1
vote
2answers
16 views

Signal listening

Is there a way to know if someone listens to signal I produce (air signal as well as signal on network)? Is there a way to know if the signal was listened along the way until the signal is reached to ...
0
votes
1answer
7 views

creating a testing environment

This question has been asked over and over again across the web, but many answers are either ridiculous or the same. I have tried using OWASPs VM which has a range of purposely built holes in web ...
-3
votes
0answers
5 views

What is use of validation.properties for ESAPI.encoder().encodeForSQL in ESAPI [migrated]

I am using ESPAI for SQLInjection prevention in Java. I am only using ESAPI.encoder().encodeForSQL(ORACLE_CODEC,queryparam)) method. If I do not include validation.properties in the esapi.properties ...
-3
votes
0answers
20 views

How to perform penetration testing on android app? [duplicate]

I have an Apk file. I need to perform penetration testing on that app. Which are the tools required and how to perform? Please help me out here. It's very critical to me. I have already performed pen ...
-2
votes
0answers
17 views

How to hack a smartphone by using the phonenumber [on hold]

is it possible to gain access to mobile phones by using their telephone number? It sounds really weird to me because the traditional way of "hacking" things is using backdoors or installing ...
0
votes
1answer
10 views

What should I set the TTL for my DNS to?

I've heard before that one should set TTL for the domains of recovery emails to as high value as possible. The threat model here is that an attacker uses social engineering tactics to gain access to ...
2
votes
0answers
12 views

Can still ping from secure network?

I have a standard network and wanted to make a more secure one so I bought a second router and set it up as a separate network daisy chained so it can get internet. I managed to make the setup, with ...
0
votes
0answers
5 views

Why is HMAC truncated in IPsec?

I'm having a look at IPsec standard and I realized that integrity and data authentication check is based on 96-bit truncated version of HMAC algorithms. For example, in IPsec v3 we can use ...
0
votes
0answers
11 views

Log to file my own SSL traffic coming from websocket

I have to decode and capture my own traffic that come from a websocket WSS listening on port 7072, when I use browser to connect to my data provider. My idea is: to redirect traffic to ...
0
votes
1answer
4 views

Linux equivalent to Windows WriteProtect key in the registry for a software based write blocker?

I unfortunately don't have access to a physical write blocker and am looking for a software based write blocker in Linux. In Windows this can be achieved by modifying the registry and setting a DWORD ...
-1
votes
0answers
11 views

Is Yahalom protocol secure or not? [on hold]

Let's consider Yahalom protocol. ​The Wikipedia says that it is less secure than Needham-Schroeder. ​ I do not understand why.​ Why is it an insecure protocol?
-3
votes
0answers
10 views

PC infection suspected

I have a feeling that my PC is infected with a RAT (remote administration tool). It all started when I logged on an mmorpg (online game). It's not popular and at this time I had a port open by me ...
-1
votes
0answers
6 views

OpenSSL 0.9.8zg [migrated]

A week ago, as part of the installation a PHP 5.4 cartridge from openshift.com on my Mac with OS X v10.10.5 in the Terminal I noticed a message about it is loading OpenSSL 0.9.8?? for compatibilty ...
0
votes
0answers
7 views

ECDH-ECDSA Combination [migrated]

I am doing research on cryptography primitives at a basic level and I faced a question on encryption methods. I understood that ECDH is an approach to for secure key exchange between two parties ...
-1
votes
0answers
8 views

How does OpenVAS work out severity? [on hold]

Nessus uses CVSS base scores, but i'm unable to find a reference as to if OpenVAS does or not.
3
votes
3answers
97 views

Must a system be insecure against physical access? If so, why?

Inspired by: Why don't OSes protect against untrusted USB keyboards? Related: What can a hacker do when he has physical access to a system? (I address the points of its main answers below.) There ...
1
vote
1answer
15 views

Stateless AEAD (AES-GCM) based tokens

I want to generate secure data tokens which can be shared with the client for uses like password reset, etc. which involves low storage overhead at server end. Ideally I am interested only in managing ...
-1
votes
0answers
15 views

Yahalome protocol is (not) secure. Why? [on hold]

Let's consider Yahalom protocol. The wikipedia says that it is less secure than Needham-Schroeder and I know how to attack on Needham-Scroeder with MitM attack. But I can't see how to attack (in any ...
3
votes
2answers
26 views

What is the best way to organize OpenPGP keys?

I've always used OpenPGP as a single private/public pair of keys for (S)igning and (E)ncryption. But learning about OpenPGP subkeys, it's recommended to use separate keys for (C)ertification, ...
0
votes
0answers
12 views

How is the current situation of smartphone's factory reset protection?

I came across this news talking about a bypass on the nexus 6P factory reset protection, which made me wonder what is the current security status for the most known phones out there. For example, is ...
-3
votes
0answers
12 views

How to create a simple chrome extension with ax XSS vulnerability? [migrated]

Could anyone point me to any tutorials or just offer some tips on how to create a basic web extension with an XSS vulnerability? I was thinking of something really basic, like an extension that tells ...
0
votes
0answers
12 views

Ethical way to get past a proxy server? [migrated]

I am working with lwIP on an embedded device that wants to connect via DHCP to a flexible LAN. Sometimes the device will want to connect to a network with a proxy server. How to I make the DORA ...
3
votes
3answers
38 views

How can you prevent email addresses from being harvested from a registration form?

When you go to a website's login form and enter the wrong credentials, the website can give you one of three error messages: Your email is wrong Your password is wrong Your email or password is ...
0
votes
0answers
8 views

Cross-language primitives against string comparison timing attacks?

Related, not a duplicate: Timing Safe String Comparison - Avoiding Length Leak I know about cache misses, let's assume we fit in a cache line swimmingly. Thomas' excellent answer doesn't talk about ...
-1
votes
2answers
38 views

HTTPS - if this protocol protect against connecting to false server?

I know about SSL certificates. However it is ok to say: protocol HTTPS protects against connecting to false server ?
0
votes
0answers
2 views

Build host application for Thales payshield 9000 HSM [migrated]

I'm working on creating host application, which talks to Thales HSM over TCP/IP socket. The main use of HSM here is for PIN translation from DUKPT to ZPK for next network in EMV transaction flow. I ...
-2
votes
0answers
41 views

Tracking a criminal on my website [on hold]

I've got an active criminal on my website purchasing with several stolen credit cards. I control the product so there is no concern of theft, but they did get away with the first couple. I'm really ...
0
votes
1answer
12 views

Certificate Setup Over Many Remote Resources

Imagine that you have a web app that needs to talk to a central api server with its purchased certificate. This server provides a token to the web app to be used to authenticate and talk to another ...
2
votes
4answers
61 views

What makes Malware so difficult to remove?

Why is it that when malware or adware is installed it's extremely difficult to remove? You can't go into your programs list to uninstall it and usually need a special program to remove it. What do the ...
0
votes
1answer
31 views

Decrypt chunks of pgp encrypted

Suppose I have a very large encrypted .csv file (too large to fit in memory). Is there a way to decrypt N bytes of the cyphertext? My goal is to process each row of the .csv in memory without ever ...
-3
votes
0answers
45 views

Full mesh and partial mesh networks [on hold]

I have a homework question that says true or false: service providers only implement full mesh networks because of the need for reliable and available communications. this is true because they need ...
1
vote
1answer
30 views

Network Scans Find Absent Device

Using Nessus (an uncredentialed full scan) and Nmap (essentially a full port scan), I am finding a phantom device. This device is supposed to be a well-out-of-commission device, but is returning a ...
2
votes
0answers
13 views

Find the source of a recurrent mass SQL edit on a server [migrated]

I'll try to explain my problem as clear as possible. The server of a company I support runs many websites. This server runs Windows Server 2012 with Microsoft SQL Server 2014. Almost all of the ...
-1
votes
1answer
16 views

How does DRM enforcement work (across different platforms)? [on hold]

I would like to know how Android, Windows, Linux, and OS X deal with DRM (Digital Rights Management) e-pub, pdf, and mp3 files. Basically, if I download a DRM file to my device (perhaps one that has ...
0
votes
1answer
57 views

Is the following e-mail fraud technically possible?

Summary: Can email be intercepted and modified by a 3rd-party during transit from the sender to the receiver? If so, can this interception be detected? Details: My friend (A) (mailbox at popular ...
1
vote
1answer
95 views

There might be a man in the middle attack against my server

I have a little $7.20/y VPS, and the fingerprint for the ECDSA key has changed three times on me. This time, it happened shortly after I reinstalled the server (same day, in fact.) I always disable ...
1
vote
3answers
57 views

Is information disclosure in a form of a server header is a real vulnerability?

I have seen in many places that people say that headers of the following types is a vulnerability: Server:Microsoft-IIS/7.5 X-AspNet-Version:4.0.30319 X-Powered-By:ASP.NET I can see that this gives ...
18
votes
4answers
3k views

Why did Poitras and Greenwald put their batteries in the fridge?

cnet.com says: Even in Snowden's room, the group took precautions not to be overheard. Greenwald and Poitras would remove the batteries from their mobile phones and put them in refrigerator of ...
-6
votes
0answers
45 views

How is VPN used hide an IP address? [on hold]

Actually I want to know how VPN hides ip, that is used for anonymity,just like the proxy
3
votes
3answers
75 views

Is it safe storing revision history on production servers?

Currently we use at my workplace svn export <svn_repo>. This takes a long time and I have been playing with the idea to keep the revision history on the production server so we can simply fetch ...
-1
votes
0answers
32 views

Unauthorized Password Access [duplicate]

I have a website with no. of paid videos. Suppose, In future many of users will be purchase videos from my website and if any user distribute his password in his college and anywhere. So, my question ...
-3
votes
1answer
36 views

How does SMTP facilitate sending spam? [on hold]

My friend tells me that there are exist weakness of the Simple Mail Transfer Protocol (SMTP) that make make it easy to send spam. Is this true?
0
votes
1answer
61 views

What does the below SQL injection indicate?

What is the meaning of this command in SQL ? php?que_id =-1/**/UNION/**/ ALL/**/SELECT What does /**/? indicate here?
1
vote
1answer
36 views

Is it completely safe to store the unencrypted credentials within a variable in the ios device

Overview is we encrypt the credentials using the pincode as the passphrase that the user also sets. One of the requirements is to NEVER SAVE THE PINCODE anytime anywhere. Everytime the user goes out ...
0
votes
1answer
37 views

Q: What happened to socat?

I saw elsewhere some discussions on an error (or backdoor) in socat but find it difficult to get from the (anyway not well ordered and fairly large volume) materials the essence of what had actually ...
1
vote
2answers
60 views

Which of the TLS/SSL and IPsec protocols is effective?

Which of those two protocols is the most effective for sending data from a client to a server on a local network (knowing that I aim to use it for FTP traffic)?
0
votes
0answers
38 views

Setting up a secure Network [migrated]

I have a home network that I want to make more secure so I brought a second router with the aim of setting up a second, separate network at home to put the more important device on. I checked out the ...
-2
votes
0answers
12 views

find unix command and NTFS Stream [migrated]

Suppose I have a partition and some files have been hidden by NTFS Stream. I have two serious question: Is it possible to find them via find unix command? How can I find them?
1
vote
1answer
19 views

Time of working generating hash with sha2

It is fragment of pseudocode algorithm SHA2 from wikipedia: break message into 512-bit chunks for each chunk create a 64-entry message schedule array w[0..63] of 32-bit words For me, it means ...
0
votes
1answer
26 views

SSLstrip is not working in the local network

My issue is the SSL stripping is not working in my LAN, but it works if I try to attack a HTTPS website with no HSTS. I am not using any domain name just the IP address of the server. Is there any ...

15 30 50 per page