0
votes
0answers
31 views

HTTPS web browsing [on hold]

For an HTTPS web browsing, is it allowed to receive an out of order packets at the receiver. If so, is it possible to reorder the received unordered packets? Consider specific features in HTTPS that ...
0
votes
0answers
10 views

How are random numbers for RSA generated?

The RSA public key encryption requires two very large prime numbers as part of its encryption process that serve as secrets. These are typically generated with cryptographically secure random number ...
0
votes
0answers
11 views

How to fake a fingerprint?

I'm developing a browser based on chromium based on the promise that privacy = freedom, and i will release it as open source and free, but i need to know how to protect my browser users against ...
0
votes
0answers
5 views

How dangers to put decrypt utility in an installation?

How dangers to put decrypt utility in an installation? I see the problem that any user can decrypt an encrypted information. Other issues?
0
votes
1answer
9 views

Email account password change via email-to-script

I host a mail server (postfix and dovecot) and I wish to set up a password change feature (especially useful when creating a new address provided with a temporary password). Does my scenario has ...
0
votes
0answers
6 views

tutorial on writing attack signature based on known vulnerbility

Can someone recommend any tutoial or books on how to write IPS ruLes that detects attacks exploiting known vulnerabilities. Basically given the details of a vulnerabilty, I need some guide/examples ...
0
votes
0answers
12 views

What exactly is a subkey?

I fairly understand the math behind RSA, Elgamal, AES, SHA but not how things are used in practise. How are subkeys different from master key? I understand its purpose from various websites but How is ...
3
votes
0answers
30 views

PKI Installation

I must install a PKI in my organization. I work in a windows environment. I already set an offline CA. I must now install a subordinate CA. I have the choice between installing the subordinate CA on a ...
1
vote
0answers
22 views

How to monitor my internet traffic split between a PC and laptop?

I'll try to describe my problem as specific as possible. So I have an internet connection and there are two PCs using it. Now let's call my laptop as A and the other PC as B. Laptop A - My laptop, ...
1
vote
1answer
17 views

TOOL-BARS: How do toolbars manage to insert new settings on to the users computer when legitimate programs can't/won't do it?

I accidentally installed Ask Toolbar, and it changed my Homepage,Search engine and added some extra stuff. It did all this without alerting Google Chrome! But when I try to install a legitimate ...
0
votes
0answers
27 views

How is Thread local storage used by malware/Virus?

I have been told that code in TLS is run before the entry point of an exe is reached ,so if one puts a breakpoint on this TLS address he/she could debug the behavior of the virus.Can Fiber local ...
2
votes
1answer
20 views

Arduino to Android secure bluetooth connection

I'm using an Arduino Uno and a nRF8001 board from Adafruit to connect to an Android phone over bluetooth. I will be using it to lock and unlock a lock and I need to make sure only verified devices are ...
-1
votes
1answer
47 views

SQL Injection - Don't follow redirect? [on hold]

There are certain sites that have a Redirect once they detect malicious behaviour. Once you try to find a hole (assuming the service is vulnerable), everytime you try to submit a link with malicious ...
1
vote
1answer
14 views

What account should be used to install SQL Server 2008 patches?

The company I work for is currently going undertaking a project to remediate (among other things) a pen-test finding that a privileged domain-level account (which they compromised) was being used for ...
4
votes
2answers
385 views

Identifying an ongoing exploit?

Recently I was contacted by a person saying that they had found a vulnerability in my site. They were able to prove it, by sending me a list of my own databases (some of which had been created but ...
0
votes
0answers
25 views

How to get a token for Facebook using only login and password? [on hold]

'm working on proxy XMPP that listen on port 5222 for Gtalk and I need token to change the request of users and sent it to the server that's why I use this url: String url = ...
-1
votes
0answers
28 views

How can I test my CAPTCHA's (or CAPTHA-alternative's) effectiveness?

Are there any tools out there to test the effectiveness of user turing tests, such as CAPTCHAs or honeypots, on a site without intentionally getting the site targeted by spambots? Or do I simply have ...
3
votes
2answers
63 views

How does infection through web surfing work?

Often I read about compromise due to visit a malicious site which download some exploit to your computer. I've never seen a detailed process, all books/tutorials I read just say sentences like "once ...
0
votes
1answer
27 views

is copy pasting sudo password from opened document a possible vulnerability?

During setup of my ubuntu systems after installing the system offline i open a textfile and change my sudo password by typing it into a textfile and paste it after so that i don't lock myself out by ...
-2
votes
1answer
38 views

Decryption of data

Apparently, for privacy I have encrypted data on my mobile. A few pics (family ones). This I did through ES File manager, was using AppLock previously but encountered a few errors for storage so I ...
6
votes
2answers
99 views

Is ntpd running purely as a client vulnerable to the recent ntp vulnerabilities?

There's been 3 recent vulnerabilities in the NTP reference implementation. Namely: CVE-2014-9296 CVE-2014-9295 CVE-2014-9294 Is ntpd, or ntpdate, running as a client vulnerable to any of these ...
7
votes
1answer
257 views

How does SSH use both RSA and Diffie-Hellman?

SSH protocol 2 allows you to use DSA, ECDSA, ED25519 and RSA keys when establishing a secure connection to a server. (Keep in mind for this question that I'm only familiar with the procedure and ...
1
vote
2answers
24 views

MS03-026 RPC DCOM Exploit not working on metasploit [on hold]

I'm trying to exploit Windowx XP SP2 through MS03-026 Microsoft RPC DCOM Interface Overflow vulnerability on msfconsole. When execute "exploit" but it is not working. What could be reason? The one ...
0
votes
1answer
20 views

How I do get the correct the Tamper parameters from an internal web login [on hold]

I am doing pentesting for a web application, but I do not know if am using the Tamper Data add on on mozilla correctly. Could anyone explain how to get the following parameters, and where do I need ...
0
votes
1answer
31 views

Upgrade my Dell Inspiron laptop for PenTesting [on hold]

I have a Dell Inspiron N5110 & wanna upgrade it to start practising pentesing with virtual machines. What do u suggest from specs below to upgrade (I have Kali Linux, Tails OS, XP, Metasploitable ...
2
votes
4answers
167 views

Could a compromised WP database cause re-infection without the hacker needing to login into WP?

Is it possible that a compromised WordPress database could somehow be used to re-infect a website? I'm not talking about the hacker decoding user passwords and login into WP. I'm talking about the ...
-1
votes
4answers
61 views

Can I “hide” the private key, while still allowing it to be used?

Let's say you assign SSH keypairs to all users on your system; none of these "low trust" users have root privileges. You want the users to be able to use their keys in SSH connections, however, you ...
0
votes
1answer
49 views

Lost CVV number automatically virus related?

If my credit card was used on Amazon, doesn't that mean someone has my cvv number? And would that mean I have a virus? Or is there another way they can get a CVV code off a credit card? I know it's ...
2
votes
2answers
33 views

Stop POODLE vulnerability in Oracle Application Server

Our Enterprise is using Oracle Application Server in front of Oracle database. We are using Oracle wallet manager(Installed with Oracle client 10) to create self-signed certificates. As you may know ...
-1
votes
0answers
24 views

How to know the file history that has been transferred from pc to usb device or vice versa? [on hold]

When I want to know that if any usb device that has been plugged in a pc recently, I write this command in Windows Powershell. But my question is if I want to know that which which files have been ...
0
votes
1answer
52 views

Why is a valid SSL certificate required for SSL-Strip?

From what understand, SSL-Strip sits between the target user and the server, establishing a HTTPS connection between itself and the server, and an unsecured, plain old HTTP channel between itself and ...
0
votes
3answers
58 views

Read encrypted hard-drive after extraction from running computer

If someone unplugs the hard-drive of my laptop while it's running, what contents would they be able to extract from it? I understand that on login, the image of my hard-drive is mounted, but I'm ...
2
votes
4answers
81 views

Fake “FROM” email to allocate to account

We are allocating emails to their online account. We discovered you can send a false email with a script by changing the "from" or "reply-to" in the email header. There must be a safe way to test the ...
3
votes
3answers
26 views

List all files with only arbitrary file path read, but no directory listing nor sudo

I have found a path traversal vulnerability that allows me to read any path on the server that does not require sudo. To fully exploit this, I would like to know which files exist in each directory ...
-2
votes
0answers
23 views

Butterfly web application security project configuration [on hold]

I've been trying to use Zed attack proxy to identify some vulnerabilities inside a web application. I chose Butterfly web application as it is for educational purposes and it is my first security ...
1
vote
3answers
74 views

How to gain root privilege after injecting code using a buffer overflow vulnerability?

Once the attacker finds an exploitable vulnerability in a user program, e.g., buffer overflow. Assume his goal is to gain root privilege and typical countermeasures are not present in the system ...
-2
votes
1answer
45 views

My internet fingerprint [duplicate]

Please, Do you know any way to delete absolutely all my info from the web? Like, all the info in social media, public places, forums, photoblog. I was using those places without control or worries ...
0
votes
1answer
42 views

Performant ways to identify potential SQL injection vulnerabilities in web applications

I [itsec novice] am developing a workflow/application for identifying potential SQL injection vulnerabilities in web applications and would like to get some professional opinions on my approach. ...
1
vote
2answers
67 views

Broadcast encryption protocol for file sharing service (a-la Dropbox)

I'm building a prototype of a (rather simple) Dropbox-type file sharing service, where users can upload & share file(s) with other user(s). But here's a feature request: I want file(s) to be ...
1
vote
1answer
25 views

Encryption of instructions to and from satellites in space [duplicate]

The mars rover, like most other things man has directed into outer space, receives, faithfully executes, and responds to instructions sent to it from its controllers on Earth. Presumably (and ...
-1
votes
0answers
23 views

How to use BASENAME method while uploading in php [on hold]

I use PHP to upload image to server and it works well but i found lost's of security problem in image uploading method and i need to use basename method **What is basename and how do i do that, will ...
-3
votes
0answers
22 views

Multiple Gmail accounts on the same device [on hold]

If I use a Gmail account A on an Android and account B on the same Android or maybe iOS, will Google go "OK so these accounts belong to the same person and I can create a Shadow profile?"
0
votes
0answers
16 views

Touch-id integration - security aspect [on hold]

i've developed an app that uses the touch ID mechanism and i wonder if there is a way to disable the "Enter Passcode" and to keep just the fingerprint without disable the security enclave fearures. ...
0
votes
0answers
61 views

My identity was stolen [on hold]

My identity was stolen by ex employer - that is email passwords etc. Using my email account emails were sent to people I had no idea of when away from my computer. Now a company worth billions is ...
-1
votes
1answer
55 views

ARP: Forwarding or dropping with IPTABLES

So, I ve been trying to ARP Poison my home computer and router (Intended to learn and discover the networks bahaviour). And with success. The whole time I ve been using: with ...
0
votes
0answers
43 views

Security of SSL certificates bought via resellers

There are many SSL certificate resellers - some are well known enterprises with good reputation (e.g. domain name registrars) while others are small and unknown companies. It is clear that resellers ...
0
votes
0answers
18 views

Preventing CSRF attacks against websocket communications

I have read the thread about CSRF attacks in websockets (Do websocket-powered web apps (e.g. "comet" apps) have to worry about CSRF?) and also some more material regarding websocket ...
0
votes
1answer
37 views

What to do against continuous FTP attack

I have a server (windows 2008) and this server uses WebsitePanel to host some websites. I tried to setup Mozilla FTP server, but I cannot get this to work. As I do not use it I do not mind. However ...
5
votes
2answers
59 views

What is the state of the art for forcing logout on browser quit?

Background: Most browsers have implemented some form of "Session Restore" functionality as a convenience to users where, if enabled, session cookies will be persisted across browser restarts. ...
1
vote
1answer
31 views

Decrypt files in safe environment

I have a USB drive that has encrypted files on it. I was wondering what would be the best way for me to decrypt these files on my personal computer without leaving a trace? Is there a safe ...

15 30 50 per page