2
votes
2answers
369 views

More secure curve than Curve25519

As far as I know, Curve25519 offers "only" a security level equal to an 128bit symmetric cipher. I'd like to know if there are new (not NIST) curves, which provide a security-level comparable to a ...
2
votes
2answers
99 views

What are the privacy and infosec risks with Apple Watches and Android Wear?

From what I can tell, I Apple Watch apps act like a remote control to a nearby iPhone using Bluetooth or BLE. Conversely Android watches have the ability to run full applications, and therefore ...
1
vote
0answers
285 views

Null Session Questions [closed]

Null Session means using unauthenticated SMB session to IPC$ share and accessing the resources anonymously using the RPC function calls in SMB Since The Processes running Under Local System Account ...
0
votes
1answer
695 views

can a fake AP have password? [closed]

I cannot speak English well, sorry. What happens if we create a fake AP with linset on kali linux and we disconnect the target. He would then connect to our AP and when he wants to go to a site he ...
2
votes
1answer
778 views

Which browsers don't support Forward Secrecy and ECDHE

The question is which browsers are known not to support Forward Secrecy and the Diffie-Hellman (DHE) or Elliptic Curve cryptography (ECDHE) ciphers? We have clients who are demanding we support ...
-2
votes
1answer
2k views

If I DDoS through a VPN, will they be able to resolve the attack to me? [closed]

As the title says; if I DDoS through a VPN, will they be able to resolve the attack to me? Say I've got a VPN running on a VPS, connected to it, so my IP has changed. If I DDoS a server, will they be ...
1
vote
2answers
346 views

Do I need to set maximum characters length for password using bcrypt?

I using bcrypt to create a password hash and in the php documentation it says Caution: Using the PASSWORD_BCRYPT for the algo parameter, will result in the password parameter being truncated to ...
5
votes
2answers
592 views

IPsec on multicast

I am trying to implement IPSec for multicast communication, I tried strongSwan for setting up IPSec for unicast but it doesn't support any standard for multicast ipsec as listed here ...
0
votes
2answers
134 views

“&” character in url [duplicate]

I think I found a bug in my website but don't know how dangerous it is. My website will redirect you to a warning page whenever you click on a link that is pasted in the comments section. The url ...
1
vote
3answers
110 views

Is it possible that to sign a message with a PGP key in a way that leakes the key

Alice provides a software for signing messages. The software runs in a airgapped enviroment. The software is given the message that's to be signed and the private key. The software then produces a ...
2
votes
2answers
191 views

nmap script with credentials

I'm using Nmap for penetration testing for a while, and I need to know: assuming I revealed user credentials: username & password, Is there any script that I can use, for searching what resources ...
1
vote
1answer
55 views

SSL Test Server with typicals Flaws [closed]

i am testing different SSL-Proxys and want to know more about their failure-handling. Do you know about an public (test)server (HTTPS) which provides the typical flaws like: Expired certificate ...
-3
votes
1answer
60 views

Simple VPN software [closed]

I'm currently in need of a simple VPN software. It must: have Ubuntu packages in apt-get, or at the very least a ppa be easy to configure and use (unlike openvpn) be secure be open source So ...
2
votes
2answers
271 views

CSRF protection for unauthenticated requests, actions, searches or comments?

I have gone through the example of CSRF funds transfer from a bank where the user is logged in. Similarly I have looked at CSRF in case of email updating. I think I understood it but I am not quite ...
0
votes
3answers
274 views

How does Nessus send remote commands on Windows without RDP? [closed]

I would like to know how Nessus sends remote commands on Windows. I have a scan with credentials launched on a Windows machine without RDP enabled, and Nessus can launch commands (.audit with the item ...
2
votes
2answers
308 views

How to remove meta and sensitive data from PDF file?

I've some PDF files generated from different sources (such as web-browser, Photoshop, etc.) on Unix. How do I make sure PDF doesn't contain any sensitive information such as IP address, OS, user ...
2
votes
0answers
238 views

Snort alerts analysis (web interface) [closed]

I have a question about Snort (or maybe any other IDS/IPS, any working solutions would be ok). The goal is to set up some web interface providing a way to view the whole TCP stream packets of each ...
4
votes
1answer
208 views

What are some useful tags and payloads for HTML injection on CSP-protected sites?

I'm pen-testing a website that fixed most of its XSS vulnerabilities by just adding a Content Security Policy. There are still HTML injections in several places. I've tried to get a ...
0
votes
0answers
10 views

Does a static salt in addition to a random one add any security? [duplicate]

I'm looking through some old hashing code and found something that made me raise an eyebrow. In order to store passwords, it uses BCrypt to generate a random salt and hash the password. Before that, ...
-2
votes
1answer
281 views

Fiddler Can decrypt https traffic

So apparently, a software called fiddler is able to very easily decrypt secure https traffic with a click of a few buttons: http://docs.telerik.com/fiddler/Configure-Fiddler/Tasks/DecryptHTTPS I ...
2
votes
2answers
395 views

linux hidden OS

I have been reading about hidden volume OS with truecrypt, and now with its successor, VeraCrypt. https://veracrypt.codeplex.com/wikipage?title=VeraCrypt%20Hidden%20Operating%20System But Couldn't ...
0
votes
0answers
87 views

Hostname based Access Controls from clients with shared IPs

I have been pondering this question for some time now: Can you really use hostnames as access controls, especially when clients might be behind proxies or routers performing NAT (or any other shared ...
5
votes
1answer
87 views

Is malware or screen capture possible with iMac as external display?

If using a foreign iMac as an external display (through the Thunderbolt to Thunderbolt, or Mini DisplayPort to Mini DisplayPort cable, and Command+F2 on the iMac, as per iMac Target Display Mode FAQ), ...
0
votes
2answers
132 views

Is the lack of an IP address in the AN field of an SSL certificate a vulnerability?

When accessing a HTTPS site by IP address, if the IP address is not in the alternate names field, the browser will throw an error about the certificate not matching. Would this be considered a low ...
4
votes
2answers
296 views

How practicable is application whitelisting

I understand that application whitelisting is better and more accurate than black listing. However, my question is, if you whitelist a directory, won't the malware also be able execute in that ...
0
votes
1answer
52 views

Browser Unable to Fully Authenticate HTTPS

I'm attempting to fully verify the HTTPS encryption using Chrome & Firefox but both browsers currently display the connection as 'including resources which are not secure'. I have tried using ...
1
vote
3answers
188 views

Is this approach to backups secure?

I've got an existing (personal) backup service which I'm rewriting from the ground up to be secure. At present, I just store files (and diffs) in AWS S3 with no encryption. It works fine but I'd like ...
1
vote
1answer
80 views

Block An IP Address Scanner On Mac [closed]

I'm working on an prototype that can spot network scanners, which is working and it spits out the IP address of the scanners, but I need to block them now. Is there any way to block an IP address ...
1
vote
2answers
73 views

Disclosure and HTTP status codes

Disclaimer: yes, I have checked the Which HTTP status codes are interesting from a security point of view? which sounds relevant but not entirely. These days it's supposed to be a good practice to ...
1
vote
0answers
123 views

Oauth authentication without state parameter

I have some security concerns about the first step of account authentication in my application. The authentication goes through an OpenID provider. If the response of such provider shows that the ...
-1
votes
1answer
109 views

Is VBScript an actual tool to attack users?

While I was reading a ASP.NET book I found that is supports VBScript but this made me think if VBScript is still a tool of hackers to attack other users, I guess only Internet Explorer users, As I ...
8
votes
1answer
512 views

How does consent.exe know what to display?

consent.exe is responsible for showning the UAC dialog. Looking at the command line parameters with Process Explorer, I see the following: consent.exe 1316 748 000000004385BD60 I have read How ...
2
votes
1answer
131 views

Is an attacker looking at encrypted non-boot partition able to tell if this is VeraCrypt, TrueCrypt or DiskCryptor?

In theory an encrypted partition WITH encrypted partition header as created by mentioned encryption software, should be nearly random-looking. But maybe there are some clues, like offsets, double ...
0
votes
1answer
31 views

Evaluation keyexchange for automation [closed]

Target: Secure communication between server S and Master M Server S executes script downloaded from Master M (securely) Problem: Small footprint - use existing software (base install of a ...
28
votes
2answers
23k views

Why is Symantec/Verisign CA appearing as an invalid authority? [closed]

Typical browsing to www.BankOfAmerica.com got me an ERR_CERT_AUTHORITY_INVALID error. This was with an up-to-date production version of Google Chrome for Mac. I tried with Safari, and got the same ...
1
vote
2answers
320 views

Hidden Malware on a windows OS able to startup [closed]

How do hackers hide there malware on windows, to startup and be impossible to find then delete. The results I found that a hacker can use to hide his malware: (found here) Windows: Setting hidden ...
3
votes
1answer
118 views

(httpd log files) What kind of attack is? How can I prevent it? [duplicate]

In my log files I see hundreds of these registers. I have to say that the client ip changes sometimes. So there are 3 or 4 ips sending this requests... The othersite.something (that I ommited) is ...
0
votes
1answer
252 views

Block size of CTR, CFB and OFB mode of AES in openssl

I am using openssl library. In all documents and webpages it is written that the block size is 128 bites(common for all AES modes). But what I observed in openssl is, for CTR, CFB and OFB modes the ...
10
votes
2answers
4k views

How can I prevent a man-in-the-middle (MITM) attack on my Android app API?

I checked out the app Packet Capture. This app is able to decrypt my app APIs (SSL Enabled) data by mounting a MITM attack using the Android VPN service. This does not even require root. How can I ...
0
votes
2answers
62 views

Full Disk Encryption, Single User System: User/Root Passwords required?

Are there any security issues of having no (or weak) passwords for user and root account on a single user system with full disk encryption (except boot partition)? Assuming no SSH server is running, ...
13
votes
3answers
762 views

Drupal server compromised - I want to investigate the attack technique / compromise

I've got a drupal site running on an up to date CentOS 7 LAMP AWS EC2 instance (freshly installed a couple of months ago) and I've just found out that somehow, probably through a poorly coded 3rd ...
3
votes
2answers
293 views

Is it possible for malware to be in the BIOS or in hardware?

Is it possible for malware to be written in the BIOS section and loaded on every fresh Windows Install? If it is possible, can this affect Linux (Ubuntu and others) operating systems as well?
3
votes
0answers
144 views

What is the most efficient password scheme in terms of entropy per convenience [closed]

Although the main points are right, but now six words are needed, which is both inconvenient to remember, and inconvenient to type. My question is, has then been any case studies on the most ...
3
votes
1answer
132 views

Client Certificates

After countless hours of reading I have come to the find that mutual authentication via client certificates seemed to be a viable and appropriate solution for the following scenario. I have a ...
1
vote
0answers
55 views

Why don't merchants use chip reader on credit card terminal? [closed]

Most merchants I've been to in the past few years have updated their credit card terminals to accept the chip+pin system. My credit card has had a chip for the past two years. Yet on these new ...
1
vote
0answers
46 views

VSFTPD- memory attacks [closed]

How are memory attacks prevented via the VSFTPD server? The platform I am using is Ubuntu. Please I am not currently having a problem I am just requesting knowledge concerning the subject stated ...
3
votes
1answer
192 views

If using a different password for every application is considered good practice, why is using a directory so widespread?

The title pretty much sums it all. We are always told that we should use a different password for every site and application, so that if one of those accounts is compromised, the others will still be ...
1
vote
2answers
816 views

Is chaining multiple VPNs a good way to reach anonymity on the internet?

I would like to chain a couple, say 6 or 7, VPNs together to create a sort of "super" encrypted lane on the internet. I'm not too concerned about speeds, all I want is privacy and anonymity. I've ...
1
vote
1answer
282 views

I think i might have accidentally clicked a phishing link, how can i be sure? [closed]

Long story short I might have accidentaly clicked a phishing link is there any kind of test I can do or anything I can do to check?
7
votes
3answers
2k views

Is AES 256 secure enough for putting Backups to AWS or Dropbox?

How long would it take with current hardware to hack an Disk Image which was encrypted with AES 256? I ask because i want to backup personal files (contracts, tax-things, code, keys, private ...

15 30 50 per page