-4
votes
3answers
88 views
Database connection from front end
I want to know why calling a database from the front end is considered a bad practice for security.
It is really so bad as to justify building an application layer with all its drawbacks: costs, ...
9
votes
1answer
2k views
Paypal Account created using my gmail account
Some time ago, probably about 6 months, somebody hacked my email account and used gmail settings to forward my emails to him/her.
I noticed that, removed the forward and changed the password. Now, I ...
4
votes
2answers
214 views
How do you verify a certificate belongs to a domain?
I'm using PHP and trying to verify a SSL certificate belongs to the SMTP domain/IP I'm connecting to.
Currently I can verify the certificate is valid using the following code
$resource = fsockopen( ...
17
votes
2answers
734 views
Is it posible to make shellcode with C++?
Usualy I write assembly programs and thens dump their contents to get the shellcode. What I was wondering instead of assembly can I write a c++ program, then dump that and then use it instead of the ...
1
vote
2answers
123 views
Tools to extract code comments from sites?
I often come across sites that have way to many comments included in their source code, sometimes these comments offer valuable insight into whats happening in the code, the logic of functions, unused ...
-3
votes
0answers
32 views
auto backup database and folders on host from Mac [closed]
I am being constantly attacked and would like a solution that would support me while I fix the code (couple of days). I have a domain on justhost and would like to have an application on my mac that ...
4
votes
4answers
110 views
Block unauthorized user from getting access to intranet
What's the common way to block users from accessing intranet?
Right now, whoever plugs in a cable can access any intranet server freely. I want to change this behavior. But given that we run not only ...
-1
votes
3answers
85 views
What does the question mark in nmap output indicate?
In the following nmap output:
$ sudo nmap -sS -sV -vv -n -Pn -T5 x.x.x.1-255 -p80,23,21 -oG - | grep 'open'
Host: x.x.x.x () Ports: 21/closed/tcp//ftp///, 23/open/tcp//telnet?///, ...
138
votes
18answers
7k views
Passwords Being Sent in Clear Text Due to Users' Mistake in Typing it in the Username Field
Upon reviewing the Logs generated by different SIEMs (Splunk, HP Logger Trial and the AlienVault platform’s SIEM) I noticed that for some reason quite a few users tend to make the mistake of typing ...
1
vote
1answer
46 views
Certificate authentication with jQuery's ajax() function
I need to sync with my server with the client certificate abc.pfx which is generated by the server using Ajax. How do I send my certificate with Ajax object. Can I do this certificate authentication ...
4
votes
2answers
253 views
How can I find the malicious/backdoor codes without knowing the last modified date?
Last night my website got hacked and attacker edited the main index.php.
I was wondering even he edited that file, the last modified date did not change.
so I just worry if he would put the backdoor ...
3
votes
1answer
64 views
How can I spoof the Mimetype of a file upload?
There are posts that says php mimetype isn't secure, or can be bypassed. How do people spoof the mimetype?
18
votes
0answers
567 views
Where can I find a vulnerable operating system to practice pentests on? [duplicate]
I am looking for vulnerable operating systems that are used for practicing pentests. Damn Vulnerable Linux (DVL) is not maintained anymore. Are there any other simillar OS´s to download somewhere that ...
0
votes
2answers
110 views
Bruteforce Passphrase of Dictionary Words
Consider the all lowercase passphrase:
"lazy fox haggles treaty"
Assume all four words are in a dictionary of 2000.
Bruteforcing word combinations, how long does it take to crack this password at ...
3
votes
1answer
72 views
Nessus HTML5 version 5.0.3 - PCI Scan
I've been searching for a couple days, even contacting support, to find out if Nessus has a bundle that scans for PCI compliance. It selects all 44 categories and regardless of what kind of scan I ...
5
votes
3answers
1k views
Vigenere Cipher - help with decryption (by hand)
So this is a Vigenere cipher-text
EORLL TQFDI HOEZF CHBQN IFGGQ MBVXM SIMGK NCCSV
WSXYD VTLQS BVBMJ YRTXO JCNXH THWOD FTDCC RMHEH
SNXVY FLSXT ICNXM GUMET HMTUR PENSU TZHMV LODGN
MINKA DTLOG HEVNI ...
4
votes
2answers
116 views
Security test lab setup [closed]
I want to setup a testing lab in my basement for penetration/vulnerability testing & offensive/defensive security skills. I believe I have all the equipment that I need, and if I'll need something ...
3
votes
1answer
63 views
RFC 6637: Algorithm-Specific Fields for ECDH
I am trying to integrate RFC 6637 into Bouncy Castle C# which is more challenging as initially thought because both private key and public key have to be present to calculate the share secret: that ...
28
votes
20answers
3k views
What are the biggest unsolved problems in IT Security?
Just recently I thought about all the solved problems in IT security, like XSS (which one can mitigate with input validation), SQL Injection (mitigated with prepared statements), etc.
Now I'm ...
-1
votes
1answer
68 views
Wireshark Decode HTTPS Root Certificate
I'm currently dealing with a "Sniffy" java application. Well I can see it connecting to some kind of server using HTTPS. I would like to see what its sending or getting over HTTPS. i have read some ...
0
votes
1answer
72 views
Securing my firewall (both dedicated and iptables-based) [closed]
I have an ASA-5510, but I also intend to maintain strict IP tables on my server (Ubuntu 12.04.2), so that there are two layers of "protection".
My iptables look like this:
*filter
# Allows all ...
-5
votes
0answers
43 views
Looking for a software that will help me set security policy on my network [closed]
I'm looking for a software that will help me set security policy on my network.
Can anyone please recommend me on some network monitoring & management tool/s that will:
Allow me to block ...
-1
votes
3answers
120 views
Salting in encryption (rather than hashing)
I am aware of the benefits of adding a salt to values that are hashed using a one-way function. Is adding a salt to a value that is being encrypted (using symmetric encryption) considered to be good ...
4
votes
2answers
62 views
Source where you can find if a CVE has a patch or not
I'm wondering if there is a source available which has a list of CVE numbers and shows whether they have been patched or not (and maybe a link to a relevant patch). I know Secunia has something like ...
4
votes
2answers
101 views
Multiple SSL connections in a single HTTPS web request
I set up Apache2 with SSL and tried to request the default Apache2 web page ("It works!") using https://[IP_ADDRESS].
The Chrome developer tool shows that only one HTTP connection is established, ...
-6
votes
0answers
19 views
vpn connectivity issue with windows XP [closed]
I want to establish a VPN connection, I am getting IP address etc but unable to connect with my Windows 8 Pro but working fine with Windows XP.
-6
votes
0answers
18 views
Security Analytics for Laptop logs [closed]
I am looking setting up a dashboard which monitors all the activities on any Client machine within my organisation. There are around 10000 clients and need data related to Sites accesssed, ...
5
votes
3answers
78 views
Does IPSec use IKE or ISAKMP?
Does the IPSec protocol suite use IKE or ISAKMP?
RFC 2828 states ISAKMP is the protocol used in IPSec to handle SAs, key management and system authentication. Other sources say IKE is the protocol ...
2
votes
2answers
833 views
How to set up a user-friendly NAS encryption?
We recently installed one NAS drive (Buffalo LinkStation Pro Duo, LS-WVL, running the most recent Firmware version 1.6 to be precise) in our (small) company network. Currently, there is no encryption ...
2
votes
3answers
202 views
How can I send and receive untraceable emails? [duplicate]
I have been receiving threatening emails from someone, and I don't want them to know my location for my safety's sake, but I need to send them a "Cease and Desist" notice. This person has great ...
5
votes
3answers
145 views
Virus with PGP Encryption Preventing Virus Scan
A user reported having a virus that was causing pop up windows asking for money. When he turned on his laptop and logged into PGP encryption (whole disk) the desktop quickly showed but then a white ...
1
vote
1answer
111 views
Can particular object be detected and extracted from RAM? [closed]
I was Googling for a while now, and I don't seem to find what I am looking for.
Imagine I have a programm running (for example some random image generator, perhaps captcha) and I have a background ...
3
votes
4answers
195 views
Obfuscating JavaScript code
Some Flash developers are afraid of JavaScript. Their point of view:
Stealing JS source code is effortless, one would just 'view source' and copy it. Yes, you can decompile Flash bytecode, however it ...
20
votes
2answers
977 views
Does versioning an encrypted file make it less secure?
Suppose I use KeePassX as a password manager, and I store the kdb file in Sparkleshare folder as a way for backing up and syncing with multiple devices.
The kdb file in itself would be encrypted, but ...
3
votes
3answers
141 views
What are some signs that a certain degree in information security will be a quality one?
I have been searching frantically for a college that has a good information security program. One of the ones I came across is Wilmington Universities Computer and Network Security program. I got a ...
6
votes
3answers
780 views
SSD (Flash Memory) security when data is encrypted in place
I'm surveying current techniques on flash memory security. I've learned that the non-in-place update of flash memories prevent us from adapting the same encryption techniques that we used on hard ...
41
votes
1answer
5k views
What is the difference between https://google.com and https://encrypted.google.com?
Is it there any difference between the encrypted Google search (at https://encrypted.google.com) and the ordinary HTTPS Google search (at https://google.com)?
In terms of security what were the ...
7
votes
3answers
381 views
Why is WPA Enterprise more secure than WPA2?
In personal mode WPA2 is more secure than WPA. However, I have read that WPA Enterprise provides stronger security than WPA2 and I am unsure exactly how this is achieved.
5
votes
6answers
207 views
Safe to connect to external drive?
A customer provided an external drive (USB 2.0 and Firewire 800 connections), and wants me to copy files onto the drive. The drive is not new. I have no particular reason to suspect the customer ...
2
votes
1answer
128 views
How to hide victim pop-up in clickjacking?
I am testing a web application for click-jacking vulnerability. The attack works fine for single clicks, however i am trying to delete a file and the hidden frame (victim) throws a pop-up ...
2
votes
1answer
83 views
Making undeterminable containers inside existing file system
Suppose, I have 1 disk partition (previously filled with random data) and create some file system on it (NTFS, FAT, EXT2, etc). I am going to keep some files here (i.e. visible files).
Then i create ...
2
votes
6answers
214 views
Can one reliably show HTTPS status in browser (not just the lock in the URL bar)?
I'm almost certain this isn't possible, as it would probably be too exploitable, but I wanted to ask the community just in case.
Is there a way to determine and display the state of HTTPS on a page ...
-2
votes
1answer
178 views
Cascading Encryption Algorithm using mcrypt or GnuGP
I'm trying to a cascading cipher encryption algorithm to encrypt a textfile via mcrypt. I'm essentially trying to emulate the behavior of TrueCrypt, where it can cascade two or three different cipher ...
8
votes
2answers
669 views
CSRF protection with custom headers (and without validating token)
For a REST-api it seems that it is sufficient to check the presence of a custom header to protect against CSRF attacks, e.g. client sends
"X-Requested-By: whatever"
and the server checks the ...
1
vote
2answers
484 views
How to check if a port can be accessed from the outside
I want to be sure that the firewall protecting the intranet is effectively rejecting/granting access to a port. I have no access to the firewall nor any other external machine.
Is that possible at ...
0
votes
2answers
123 views
Vulnerability of the open port
I'm installing service on the cloud machine and I was wondering on port vulnerabilities for my customers.
My service which lives on server A (often on a customer site) needs to access server B ...
-5
votes
2answers
126 views
What are the security risks of pirating video or music?
In the case of pirating multimedia, be it video or music, which problems may be caused by the video or music file itself? Could a video or an audio file be used to spread malware?
I'm talking about ...
5
votes
3answers
176 views
How to block an IP, if getting many http requests in a second
If some one tried force burst attack on my website, how can I block them?
I mean, I want to block an IP if I have many http/Apache requests in a second.
Thanks in advance.
-1
votes
0answers
25 views
Local System Restricted via GPO in Microsoft OS [migrated]
If there is a way, to deny local-system on a client machine to stop services with GPO?.
The client is in a domain.
Example, making a anti-virus service that can't be disabled by local-system.
I ...
44
votes
11answers
6k views
How reliable is a password strength checker?
I've tested the tool from Microsoft available here which tests password strength and rates them. For a password such as "i am going to have lunch tonight", the tool rates it's strength as "BEST" and ...
