1
vote
1answer
38 views

How do you manage credentials to multiple remote systems?

We are a vendor that provides software to the healthcare industry, and our application is locally hosted on customer infrastructure. As such, we are provided with VPN access in order to be able to ...
12
votes
3answers
1k views

Is this “Domain Registration Service” email a scam?

I received an email to the email address listed on our website (it's a generic info@ourcompany.com to help "weed out" spam, whereas each employee has something like andreas@ourcompany.com to which I ...
2
votes
1answer
54 views

Field-level encryption vs disk encryption for PCI compliance

We are in the process of setting up a PCI compliant server (with Firehost's help). We are using MongoDB as our primary database. I am having some concerns about the encryption, though. Are there any ...
0
votes
2answers
103 views

Encrypting files in .NET?

I am in a situation where I would like to encrypt audio and text files for an application I am working on. I did some looking around and from what I have seen the Rijndal encryption algorithm would ...
0
votes
0answers
9 views

command executed when a folder is opened [migrated]

once a wise man told to me that every folder contains a file autorun.inf (not sure about the name but properties are same as autorun.inf) and he changes the codes of the file to execute a batch ...
1
vote
2answers
35 views

Malware analysis - how to extract executable files using static analysis? [on hold]

I would like to know if there is a way to extract executable files from a malware sample that you're not able to use dynamic analysis on. For example, if I get a sample to analyse but it cannot run, ...
2
votes
2answers
118 views

SQL injection: real escape string function

example4.php?id=id=2-1 I came across the above injection and I can not figure out why(how) does this work and what's interesting is it returns all the records from the database. Anything guys? ...
5
votes
1answer
64 views

SSH: benefits of using hashed known_hosts

What are the benefits of storing known_hosts in a hashed form? From what I read, it is supposed to protect the list of servers I am connecting to, presumably in a scenario where my account has been ...
0
votes
1answer
40 views

Enabling port forwarding on port 53 on a DNS server, why is it a risk?

Well, actually I know that the risk is that somebody from an external network could access IPs and hostnames of the machines on a local network, but I am struggling to understand if this is it or if ...
1
vote
1answer
83 views

HeartBleed and Closed Source Hardware like Cisco

With the release of heartbleed how does one protect themselves with closed source networking hardware like cisco? Especially hardware with VPN variety. Would it be best to replaced such systems with ...
0
votes
1answer
64 views

How does Shodan crawl internet-connected devices?

I wonder how Shodan crawls internet-connected devices and adds them to its database. I know Google, for instance, finds new websites by following links in websites it already found, but that strategy ...
1
vote
1answer
59 views

How to detect Snort on the network?

Does anyone know how to fingerprint an IPS ? is there any tool available to do the job? I want to detect snort in my network . Would appreciate any kind of help.
0
votes
0answers
18 views

Pivoting without Meterpreter [on hold]

Please help me out with the method to pivot without using meterpreter. The scenario is : A Network Pentester, owned a system of the target network needs to enumerate other systems in the network via a ...
0
votes
1answer
70 views

Python SSH vs SSL? [duplicate]

I read the What is the difference between SSL vs SSH? Which is more secure? , and it mentions there is the possibility they can be affected by similar attacks. Now that the heartbleed thing is out, ...
1
vote
1answer
46 views

Sql Injection and no priviliges to write files [on hold]

I have a sql injection in my site and im using sqlmap but when i try --os-shell it says cannot write file due to permissions . now is it impossible to write a file to the server?
0
votes
1answer
52 views

Outbound Port 443 Open but Not Allowing SSH [on hold]

My college wireless network has a firewall blocking all outbound ports except 443 and 80. The wired network, however, has none of these restrictions. I can connect to HTTPS sites (obviously). On my ...
1
vote
0answers
113 views

How the decryptor author found the initialization vector for the AES CBC- whatsapp CRYPT5 db uses?

I was going through DECIPHERING MSGSTORE.DB.CRYPT5, THE NEW DATABASE WHATSAPP & Steal WhatsApp update. The author of the first link published a decryptor which sets the iv for the aes_192_cbc to ...
0
votes
1answer
36 views

Aside from Remote Exploit Code/Physical Security or Social Engineering - Is there another way to gain access to a network? [on hold]

After spending some time looking into security and remote attacks on a client/network, I feel like I've hit a wall - Every remote attack seems to boil down to one of the following approaches: ...
1
vote
0answers
44 views

Instant Messaging End-to-End

I plan to create an application for secure instant messaging, now I don't know whether or not I want to implement the encryption by myself. This project is also mainly for educational purpose so I ...
-1
votes
1answer
30 views

my own computer's name is listed for sometime in peers list during torrent downloads [on hold]

While downloading with torrent.I saw my own computer name being written in the peers list . After few seconds it vanished and then reappeared after sometime ,again vanished, why is it so.
-1
votes
0answers
44 views

Secure connection failed (OCSP)

I've been getting a lot of failed connections lately, namely from Facebook and now Google (German site works, French does not). This happened to other sites as well but these two are the kind you do ...
0
votes
0answers
21 views

Length-constant password comparison in scrypt? [duplicate]

E.g.: XORing the candidate against stored then comparing against 0. Do I need to worry? (my question is much in the same style as this question: Does bcrypt compare the hashes in ...
3
votes
3answers
110 views

Risk in buying SSL cert from non well-know party

Let say I knew a guy is selling SSL cert in a very cheap price, assume they will generate a real and valid cert for me, since I need to submit my CSR to them and they pass to th CA, are there any ...
1
vote
1answer
53 views

NTLM/LM Hashes on Domain Controller

I've noticed that when extracting password hashes from a domain controller (using Elcomsoft proactive password auditor) sometimes I'll get LM and NTLM hashes and other times I'll only get NTLM hashes. ...
1
vote
1answer
53 views

Web Application Authentication Using Computer Properties

Introduction: I am in the process of building a web-based game that requires user authentication. The vast majority of other gaming sites utilize the typical username/password method for ...
1
vote
1answer
47 views

Using Fiddler to capture few important Details

I want to implement the following requirement. In an online Bank Transaction, a User wants to send an amount of $1000 to an Account A. I want to see that the request is going unmodified to Banking ...
2
votes
2answers
113 views

Keepass Dictionary Attack Protection Strategy

Though pretty interested, I'm everything but an expert in Information Security, please redirect me to any helpful resources if my question is stupid or correct me if my assumptions are wrong. When ...
4
votes
1answer
140 views

What are the OpenSSL standard Diffie Hellmann parameters (primes)?

I recently generated some custom Diffie Hellmann parameters which are basically just long (in the below case 4096 bit) primes. Those are then used in the key exchange process. I used the following ...
1
vote
1answer
93 views

how secure is javascript based oauth2.0

Javascript based oauth exposes the client id of the application and it trusts only on the domain requesting the access token. The domain name can be forged with a dns hijack(or a virus affecting ...
1
vote
1answer
33 views

Linux kernel 3+ system call table modification detection [on hold]

Is there any available tool which can check kernel 3+ system call table for modifications? Also I want to know, is there any automated general tool to check Linux for unknown rootkits? Not like ...
3
votes
1answer
36 views

Does the ARM TrustZone technology support sealing a private key under a code hash?

One of the extremely valuable functions of a Trusted Platform Module (TPM) chip is its ability to seal a private key under the hash of the code that will use it. This means that one can create a ...
3
votes
1answer
39 views

Metasploit Pivoting on loopback?

I'm pen-testing a Windows 7 machine, and have access to a limited remote shell. I can see there's a vulnerable SMB service running on the machine's loopback, but it's not available externally. Is ...
0
votes
1answer
29 views

Evaluation of cryptosystem for authentication and keyexchange

I'm a masters student in computer science who works part time with my own company as a consultant. My lastest project is based on my bachelor thesis which handles everything except the security. The ...
-1
votes
0answers
38 views

How to trace an active cell phone call? [duplicate]

I have searched many websites but found none that contains information on how to trace the location of an active cell phone call. I already know that the connecting cell site and signal strength ...
0
votes
1answer
34 views

Apache 2.2 mod_ssl configuration Forward Secrecy/BREACH/BEAST/CRIME

I am looking for mod_ssl configuration which protects against common attacks like Breach, Beast and Crime. I already disabled gzip to avoid Crime but I'm unsure about the others. RC4 should only be ...
4
votes
2answers
130 views

Can Heartbleed expose a TOR user's IP address?

It is interesting to observe, that TOR exit nodes with out-of-date OpenSSL implementations can themselves be affected by the Heartbleed bug. Can Heartbleed expose a TOR user's IP address merely by ...
0
votes
1answer
29 views

Allow loopback in Iptables?

I'm trying to write Iptables rules for a small web server. Almost every source I've encountered recommends to allow loopback access to the web server, but doesn't explain why this is necessary. ...
-2
votes
1answer
33 views

How to decrypt javascript code extracted from PDF

I analyzed PDF, and extract javascript code. But javascript code is encrypted. I can't decrypt it. Please advise me. javascript code ...
3
votes
0answers
31 views

How does BGP filtering work to prevent routing hijacking? [duplicate]

I've been reading for a while but yet do not properly understand how is BGP filtering used to prevent "attacks" such the recent Indosat's problem. Do not copy&paste Cisco's site, I have read all ...
-3
votes
1answer
113 views

Hack into a computer through MAC and IP address [on hold]

Can I hack into someone's computer if I know the MAC address of his modem and his public IP address? Is this possible? What kind of stuff would I be able to access?
1
vote
1answer
19 views

Encrypting multiple blocks with an asymmetric scheme

I have a general question how asymmetric schemes are usually implemented. Typically, there is a parameter in an asymmetric scheme which limits the message length. For example the modulus in RSA. I ...
2
votes
2answers
118 views

How to know what personal information companies know about myself

I've been learning about Cyber Security and how to protect myself online after reading some books on the subject and I want to know how much Information i've handed out to companies.
2
votes
3answers
49 views

Wipe free space or take image and wipe entire disk?

Read some of the stuff here regarding wiping disks and securely deleting files. From what I've understood, after deleting (not securely) files they become part of the unallocated(free) space of the ...
1
vote
0answers
39 views

Storing private messages in a database

I am creating a portal where users can send private messages (PMs) for a very large audience. So I want to encrypt the messages and store them in the database. But I do not want to ask the users for ...
-4
votes
2answers
73 views

Is it legal to hack forum bots? [on hold]

I have a standard forum, currently plagued with bots. In the registration agreement, I included the following text: SPAMBOT OWNERS, YOU HEREBY WAIVE ALL YOUR RIGHTS TO PRIVACY. ANY AND ALL ...
1
vote
1answer
55 views

Why is GPG file encryption so much slower than other AES implementations?

Correct me if I'm wrong: When encrypting a file, GPG creates a one-off AES encryption key and encrypts that key using RSA. This is supposedly to take advantage of AES's superior performance when ...
1
vote
0answers
11 views

How to Compile SSL onto Cygwin for windows? [migrated]

Below is what showed when i configured. I included all of the packages in the cygwin installer (it took me forever to tick off all the "skip" boxes) `$ ./configure Starting hydra auto configuration ...
1
vote
2answers
63 views

How to make an efficient bruteforce attack on Windows? [on hold]

I've been trying to figure out a way to efficiently bruteforce on Windows, but the method I currently have isn't very efficient. I did some profiling and found out that on average it can go through ...
1
vote
0answers
22 views

Storing encryption keys on a server using Node.js and MySQL

I am writing a web backend/api for an iOS application using Node.js and MySQL. In my database I have a table for posts. I would like the posts content to be encrypted. Let's say I'm using this AES for ...
1
vote
0answers
41 views

Login Authentication with SSL and HMAC

My question is pretty similar to : http://stackoverflow.com/questions/5487757/using-hmac-sha1-for-api-authentication-how-to-store-the-client-password-secure. Basically, I want to write an API for my ...

15 30 50 per page