5
votes
1answer
137 views

If all ports are closed, do I need firewall?

I often read an article which enables a firewall to secure public Wi-fi. But I think a firewall may not be needed when (like nmap said) all ports are closed. If all ports are closed, all packets ...
-3
votes
2answers
44 views

What are the risks of having a server with 2 interfaces each one in a different security zone?

In an organization usually have production and preproduction environments segregated in different physical or virtual machines. However, this new appliance is very expensive and the organization is ...
0
votes
1answer
35 views

Accesssing cookies of another domain using Iframes and Javascript

Using Iframe we can embed webpages of another domain provided the X-Frame-Options isn't set to SAMEORIGIN. This also loads the cookie inside the iframe. Now, one can access this cookie if it's in the ...
1
vote
1answer
14 views

How big window is secure and practical with TOTP?

We are using Time-based One-time Password Algorithm (Google Authenticator) in our system. Since we currently don't allow any time window and code validity is just 30 seconds, we are constantly having ...
0
votes
0answers
24 views

Identify Certificate Authority from public key [migrated]

Under OS X, the /usr/local/etc/openssl/cert.pem contains many certificates in this format: ----BEGIN CERTIFICATE----- <...snip..> ----END CERTIFICATE----- In Ubuntu, in /etc/ssl/certs, each ...
3
votes
1answer
58 views

return-to-libc attack

I was trying to attempt at return-to-libc buffer overflow attack for my Computer Software Security assignment. As far as my understanding goes, we can do these kind of attacks regardless of stack ...
24
votes
4answers
4k views

How do you deal with massive port scans?

This morning I was looking through firewall logs and saw there were about 500 packets marked as port scan. The scanning range was from 1000-1200 5000-5200. The IP address is 85.25.217.47 which seems ...
0
votes
1answer
9 views

(spp_sdf) SDF Combination Alerts in Snort

I'm testing Snort in IDS mode and have been receiving a few (spp_sdf) SDF Combination Alerts as below. Seems like it happens when I visit certain but not all https sites. Tried to google this alert ...
0
votes
1answer
67 views

What type of attack can bring a website down by serving a redirect loop?

My website has been up for a year and all of a sudden is down with a too many redirect message. www.jdmxchange.com (classifieds for modified cars/parts) I tried to use fiddler to see if it was ...
1
vote
1answer
88 views

What can a trusted certificate do?

I am doing some reading about security on mobile applications because I found an article about Man in the Middle Attacks. I saw in that article and in many other places (including ...
0
votes
1answer
29 views

Inadvertent clickjacking on page causes LastPass login dialog to appear.

I like the idea of password managers but have become leery of the way they interact with browsers (especially given the recent "LostPass" exploit). Today I found that viewing a certain page with ...
0
votes
2answers
58 views

What is a good way to generate a one time pad, and is this a good way? [duplicate]

Is there a good/better/best way to generate a one time pad? I would like to only utilize about 40 characters (a-z, 0-9, .,!-). What I have come up with is perhaps not the BEST way, but seems to fill ...
0
votes
0answers
13 views

Api key v oAuth for mobile apps

So we already have an oAuth setup for authenticating users. But there are endpoints that are not user specific that are currently open, we would like to restrict access to those open endpoints via API ...
3
votes
2answers
80 views

How secure a secured PDF really is? [duplicate]

I've googled the internet for answers regarding secured pdf/cracking them and found huge amount of stuff. But most of it is quite old. So could someone confirm the following is still valid in modern ...
-1
votes
1answer
41 views

Open Root File Using Other Users “.bashrc -> .profile” [on hold]

If I have access to .bashrc -> .profile for another user which is owned by root with lrwxrwxrwx permissions How could I capture /root/flag.txt? It's a Live CD. Thanks
0
votes
0answers
31 views

DSS digital signing approach

Under the DSS approach to digital signing, what is the advantage of using two pairs of keys for each signature?
-4
votes
1answer
56 views

How to encrypt/decrypt with only encryption hardware?

Alice and Bob have agreed a symmetric key to be used for encrypting messages to be sent over an insecure (wrt a passive adversary) communication channel. Both of them have hardware devices for ...
0
votes
1answer
69 views

Sites sending email using my email address

Today I was looking through my spam folder and noticed an email: The sender was myself, assume my email is xxx@gmail.com, on the from section it says xxx@gmail.com via clicktheprofits.com Does ...
-1
votes
1answer
25 views

rpm package info leak?

On Linux, rpm -qi <package-name> command would display the package info, which would contain information of build machine - Build Host :<host-name> Does this pose any security risk? Is ...
1
vote
1answer
51 views

Would you typically want to monitor all ports for NIDS monitoring? If so, is span port or network tap the way to go?

We're setting up NIDS monitoring and the bosses want to monitor all the ports, but I'm wondering if this actually makes sense. The switch we're currently using can only mirror 4 source ports to one ...
1
vote
0answers
43 views

How to authorize users for rest service

me and my friend are doing a project for a company. It involves getting some information from the database and display it on a smartglass device (epson, sony, ...). Now we want to build a RESTful ...
1
vote
1answer
28 views

How can access to settings of a public router be (mis)used?

I've noticed that, in the local café, Wi-Fi router credentials are simply user: admin pass: admin (as default). Upon this discovery, I was intrigued and I wanted to know more about what possibilities ...
1
vote
2answers
56 views

Getting spam calls from numbers similar to my own

My phone number is 456-123-XXXX (American phone number + area code). Over the past few months I get fairly regular spam calls from other numbers also beginning with 456-123-XXXX, where the last four ...
3
votes
1answer
56 views

Spoofing LAN IP Address Traffic

To give as much detail as possible, I am doing a Pentest for a client that has quite a few "terminal systems" meaning that they are simply a box with a connection back to the main server. These ...
-2
votes
1answer
44 views

Sniffing or DOS attacks or MIM Attack [on hold]

i'm preparing my bachelor's degree, i have to chose an attack, sniffing, dos, or MIM attack, I'm a bit lost, in my project i have to find a solution, how to detect one of this attacks, If you guys may ...
1
vote
3answers
142 views

What is the simplest way to send an anonymous email?

I would like to send an email that can't be traced back to me, is there a simple direct approach to do that? I mean an electronic way that doesn't involve me going to an Internet cafe wearing a ...
3
votes
1answer
48 views

IPtables Linux Firewall and IPsec traffic

Can iptables filter out incoming datagrams that are IPSec-tunneled packets going to port 25?
-2
votes
0answers
20 views

request for sandbox security controls efficiency evaluation [on hold]

Has anyone ever tried sandbox solutions aimed to block malware, viruses, ransom-ware, 0-days and the like? Would you suggest them? Besides any specific product, I am interested into knowing about: ...
-7
votes
2answers
100 views

What is is the best way to create virus signature database? [on hold]

We are thinking to develop a new Antivirus program. The main concern is to create a virus signature database. I want to ask what is the best possible way to add viruses signature in our database to ...
0
votes
1answer
49 views

Safest way to access data from an SQL server

I am part of a group developing an iOS application. This app accesses a database to both retrieve and submit data. One of the group members said that he does not want to have any direct interaction ...
55
votes
2answers
6k views

What was the aim of this invalid HTTP request that tells a story about goats in the request URI?

I currently run an Apache HTTP server, and have set up monitoring to receive emails whenever an error appears in the error logs. I get the usual trying to find if I'm using HTTP 1.0 and trying to see ...
6
votes
3answers
210 views

How much can we trust open source implementations of crypto (security) libraries?

In one of my projects I was choosing bcrypt or PBKDF2 for the KDF for passwords. I have read that bcrypt is generally more advanced and scrypt is even better. But I am using .NET platform where ...
3
votes
1answer
52 views

Is secret key for HMAC in form of UTF8 characters good enough?

There is a popular JWT library on nuget. I am analyzing an application that uses that library and it stores a secret key as a string. In the code of the library I see that it uses the MS HMACSHA256 ...
0
votes
1answer
34 views

How does Netsparker extract the version of SQL Server during a SQL injection?

We are using netsparker cloud version On last week when netsparker scan it detect SQL Injection Vulnerabilities. However I am surprised as the injection query throw error for casting and the scanner ...
4
votes
0answers
20 views

SSL 3.0 for clients without room for chosen plaintext attacks

I've collected the issues that affect SSL 3.0 and found that they are either configuration issues (disabling RC4, RC2, DES, anon, export, null suites, compression, proper key lengths, etc.) or ...
0
votes
0answers
38 views

Which user executes the screensaver on windows 8?

On a computer without administrator rights, I recently noticed that if I execute a screensaver by double clicking on it (the .scr file) the execution context was the user's one, but when I install it ...
3
votes
0answers
44 views

Lookaside List Injection

I've been reading a lot about Use-after-free and came across this document. It talks about a "Lookaside" injection exploit. The document says to empty the dynamic memory cache, called the Lookaside ...
3
votes
0answers
88 views

Can I make a digital time capsule? [on hold]

Say I wanted to make a super awesome time capsule of some digital information. How would I encrypt it so that no one would be able to open it until a specified date? (E.g. 100 years from now.) At ...
1
vote
1answer
47 views

Response on targeted attacks against an individual

I'm now an aim for a targeted attack. Someone tries to gather information about me and tries to get access to my accounts. Some time before he/they've managed to succeed (got all the info from my ...
0
votes
1answer
52 views

Objectively, how effective are malware removal tools at detecting infections?

I'm fully aware that concrete scientific data may not exist on this topic but I feel that the question at hand won't all boil down to opinion. Either way, with the rampant increase in sophistication ...
41
votes
5answers
8k views

Is it dangerous to call spam phone numbers, even if you know they're spammers?

I sometimes like to check spam just to see how the messages look like, and I found someone who actually put an American phone number (1-XXX-XXX-XXXX). Most of these spammers are either trying to get ...
-1
votes
0answers
9 views

How to set linux as default OS after reinstalling windows already dual booted envirnment? [migrated]

I have a system running windows and linux in dual boot envirnment. But due to of some problem i have reinstall my windows but now my boot menu only shows windows OS. I want to know that how i can ...
1
vote
1answer
53 views

Where to save Keepass' file? [on hold]

Using Keepass since a year ago, been told it's an excellent method to store one's passwords. But what is the best location to save Keepass' file (the file where all password are stored and that you ...
1
vote
0answers
28 views

Transmitted sensitive user data

At the moment, I have set up mitmproxy and can record all HTTP/HTTPS communications between the client and server. For research purposes I am looking to find a way to detect potential leakage of ...
-2
votes
2answers
53 views

Running SSH on a different port vs adding the port number to a password

So, a pretty typical piece of advice is to run SSH on a high port number, thus decreasing the chances of it being attacked. The thing I have always wondered about though is that it seems more secure ...
4
votes
1answer
35 views

Is OpenSSL generating Diffie-Hellman parameters that are safe for use in TLS or SSH servers?

I would like to generate Diffie-Hellman parameters on a Debian GNU/Linux "Jessie" 8 with OpenSSL. Lets assume the system CSPRNG was seeded with some real random data. On such a system, is the result ...
0
votes
0answers
13 views

Identify if pc is infected [duplicate]

I am operating a credit-card sized PC with debian on it. For some time (before taking care of it) it was reachable with SSH over port 22, simply using root as username, and no password. How can I ...
-2
votes
0answers
13 views

Router hangs when running Nessus [on hold]

I tried to run a Nessus scan for my own website through my home router (ZTE ZXV10 W300). However, the router always hangs when I run Nessus. Internet also doesn't work on that time. Once, I pause the ...
3
votes
3answers
176 views

Is web application connected to a database via an application server is more secure?

I have heard from my colleagues and some other people on web suggest that it is more secure to run this configuration: Web server -> Application server -> Database, than this: Web server -> ...
0
votes
1answer
24 views

Secure Electronic Transaction (SET Protocol)

I've looked into the SET protocol and some of the information are outdated. Therefore, I would like to ask if the SET protocol uses 3DES or AES or just the DES and the RSA?

15 30 50 per page