5
votes
2answers
253 views

Does a random set of secondary passwords add any security?

My bank uses this rather uncommon policy of authentication. They of course have a password, which has quite strong password patterns like "use alphanumeric characters and symbols, 8+ characters" are ...
21
votes
4answers
1k views

Is there a way to detect web server in case it's not present in HEADER?

I'm trying to detect what web server a particular website uses. For instance whether it's nginX, Apache, Tomcat and so on. I usually use Live HTTP Headers Firefox add-on. The problem is that sites ...
-1
votes
1answer
207 views

ShellShock vulnerability and Java Web Applications

I am running a java webapplication ( Spring 3.2 based) on linux hosts. The linux hosts are vulnerable to the ShellShock vulnerability. Can someone exploit this vulnerabiity on my website ?
-2
votes
0answers
16 views

looking for info about phone protocol [on hold]

I'm looking for informations about phone protocol. I'm trying to get real ID hiding behind spoofed ID. Do you have some clues?
-1
votes
0answers
27 views

How to protect my site from bandwidth exhausting attacks? [on hold]

Ok so I recently found out that my site has reached its bandwidth limit. I am running a small website on a shared hosting (asmallorange) with a 20 gig monthly cap running WordPress. Normally it ...
1
vote
0answers
57 views

Can't see advantages of rainbow tables over hash tables

I've read about rainbow tables (which I've confused with hash tables at first). I understand that it uses a reduce function R(x) and by saving start value P(plaintext) and ending hashed value H I can ...
2
votes
1answer
78 views

Is it noticeable when you take a copy of a website?

Is it noticeable when you use a tool to take a copy of a website? - how likely are you to trigger logs and whatnot when you use tools like HTTrack? Is it actually illegal or 'bad' to do this? - alls ...
1
vote
1answer
47 views

Having Trouble using SET in Kali

I'm trying to setup a website attack vector and I get in error when it tries to load up metasploit. Here's a look at my whole process: Select from the menu: 1) Spear-Phishing Attack Vectors ...
5
votes
0answers
37 views

Yubikeys & SSH - which option is best for lockdown?

My company has a few dozen servers hosted on a cloud provider. All but one (OpenVPN host) is closed to the internet. We're using OpenVPN AS which uses certs + Google Authenticator for login. We are ...
-5
votes
0answers
28 views

id_rsa key is invalid but stll allow to make authentication [on hold]

I have shared the public key to other server authorized key file. Then i corrupt the private key(i.e delete some contents from the id_rsa file). But still it allow the other server to interact with ...
3
votes
0answers
55 views

Does password-hashing “busy-work” need to be cryptographically secure

All modern password hashing schemes are deliberately designed to include a huge amount of "busy-work", to limit the speed with which an attacker would be able to conduct password hashing attempts. ...
4
votes
0answers
215 views

Example of how the remaining shellshock bash bug CVE-2014-7169 (taviso bug) could be exploited?

I have a general idea about the Shellshock bash bug (CVE-2014-6271 reported Sep 24, 2014) of what the vulnerability is and how it could be exploited. Here you find examples on how to exploit the ...
6
votes
2answers
422 views

Storing SSL certificates in DNS records

Why not get rid of all certificate authorities and all the special kind of SSL certificates there are (extended validation etc. etc.) and instead just require anyone who wanted SSL to write their own ...
1
vote
1answer
37 views

Mapping of plaintext and ciphertext in DES

The plain text and the cipher text have a one to one mapping. Given a pair of those, can there be multiple keys used to generate the same pair? Or can a particular plain text - cipher text mapping be ...
0
votes
0answers
15 views

Which Industry verticals have made compliance under the Payment Card Industry Data Security Standard (PCI DSS) mandatory?

I know that a wide range of industries across different vertical markets are required to comply with the Payment Card Industry Data Security Standard (PCI DSS). Can you please state which Industry ...
2
votes
1answer
34 views

using multiple Firefox profiles to increase security

I am wondering whether it would increase security in any significant way, if I would use two separate Firefox profiles, one for normal browsing and the other for private/secure websites, such as my ...
0
votes
1answer
46 views

Is it possible to prove a certain email has been sent using a certain computer?

I can understand that an SMS can be traced to the mobile phone which it has originated from and the phone owner has no chance in court but to claim that someone else has used his phone but what about ...
0
votes
0answers
36 views

Is there a tool available with which I can check if (a) file(s) is infected?

I have downloaded some files from the internet (a module for WHMCS) and would like to know if it contains viruses, malicious code, etc. It's a PHP file. Is there an (online) tool available to check ...
1
vote
1answer
32 views

Recommended Key Usage for a client certificate

My program has the following flow: a client sends a CSR to server, the server sends back a client certificate and after that the client communicate with the server to a path that requires a ...
2
votes
1answer
47 views

source code of metasploit payloads(shellcodes)

Is there a way to see a source code of metasploit shellcodes. For example: root@kali:~# msfpayload windows/shell_bind_tcp EXITFUNC=seh LPORT=1234 C /* * windows/shell_bind_tcp - 341 bytes * ...
1
vote
0answers
115 views

Bash shell exploit using SIP

I have a SIP proxy server, that would like to test Shellshock on. I have used this https://github.com/zaf/sipshock to try and test. but this is what I get. So I just want to know generally what is ...
4
votes
2answers
229 views

How secure is BSD sockets?

BSD sockets API was released in 1983. As it was implemented 3 decades ago and still being widely used, is it secure in today's scenario where every software has to be actively protected against ...
0
votes
0answers
32 views

Generally speaking, is TeamViewer safe? [on hold]

I was thinking of downloading TeamViewer, to acess my Desktop PC from my laptop when I'm at college. How safe is this service, and would it be possible for an attacker to spoof it, or perhaps the ...
2
votes
1answer
42 views

PBKDF2 used to generate an encryption key: long shared secret (password) vs iterations count

I want to use pbkdf2 to generate a key for a symetric encryption (DES, 3DES, may be AES) algorith, that will be used to secure private data between an AS/400 and another computer (probably running ...
1
vote
0answers
24 views

how can i get job after completing grad in 2010 [on hold]

i have done b.tech in Information Technology in 2010 due to family problem i am unable to do job now i want a job as a pen-tester so what can i do to get a pen-tester job?
1
vote
0answers
21 views

Kindle Fire HDX security question

What are the dangers of connecting with my kindle fire HDX to an open wifi connection? I was told that there are no threats because it is impossible to hack into the kindle fire HDX like a laptop and ...
3
votes
1answer
289 views

Is server exploitable by Shellshock with cgi-enabled only?

A server with vulnerable bash, but cgi enabled only and there are no cgi scripts in cgi-bin. Is it still exploitable ?? If there are scripts in cgi-bin and only server-admin knows about filenames of ...
-1
votes
0answers
22 views

How are file names stored in a file encryption service [on hold]

Lets say there is a file encryption service, which takes a user passphrase and a file to encrypt it securely. Now there are multiple users and multiple files. So there must be some mapping to a user ...
1
vote
1answer
53 views

Chat encryption system avoiding protocol sniffing and then key+decryption replay?

I'm working on a chat system and I want to add it some kind of security (not just HTTPS with SSL since I've read it can be sniffed and decrypted with a few tools). Now, my knowledge in cryptography is ...
0
votes
1answer
75 views

How to decode/decrypt strings of text [on hold]

So I'm trying to decrypt/decode some text strings. I don't believe they're hashes because they vary in length too much and the software they are used for is able to easily decode them and display them ...
1
vote
1answer
24 views

Use TOTP to prevent simulating requests

I'm developing an API system which provides functionalities for a game. Currently, we are using HMAC to prevent simulating requests (let's say, prevent hackers from simulating the game) but because we ...
1
vote
1answer
36 views

How safe are Firefox addons from official mozilla.org site?

I would like to install the Dictionary Pop-Up addon for Firefox. I usually don't install any addons, but this one looks especially tempting. I could not find any information on the Mozilla page, ...
3
votes
1answer
154 views

Setup a quick web site vulnerable to Shellshock bash bug

Can anyone let me know the steps to setup a simple Hello World Apache (or other GNU/Linux) website that i can hit over 80 or 443 and exploit any bash CVE vuln; assuming I have a vulnerable bash. I ...
2
votes
1answer
23 views

Security implications when setting the discard option in /etc/crypttab

Setting the discard option in /etc/crypttab has security implications. From the man page: Allow discard requests to be passed through the encrypted block device. This improves performance on SSD ...
0
votes
0answers
99 views

Why doesn't this shellshock example work? [migrated]

python -m CGIHTTPServer Script name is python.py #!/usr/bin/env python ...
6
votes
1answer
434 views

Android L encryption vs. iOS 8 encryption

Recently, the new full-disk encryption system of Apple's iOS 8 operating system has been in the news. And soon after Apple's release, Google announced that they will also enable encryption by default ...
-1
votes
0answers
22 views

Tracking down service associated with an email address

Like the title: it's possible to see which service are associated with that specific mail? i've just an email and i want to see if there are service or anything associated with that address. Every ...
0
votes
1answer
33 views

WireShark only showing broadcast packets

So here is my setup Desktop booting a live version of Kali from a USB drive The standard distro of wireshark that comes with Kali A Ralink RT-3070L High gain antenna My home network as a sandbox. ...
2
votes
1answer
43 views

Search for user credentials within a packet capture of a gmail session over SPDY

I was reading this paper on SSL/TLS from the SANS Reading Room on how to capture and decrypt your own SSL traffic with Wireshark. I wanted to capture the credentials used to login to gmail. When the ...
0
votes
0answers
23 views

iso 27001 : where to prepare an application to comply with this norm? [on hold]

I would like to know more about being compliant with iso 27001. I know this page free iso27k toolkit But I was waiting for a coding guideline, things to check to prepare an audit etc. Practical ...
16
votes
1answer
2k views

Where is Bash Shellshock vulnerability in source code?

I have been hearing about the Bash Shellshock problem since yesterday and am curious to see where in the source code this problem occurs. I have downloaded the source for Bash 4.2 from here. Where ...
4
votes
2answers
182 views

Escalating from Apache shell to root

I have one noob question.I tried to exploit shellshock on my Slackware linux server, but after I connect with reverse shell and User Agent I get that I am apache user and apache user don't have too ...
3
votes
1answer
49 views

How to disable cipher RC4 in ubuntu 12.04

I have been doing Network Scan for our box and Ncircle reported SSL Server support RC4 ciphers for SSLv3. Based on that I did a search and I plan to add to /etc/apache/conf.d/security the following: ...
3
votes
1answer
135 views

How resistant is the iPhone encryption against brute-force attacks?

I just read the following paragraph in an article from the New York Times about Apple encrypting iPhones by default): Breaking the code, according to an Apple technical guide, could take “more ...
2
votes
2answers
43 views

Expand key to size of plaintext

I'm taking a cryptology course, and one thing that popped up as an idea was the following: Can't one take a "master" key, and generate a key that is as big as the plaintext, to encrypt the plaintext ...
1
vote
3answers
107 views

How can I keep Google from tracking me?

I'm using a VPN service (purevpn) and I notice that google knows my location even when I use noscript and a firefox private window. Is there something I can do to stop this? Remark: I'm living in ...
11
votes
5answers
1k views

Is replacing bash with another shell a prudent step?

Considering that RedHat and other major teams in business are conducting an audit in bash and have uncovered a few other vulnerabilities besides -7169 (-7186 and -7187), is it sensible to link /bin/sh ...
1
vote
0answers
74 views

Vulnerability test for CVE-2014-7169 (Shellshock) [duplicate]

I found this test here for the Shellshock vulnerability follow-up CVE-2014-7169 , which is basicaly doing: echo `env X='() { (a)=>\' sh -c "echo '[Vulnerability CVE-2014-7169 Detected]'" 2> ...
0
votes
1answer
75 views

Can anyone with access to root CA private key decrypt HTTPS traffic?

Can anyone with access to root CA private key decrypt HTTPS traffic of sites using certificate signed by that CA ? and if yes do he need to be man-in-the-middle or just monitoring traffic is ...
1
vote
1answer
48 views

SSL heartbeat design [duplicate]

So, about Heartbleed again, why does SSL/TLS allow the client to specify the message and its length in the heartbeat requests, rather than sending a simple ping?

15 30 50 per page