-4
votes
0answers
10 views

Public and private key geerating in C Code source ?

I'm looking to a public and private pair key with C ( like this one in the link below ) , is there any one have the source code of it ? any help would be appreciated ! Thank you . Create RSA public, ...
-4
votes
0answers
13 views

shared wifi router problen

i have shared wifi in my home but one of our member once she used her laptop the signal goes too slow and shutoff my signal, is he had been hacked? or how can i protect my router even one of my shared ...
0
votes
0answers
14 views

Ways to secure administrative pages of a portable site

I made a CMS (using PHP) that is basically drag and drop to be live (under linux/apache hosts), now I need the communications between the administrative/login pages of said CMS and the client (recent ...
0
votes
1answer
15 views

Bypassing XSS filter

<script> Something.execute("injectionpoint"); }, true); </script> I am trying to bypass an XSS filter but its not working since since " is filtered as \" or ;\" depending on where " is ...
-3
votes
0answers
11 views

Server side script to check if browser is vulnarable to SSLv3 Poodle

I want to implement a browser SSLv3 Poodle vulnerability test like https://zmap.io/sslv3/sslv3test.html on my web application. My idea is to put a routine in the application first page to tell to my ...
1
vote
1answer
13 views

Securely delete a file in Ubuntu?

I have been reading about government standards for secure data erasure by overwriting the file location with random data [wikipedia: data erasure standards]. I am wondering if Ubuntu's default Delete ...
0
votes
1answer
11 views

Are DLLs in URLs executed on users local machine or on the remove machine?

In this question I am referring to DLLs listed in URLs such as this one: http://survey1.sendyouropinions.com/mrIWeb/mrIWeb.dll When this kind of URL is navigated to, is the code in the DLL executed ...
-4
votes
0answers
10 views

how to write fragmented attack code?

what kind of attack of fragmented attack do? is all kinds of attack be rewritten into fragmented attack code? what kind of attack that fragmented attack can not do? where do fragmented packet ...
1
vote
1answer
15 views

Choosing a group of symbols that contains a password

My bank employs a step in its authentication process besides [the card itself and] the regular password, where the user has a secondary password (3 small sequences of letters, such as Hy X Ba) ...
-2
votes
0answers
11 views

Is there a MITM tool for forcing weak SSL cipher suite like by using ettercap or mitmproxy?

I know that this question has already been asked before, but i could not get an answer of how to do it?
1
vote
1answer
15 views

VM production server and low entropy

I'm monitoring a VM functioning as our production server. I noticed it has at many times, quite low entropy (/proc/sys/kernel/random/entropy_avail). On average our server(which among other stuff does ...
3
votes
1answer
25 views

Can user send fake request if it has JWT token?

I developed an android application that request to a REST service for do actions! My questions are: If anyone trace the requests and responses, Can he get the token from headers? Where should I ...
-2
votes
0answers
32 views

Problem with Nessus scanner

I downloaded Nessus scanner (home edition) and installed it. Then i updated its plugins and choose a WebSite for scanning ( Web Application Scanning mode ) But it ends after 5-6 seconds :| What's the ...
1
vote
1answer
21 views

is there a Virus that attempted to foil generic decryption techniques and how it did that?

is there a Virus that attempted to foil generic decryption techniques and how it did that ? need t o know the VIRUs name because i tried searching and unable to locate any virus who did that and the ...
0
votes
1answer
9 views

Win server 2008 partition security

i am trying to lock a partition in the server so that is accessible by only one domain admin not even the administrator can open it but at the same time keep it shared so that the the approved domain ...
0
votes
0answers
16 views

Timestamp response behaviors in different tools

I was testing out icmp time stamp response on one of my servers using ping and hping3. Here is result of hping3 # hping3 --icmp-ts x.x.x.x HPING x.x.x.x: icmp mode set, 28 headers + 0 data bytes ...
1
vote
1answer
52 views

backdoor php trojan still dangerous on my local machine?

I recently removed and fixed a lot of backdoor trojans in some files in one of my servers, and I copied those files to my local computer. But the issue is that now that I run the virus scanner on my ...
-8
votes
1answer
39 views

How to attack a web page to gain username and password of any or specific user? [on hold]

Web page does not use SSL. Server uses SQL. Given that passwords are not stored in plaintext in database. I want to find out methods to do so.
-7
votes
1answer
32 views

How to attack on a web page to gain username and password? [on hold]

In a situation where a web page is not using SSL and someone wants to attack to gain the username and password. How it can be done? Given the situations: Passwords are not stored in plain text. ...
2
votes
0answers
36 views

Can Google tech be trusted? [on hold]

With the Snowden leaks, Google has been implicated in the activities of the NSA. There really is no way for ordinary citizens to know with certainty what the exact reality of this involvement is. In ...
0
votes
0answers
25 views

How to secure peer-to-peer chat (includes video) - school project [on hold]

I am making a school project in which I have a private network (but not always) of peers in which everyone can contact everyone and I need to secure it somehow. Everyone has their own IP address. I am ...
0
votes
1answer
20 views

Sharing sensitive information across servers on visits from the same browser

I have this scenario: Webserver domain A. Generates sensitive information when a request from a browser is received but this information is not disclosed to the browser. Webserver domain B. ...
-4
votes
0answers
29 views

blocking skype or webcam signals via router?

hello guys i wanted to block skype through my router, is this possible? anyone know how? if thats impossible, is there a way to block a webcam from sending video signals through my router? thanks
3
votes
2answers
105 views

How can I explain “zero knowledge proof” to an end user?

A ZKP allows proof of knowing the answer to a secret, without actually disclosing what that answer is. Is there any analogy that can help people put this concept into everyday practice? A "lie to ...
1
vote
1answer
41 views

Which security documents do providers typically share with their customers?

In the context of managed/cloud hosting, what level of information does a provider typically share (under NDA) with its customers for compliance audit/3rd party risk assessment purposes? What are ...
-4
votes
1answer
49 views

How to make my PHP website vulnerable to SQL injection [duplicate]

For training purposes, I want to make a demo website vulnerable to SQL injection. I went to the .htaccess file in the server and added these 2 lines: php_flag magic_quotes_gpc Off php_flag ...
-4
votes
0answers
32 views

How to hack hearing aids [on hold]

I have hearing aids. They came with this lovely remote https://starkeypro.com/surflink-mobile/ which I can do cool things like direct phone calls and music directly to my hearing aids. However the ...
0
votes
0answers
23 views

How come UAC logs are not being stored in Event Viewer? [migrated]

In Event Viewer, under Applications and Services Logs, UAC logs are not being stored. How do I enable them? Could Domain/OU group policy have them disabled? If so where can I see that it is disabled ...
-4
votes
0answers
45 views

How to perform simple DOS attack for my class presentation? [on hold]

I am in a computer networks class at my college. I am going to be doing a presentation on DOS attacks for that class. Does anyone have any ideas on how I could perform a simple DOS attack on ...
0
votes
0answers
23 views

Is it possible to configure Azure Web site SSL protocols & ciphers

I want to be able to disable TLS 1.0 protocol and the RC4 cipher on an Azure website (or Web App) and I can't figure out if it's possible or not. I know what registry settings to update but the ...
3
votes
5answers
91 views

Disadvantages of Using a VPN?

I've got a yearly subscription to a VPN service which is real quick and from the research I did at the time seems to be pretty legitimate, but are there any disadvantages or scenarios where you ...
0
votes
2answers
41 views

How can I stop an account I don't control from sending spam email in my name to my contacts?

Recently I received an email from a friend with "My" email to them attached. The email "I" sent them was obviously spam, one of those "You have to see this..." emails. The email had been sent to ...
0
votes
3answers
80 views

Please critique my encryption scheme for a very small microcontroller [on hold]

I am new here and not an cryptography expert; but I have been using encryption library for a while. My company is working on a small hardware device. It is powered by a microcontroller so memory is an ...
3
votes
1answer
33 views

Mobile authentication with password as param in get request over ssl

I'm building out a new services layer for an existing mobile application. The mobile application authenticates with the existing services layer by providing the user name and password as url params in ...
1
vote
0answers
21 views

Shared control scheme

For the shared control concept, each party has part of the key to avoid having 1 person having the entire key. I'm given the following rules, but whenever I try out numbers on the rules I do not get ...
0
votes
1answer
31 views

Is adding apt keys using wget secure?

Many (I would even say most) projects that have Debian repo give instructions like this (https://www.dotdeb.org/instructions/): 3. Fetch and install the GnuPG key wget ...
0
votes
2answers
45 views

Sniffer attack on mobile

I have Nokia lumia 625. And a guy hacked it using sniffer. That's how much I know about it. He has access to all my online texts(eg. Whatsapp, messenger etc) . and also to offline carrier text ...
2
votes
1answer
51 views

What's the mechanism used to extract my user name on a website? [on hold]

I was browsing this forum http://openelec.tv/forum/64-installation/40869-putting-openelec-onto-sd-card-using-usb-reader-from-a-mac-for-raspberry-pi ,and realised that they show my hostname and my ...
1
vote
1answer
63 views

How does Amazon Fire TV know my name/account? [on hold]

I bought a Fire TV stick and inserted it into the HDMI-port of my TV. I was presented with a dialog to select my wireless router so it can connect online. Just after I did that, it asked me if I am ...
0
votes
0answers
24 views

Is Cryptree suitable for cloud storage?

I'm evaluating a cloud storage product. The marketing literature states it uses Cryptree. I pulled the paper and performed a quick read, but I don't see where Cryptree lends itself to confidentiality ...
0
votes
1answer
34 views
2
votes
3answers
124 views

Website security checklist?

I'm building a web service (a control panel for clients) (PHP on linux apache) and trying from the design to make it the most secure as I can, Can anyone provide me with some kind of a check-list of ...
14
votes
5answers
1k views

How secure is binding to localhost in order to prevent remote connections?

Let's say we're running a service that's bound to localhost (127.0.0.1), and the goal is to only allow local clients (i.e. from the same machine only) What techniques might be used to break this ...
7
votes
2answers
39 views

How to handle decomissioned/donated/RMAed printers?

Printers, nowadays, almost always include some form of non-volatile storage that keep tracks of pretty much everything that went through the device. In the case of larger, "departmental" system that ...
16
votes
2answers
3k views

Is email from my WordPress site a hack or just a normal comment?

I received an email for my WordPress site, where the comment section is disabled. This was the email: "Author: google (IP: 210.56.50.40, 210.56.50.40) Email: guest@gmail.com URL: ...
-1
votes
0answers
12 views

Compromised Virtual machine image (dataset) [on hold]

Are there any compromised virtual machine image datasets available online? I require it for cloud forensic research.
-3
votes
1answer
55 views

Is there an exploit for python hash collision? [on hold]

Is there an exploit for this vulnerability? EDIT Python DoS via hash algorithm collision - oCERT advisory 2011-003. Affected numerous languages. No CVE for Python but CVEs for other languages.
4
votes
3answers
66 views

Same Origin Policy - XHR response

I know that Same Origin Policy (SOP) prevents a page/script from one origin to read response from another origin, but it does not prevents the page/script from making a XMLHttpRequest (XHR) request to ...
1
vote
1answer
32 views

OWASP + Atomic ModSecurity Rulesets - Too much?

Looking to implement some additional mod_sec rulesets on our server. OWASP and Atomic keep coming up as the best of the best. Would it be wise to implement both? Or, would one or the other be ...
0
votes
0answers
27 views

Opening outgoing ports on dedicated machine [migrated]

I have a website where I have been working with another person on a game server listing site. It queries the game servers and shows information etc. Anyway upon talking to the creator of the script he ...

15 30 50 per page