-1
votes
0answers
11 views

Best option for DDoS protection on DigitalOcean server?

I would not like to use CloudFlare since they effectively act as a man in the middle and handle unencrypted data. Is there a CDN that mitigates the security risks that CloudFlare imposes? If not, is ...
0
votes
0answers
4 views

pushing changed bitlocker password from ad [migrated]

Can we do anything about getting the bitlocker recovery password pushed to active roles from ADUC. Active roles gets the key from ADUC if the machine is formatted and encrypted but not when the ...
0
votes
0answers
6 views

Are WebSphere portlet actions always CSRF protected

I noticed that the WebSphere portlet container generates action URLs containing an ID, which seem to change every time I reload the page. Usually action URLs are used as form submission targets. ...
0
votes
0answers
3 views

How to extend token expiring time if user is not active for a set period using JWT? [migrated]

Given an example here for a normal web app. Traditionally, we use session and set timeout = 30 minutes. if session expires we will redirect user to login. (Expired time will be extended when user/...
0
votes
0answers
14 views

Digital Signature and non repudiation [on hold]

I want to start learning digital signature.Does it guarantee non repudiation?Any other similar techniques exist to achieve non repudiation?
1
vote
1answer
39 views

Man in the Middle attack?

in a scenario where I have a gateway to the Internet and a switch(layer 2) connected to this gateway. I have two computers in the same broadcast domain connected to the switch. all traffic to the ...
1
vote
0answers
11 views

Is it possible to exploit this Zookeeper instance?

I was performing a security test for a client when I came across a Zookeeper installation on xx.x.x.xx:2181. Trying NetCat revealed that I'm able to all the following commands: dump: Lists the ...
1
vote
1answer
13 views

Is KeePass # of rounds relevant if you use a key file as master password?

I used to have my database set to 20.000.000 key transformation rounds and it would be fast enough on my PC but I found it takes too much time on my phones so I went to lower it and couldn't notice ...
0
votes
0answers
12 views

How can I unset the session of a specific user? [migrated]

I have a session like this $_SESSION['login'] and when it is equal with 1, it means the use is logged into my website: if ( $_SESSION['login'] == 1 ) { // You are logged } else { // login/...
5
votes
1answer
422 views

Is there any reason to disable paste password on login?

This is a question I asked in ux stackexchange but I wanted an answer from information security perspective too: Today I logged in to pay my cellphone bill, and I found that the site has disabled ...
0
votes
1answer
22 views

using VLAN to mitigate ARP poisoning

hi I have been told VLANs can help mitigate ARP poisoning because they can be configured with different broadcast domains. and arp works using a simple broadcast domain. can someone explain how the ...
0
votes
0answers
35 views

Encrypted cloud backup - NDA

I have signed an NDA which forbids sharing certain data with a third-party. On my personal computer I use a software which locally encrypts data and stores it in the cloud. This backup software is ...
0
votes
1answer
12 views

Mode of operation are availables with Camellia

What cipher mode of operation are available using Camellia in a SSL certificate context ? I'm mostly interested if XEX (Xor-Encrypt-Xor) or related mode (LRW, XTS...) can be used because they seem ...
1
vote
1answer
33 views

Is Ruby's SQL Injection protection enough to warrant not using additional security measures?

In my experience, SQL Injection is always a threat. If bad actors don't penetrate via SQL, they get enough data to launch bruteforces via MBASentry or do privilege escalation via scripts. However, I ...
2
votes
1answer
63 views

Suspicious about no-log VPN policy - anyone care to prove me wrong?

This post may sound pretty silly for you as specialists, but for me it is a serious question I cant find an answer to on the internet. Basically, I wanted to encrypt my net connection - obviously, I'...
1
vote
1answer
41 views

What is the lifespan of a C2?

I've been working on setting up dynamic blacklists, and one question that came up is how long typical entries should be kept on a blacklist. In the interest of equity, there should obviously be some ...
1
vote
1answer
47 views

Pentesting a Data Warehouse?

One client has recently implemented AWS and has a EC2 instance running. We have made one scoping call and further to that they provided me with a diagram that I have modified to avoid any issue: ...
0
votes
1answer
31 views

Firewall Blocking IP Spoofing

I was studying firewalls and I came to think of this. I have a firewall configured as follows: packet filter rule table to allow users of a corporate network to surf the web via HTTP and HTTPS Now ...
2
votes
1answer
50 views

How to provide user friendly WiFi access to gym members with WPA2 Enterprise?

Background A friend of mine is the owner of a medium sized gym. He wants to provide WiFi to his customers and asked me to come up with a concept and eventually also deploy it. As a computer scientist ...
0
votes
0answers
19 views

what tests can i do with 802.1x wifi [on hold]

I am currently working on my final work about "BYOD enterprise wifi security". The idea is to test some of the authentication protocols to see how "hackable" they are. The problem is that I don't ...
0
votes
0answers
17 views

Communicating a public key vs it's SHA1 fingerprint

Let's say there is a P2P communication system that establishes secure channels between nodes by letting their users manually exchange their public keys. Would it make any difference from the security ...
1
vote
3answers
35 views

Dns server records

Let's assume my domain test.xyz has ns1 record pointed to a random IP address 62.12.18.180. When somebody tries to resolve test.xyz, can the dns server at 62.12.18.180 see what IP is trying to ...
2
votes
0answers
20 views

Is there a database with XSS vectors, possible reference and test information?

I recently had the idea to develop an public database in which unique XSS vectors will be registered and get a reference assigned similar to the CVE system. I made a local PoC already and registered ...
-1
votes
0answers
24 views

Dropbox injected thread?

I just noticed while debugging with Visual Studio, that there is a thread belonging to Dropbox running inside my process: DropboxExt.34.dll thread DropboxExt.34.dll!59ee810a My code has nothing to ...
0
votes
1answer
24 views

Using ChaCha20 without Poly1305

Doing some lecture to choose a good configuration for my SSL certificate for my website (using a regular LAMP configuration), I'm wondering what are the possibles and secure alternative to poly1305 ...
0
votes
0answers
10 views

PCI - PA DSS - QIR

I have a PA-DSS Certified program. Do I need to be QIR Certified to remain PA-DSS Compliant? https://www.pcisecuritystandards.org/program_training_and_qualification/...
0
votes
1answer
14 views

Applocker Execution Prevention Bypass - Session parameter

I am still new to Metasploit and I am trying to explore the following module: 1- Module Name: exploit/windows/local/applocker_bypass I did: 1- use exploit/windows/local/applocker_bypass 2- set ...
1
vote
0answers
16 views

Account Connected Devices ignoring Credential changes

Hello People of Security, one of my accounts got attacked, so they(Provider) did expire my password. I'm currently not able to log into my account. So when I started an older PC of mine, I was still ...
0
votes
1answer
36 views

open network access, common problems?

what are some common problems for companys who offer "guests" - people that word for a different company at the first companys building - internet access? my guess would be easy to sue downloads like ...
18
votes
6answers
3k views

What is worse for password strength, a poor password policy or no password policy at all?

Recently I saw the following picture on Twitter: Now I'm wondering what is worse for password strength. Having no password policy at all or a poor password policy like in the picture?
0
votes
1answer
32 views

Certificates issued directly from root

EDIT: I have edited my question to not only consider SHA-1 deprecation, but more general the direct signing of subscriber certificates from root. In case a legacy system still uses a setup whereby a ...
0
votes
1answer
37 views

Remote File Include - commands running on attack box?

I think I am losing my marbles. I am doing a practice lab, and the machine has a server hosting a site with a RFI vulnerability. I host a malicious php file in my /var/www/html and start the apache2 ...
0
votes
0answers
13 views

If the security is compromised, can the attacker get the passphrase stored in memory? [duplicate]

In order for a system to be able to use a mounted encrypted device it has to store the passphrase that you give at startup. If an attacker gain access to the system can he easily get that passphrase ...
0
votes
0answers
41 views

Login time duration [on hold]

I'm working on a project for improvement of hacking detection. One of my ideas is based on "login time duration" of the user spent while login on an online-banking website vs "copy/paste" fast ...
1
vote
1answer
71 views

How to access an HTTPS service running deprecated technology? (TLS 1.0) (phone works but not PC)

So this is the issue: I have a modem/router provided by my telco. The router exposes the usual 192.168.1.254 address for managment, but with my pc there's no way to open it, I tried with firefox, ...
0
votes
1answer
41 views

With a very large number of GUIDs, can one predict the previous and subsequent GUIDs that will be generated?

I've been reading up on GUIDs. According to the Wiki: Cryptanalysis of the WinAPI GUID generator shows that, since the sequence of V4 GUIDs is pseudo-random, given full knowledge of the internal ...
0
votes
0answers
10 views

Does running a PowerShell script using an embedded System.Managment.Automation DLL prevent it from being scanned by AMSI?

A new feature called Antimalware Scan Interface, that allow AVs to 'see' Powershell commands executed, was introduced in Powershell v5. According to adsecurity, this feature seems to rely on the ...
0
votes
1answer
12 views

Are default options of cryptsetup/luks secure?

I'm setting up a partition for a linux distribution and I use the command : cryptsetup -y -v luksFormat /dev/sda1. I believe the default options for the current version of cryptsetup are : --hash ...
0
votes
1answer
44 views

Why doesn't my IP change on manual router turn off/on? [on hold]

Basically the title. I remember that when still having IPv4 addresses, my IP changed after the router turn off/on. This doesn't seem to be the case with IPv6. Since there are almost 10^40 addresses ...
7
votes
1answer
78 views

Why does Google consider Thunderbird not secure enough?

There is a special setting in Google accounts to allow "less secure applications" access to your account. If you turn this off, Mozilla Thunderbird won't work to check your e-mail. This is confirmed ...
1
vote
1answer
71 views

Bizarre HTTP requests to VPS, former malware command and control server?

I just bought a new VPS with Linode. I installed Apache and noticed some very strange behavior that I have been seeing consistently throughout the logs. So basically, I keep receiving stranger HTTP ...
-5
votes
0answers
35 views

Format String Vulnerability - Invisible Bytes?

I'm reading the book "Hacking: The Art of Exploitation" and I'm trying to exploit this code: http://pastebin.com/FNwjjsBx I noticed something strange - if my command is: ./fmt_vuln $(printf "\xaa\...
2
votes
3answers
61 views

Best practices for loyalty cards (barcode & NFC)

I am currently trying to determine the best way to go about designing a system that integrates both barcodes and NFC passes. The barcodes will be displayed on a phone screen. The barcode (2D, Aztec, ...
-1
votes
0answers
34 views

how does spyware work, what different types are there? [on hold]

I'd like to learn how spyware works. What exactly do they do and how different types may operate? Please feel free to be as detailed as you like.
0
votes
1answer
28 views

Buffer Overflow and Location of Return Address on Stack

I'm trying to exploit this code with a buffer overflow: http://pastebin.com/V8TS2hfi I'm trying to overflow the return address to get the "Access Granted" message, which is simple enough. However, ...
0
votes
0answers
24 views

Question about something found in pcap [on hold]

Looking at a pcap, an SSH scan was performed and in the pcap, there was a line that said "Linux 2.6, seldom 2.4". I'm assuming linux 2.6 is the older version of linux, but what is seldom 2.4 and how ...
0
votes
1answer
28 views

Virtualize a hardware firewall?

Hypothetically let's say I have reason to believe my operating system is compromised with spyware, and there's no way to remove or disable it. But I have an advantage insofar that I know the IP ...
2
votes
1answer
55 views

Which host key algorithm is best to use for SSH?

When you first connect to an SSH server that is not contained inside your known_hosts file your SSH client displays the fingerprint of the public key that the server gave. I found from this question ...
0
votes
0answers
7 views

How to resign a pdf after changes are made - Adobe Acrobat Pro X [migrated]

I need help updating the time stamp on my signature. I prepared a document, signed it, sent it for review, received comments back, and made some changes. Now I would like to resign the document with ...
-2
votes
2answers
66 views

Popular politicians and e-mail hacks [on hold]

Often, lately, I see e-mail servers hacked. Just recently I've heard of Hillary Clintons personal server being hacked, Turkish diplomatic/government e-mails and the most recent one: the DNC servers / ...

15 30 50 per page