
1
vote
0answers
9 views

Getting started with biometric locks?

I am not sure if this is the place to ask this question and if it is not, i would really appreciate it if you could direct me to the right place. I wanted to understand the functionality and the ...
1
vote
1answer
27 views

How can I tell if a user is access website with a forged IP?

there is a username (USERX). It's a suspended user. It it appearing in my user login files. It always appears in the middle of someone elses attempt (USERA) to reset their password, and WITH USERA's ...
-3
votes
1answer
39 views

Is nobody else worried about the recent trend of graphical “noise” in GUIs? [on hold]

This is something that has been bugging me for a while. And "for a while" I mean years. Do you notice anything weird while looking at some recent closed source GUIs, for example OS X? Look closer… ...
1
vote
0answers
12 views

Mysterious Incoming/Outgoing Packets on my Wireless Connection

Right now I am connecting to my work server as usual and during my connection through the VPN I always monitor the network ping through terminal and its always between 70-90. It usually never goes up ...
0
votes
1answer
93 views

Post from HTTPS to HTTP

If a server posts a message via HTTPS to another server that does not have HTTPS enabled, will that message still have been sent encrypted? For example, a message from https://example.com to ...
0
votes
1answer
11 views

follow up to previously answered “Escalating from Apache shell to root”

I have seen numerous questions similar to the above with answers that relate to elevation of privileges to those of root. the answer and example that silverlightfox has given is one of the better ...
0
votes
0answers
18 views

Looking for a (simple) utility to decrypt rsa-encrypted text in Windows?

Quick question: I'm looking for a simple utility program to be able to decrypt rsa-encrypted data (either base64-encoded or binary attachment) on a Windows workstation. Scenario: There is a group of ...
-4
votes
0answers
23 views

Is someone using my PHP script?

Well I've made a forum in PHP from scratch and I'd like to share it online. I'd like to know if there's any way to figure out if someone's using my script.. Basically I'd like to know how many people ...
0
votes
1answer
8 views

General concerns with cookies and privacy

The following post is in regards to headless *nix machines only... I know programs like wget allow options to control cookies. However if a program is not HTTP centric, has little or no options for ...
-1
votes
0answers
16 views

DDoS detection system

What are statistical characteristics of DDoS traffic? What are the traffic collection methods for ddos? I would appreciate any help. Thank you
0
votes
1answer
22 views

What these Wireshark screenshoots should demonstrate?

I'm reading an article about the recent Github DDoS with traffic comming from non-chinese Baidu users here. There are two Wireshark screenshoots in the middle of the article with arrows pointing to ...
2
votes
2answers
61 views

Is VPN the best solution against man-in-the-middle attack?

I'm looking for the best way to protect my enterprise against man in the middle attacks, because a lot of people connect to the same network. So I was thinking of creating a VPN. Is this really the ...
0
votes
1answer
9 views

Double socket connection

I'm busy experimenting with TCP socket connnections. I have made a client SOCK_STREAM socket andi've got a few questions: Is there any way that a streaming(TCP) socket can get data from another ...
0
votes
1answer
34 views

Software Testing vs (Web) Penetration Testing

I would like to ask about the differences between Software Testing and Web Application Penetration Testing. I am aware of usage different tools in both disciplines Software Testing (JIRA/Selenium) ...
0
votes
0answers
9 views

How can i make Digital forensic Images with Vmware?

My tittle did not complete. I will explain as a wide view. How can i make Digital Forensic Images with V-mware, Virtual box, V-sphere for practice digital forensic. and then how can i add various ...
0
votes
0answers
21 views

What is basic Digital Forensic Hardware?

Last a few months, I wanna setup a small lab about Digital Forensic. So I searched which hardware device need for my small lab. I cannot imagine about that which device need for my digital lab and ...
8
votes
1answer
572 views

Does browser 'view-source' mode avoid scripting attacks?

Let's say there's a URL www.badjs.com which is untrusted and may contain bad scripts. Intuitively, a view-source navigation to that URL does not execute any scripts so it should be safe. It would at ...
0
votes
1answer
30 views

Android - recover encrypted images

I have nearly 0 understanding of encryption, I just want to recover my old photos. In my old Android phone I used a certain photo-video locking app to encrypt my images. Images were stored on SD ...
0
votes
1answer
16 views

What exactly is meant by serverAuth and clientAuth

I'm building a network that will allow employees and customers to access the company systems. To that end I'm using a Linux 7 server as a firewall/authentication server. Initially for test purposes ...
0
votes
0answers
15 views

Wireshark TLS Handshake shows version as TLS 1.0 and TLS 1.2 both [duplicate]

As you see below in the image, wireshark screenshot shows TLSv1.2 Record Layer : Handshake Protocol, but version attribute's value is TLS 1.0 Why does wireshark shows version as TLS 1.0 and TLS ...
1
vote
3answers
41 views

Using TOR secure

TOR is fully secure only if I use HTTPS, right? But not every site supports it, so I had an idea - some online anonymizers support HTTPS, so if I connect via TOR (TOR - ANONYMIZER - site), will that ...
0
votes
2answers
16 views

How to exploit Open Redirect Vulnerability?

Redirect/Forward attack code: <?php $redirectUrl = $_GET['url']; header("Location: $redirectUrl"); ?> exploit (Sends user from your page to evil page) : example.com/?url=example.com/faq.php ...
1
vote
0answers
37 views

BEAST some misunderstandings

I was reading this document about the BEAST attack discovered by Thai Duong & Juliano Rizzo, there is two points a cannot understand. At the section 5 - Application: Decrypting HTTPS Requests, ...
1
vote
0answers
12 views

software can be audited, is there an equivalent for hardware?

In software, code auditing can be used as a means to gain trust into a software. Of course closed, proprietary software would complicate this, and require to do reverse engineering. Anyway there seems ...
5
votes
0answers
24 views

Is it possible to emulate real network printer i.e. to run some actual firmware in VM?

I've got to the section related to network printers exploitation while going through one security course. Under "network printer" I understand standalone devices with a dedicated ethernet\wireless ...
0
votes
2answers
38 views

Is End to End security possible without physical contact?

I noticed that a lot of messaging start to provide "End2End" security, but I wonder how this can be possible without a key exchange between the the two clients. To my understanding to provide real ...
1
vote
0answers
28 views

Suspicious GET request parameter list ?

Is there a public list of common suspicious GET request parameter ? I mean - SQLi, Command Injection, Admin access etc. I am interested in such list, to be used to detect suspicious GET request in ...
0
votes
1answer
19 views

localhost to localhost ICMP traffic that is suspicious.. any idea of what is creating this?

I keep seen this on my tcpdump output.. is prob something very simple and logical but I can't see to see any process with lsof or netstat doing a ICMP request to it's own 127.0.0.1 every 2-3 secs... ...
0
votes
0answers
30 views

Windows 8 keeps asking for Admin Password for ONE SPECIFIC program

I am admin of a windows 8 PC . I turned UAC off so other users can open programs without my permission and it works perfectly for all the softwares however there is this one program (Backgammon ...
0
votes
2answers
55 views

What is the real use of certificates on the web?

When you get a certificate from a website you visit, signed by a trusted CA, is it trust-worthy because the CA authority did a background check on them? But how does this help with spoof websites? ...
0
votes
0answers
7 views

How to Verify the Integrity of the BlackBerry Momentics IDE Download for Linux

I am currently setting up development environments for BB10 apps on Linux workstations. BlackBerry provides their Momentics IDE for free from (https://developer.blackberry.com/native/downloads/). The ...
0
votes
1answer
23 views

Best practices for encryption from web<-> specific client

If we want to allow sensitive data between a web server and specific client only, is there anything more that can be done besides the following? Note that this is potentially a duplicate of ...
0
votes
2answers
35 views

Setting up a security lab, looking for a little guidance

I'm new here. Over the past couple of years I've had a growing interest in the security aspects of IT/CS. Recently, I've started setting up a lab for myself based on a kali/win7 dualboot and I've ...
0
votes
1answer
25 views

Malware (internet connectivity) and defending against it

I was wondering whether anyone knew if malware could spread without internet connectivity? Also, can you defend against malware by releasing counter-malware that spreads exploiting the same ...
2
votes
1answer
22 views

How to fix open redirect vulnerability?

In redir.php: header("Location: {$_GET['addr']}"); For fixing open redirect vulnerability i can think of several ways: 1- (Side effect of) Using a security token (anti-csrf token): ...
-2
votes
0answers
32 views

Encoding scheme and padding with '=' [on hold]

Does anyone know which algorithm uses '=' as padding character besides Base64? I got the encoded text ...
5
votes
1answer
317 views

What does a Firewall mean by “connect to TCP port without your permission”?

McAfee is reporting incoming network connections blocked from IPs like 198.252.206.149 (StackExchange Inc.), 54.179.231.116 (Amazon Technologies Inc.), 74.125.68.106 (Google Inc.), etc. The ports ...
2
votes
1answer
37 views

difference between public key and host key and security of host key

In SSH, what is the difference between host key and public key. Public key I believe that is part of private/public key pair, so, that anything sent by server(encrypted using private) can be ...
1
vote
0answers
26 views

Kerberos Authentication

I am trying to understand Kerberos Authentication. So far my understanding is: Supposing 'Alice' (A) wants to talk to 'Bob' (B). Step 1: A -> S: {A, B, None} K(A, S) Where S is the ...
0
votes
0answers
18 views

How do I decrypt encrypted text using a public_key.pem and an unknown hex data file?

I have been given a 3 files by a client: A public key (text file that begins with 'Begin Public key') An unknown file type containing some hex data - 'smthing.uyu' (most likely the private key?) ...
0
votes
0answers
19 views

Securing decentralised cloud scaling

Approach Require a certain percentage (quorum) of nodes to agree in order for my decentralised multicloud to grow. Benefits Reduced likelihood of growing too quickly (e.g.: 2 new nodes created ...
0
votes
0answers
19 views

How to merge modsecurity rules?

I have this rule: <Location /login.php> SecRule REQUEST_URI "@contains login.php" "phase:5,chain,id:981218,t:none,log,pass,msg:'login attempt for user %{ARGS.loginId} ...
1
vote
0answers
23 views

hsts bypass with sslstrip2 + dns2proxy

I am trying to understand how to bypass HSTS protection. I've read about tools by LeonardoNve ( https://github.com/LeonardoNve/sslstrip2 and https://github.com/LeonardoNve/dns2proxy ). But I quite ...
0
votes
0answers
24 views

Hiding symmetric key inside encrypted data

My server generates an AES encrypted file which when downloaded acts as an input for an application. So, should I hardcode the symmetric key inside the application or should I randomly generate the ...
1
vote
1answer
36 views

How to generate self-signed EV SSL Certificate?

I configured XAMPP / Windows on my laptop so that this URL: https://www.supersite.com/ points to XAMPP / localhost rather look elsewhere. I basically generated a self-signing certificate, imported ...
0
votes
0answers
6 views

Use cases for IPC security windows communication

There are two processes on windows machine. One is in user space and second is a service. User space process sends data to service. Because iam starting to think about securing somehow communication ...

15 30 50 per page