0
votes
0answers
3 views

verifying mobile messaging app security

I want to verify the security of signal messaging app. signal is said to offer several security features. i want to try several attacks. this include attacks that have worked on other more vulnerable ...
0
votes
0answers
13 views

What should I do when I find out some company user database I am listed in was leaked?

Today the antispam tool in the company I work for blocked several emails. It has been months since last time, so I took the time to analyze the quarantined messages. Since I almost never give my ...
0
votes
0answers
8 views

Potential security concerns with using Torrent Trackers Servers for establishing P2P

I am designing a small p2p system, and I am thinking of using Torrent Tracker Servers, by way of a unique infohash, which all the peers share and use to find each other. The idea being, the first ...
0
votes
0answers
15 views

Protect wordpress from brute force

One of my WordPress sites is being constantly attacked with brute force. I have Wordfence and Clef plugins installed. The number of login attempts is limited to just one. The password is very strong, ...
0
votes
0answers
9 views

USB TEMPEST attacks: viable range?

Is there any published research into the viability of reading Universal Serial Bus signals at a distance from the connection, using electromagnetic radiation emitted from the bus? If not, what is the ...
0
votes
0answers
7 views

return-to-libc can't get the system function address

I'm trying to exploit my own code, just to learn how the "return-to-libc" technique works. I'm following a tutorial which basically says that to use this, I must find the address of the function I ...
0
votes
0answers
16 views

How to know if a file is malicious with static analysis?

I'm a beginner in malware analysis.I would like to know what should I do when basic dynamic analysis doesn't allow me to know if an executable is malicious or not. Should I start reversing the main ...
0
votes
0answers
12 views

Executing JS script in a tooltip without “<” and “>” characters (XSS) [duplicate]

In the system that I am working on I have a simple form. In the form there is an input called "ID". The contents of the input is than displayed in a tooltip (after clicking the "i" icon) The input ...
0
votes
0answers
5 views

SQLCipher and PRAGMA key on iOS

I'm a bit confused as to how SQLCipher handles the PRAGMA key provided for encrypting the SQLite database For background: I'm looking at options for encrypting application data at rest. From the ...
0
votes
0answers
10 views

How can I do a Windows registry check with OpenVAS with out a port scan?

OpenVAS has the function to check Windows registries, but when i try to check a registry it also does a port scan. I used the scan configuration out off the manual. ...
1
vote
3answers
432 views

Why is it considered safe to install something as a non-root user in Linux environments?

We always hear it is safe to run unknown programs as non-root users in Linux because non-root users are sandboxed from the system level and can't change anything out of their permission scope. If ...
0
votes
1answer
30 views

Ransomware doesn't change file extension after encryption

Today, one of my end users using Windows 7 (for reference) got infected with a ransomware variant that weirdly enough doesn't seem to have changed the files's extensions. Is this possible? Is there a ...
0
votes
0answers
17 views

What can possibly happen to a public SSH server?

I'm writing a console emulator in JQuery, which will connect to a server through SSH and dynamically send commands (through AJAX) and receive output. Basically it will be a remote ssh console on a ...
1
vote
0answers
14 views

Defense-In-Depth With Common Security Controls

Many operating systems implement system capabilities, Posix access controls (DAC/ACLs) and mandatory access controls (SELinux), each using different underlying security controls to provide individual ...
0
votes
0answers
21 views

Targeting a specific machine and known setup with Armitage / Metasploit?

Most introductions to armitage / metasploit start with searching for potential targets. But if you want to pen test your own setup then it probably makes more sense to target the specific machine and ...
0
votes
2answers
36 views

How can the nmap tool is used to evade firewall/IDS

Some techniques is used to Securing the Operating Systems against the network attcks e,g: Firwall , Antivirus , IDS like SNORT ... To take advantage of the nmap tool Is that possible to deceive the ...
1
vote
1answer
30 views

How can I contract an email tracking service and be silent about it?

I use a customized e-mail and my web-master, who is also the domain owner, doesn't allow me to see DNS settings. I'm suspicious that he's forwarding the messages addressed to myname@company.com to ...
3
votes
3answers
533 views

What are the disadvantages of using public key cryptography when encrypting files?

I am wanting to encrypt a file with my public key, my friend told me that this is not a good idea but did not explain why. Can someone explain please.
0
votes
2answers
55 views

How to detect XSS in GET requests?

How to detect XSS in HTTP/1.1 GET requests? A request can be malicious and I want to know how to detect if the GET request to a server is trying to XSS my website?
0
votes
0answers
27 views

How to safely pass password reset token from http get request to html page?

I am working on implementing my own custom password reset that sends an email where the user is taking to a page to reset their password. So far I have generated a unique token that gets put in an ...
0
votes
1answer
27 views

Does use of fixed padding pattern compromise AES-ECB

I'm working on an application where AES-256-ECB has been specified. It has been asked that a fixed pattern is included at the end of the message to allow the decoding end to ensure the decryption has ...
2
votes
0answers
37 views

Looking for a “spam feed”

I am looking for a feed of e-mail spam messages. I searched for a feed but found nothing that I can use. Does anyone know a site or service that offers a feed of actual spam messgaes that are ...
1
vote
1answer
27 views

Should I concatenate root certs

I am installing SSL cert and I am in doubt about should I concatenate site cert, intermediate cert and root cert or just site and intermediate cert ?
0
votes
0answers
12 views

What are some ways an attacker could gain access to my phone? [on hold]

I have AIMSICD installed on my unrooted Galaxy Grand Prime running 5.1.1. I don't connect it to my home router, which I'm assuming as a matter of course has been compromised, or wifi hotspots. ...
1
vote
2answers
46 views

How can I tell if a .pdf I was sent contains malware?

I was emailed a .pdf by a family member. I have reason to suspect that it was given to said family member by someone who would like nothing more than to infect me with a Remote Access Trojan. How can ...
0
votes
1answer
26 views

Creating self-signed certificate for localhost and trusting fully

As an accompanyment to a web application we plan to have a node application running as a windows service running on the client computer. This will run a small web server which will listen on port XXXX ...
4
votes
0answers
45 views

What are the recommended scrypt cost factors for 2016?

I've been trying to look for the answer, but the latest one I found was outdated by three years. So what are the recommended scrypt cost factors for 2016?
0
votes
0answers
18 views

Why is Fragmentaion done on layer 3 (Network layer) [migrated]

Why is fragmentation done on network layer and why not on other layers ? Fragmentation means splitting the packet into to small pieces and sent from source to destination. The maximum MTU size is ...
2
votes
0answers
19 views

How to enable self signed certificates in Windows 10?

I want to use a Yubikey 4 with Windows 10 Pro for Bitlocker and login with my TPM. Unfortunately, I found out I need to enable self signed certificates and all the guides on the Internet I found were ...
0
votes
0answers
4 views

Mobile Security and Vulnerability Analysis tool [migrated]

What tools should I use to test the security of my iOS application? What are the open source tools available to make vulnerability assessment of an iOS and android application? Any online tool which ...
0
votes
1answer
25 views

What security policies and practices could one practice to safegaurd against being inebriated?

My passwords for the most part as well as access procedures I could do while inebriated/intoxicated. Be it a simple login/password login to email or VPN and accessing a database. This might sound ...
3
votes
2answers
171 views

Why is 128bit AES considered very strong but 160bit SHA depreciated?

Why is 128bit AES considered very strong but 160bit SHA 'insufficiently secure'? Google/chrome/browsers seems to drop support for SHA1 SSL certificates. I assume it's more simple to calculate SHA than ...
32
votes
6answers
4k views

I almost searched my password, but didn't press enter. Is my password at risk, because of autocomplete or anything else?

Without even thinking about it, I typed my password into the Google search bar, but I didn't press enter. Since autocomplete is on, does that mean my password has been logged or indexed somewhere? ...
1
vote
0answers
28 views

Should the RTP feed from a surveillance camera be protected?

I see a lot of camera system and they're either using RSTP over RTP or just RTP. Most of the times they are on straight HTTP for the login, some will be on HTTPS, but unless forced (which I have ...
4
votes
1answer
37 views

Transport Layer Encryption vs. Application Layer Encryption

Can anyone tell me the key differences between Transport layer encryption and Application layer encryption and outline example use cases where each are most appropriate? The research I have done so ...
1
vote
3answers
41 views

Is there an added benefit to authentication within a part of an application, after authenticated into the main application?

Essentially I have a application that is 2 parts. One part is on the user's machine, which will upload files to my server, and the other part is a web application that works with those files. ...
-4
votes
0answers
87 views

Somehow hackers have used my email box to sign up me here!

I use same login name and password to many sites but this is strange, somebody used my email account to sign me up on stack exchange but also on Paypal but on the first mentioned with login ...
0
votes
1answer
25 views

Samsung SSD 840/850 EVO with DiskCryptor?

Samsung's 840/850 EVO SSDs have hardware full disk encryption feature, however the stock disk management app (Magician) only mentions BitLocker's support. Encrypted Drive feature provided by ...
-1
votes
0answers
35 views

Is there a list of currently active botnets? [on hold]

I am a researcher, I want a list of currently active botnets names, I prepared a list but unfortunately, C&Cs of most of them are now down and they have gone offline. (For example fast-flux and ...
30
votes
10answers
3k views

Could keystroke timing improve security on a password?

When I was young, and had just started out in my software-development career 20 years ago, I wrote a little bit of code on my Amiga that took a password, but also recorded (within some threshold), the ...
0
votes
0answers
25 views

Response Header Exploit in Set-Cookie? [on hold]

I'm looking at our internal testing servers and noticed this in the response headers in Burpsuite when sending data to an API we have (Apache/PHP) Set-Cookie: raw=0 The site/page delivers a XML ...
4
votes
1answer
70 views

Spoofing an NTP server to allow bruteforce on any smartphone

We all know that smartphones (i'll take iPhone as an example) rely on SNTP/NTP servers to update a device's time and date. So, by creating an SNTP server that mimics Apple's server, we can actually ...
1
vote
1answer
31 views

Looking for Defensive security training or content [on hold]

We all know there is a lot of "offensive security" classes and content but what about "Defensive Security" how to look for bugs and leaks in your perimeter.
1
vote
0answers
49 views

Unknown MAC in network

A few days ago, I noticed an unknown MAC address in the statistics page of my home router. The OUI lookup yields Cisco as manufacturer. However, I don't have such a device in my network -- actually, I ...
0
votes
1answer
67 views

Is `/dev/urandom` secure to generate a salt on a Virtual Machine?

I've read the new password_hash() function from PHP uses /dev/urandom to generate a secure salt, however this assumes some noise from device drivers. Is possible that /dev/urandom is not so random ...
0
votes
0answers
39 views

PHP null byte exploit through cookie [duplicate]

I have a challenge(centos) where I found a null byte based path traversal vulnerability in the 'user' cookie on a simple PHP/5.1.6 on Apache/2.2.3 based web app. I'm able to include the /etc/passwd ...
0
votes
0answers
4 views

Securing an error-reporting API against spamming

We are planning/spec'ing a REST API for communication with an iOS app an external team is building. For most calls, the API key hardcoded into the application and a session ID produced on our side ...
-1
votes
0answers
13 views

How can I be sure that gochange.co is a secured service? [on hold]

I heard about gochange.co somewhere but i'm not sure they won't mess with my bank account. How can I trust this service? is it any good?
0
votes
0answers
28 views

Security issue with CSRF token

My website has CSRF vulnerabilities. I have tried to mitigate the risk. Whenever users try to perform CSRF attack, they will be redirected to login page for re-authentication. On top of that, I ...
0
votes
2answers
46 views

Converting an intranet site to internet [on hold]

We currently have a web application with client sensitive data that is only accessible by the intranet. The management wants to open this to the internet because there will be a need to have other ...

15 30 50 per page