2
votes
1answer
39 views

Do Javascript malware signatures exist?

Are there signatures for malicious JavaScript codes as they exist for other viruses/worms/trojans developed in other programming languages ? If so, are these javascript malware signatures defined ...
0
votes
1answer
33 views

Can a Tor exit node be reliably identified?

So with my knowledge of Tor, I know that exit nodes are where packets escape the Tor network and enter the "traceable" internet; ie. you can link an attack to an exit node but not the source of the ...
3
votes
1answer
53 views

How easy is it to make a malicious bank/identity card?

I recently got a magnetic card reader that plugs into my computer because I was bored. I decided to scan my ID and bank card through it and I was surprised to see my ID number/bank card number show up ...
2
votes
1answer
56 views

How do I securely deal with SSL certificate validation failure when the client date is incorrect?

I have an application that runs in mobile devices and connects to my server via HTTPS. At times the connection fail because the device has a date set in the past (before the 'valid from' date on my ...
5
votes
1answer
4k views

Recover Server 2008 R2 Domain Admin Password

So I did the ultimate silly thing: I lost my domain admin password for my Server 2008 R2 box. Sure, I could just re-install but that's going to be a huge pain. I tried rebooting with the Windows ...
1
vote
1answer
57 views

Is Domain Logins a potential attack vector?

Say you have a windows server that works as a PDC AD box. Is this a potential Attack Vector for a small 20 people buisness? Wouldn't it be better to simply have an encrypted database file with all the ...
3
votes
1answer
43 views

Metasploit Pivoting on loopback?

I'm pen-testing a Windows 7 machine, and have access to a limited remote shell. I can see there's a vulnerable SMB service running on the machine's loopback, but it's not available externally. Is ...
-1
votes
0answers
48 views

Secure connection failed (OCSP)

I've been getting a lot of failed connections lately, namely from Facebook and now Google (German site works, French does not). This happened to other sites as well but these two are the kind you do ...
-1
votes
3answers
110 views

Wifi hack and computer hack?

Yesterday, I woke my computer up from sleep mode (it had been on all day while I was at work). And my browser was open to an email account that was not mine. Is it possible for someone to hack your ...
1
vote
1answer
45 views

Multiple users, Multiple servers, SSH key management

Here is the situation. I have 5000 servers broken into "groups" of 100. Each "group" has 1 SSH key pair, that will allow access to any of the servers in the group. I have 60 users(some human, some ...
-1
votes
1answer
40 views

Determine if Tor works

I have installed Tor on my Mint computer, but how do I determine if Tor is working? When I visit http://whatismyip.com, my old IP is shown. Should it not be a different IP when I'm using Tor? Here is ...
2
votes
2answers
62 views

Identifying SSL traffic?

How does DPI basically identify SSL data traffic? Just by the number “443” in port section or the SSL traffic has some other particular properties other than “443”? Thanks in advance,
1
vote
2answers
27 views

If I change any character in a private PEM, should the public PEM be different?

I'm generating a public PEM-format key from a private PEM-format key. I noticed that if I change a few characters near the end of the private PEM that the public PEM generated from the modified ...
1
vote
1answer
43 views

Prevent CSRF using ViewState?

According to OWASP you can prevent CSRF in a ASP.NET application if you include the SessionID in the ViewState. From the article: Viewstate can be used as a CSRF defense, as it is difficult for ...
10
votes
3answers
13k views

Strange requests to web server

I have a Linode VPS running Nginx, which currently serves only static content. Once I was looking at the log and noticed some strange requests: XXX.193.171.202 - - [07/Aug/2013:14:04:36 +0400] "GET ...
-2
votes
0answers
63 views

Is a PHP malicious code running behinde this page? [on hold]

Let us visit a website. Is there a way to detect that a given PHP page on it hides is running a malicious code ? I ask this from a programming point of view because I want to develop a PHP script ...
0
votes
0answers
61 views

OpenSSL: Bad Record MAC on TLS Heart Beat

I am trying to see the heartbleed bug in action with my OpenSSL server application. My server uses the OpenSSL library - openssl-1.0.1b I successfully connect with s_client (openssl-1.0.1b) to my ...
1
vote
1answer
34 views

Secure Azure to Data Centre Web Service Calls via Trusted IP?

Background The company I work for have a system with some data. This system's hosted in our private data centre. This system provides some ReST web services. We're looking to create a website, hosted ...
0
votes
0answers
18 views

Pivoting without Meterpreter [on hold]

Please help me out with the method to pivot without using meterpreter. The scenario is : A Network Pentester, owned a system of the target network needs to enumerate other systems in the network via a ...
-2
votes
1answer
31 views

Whether heartbleed is attaked while we are using heartbeat with apache(httpd)? [on hold]

We are using heartbeat for high availability of httpd. In httpd we are using openssl of version 0.9.8 but about heartbeat i dont much about that but while search in google some sites are sayong that ...
2
votes
3answers
176 views

Is it secure to access web with Xubuntu in VirtualBox running in Windows XP?

Support for Windows XP is ending soon. Therefore, I am seeking a secure solution to continue with Windows XP. When I access the web from Xubuntu in VirtualBox running in Windows XP, is the Windows ...
0
votes
1answer
37 views

Repercussions of hacked router?

I am staying in Thailand right now on a "long holiday" to do some work on my laptop. A few weeks I noticed that at the condo where I am staying, sometimes I am redirected to ad sites. I researched it ...
1
vote
0answers
122 views

How the decryptor author found the initialization vector for the AES CBC- whatsapp CRYPT5 db uses?

I was going through DECIPHERING MSGSTORE.DB.CRYPT5, THE NEW DATABASE WHATSAPP & Steal WhatsApp update. The author of the first link published a decryptor which sets the iv for the aes_192_cbc to ...
1
vote
1answer
29 views

Audiobooks to learn about Infosec? [on hold]

I recently got homeland on a humble bundle and I've been getting really interested in Information Security so i want to keep learning and the best way i find is to listen to Audio books or podcast ...
2
votes
2answers
356 views

How to configure Browser to detect revoked certificates?

In the context of the Heartbleed bug I would like to make sure that I can detect if someone tries to do a MITM attack with a stolen certificate, which since has been revoked. The problem is that ...
1
vote
2answers
44 views

How does anti-phishing software work to identify phishing sites?

To clarify, my question isn't on how to protect myself from phishing. What I'm curious about is how exactly software can identify whether or not a website is designed for phishing, ignoring word ...
0
votes
0answers
19 views

Will http only cookie work while using chrome bandwidth saving feature in Android?

I am developing a site which uses http only cookies for authentication. By design[w3 standard] these cookies are XMLHttpObjects and will only be submitted to the domain they originated from to prevent ...
2
votes
3answers
50 views

Wipe free space or take image and wipe entire disk?

Read some of the stuff here regarding wiping disks and securely deleting files. From what I've understood, after deleting (not securely) files they become part of the unallocated(free) space of the ...
1
vote
1answer
47 views

Is there a value in using portable programs on a USB key?

If I am working writing a text document in a text editor (say notepad or MS word, or ...) then I can save the file and the encrypt this file. I can then try to erase the original file by overwriting ...
5
votes
1answer
1k views

What block ciphers and algorithms are now safe? [closed]

I work for a large non-US based international organisation. Regarding the recent leaks about the NSA breaking most encryption on the internet, we now know the US and UK governments are actively ...
1
vote
1answer
38 views

How do you manage credentials to multiple remote systems?

We are a vendor that provides software to the healthcare industry, and our application is locally hosted on customer infrastructure. As such, we are provided with VPN access in order to be able to ...
0
votes
1answer
258 views

What happens if you run out of password attempts?

In Samsung Knox, you have 20 password attempts. However, it is never explained what happens if you run out of attempts. Does it delete your Knox data, do you need to enter the recovery PIN or is it ...
5
votes
1answer
71 views

Is the SD card write protection hard-wired or optional?

According to Wikipedia, the SD card reader recognizes if the little tab on the left of the SD card is in the "lock" position or not. Thus, a SD card reader can still write on the SD card even if the ...
1
vote
2answers
78 views

Why do public key certificate “Trust anchor”? Does this introduce a single point of failure?

When you look at currently used concept of Root CA (primarily in SSL/TLS context), you can see a single-point-of-failure vulnerability, which means, if your private key is disclosed, you automatically ...
3
votes
4answers
151 views

One computer with multiple OSs in different drives

I use my personal computer for both programming work and gaming at my free time(and sometimes penetration testing) all these in different operating systems each. The problem is that I dont really ...
2
votes
2answers
118 views

How to know what personal information companies know about myself

I've been learning about Cyber Security and how to protect myself online after reading some books on the subject and I want to know how much Information i've handed out to companies.
5
votes
1answer
65 views

SSH: benefits of using hashed known_hosts

What are the benefits of storing known_hosts in a hashed form? From what I read, it is supposed to protect the list of servers I am connecting to, presumably in a scenario where my account has been ...
2
votes
2answers
120 views

SQL injection: real escape string function

example4.php?id=id=2-1 I came across the above injection and I can not figure out why(how) does this work and what's interesting is it returns all the records from the database. Anything guys? ...
1
vote
2answers
39 views

Malware analysis - how to extract executable files using static analysis? [on hold]

I would like to know if there is a way to extract executable files from a malware sample that you're not able to use dynamic analysis on. For example, if I get a sample to analyse but it cannot run, ...
2
votes
1answer
54 views

Field-level encryption vs disk encryption for PCI compliance

We are in the process of setting up a PCI compliant server (with Firehost's help). We are using MongoDB as our primary database. I am having some concerns about the encryption, though. Are there any ...
41
votes
10answers
6k views
+100

What makes it illegal to use the information learned by exploiting a bug?

According to news reports, arrests have already been made in relation to the Heartbleed bug. It sounds like this person managed to gain access to the website's database by capturing the credentials ...
3
votes
3answers
1k views

Malware infections from visiting or using YouTube

Is it possible to be infected by viruses or other malware while visiting YouTube? What kind of measures do the YouTube staff take to prevent viruses and malware?
1
vote
1answer
59 views

How to detect Snort on the network?

Does anyone know how to fingerprint an IPS ? is there any tool available to do the job? I want to detect snort in my network . Would appreciate any kind of help.
0
votes
1answer
41 views

Enabling port forwarding on port 53 on a DNS server, why is it a risk?

Well, actually I know that the risk is that somebody from an external network could access IPs and hostnames of the machines on a local network, but I am struggling to understand if this is it or if ...
1
vote
1answer
26 views

How to know which output length to request from PBKDF2?

I feel like I'm asking a fairly obvious question here, but with it being so easy to make mistakes in this space, here goes. From wikipedia: DK = PBKDF2(PRF, Password, Salt, c, dkLen) dkLen ...
9
votes
2answers
2k views

Does the average user really need a password manager?

I'd describe myself as an average tech savvy computer user. I have many accounts in forums, shopping sites, etc where I recycle two moderately strong password with small variation. These are account ...
0
votes
0answers
9 views

command executed when a folder is opened [migrated]

once a wise man told to me that every folder contains a file autorun.inf (not sure about the name but properties are same as autorun.inf) and he changes the codes of the file to execute a batch ...
8
votes
3answers
472 views

Why would a website allow answers to security questions to be used interchangeably?

I needed to reset my password on a website that uses security questions for the purpose, and I noticed something strange. My hypothetical security questions are (not the ones I actually use) are: ...
3
votes
2answers
73 views

How are CRLsets more secure?

Google Chrome doesn't do typical CRL/OSCP checks, instead it depends on CRLsets. In simple terms, Google scoops up the CRLs from most CAs, trims them down and delivers the CRLset to the browser via ...
1
vote
1answer
87 views

HeartBleed and Closed Source Hardware like Cisco

With the release of heartbleed how does one protect themselves with closed source networking hardware like cisco? Especially hardware with VPN variety. Would it be best to replaced such systems with ...

15 30 50 per page