1
vote
0answers
6 views

Suspicious GET request parameter list ?

Is there a public list of common suspicious GET request parameter ? I mean - SQLi, Command Injection, Admin access etc. I am interested in such list, to be used to detect suspicious GET request in ...
0
votes
0answers
4 views

localhost to localhost ICMP traffic that is suspicious.. any idea of what is creating this?

I keep seen this on my tcpdump output.. is prob something very simple and logical but I can't see to see any process with lsof or netstat doing a ICMP request to it's own 127.0.0.1 every 2-3 secs... ...
0
votes
0answers
8 views

Windows 8 keeps asking for Admin Password for ONE SPECIFIC program

I am admin of a windows 8 PC . I turned UAC off so other users can open programs without my permission and it works perfectly for all the softwares however there is this one program (Backgammon ...
0
votes
1answer
21 views

What is the real use of certificates on the web?

When you get a certificate from a website you visit, signed by a trusted CA, is it trust-worthy because the CA authority did a background check on them? But how does this help with spoof websites? ...
0
votes
0answers
3 views

How to Verify the Integrity of the BlackBerry Momentics IDE Download for Linux

I am currently setting up development environments for BB10 apps on Linux workstations. BlackBerry provides their Momentics IDE for free from (https://developer.blackberry.com/native/downloads/). The ...
0
votes
1answer
15 views

Best practices for encryption from web<-> specific client

If we want to allow sensitive data between a web server and specific client only, is there anything more that can be done besides the following? Note that this is potentially a duplicate of ...
0
votes
2answers
17 views

Setting up a security lab, looking for a little guidance

I'm new here. Over the past couple of years I've had a growing interest in the security aspects of IT/CS. Recently, I've started setting up a lab for myself based on a kali/win7 dualboot and I've ...
0
votes
1answer
20 views

Malware (internet connectivity) and defending against it

I was wondering whether anyone knew if malware could spread without internet connectivity? Also, can you defend against malware by releasing counter-malware that spreads exploiting the same ...
1
vote
1answer
20 views

How to fix open redirect vulnerability?

In redir.php: header("Location: {$_GET['addr']}"); For fixing open redirect vulnerability i can think of several ways: 1- (Side effect of) Using a security token (anti-csrf token): ...
-2
votes
0answers
25 views

Encoding scheme and padding with '=' [on hold]

Does anyone know which algorithm uses '=' as padding character besides Base64? I got the encoded text ...
5
votes
1answer
293 views

What does a Firewall mean by “connect to TCP port without your permission”?

McAfee is reporting incoming network connections blocked from IPs like 198.252.206.149 (StackExchange Inc.), 54.179.231.116 (Amazon Technologies Inc.), 74.125.68.106 (Google Inc.), etc. The ports ...
2
votes
1answer
35 views

difference between public key and host key and security of host key

In SSH, what is the difference between host key and public key. Public key I believe that is part of private/public key pair, so, that anything sent by server(encrypted using private) can be ...
1
vote
0answers
26 views

Kerberos Authentication

I am trying to understand Kerberos Authentication. So far my understanding is: Supposing 'Alice' (A) wants to talk to 'Bob' (B). Step 1: A -> S: {A, B, None} K(A, S) Where S is the ...
0
votes
0answers
18 views

How do I decrypt encrypted text using a public_key.pem and an unknown hex data file?

I have been given a 3 files by a client: A public key (text file that begins with 'Begin Public key') An unknown file type containing some hex data - 'smthing.uyu' (most likely the private key?) ...
0
votes
0answers
18 views

Securing decentralised cloud scaling

Approach Require a certain percentage (quorum) of nodes to agree in order for my decentralised multicloud to grow. Benefits Reduced likelihood of growing too quickly (e.g.: 2 new nodes created ...
0
votes
0answers
18 views

How to merge modsecurity rules?

I have this rule: <Location /login.php> SecRule REQUEST_URI "@contains login.php" "phase:5,chain,id:981218,t:none,log,pass,msg:'login attempt for user %{ARGS.loginId} ...
1
vote
0answers
20 views

hsts bypass with sslstrip2 + dns2proxy

I am trying to understand how to bypass HSTS protection. I've read about tools by LeonardoNve ( https://github.com/LeonardoNve/sslstrip2 and https://github.com/LeonardoNve/dns2proxy ). But I quite ...
0
votes
0answers
24 views

Hiding symmetric key inside encrypted data

My server generates an AES encrypted file which when downloaded acts as an input for an application. So, should I hardcode the symmetric key inside the application or should I randomly generate the ...
0
votes
1answer
34 views

How to generate self-signed EV SSL Certificate?

I configured XAMPP / Windows on my laptop so that this URL: https://www.supersite.com/ points to XAMPP / localhost rather look elsewhere. I basically generated a self-signing certificate, imported ...
0
votes
0answers
6 views

Use cases for IPC security windows communication

There are two processes on windows machine. One is in user space and second is a service. User space process sends data to service. Because iam starting to think about securing somehow communication ...
0
votes
0answers
26 views

Accessing the Exchange EWS API with safety in mind

I'm new to the security stack exchange, so feel free to edit the question or redirect me to another forum if this is not fitting. I'm currently working on a web application that will allow the user ...
1
vote
1answer
32 views

How is password information stored and used on Android accounts?

How difficult would it be for someone who stole your device to gain access to the username and password information stored under the Settings -> More -> Accounts section of an Android device? ...
2
votes
1answer
26 views

Understanding OpenWRT LuCI Firewall Routing with VPN

I'm still fairly new to networking, and I'm having a little trouble grasping some concepts of the proper firewall rules I need to implement for my desired setup. I'm setting up a router with OpenWRT ...
1
vote
2answers
36 views

I want to figure out how cookies/ session variables interact to validate a user session

---I have been experimenting on cookies/ session ids and have a little trouble digesting in the concepts. I'm working on a Debian distro. Using Burp to capture/alter requests/ responses. What I know ...
0
votes
0answers
13 views

Assemble RSA keys from components [migrated]

I'm studying openpgp cryptography and struggling to understand some things. I can't use pgp tool for generating keys and ecryption, but have to write a simple app to generate keys, encrypt and decrypt ...
0
votes
0answers
22 views

Slow Loris Get Request

From my understanding, a slow loris attack is an attack of incomplete GET requests to most famously an Apache server because the server does not timeout the connection made. GET / HTTP/1.1\r\nHost: ...
0
votes
0answers
23 views

sqlmap cannot find injection vulnerability

I create a page called register.php which will take 4 parameters user, pass, email, comments. And the pass is vulnerable to sql injeciton. I have tested the vulnerability manually by filling test', ...
0
votes
0answers
12 views

File Transfer on Lan or Internet Via Local Service Or System Account in windows

Since Local Service, Network Service And System Account are always logged on, Can these accounts be used in dail up connection or file transfer over Lan via other Service or Program? or is any ...
-2
votes
0answers
30 views

Software company possibly spying [on hold]

recently I decided to check my network on task manager and have had some weird remote addresses from bandicam.com. I uninstalled it, deleted all registery keys of it and it still appears.
1
vote
0answers
25 views

Are Secure Desktop and separate process enough for hiding sensitive information in RAM?

In my program, I have an encrypted database on the file system with a password. It is decrypted in RAM, and the sensitive data get spread out too much in RAM for mistake to be auditable easily enough. ...
1
vote
0answers
18 views

Can I use a self-signed certificate in Tomcat for private APIs and a commercial certificate for public pages? [migrated]

I distribute a Java desktop application that needs to communicate with some RESTful APIs served by embedded Tomcat within a Spring Boot webapp. I was planning on using a self-signed certificate for ...
0
votes
0answers
22 views

Are there any alternatives to EFS for transparently encrypting the contents of a folder in Windows?

EFS is not an option for me because I'm using Windows 7 Home Premium. Encrypting the entire drive with VeraCrypt or Bitlocker is not what I'm looking for because I am dual booting with Debian.
0
votes
1answer
70 views

What kind of backdoor can be made after hacking wi-fi? [on hold]

I'm interested to know if A hacks B's wifi password, what can A do to gain persistent access to the router even after B changes the wifi password? Secondly, how can we detect the backdoor and patch ...
2
votes
0answers
18 views

Is there an HSTS equivalent for DNSSec?

Is there any way to set a DNSSec-always policy similar to how HSTS commands Web Browsers to always use HTTPS? This would mitigate a DNSSec-strip attack (similar to SSLStrip)
4
votes
0answers
31 views

I just deployed DNSSec. Is there any benefit in DANE for a CA- issued Cert?

I just deployed DNSSec at https://val-id.com and https://getvalid.com Since DNSSec is a requirement of DANE, and I have a CA-based certificate, can I show my support for DANE-based deployments by ...
0
votes
0answers
27 views

SSL cipher suite usage statistics based on captured data [migrated]

Is there a reasonable method of building SSL cipher usage statistics based on captured packets? Let's say my web server supports a set of ciphers and I would like to find out how many clients ...
0
votes
0answers
19 views

How should I approach learning Verifiable Encryption?

I need to act as a proxy for certain types of encrypted data, and I want to make sure that my service isn't abused. To that end I need to verify the general structure of the data going through my ...
0
votes
0answers
11 views

upload received ssl data to distributed servers

I am doing the network traffic analysis for a live camera device from a Chinese company which allows to view the real time video from ios6 app. 172.17.200.2 is the IP of the ios device.And the ...
0
votes
1answer
27 views

Exploiting snmp private string [on hold]

Like many others I know about gathering info from snmp read only strings, and that with some tools we can grab the banner, but there is a private string, too, with READ WRITE authentication. Isn't ...
0
votes
1answer
28 views

VeraCrypt secure in public?

I have made a Veracrypt Containment that uses AES to encrypt everything inside. But my question is: can I securely put the containment file in public (everybody can access it) without anybody able to ...
1
vote
0answers
20 views

OpenPGP (RFC4880) - do you agree with my SimpleS2K (string-to-key) implementation?

Background: I'm writing a GPL Python OpenPGP to JSON parser which I'm testing on files generated with GPG 1.4.16. If given a passphrase, the parser will generate keys using the string-to-key methods ...
9
votes
3answers
427 views

External websites in logs [duplicate]

I have a website, let's call it www.good.com. I've been getting a lot of requests to www.good.com under completely different URLs than www.good.com. I suspect this traffic is also causing some site ...
0
votes
0answers
10 views

How to configure μTorrent for a VPN? [migrated]

I am using a VPN connection successfully for browsing but I have trouble when using it for torrents. I am sure that P2P is enabled by the VPN company so I must be missing some configuration. I know ...
10
votes
2answers
601 views

Why does rfc6797 say “An HSTS Host MUST NOT include the STS header field in HTTP responses over non-secure transport.”

Why does the RFC prohibit the server from sending HSTS to the client over HTTP? I can see that if a HTTP client responds to that unsecure HTTP response it might cause that site to be inaccessible ...
1
vote
0answers
16 views

nslookup shows wrong data [migrated]

I am currently an administrator and have about 150 windows systems running. The previous administrator turned out be be a real nightmare for me before he left. The network assignes some windows ...
2
votes
0answers
29 views

Find the installer of a Rootkit and reason for attack on a Linux OS? [duplicate]

My Linux Jenkins server was compromised and a Rootkit was installed. I know this since a running process tells me the path Jenkins job is running and it includes a URL with path pointing to a Python ...
0
votes
1answer
28 views

CSRF on GWT apps : bypassing the Same-Origin policy

At work we suspect a GWT app (that is not in production yet) we own to be vulnerable to CSRF. We have to look at it from a black-box point of view before a third-party security audit will be ...
2
votes
1answer
54 views

Why does WPA2 need a 4 way handshake?

If client and AP both have the Pairwise Master Key (PMK) available, why do we need a 4 way handshake again to derive some other key (PTK)? Why can't we use PMK for further security process?
1
vote
1answer
62 views

Wordpress blog hacked?

There is a Wordpress blog running on Wordpress 4.0. Anyone having the company webmail can signup to the blog using their Google+ account and submit blog posts. Once posted they will be sent to some ...
0
votes
0answers
21 views

How to remove Cryptowall Locker Virus [duplicate]

I have been getting issues with this Cryptowall Locker Virus, is there any permanent solutions to remove this virus from my pc. I have taken help from ...

15 30 50 per page