2
votes
2answers
11 views

Why require new users to change password?

I have noticed that it is common practice when setting up a user account (Windows users accounts and Google Apps user accounts in my case) to require new users to create their own password immediately ...
0
votes
0answers
6 views

XSSER get and post

I am using xsser for XSS vulnerability testing and I have a doubt about the parameters when it's a POST method. I have tried against DVWA (which uses get) with success like this: xsser -u ...
0
votes
1answer
19 views

Does client side encryption really add security?

A lot of password managers seems to promote client-side encryption as a key feature of their service. For example : LastPass, Firefox Sync, PasswordBox, etc... They all say something like Even we ...
0
votes
0answers
7 views

Can an end-entity certificate with SHA-1 be issued by an intermediate CA that has SHA-256?

Just curious - if I'm using an end-entity (leaf) certificate that has a SHA-1 signature, does that mean that ALL certificates in the chain also must use SHA-1?
1
vote
1answer
22 views

Prevent logging in by pressing Enter - security by obscurity?

An online banking site which I use, has a "feature" which disallows a user from pressing Enter to submit a login form. For example, if you have typed your username in the Username field, pressing ...
0
votes
0answers
7 views

Infer encoding mechanism from n-grams distance

I have a series of obfuscated strings which across the set of strings have regions of high variance and regions of low variance (implying some encoding mechanism as opposed to an encryption procedure ...
0
votes
1answer
7 views

Windows Firewall Connection Security with Certificate

I've been fiddling with the Windows firewall configuration of some computers within a VMWare based LAN (no domain). To aid in my testing and debugging, I created a small, self-hosted console ...
2
votes
1answer
9 views

Interpretation of the results of NIST (p)NRG suite

I have problems interpreting the NIST (sts-2.1.2) suite results. After running the statistics with 100 samples (each sample of 1000000 byte length) a new prng i got this result: ...
0
votes
2answers
15 views

Does access to a BISmark router mean access my network?

Project BISmark aims to measure broadband service by recording and reporting on service using OpenWRT-based router firmware (software licensing unclear, no LICENSE or COPYING files in the repos) with ...
-1
votes
1answer
14 views

how to embed exe file to pdf?

Im trying to embed exe file to pdf for case study. I try using metasploit exploits for this but i can only embed shellcodes with this method. I know there is a way to embed exe file but i cant find ...
2
votes
1answer
34 views

Is Firefox Password Manager less secure than LastPass?

After installing the LastPass password manager, I am presented with a login dialog including the option to "Disable Insecure Firefox Password Manager". (This option appears as long as the Firefox ...
4
votes
0answers
39 views

Is java Client vulnerable by POODLE?

I have a Java based application (running on java 5 or higher) that establishes an SSL connection towards an Apache tomcat 7.0.47 on java 7. From what I understand, to exploit POODLE you need a client ...
3
votes
1answer
48 views

What happened with badBios

Maybe some of you remember that in November 2013 the respected researcher Dragos Ruiu claimed that he was infected by some super advanced virus that no one ever heard of before. Experts agreed that ...
0
votes
0answers
25 views

Shellshock used in CUPS

Some days ago I read about the Shellshock bug and I wanted to test a CUPS server for it and readed some example codes to build this code: () { test;};echo /"Content-type: text/plain\"; echo; echo; ...
2
votes
1answer
30 views

Hardening ciphersuites on Windows Server 2012 R2

I'm currently in the process of compiling a Ciphersuite policy to be used on all of our new WS 12 & IIS 8.5 web servers. In the past I've always manually applied the registry keys into SChannel ...
0
votes
1answer
50 views

nginx poodle fix configuration

I have a dedicated CentOS web server (with Plesk 12) and I am trying to disable SSL 3. I have been everywhere trying to disable SSL 3 and tried to apply the fix as detailed within other posts, but ...
3
votes
0answers
52 views

How can I explain to the client that rfc2385 TCP MD5 Checksums can't be turned on for linux webservers?

I've had a long running conversation with a client where they perform a Rapid7 security scan which then warns about TCP MD5 checksums missing on port 80. This is what I think I know: RFC 2385 was ...
0
votes
1answer
52 views

Is Linkedin, Google and Facebook Running BitTorrent client?

I'm running a application classification program which detects the application based on training datasets and signatures. I'm getting a alert of BitTorrent is running on my system but the application ...
0
votes
1answer
68 views

How to execute an XSS attack against a site that uses client side protection?

Say I have a site that allows me to save my name to the database, and that name is then displayed to other users. I have determined that if I save the following as my name: Abe ...
-3
votes
0answers
45 views

Why is the USER = N/A and what does event 4689 means?

Why user = n/a? what is 4689? and why I only get the logoff event but not logon event? Log Name: Security Source: Microsoft-Windows-Security-Auditing Event ID: 4689 Task Category: ...
0
votes
1answer
30 views

Joomla Linux Permissions

I installed Joomla 3 to /var/www/html directory in Cent OS 6 server. Currently /var/www/html is owned by apache:apache. What is the recommended permissions for Joomla installation on Linux in ...
0
votes
0answers
27 views

Security Issue about WordPress “/wp-content/uploads” [on hold]

You may find that some url are always vulnerable that can be exploited to upload file anonymous. Actually, I know how to use wpscan to check the vulnerability of plugin, check url and something like ...
3
votes
1answer
57 views

SQL injection with single statement query

Suppose I had a vulnerable query like this: var q = 'SELECT x FROM y WHERE id = ' + req.body.id + ' ORDER BY date DESC;'; For the purposes of this question, req.body.id could be any integer ...
0
votes
2answers
80 views

Passwords: Symbols and length > 20 disallowed [duplicate]

I'm going through a bunch of accounts at the moment changing my passwords, some of them are looking a little weak and i've reused them, but i keep coming across websites that don't allow you to use ...
0
votes
0answers
12 views

How to securely implement a JAAS [on hold]

I need an example of some best practices to securely implement a login module based on JAAS ? Thanks for help.
1
vote
2answers
59 views

Where to place a vulnerability scanner within a data center

There is currently a debate in my office on the best location to place a vulnerability scanner (a distributed scanner - Rapid7 Nexpose, using scan engines) within a data center. I see two options: ...
0
votes
4answers
105 views

Anonymity through Tor over VPN [on hold]

I want to do some research on network anonymity. Assume that I am careful enough not to disclose any personal information while connected to an anonymous network. If I run a system that uses TOR ...
2
votes
2answers
48 views

Best practice to secure an API of unknown structure that can come from end user device or server

I'm trying to create an API with minimum forced structure. The messages can come from end user device or from a backend server. I'm ok with opening separate API for end user traffic and from servers. ...
2
votes
0answers
23 views

Connection Android - Baseband Processor - SIM Card

I currently examine the hidden components of a smartphone, inspired by the research of Weinmann All your baseband belong to us and Karsten Nohl Rooting Sim Cards. According to Weinmann, the ...
2
votes
1answer
184 views

shred - different device size

When I need to properly wipe a harddrive, I tend to use shred on the whole device, i.e. pointing shred to the /dev/sdX without regard to particular partitions; however I noticed that the device size ...
0
votes
0answers
14 views

Rewrite or internal redirection cycle while internally redirecting to “index.php”, request: "GET /etc/lib/[some-folder]/[some-php-file].php

Finding this error in my error.log Rewrite or internal redirection cycle while internally redirecting to "index.php", request: "GET /etc/lib/[some-folder]/[some-php-file].php I guess someone ...
8
votes
5answers
1k views

Should I remotely store my salt? [duplicate]

When users register on my site, I want to store their username and hashed password in my database. When I hash that password, I'm going to salt it using PHP. The issue is, I don't want to store the ...
-3
votes
0answers
26 views

How does hopper prevent disassemble itself? [migrated]

It's a "how decompiler prevent decompile itself" question. I have tried : rename the Mach-O 64-bit executable x86_64 file remove the LC_UUID and LC_SIGNITURE load commands but somehow hopper can ...
2
votes
2answers
66 views

TLS reliance on System Time

I'm interested to know if there is any reliance on system time (as defined by Linux or windows) when initiating a secure handshake. I'm aware that TCP typically uses a random number (RFC 1323) to ...
1
vote
4answers
96 views

How to exploit this include_once vulnerability in PHP?

I'm performing static analisys on a PHP code and came across with this situation: include_once SYSTEM_PATH . 'languages/content-' . $_COOKIE ['lang'] . '.php'; If I try to hack with this HTTP ...
-2
votes
1answer
50 views

facebook login notification: Correct ip but wrong browser info [on hold]

This is what happened a few months ago: I received a facebook login notification (I can not remember if it was after a "clear history" on my browser) that stated my CORRECT ip but WRONG browser/OS ...
6
votes
1answer
596 views

Competitor app blocks our app, need a way to bypass their check [on hold]

We have a taxi app which has been quite successful in Europe. But recently one of our competitors has started checking if our app is installed and if it is, theirs won't run until the user uninstalls ...
1
vote
1answer
34 views

Strange TCP traffic on Mac OS X from 'rdmd'

I noticed some curious traffic today on my MBP after running lsof. It seemed that a process called rdmd had begun 3 TCP sessions: rdmd 85842 0 9u IPv4 0xca0e547f0a118fdb 0t0 TCP ...
2
votes
1answer
59 views

How does Putty derive the encryption key in its .ppk format?

I have been doing some reading on the mechanics of managing RSA key pairs, during which I learned that OpenSSL by default derives the encryption key by using MD5 on the passphrase (bad!) without any ...
3
votes
1answer
65 views

If I connect to VPN through proxy, who can see what?

I try to understand what happens when I use an HTTP(S) proxy in my OpenVPN client configuration. What's the advantage of an HTTPS proxy over plain HTTP? In any case the encryption takes place on the ...
0
votes
2answers
52 views

How can I strip sensitive data out of a Wireshark log report?

I have a sync app that doesn't work and the developer asked me to try and perform a sync with Wireshark capturing the data and send the Wireshark log to him. I noticed that Wireshark saves sensitive ...
2
votes
1answer
20 views

What method could a white-box attacker use to track the deletion of memory / files?

A rather theoretical question: Assuming there is memory with a malware inside it. The malware's goal is to detect if a legit application is about to delete contents of the memory. If recognized, the ...
0
votes
1answer
37 views

JSSE recommended cipher suites

In the wake of POODLE I am reviewing the configuration of a number of Tomcat servers running on the JSSE connector. In order to work out what ciphers JSSE supported I wrote a little snippet that ...
1
vote
1answer
55 views

Communication between two open endpoints, is this secure enough?

I'm building a (very simple) tool to communicate between two servers. I started by asking if there was a better alternative than making a home made scripts and we came to the conclusion that for ...
2
votes
2answers
40 views

Steps for building a good File Encryption on Android

I want to be able to build a good file encryption on android for a cloud app. The files used are mainly pdfs, pngs, docs, audio, video, etc (all sorts of files). Edit: My constrains are that it ...
1
vote
2answers
24 views

Is it possible to detect the type of key required when connecting to a wireless network?

So I was wondering if I could determine if a wireless network is asking for a specific type of key such as WEP/WPA ect? Or if it just takes the one you give it and processes that?
2
votes
3answers
59 views

Stored Cross-Site Scripting Without Parentheses or Spaces

I'm testing a commenting application that takes a link of the form http://google.com and puts it in an href tag as so: <a rel="nofollow" href="http://google.com"> The resulting comment is ...
8
votes
2answers
328 views

How secure are the FIDO U2F tokens

Google and Yubico just announced the availability of cryptographic security tokens following the FIDO U2F specification. Is this just another 2FA option, or is this significantly better than solutions ...
0
votes
2answers
68 views

I'm wondering how I hide my identity online well

what are the different ways to become anonymous. Is quicksilver a good email for that? What are the different options? I know about proxies, Tor, and VPNs. Should I do all three? I like computers but ...
3
votes
1answer
37 views

Reset Windows trusted certificates store to its default

Over the time I have installed several additional trusted CA certificates to Windows trust store, sometimes because an app pushed me to do so, some other times for development and testing. Is there ...

15 30 50 per page