0
votes
1answer
210 views

Authentication SSO token security - SAML, OpenID Connect

I am trying to understand how works various SSO technologies like SAML 2.0, OpenID Connect 1.0. In general, they work in a similar way providing tokens (XML, JSON) through Identity Provider to ...
2
votes
1answer
2k views

Airmon-ng confliciting with network manager in Kali

When starting monitor mode on wlan0 using airmon-ng start wlan0 I got a list of processes 'including network manager' that could cause troubles. I must kill those processes before starting airbase-ng -...
0
votes
1answer
150 views

How secure is an encrypted text? [closed]

There are apps like CTI Text Encryption that encrypt texts with one or multiple passwords and render them into meaningless words and digits. e.x Original Text (before encryption): The ...
26
votes
2answers
2k views

How can the content of a file refer to its own MD5?

So I just saw this picture on Imgur: http://imgur.com/gxRCrCM The intriguing thing about it is that the picture refers to an old Daft Punk song named "Face 2 Face". The image's MD5 is ...
2
votes
0answers
91 views

Is it secure to use one CSRF token multiple times?

I am new to the CSRF problem and I am studying how CSRF protection is implemented in popular applications like Facebook, Instagram etc. Now I am studying how CSRF protection is used in OAuth ...
2
votes
0answers
62 views

Novicorp WinToFlash Lite, spyware etc

I used Novicorp WinToFlash Lite on Windows 7 to create a Windows 10 bootable USB memory stick. While creating the USB drive, I noticed that WinToFlash wrote something like adding blahblah files to ...
0
votes
1answer
67 views

WebCrypto, SOP and Yubikeys

I've been following some discussions on WebApp Security mailing list regarding WebCrypto and SOP policies (100+ messages). One of the things that kind of sprang out was keys held in WebCrypto were not ...
22
votes
2answers
3k views

Why is Amazon's home page not encrypted? [closed]

I've been working on my very first web application and I usually refer to Amazon.com as my role model. I'm very interested in deploying my web application with SSL/TLS. However, there is one thing ...
2
votes
1answer
207 views

How do I find a PKI smart card reader/writer for development (Microsoft .NET)

I would like to learn how to develop software leveraging PKI smart cards. Ideally, I would use Microsoft Base Smart Card CSP, but I really just need the ability to store symmetric and asymmetric keys ...
-3
votes
1answer
119 views

Hiding both public and private keys for private communication between 2 servers

I've been trying to learn about deeper info security past abstract words like "tunnels" and "networks", and would appreciate some enlightenment on the following scenario: 2 servers are set up to ...
0
votes
1answer
53 views

Why does the SQL Injection technique INTO OUTFILE sometimes not work? [closed]

Why does the SQL Injection technique INTO OUTFILE sometimes not work? http://example.com/file.php?id=1 union select 1,"<?php system($_REQUEST['cmd'])?>",3,4 INTO OUTFILE " /var/www/website/...
0
votes
0answers
108 views

Cellular Mobile ID number Sniffing

As far as I know, cell phones intermittently transmit a Mobile ID number to inform surrounding cell towers that the phone is available. Is this transmission encrypted, or would one be able to ...
4
votes
2answers
134 views

How does Google or any other social media sites know what password I've used previously?

When I ask to change my password, Google sometimes doesn't allow identical passwords to ones that I've used before. Is there a reason why this happens?
3
votes
0answers
85 views

Zero Knowledge Proof Password Systems

I am wondering if there is a practical zero-knowledge proof system that can be used by humans to authenticate themselves to a server. Note that even the computer can not be trusted (at least with the ...
1
vote
1answer
112 views

HMAC password reset link and replay attacks

I like the look of this technique for sending password reset links: https://neosmart.net/blog/2015/using-hmac-signatures-to-avoid-database-writes/ (TLDR: don't store token in database. Send password ...
2
votes
2answers
206 views

Why do we have to put the shellcode before the return address in the buffer overflow?

I'd like to know why we have to put the shellcode before the return address in a buffer overflow. Logically the return address will point to the shellcode and will be executed, so the return address ...
0
votes
2answers
60 views

Client sent certificate with zero bytes but ssl is working fine

Mutual SSL Authentication is working fine while client is sending certificate of zero size. And certificate verify message is also missing. I am amazed how the communication is working fine. I have ...
1
vote
1answer
93 views

Allow copy-paste into MS Remote Desktop, but not copy from there? [closed]

I have a Microsoft Remote Desktop connecting to a server. Is it possible to enable copy-pasting from my local computer into the remote windows, but disable it the other way round? (this way it would ...
-1
votes
1answer
69 views

Magnetic stripe credit card [duplicate]

Do ATM in London accept magnetic stripe? If yes can a thief still duplicate a credit card and use it in an ATM which accepts magnetic stripes?
7
votes
1answer
1k views

Message signing disabled (dangerous, but default)

Over the last couple of years, I've developed a fairly keen interest in Penetration Testing & Information Security. Throughout this time, I've acquired (and accumulated) a range of different ...
0
votes
0answers
33 views

Standard benchmark for event-based web vulnerability scanners

I'm developing a simple web vulnerability scanner that can crawl and test AJAX-based web applications to find security vulnerabilities such as SQLI and XSS. In fact it can crawl and test web ...
2
votes
1answer
105 views

Can we determine how securely files are stored on a cloud storage service?

After asking two questions about the security of online cloud storage, it seems to me that we can only at best speculate as to the security practices of the hosting company, and believe what they tell ...
3
votes
1answer
101 views

Should I revoke & regenerate PGP private keys after computer is serviced by Apple Store?

I recently had an issue with my MacBook where it wouldn't boot. So I took it in to the apple store, and they said that they would need to send it off to a service center to diagnose and repair it. I ...
-1
votes
1answer
66 views

Authenticating users by checking if the key can decrypt a phrase vs by checking a password against a database [duplicate]

I'm kind of curious: Why would we store a password in a database when we can just encrypt a phrase such as "unlock me" using that password and then, at login, seeing if the encrypted phrase can be ...
0
votes
0answers
98 views

Why do websites limit what special characters you use in a password? [duplicate]

Bank of America, to give just one example, only lets you use certain special characters in your password - # and ( and ), but not $. (This is not a complete list, they allow more than that, but it's ...
0
votes
0answers
29 views

Verify which file a request to the server originated from

In order to make my question clear I will give a practical scenario. Lets say I have a server where I allow people to upload a script and allot them part of my drive, the script can make requests to ...
-2
votes
1answer
112 views

LFI exploitation using data:// [closed]

I found LFI in my website and I tried to exploit it, but when I use php://input or data:// it doesn't work, I cannot get the shell. Example: .index.php?lang=data:;base64,...
2
votes
2answers
72 views

Violation of security principles?

It's clear that keyless entry fobs, smart entry cards, NFC, etc. are vulnerable to relay attacks. Suppose they were improved by limiting the period of activity, eg let them be active only when they ...
1
vote
1answer
115 views

Recover 7zip password with partial password matching [duplicate]

I encrypted some files using 7z with AES-256 + file name encryption. The compression level was Ultra, method: LZMA. The password I regularly use is 16 digits. Now the file is not opening. I guess one ...
23
votes
4answers
2k views

Should I be worried if I accidentally entered my password in a username field?

Occasionally I will fail to hit Tab properly when entering a username/password combination. This results in me submitting username "myUsername$ecretPa$$word" along with a blank password. I always ...
0
votes
2answers
152 views

Reverse engineering of hash functions

I have an unknown process that gets some vars and returns an 8byte hash. I'm sure which vars it gets and I'm sure these are all the variable parts of the input. I can query this process when and how ...
3
votes
1answer
265 views

Setting up a honeypot to detect malicious network activity

So in the world of networks, people try to gain access to the client machine and perform lateral movement. Honeypots are often used to give them an easy access point and show them an unfavorable or ...
1
vote
1answer
113 views

what fields should I encrypt in a database containing user information? [closed]

So in a database many user fields could exist. Normally when I setup a database I go off of the security experts recommendations on what fields to encrypt, but I'm curious what is the most standard ...
0
votes
1answer
54 views

PCI SAQ C 1.2.1, 1.3.5 and remote server/software

I'm hoping someone here can help me. I'm attempting to get the small nonprofit I work at PCI compliant, as we have been paying an additional $20/month in noncompliance fees to our processor since we ...
3
votes
1answer
147 views

What is a simple example of a trap door function?

I was attempting to explain public key cryptography to a layman the other day which requires an explanation of a trap door function. While I do know in principle what a trap door function is, I have ...
2
votes
3answers
158 views

Does brute forcing require a password and username list?

I have been learning metasploit. One thing I noticed was that, all the videos on YouTube, which said "Brute forcing", used a password and a username list. My question is that, won't this be called a ...
2
votes
2answers
105 views

How can Authenticity be achieved in SMS or Text Messaging?

What tools or information is needed to verify the authenticity of a SMS message... or to send one so that such authenticity is intact? This answer describes something as a "message center", but I'm ...
1
vote
2answers
134 views

How to rate or review one Java web Application's security

Is there a way to rate or review the security for a Java web application? Except for web scanner or code audit, does it exist a metric/procedure to evaluate the application's security? Also I have ...
8
votes
5answers
2k views

I don't recognise my DNS server's address: does this mean I am compromised?

I'm using the Ubuntu GNOME Linux distribution as my desktop. Recently, it became impossible for me to connect to the Internet with it. When I checked its network settings, I saw that the DNS address ...
2
votes
2answers
119 views

Custom browser based on Internet Explorer - Uniqueness questions

I have developed a custom web browser for Windows using C# (based on Internet Explorer 11) and I'm trying to understand & solve the next issues: 1. I adjusted the User Agent string and the ...
4
votes
1answer
116 views

How does Trusteer Rapport make accessing websites more secure?

Trusteer claims that: Trusteer Rapport verifies that you are really connected to the genuine website as opposed to a fake website created by criminals. Surprisingly, it is not trivial to reach a ...
2
votes
1answer
72 views

Sudo debug function vulneability

I am quite stuck with an assignment question, exploiting vulnerability (vfprintf) in sudo_debug function with ASLR (CVE: 2012-0809). I can only use string format exploits. ONLY ASLR IS ENABLED < NO ...
1
vote
1answer
57 views

CAPTCHA on pages secured with login

My local mobile carrier (Play, Poland) and its paid SMS gate is the first example, that I recall in my entire Internet history, that forces users to fill out dully CAPTCHAs even on pages, which are ...
1
vote
2answers
1k views

Can I rely on openssl_random_pseudo_bytes() being very random in PHP?

I came across an application which needs to generate a random token for each user. It is very important that each generated token is unique. Application code was as follows: $token = md5(...
1
vote
1answer
241 views

How are Google searches intercepted when they are supposed to be encrypted with https?

In various news sources I read often that Google search terms are mass intercepted and tracked. I wonder how is this even technically possible when communication between PC/phone to Google is ...
2
votes
2answers
111 views

Can two users share the same Request.UserHostAddress?

I am working on an ASP.NET MVC-5 web application, which is available to public users (no login is required). And I need to prevent the same user from submitting more than 5 "contact us" requests ...
3
votes
1answer
5k views

How client certificate works for authentication (in Web API)

I have been working on this scenario for a week. I have implemented the code to authenticate client certificate using this link: http://www.asp.net/web-api/overview/security/working-with-ssl-in-web-...
2
votes
2answers
314 views

How vulnerable is Windows XP Embedded SP2 as of today?

A few weeks ago, I have been replacing and managing IT inventory. What caught my attention, was that a lot of thin clients are still running Windows XP Embedded SP2. That made me think about the ...
0
votes
0answers
201 views

Using WCFs WS-security implementation, how can the server verify client identity?

Using the configuration below we have implemented message security using WCF and WS-security. Note that we use clientCredentialType=Certificate. Now my questions are: Does the configuration below ...
0
votes
1answer
40 views

Entropy on payload

How can I guess if a payload is obfuscated or encrypted? in other words can I apply Shannon Entropy algorithm to a binary payload? any advice will be appreciated, thanks in advance

15 30 50 per page