0
votes
0answers
9 views

Brute force a hard drive when most of the password is known

I need to access a hard drive that is encrypted with LUKS. The password provided is incorrect, however it is only incorrect by a character or so. The password itself is very strong and above 30 ...
-1
votes
0answers
8 views

do web browsers have digital certificates from CAs? [on hold]

do web browsers have digital certificates from CAs, if not how the servers can guarantee that they are talking to the right client? could any one explain me how the web browsers prove themselves to ...
-2
votes
1answer
25 views

How many viruses has the average computer? [on hold]

Malware hides, so you cannot expect your computer to be malware-free, even when you have antivirus. My computer works fine, but I am fairly sure that I might have something lurking in there. Rootkits ...
1
vote
0answers
31 views

Is control theory of any use in the Infosec disciplines? [on hold]

I'm currently studying Engineering in a European university(not CEng,though), and I've always been fascinated by the network security/information security field. As far as I know, crypto is the most ...
-3
votes
0answers
18 views

Use hydra to crack password-only forms [on hold]

I want to hack this site http://attack.samsclass.info/samsgame1/2/ because I can't find the password, and I want to brute force it because I see it only accepts 1 word. But there is only the password ...
0
votes
1answer
16 views

Any way to get high quality live proxies other than buying them from a website?

Free & public proxies are not safe when transmitting sensitive info, but even if they were are much too slow. I can't purchase due a potential security risk. I looked into and tried proxy ...
-1
votes
0answers
30 views

How to become an admin? [on hold]

I have tried to resolve a pwn task in a ctf since three days !! but i didn't get the idea to do it . as a hint , the description said that i must be an admin to read the flag, the host id is ...
1
vote
0answers
22 views

Is that a way break Linux user password by bypassing grub protected?

The best way to delve into others Linux machine is by editing the grub. Many will start by, editing the line ro quite splash as rw init=/bin/bash during the startup (usually by pressing button e on ...
3
votes
1answer
33 views

OS fingerprinting [on hold]

I have been asked to write a small tool that detects the running OS on a victim device. The tool should be able to fingerprint Linux versus Android versus iOS. Extra credit for version info. It needs ...
-2
votes
0answers
12 views

Authorization Models - Good books about the subject [on hold]

I've always been interested in authorization models (and security in general). Because of this, I've slowly been moving into the position of the in-company 'security guy'. Although I had no formal ...
-5
votes
1answer
17 views

Mobile number tracking

Is there any way we can track our mobile when it is lost? I have done a google search on the same and found that we have websites which give us the details of where the SIM was purchased & ...
1
vote
1answer
27 views

Is a vpn connection through a proxy more secure?

At the moment there are a number of online services (Hide my ass or PIA) that offer some type of security through an VPN connection. This of course can work, but the big problem (for me at least) ...
4
votes
1answer
26 views

What are the use cases for anonymous SSL cipher suites?

SSL supports several anonymous cipher suites such as TLS_DH_anon_WITH_AES_256_GCM_SHA384. When these are used, no authentication is performed and no certificates are exchanged. This means that if they ...
0
votes
0answers
4 views

Where can i find information about Ipsec Xfrm framework?

I have searched online and found very little information about the ipsec xfrm framework, including the book Networking implementation and Theory.. Where can i get more information about xfrm ...
0
votes
1answer
44 views

How is IRC so secure/untraceable that hackers and pirates use it to communicate?

Whats is special about IRC that hackers use it to do online meetings ignoring every other way like messengers or social media? It seems to be very secure that it gets used to send commands to victims ...
0
votes
0answers
8 views

TLS record layer implementation

I have some general confusion about TLS protocol. One question is about session id. Should a session id inside the TLS hellomessage have a session id length field? I do not read anything about it in ...
0
votes
1answer
27 views

A question about arpspoof command

The arpspoof command will spoof default_router_ip's MAC address on all victims in the subnet arpspoof -i <NIC> <default_router_ip> How does it fool the router about the MAC addresses ...
1
vote
2answers
35 views

Is it a good idea to combine words from different languages to increase a password's strength? [duplicate]

I was thinking of a way to generate a password that is easy to remember, but hard to crack, like the famous "correct horse battery staple" suggested by XKCD, also discussed here, and I've realized ...
1
vote
2answers
44 views

Does information security justifies Iphone 6's “error 53”? [on hold]

An update of IPhone 6 software left several IPhones that were previously repaired by an non-certified phone repairer dead. See e.g. this news. Apple claims that this is due to security: A ...
-1
votes
1answer
21 views

Linux distribution on USB stick used to banking for begginers [on hold]

Is it good idea to use up-to-date Linux on USB stick instead liveCD to online banking? What is the best Linux distribution for not advanced people who commonly use Windows to make online payments ...
0
votes
0answers
27 views

How to lock down a Guest Wi-fi? [migrated]

I have a modem/router from my ISP which I'm forced to use. I would like to provide a Wifi AP for random guest that might show up at my house but I don't want to have their virus-laden PC on my network ...
0
votes
0answers
20 views

Are There Any Measurements for Web-Application Complexity That Positively Correlates to Num. Vulnerabilities?

Web-applications have vulnerabilities. Generally, a more complex web-application has more vulnerabilities, compared with a simpler and smaller web-application. For example, white hat hackers have ...
-1
votes
0answers
30 views

i found a website with mysql error but sqlmap give error [on hold]

so i found a website with an error and i tried to inject him so it give me this error [17:45:35] [WARNING] GET parameter 'pageno' is not injectable [17:45:35] [CRITICAL] all tested parameters ...
1
vote
1answer
28 views

How to prevent IoT devices from phoning home via the neighbor's wifi?

I'm wondering what, if anything, can be done to thwart the sort of attack described below. First, you can assume the following: (1) There are several devices in your home which you have deliberately ...
0
votes
3answers
53 views

Are credentials sent via plain text to HTTP proxy?

If a proxy server requires authentication, and that proxy communicates over HTTP, are the credentials sent over plain text to the proxy server? If this is the case, isn't it possible to sniff the ...
1
vote
0answers
26 views

Pros and cons of this password reset scheme?

I handle the process of password resets at the institution where I work. Currently, we require users to make up questions and answers (three minimum and five maximum); the questions cannot repeat, nor ...
1
vote
1answer
62 views

is it possible to intercept network packets outside lan?

User A is in a different country than user B and they have different IP ranges and ISPs. Is it possible for A to intercept B's communication sent to a third party, without using techniques like ...
0
votes
1answer
17 views

Purpose of nonce validation in OpenID Connect implicit flow

The OpenID Connect specification requires implicit flow clients to generate and validate a nonce: String value used to associate a Client session with an ID Token, and to mitigate replay attacks. ...
3
votes
1answer
43 views

What techniques do advertisement companies use to get my browsing information, and how can I stop them?

In the past year, I've noticed a strangely increasing incidence of advertisements on various web sites being for products that I was browsing for elsewhere. This makes me extremely uncomfortable. It ...
2
votes
1answer
16 views

What are the advantages to OpenPGP “subkeys”?

I'm trying to get started with OpenPGP encryption. I understand the concept of keeping your master key safe, and using other keys signed by that key (which can be revoked if stolen) for encryption and ...
0
votes
0answers
9 views

Followup to one-liner to create cert request with SAN

I've been trying to use the openssl line from this older thread to create a CSR with subject alternative name: Provide subjectAltName to openssl directly on command line If I run the line from that ...
0
votes
2answers
39 views

Guarantee one unique identity per node

I'm in the early stages of designing a decentralised systems protocol, based on a blockchain, for a thesis. For the protocol to remain secure, each node in the system must be capable of generating ...
1
vote
1answer
43 views

Making a file immutable (against kernel exploits)

I'd like to know how to make files completely immutable. "Completely" refers in this case to: immutable while the system is running. I could live with something like physical access where someone e.g ...
0
votes
2answers
43 views

Antivirus connects to their server over port 80

I ran a netstat and noticed that my computer has an always-established connection with my anti-virus (Avast) over port 80. I haven't gone as far as to parse through it in Wireshark, so I can only ...
0
votes
0answers
9 views

Should javascript and css “.map” source maps be included on production servers?

Source maps are a convenient way to work with directly with code that has been obfuscated and/or minified, yet trace errors back to the original "pretty" code. My understanding is that obfuscating ...
0
votes
0answers
10 views

Are there any scareware that install an actual antivirus? [on hold]

I got to thinking about this after reading a bit about scareware, and I thought, could there be a malware example out there that installs a free version of, say, superantispyware or something, but ...
0
votes
1answer
22 views

What type of 'security scan' does a PCIDSS compliance check comprise?

Our firm processes CC information on an ad hoc basis. No cardholder data is ever recorded in any of our databases and we do not grant public access to any of our database or business application ...
0
votes
1answer
52 views

Securing a public computer meant for banking

I sometimes visit my bank personally to handle certain formalities. Inside there is a booth containing a computer and all equipment necessary to log in to the online banking service. The computer is ...
1
vote
0answers
9 views

BREACH attack vs filtered reflected user input

I am in charge of the applicative security of our application and would like to test our exposure to the BREACH attack. Our django-based web application reflects filtered user-input and serves a CSRF ...
-1
votes
0answers
154 views

Anyone know details about this (Scam email warning for DVSA customers) spoof with malware? [on hold]

The subject line reads (DVSA RECEIPT) and it 'looks' like it's from.. vosa.gsi.gov.uk Many folks where I work received this email today, with the attachment. Some actually opened the email and the ...
0
votes
0answers
13 views

Is encryption with a destroyed key a good cryptographic hash function? [duplicate]

Obviously this isn't something I was going to implement, but it was a question floating at the back of my mind. So let's say that instead of hashing passwords to store in the database, you encrypt ...
-1
votes
0answers
29 views

Security in app -> server communication using random 128 bit passwords

I've been visiting this site over from StackOverflow to learn about hash functions for password storage on a server, but none seem to cover my case: App programatically generates a username and ...
1
vote
1answer
55 views

My iTunes account got hacked and someone used it to buy in-app purchase. How could that happen? [on hold]

The account was hacked, I found out in my credit card statement and Apple support gave me refund which is nice. I wonder how it happened, and if there are even more serious risks that I don't know. ...
-1
votes
0answers
35 views

How can I use my WIFI for businee and mange it whom to connect from my pc? [on hold]

I am running a cybercafe... I wish to charge for the wifi within this cafe, how is this possible? I am thinking of the easier alternative of manually allowing user through the routers admin panel. ...
30
votes
4answers
4k views

Script Kiddies - how do they find my server IP?

I've set up a site on Digital Ocean without a domain yet, so there is only the IP. Despite telling no-one of its existence or advertising it, I get hundreds of notices from fail2ban that various IP's ...
0
votes
0answers
29 views

command injection filter bypass [on hold]

I am on a website thhat provides hacking and penetration testing environment safely, I came across a mission which says Agent, you may have already come across the pencil selling ecommerce site ...
5
votes
2answers
89 views

Malicious user inflicting XSS attacks appears to be on my own network

I have a live Django project where I'm using nginx as a reverse proxy with gunicorn as the application server. It's a fairly new project and isn't SSL enabled yet. There's a user on this project who's ...
0
votes
0answers
50 views

Intermediate proxy intercepting my SSL data between my computer and the ISP

I did a simple scan of my linux firewall today using grc.com's shieldsup on their website (https://www.grc.com/x/ne.dll?bh0bkyd20). Previously when doing this it shows I have full stealth but today it ...
4
votes
1answer
2k views

Website Login Security (Secure enough?)

I'm making a bigger site for the first time so security really matters, unlike for my really-bad boards with maybe 10 users. So I wanted to ask if the way I'm doing it is secure enough for a semi-big ...
-1
votes
1answer
30 views

Are there pricing standards for Vulnerability assessment and penetration testing (VAPT) services?

Generally, to conduct vulnerability assessment and penetration testing (VAPT) for an application, we do charge some amount from the client, based on which criteria the companies charge their ...

15 30 50 per page