2
votes
2answers
83 views

Single-use password as the default authentication method?

The crazy password requirements (joke1, joke2) lead me to a situation where there is no way for me to memorize the passwords to the several sites that make those requirements. The result is that ...
1
vote
2answers
41 views

SSL Authenticated SOAP Request works in SoapUI but not through code

I am connecting to a SOAP webservice that requires SSL authentication. I (the web service client) have a .pfx file and provided the public certificate for that file to the company whose web service I ...
-4
votes
0answers
57 views

Can my work see what I was on my phone internet for? [on hold]

I was looking up porn on my phone the night before last. I closed out of the internet app. I went to work the next day and had to use my internet on my phone but when i opened the internet the site I ...
-1
votes
0answers
34 views

SMBDirect & Metasploit [on hold]

Kali v1.1.0a, msf up to date, attempting to use smb_version I get the following on scanning any host. [-] Check failed: The following options failed to validate: SMBDirect Running live CD, bridged ...
8
votes
4answers
2k views

What does this malicious PHP script do? [on hold]

Somebody hacked my site and uploaded this script (template46.php) to my webroot and its content is: <?php $vIIJ30Y = Array('1'=>'F', '0'=>'j', '3'=>'s', '2'=>'l', '5'=>'M', ...
3
votes
1answer
22 views

Difference between IPSEC SA and CHILD SA

Let us consider two network entities. Linux1 (eth0)=============IPSEC=============Linux2(eth0) 192.168.1.1 192.168.1.2 The IPSEC Tunnel is V4 ...
-1
votes
0answers
12 views

Specify outgoing SSL-Port in mitmproxy [on hold]

how can i change the outgoing SSL/TLS-port of mitmproxy to another port than the default 443? Reason: I want to use mitmproxy with TLS-O-Matic, which operates on different ports. Thank you!
2
votes
2answers
55 views

Malware analysis - Traffic Inspection

I am working on small project. There is an organization in which it has 100 around systems across the country. All of their machine's traffic goes through a single proxy monitored and maintained by ...
3
votes
2answers
100 views

Payment form from http is secure? [on hold]

There are lot of payment gateways (Worldpay, PayPal, ..) offering easy integration, when the plain webpage using URL redirection to the payment page. HTTPS (worldpay,paypal), where the user posts his ...
-1
votes
0answers
58 views

which programming language is best for developing vulnerable web application? [on hold]

I want to develop a vulnerable web application. I am just confused which programming language(python, java, php etc..,) is easy and best suitable to develop vulnerable web application.
-5
votes
1answer
51 views

Malicious Website URL [on hold]

Recently I found out that there are malicious websites that do not have a domain name on its own. For example, 94.247.2.195 as in ...
2
votes
1answer
49 views

Hashing algorithm for cryptsetup

I will encrypt my SSD using cryptsetup and I would like to know which hashing algprithm to use. First of all, cryptsetup benchmark: PBKDF2-sha256 262144 iterations per second PBKDF2-sha512 ...
1
vote
0answers
22 views

What is the primary function of the transport layer in the Internet protocol networking code [migrated]

I am not sure if I have answered this question right, so would appreciate it if someone could correct me. The question is: What is the primary function of the transport layer in the Internet protocol ...
2
votes
1answer
57 views

Securely storing passwords using PHP5

Starting note: After going through some articles and answers posted on SO related to storing secured passwords I'm still not sure whether my way of thinking is applicable to todays reality. I'm ...
1
vote
1answer
28 views

Security issues with multiple interfaces

Say I have a server with multiple interfaces. I wish to configure each interface as different IP addresses (and host name). Is it advisable, on a security standpoint, to do that? I have an application ...
2
votes
1answer
53 views

Apache Partial HTTP Request Denial of Service Vulnerability

One of our client scan our site and share following qualys vulnerability. "Apache Partial HTTP Request Denial of Service Vulnerability - Zero Day " We are using "Ubuntu 12.04.5 LTS" with ...
-1
votes
0answers
28 views

IoT security assessment guidance [on hold]

Can anyone guide on how can we perform security assessment if a machine is communicating to cloud using MQTT or CoAP protocols? Any help in terms of Methodology, Tools will be helpful. I'm not sure ...
0
votes
0answers
32 views

How much information is sent by Anti-Virus software to their respective companies? [on hold]

Somewhat related to this question Are anti-virus companies companies regularly committing software piracy? . I mean to ask this out of concern for the privacy of the files on my computer, AV ...
4
votes
1answer
86 views

REST API communication between two Web Servers - VPN or https?

We have two servers that will be sharing data and communicate over a REST API: our main application server will communicate with the server of our client that is managing some assets. In short: Given ...
-2
votes
0answers
38 views

Most secure router to buy for my home? [on hold]

I want to buy a new router for my home, because mine is given by my ISP and i'm sure it's a security shame. What I need is a router that possibly can run a custom or, lets say, open firmware, so I get ...
-1
votes
1answer
47 views

Cookie based sqli [on hold]

I have identified a website vulnerable to sql injection via a authentication token. Does anyone know where I can find a tutorial / example of cookie based sql injection?
0
votes
1answer
30 views

Securing Data at Rest in Android

Here's a situation. I am the author of an app that allows my customers to stream videos on their local android device. I also allow them to download the video and store it locally on their android ...
0
votes
0answers
6 views

How to reset my password on Windows tablet [on hold]

Turned on my Samsung T700 after several months of not use (got iPad) and found myself totally locked out because I totally forgot my pin. I found some references online how to create a USB boot driver ...
1
vote
0answers
49 views

Can source javascript files be infected from a developer's machine?

First a little bit of background, About two weeks back one of the developers in my team said they were seeing advertisement popups and links appearing all over the web app we were developing, when ...
0
votes
0answers
29 views

fake ap with password [duplicate]

I cannot speak English well, sorry. What happens if we create a fake AP with linset on kali linux and we disconnect the target. He would then connect to our AP and when he wants to go to a site he ...
4
votes
1answer
101 views

Accessing user accounts without asking for their password

I don't like asking my (windows network) users for their passwords, it doesn't seem like a good security practice. I also want to train my users to never give their password to anyone if they ask for ...
1
vote
2answers
53 views

Salt addition in hashing? [duplicate]

I may be wrong here but reading about salt I was wondering whether if we use the same salt for every password saved in our database won't users having same password would lead to same hash even after ...
0
votes
2answers
54 views

Requesting webpage as DOS

Is it possible to launch a DOS by repeatedly requesting a webpage (refreshing)? Like holding down F5 on your browser?
2
votes
0answers
53 views

Remote accessed? [on hold]

I'm not an IT professional but I'm hoping someone will take the time to answer this. I'm not generally such an idiot but this happened: I was using Ancestry.com on Chrome and clicking links within ...
1
vote
2answers
29 views

exploiting setuid and setgid bit

I was reading material on secure coding and at many places it is mentioned not to use setuid and setgid bits for privilege escalation. These a vulnerable and can lead to security issues. Instead we ...
1
vote
0answers
31 views

Total, initial, hard drive encryption speed with VeraCrypt [migrated]

Context: I decided to encrypt a 2TB Internal Sata II hard drive I use for personal files (photo collections, tax prep PDFs, hosting a synced Dropbox folder, some non-HD video files, driver install ...
4
votes
1answer
47 views

Countermeasures for a family-member attack on a password reset procedure

Given an account reset procedures, there are usually some recovery questions, and in better implementations a link will be sent to confirm the password change via email or SMS. Therefore, the attacker ...
3
votes
0answers
79 views

Pawn in a nefarious porn marketing campaign?

About a month ago we upgraded (maybe not the right term) our site to WordPress. In that time we went from about 3800 inbound links (according to Google WebMaster) to about 5000. We exported our list ...
2
votes
0answers
42 views

I need a secure laptop tethered to a mobile internet connection. [on hold]

I invent things. Think energy, IT security algorithms, etc. I'm actively targeted for information breaches by the largest corporations on the planet. All paranoia aside... I'd like a secure ...
2
votes
0answers
26 views

Reference Implementation for Shoup's ECIES?

ECIES is part of both ISO/IEC and IEEE. There's a interop bug between Crypto++'s ECIES and Bouncy Castle's ECIES. I know where the bug lies, and I've been trying to determine who is "right" (for some ...
1
vote
1answer
28 views

password storage and user authentication [duplicate]

I was going through (https://crackstation.net/hashing-security.htm) about doing password hashing / storage the right way. I understood most of it but i still have some questions and doubts which are ...
2
votes
2answers
78 views

Two VPNs — full anonymity?

Lets assume the following set-up: VPN A in e.g. Russia VPN B in e.g. Israel Both registered through a one-time email and payed via Bitcoin A brand-new notebook with a virtual machine VPN A is ...
2
votes
0answers
24 views

Information on the Elderwood Project/Platform [on hold]

I've read Symantec's whitepaper on the Elderwood Project and the blog update on the Elderwood Platform. They both make for a very interesting read, especially in the zero-day exploit meta-analysis ...
0
votes
0answers
8 views

Use Whonix gateway to protect other machine [migrated]

I have recently configure an Whonix gateway and workstation, to provide me with a level of anonymity. I am also looking to run the back-track Penetration Testing Distribution. Is there anyway I can ...
2
votes
1answer
31 views

Is this system of authentication secure for a mobile app? What can I do to improve it?

Users authenticate with their phone number, get a pin text, and if it is correct, they get an access token. Store the access token in a DB in a Token model. The client always sends the access token in ...
1
vote
0answers
24 views

Windows Domain Controller Authentication Logon Logging and Forensics [migrated]

This question does not take Windows Server 2003 and older OSes into consideration. I know that for local logon (event ID 4624) also the logon type is logged (interactive, remote, etc.). Is there a ...
4
votes
1answer
67 views

Does mutual SSL authentication increases protection against a Poodle attack?

Recently we found our self pondering whether a certificate based mutual SSL authentication protects against a Poodle attack over SSLv3? We’re stuck in a situation where a client-application only ...
2
votes
1answer
93 views

Security Structure of an API

I've been developing a web application and APIs for 8 months. I implemented OAuth 2.0 client credentials for authentication. And now I have to implement TLS to my APIs. I've been dealing with SSL/TLS ...
3
votes
2answers
42 views

Can postMessage be used to forward data to hacker's iframe in CSRF attack?

Consider a user that has an open session to a legitimate site with a password on it. This page has no anti-CSRF token. A hacker creates a webpage with 2 hidden iframes. One iframe does a GET on the ...
2
votes
1answer
31 views

CRT / CHECK vs OSCP certification [on hold]

Which is harder? If I see 2 pentesters, one with one and one with the other who would this information alone qualify above the other? I know it doesn't work like this and it is all down to experience ...
1
vote
1answer
60 views

Email phishing scam asking customers for card details

I work for a small ecommerce company and over the weekend we received a few emails from customers claiming to have received an email asking them to confirm their card details to process their orders. ...
4
votes
2answers
89 views

How can I confirm I'm vulnerable to OS X “rootpipe” (CVE-2015-1130)?

I've read the disclosure post by Emil Kvarnhammar of TrueSec (Hidden backdoor API to root privileges in Apple OS X) and I'm trying to confirm whether I'm vulnerable or not. After creating an ...
2
votes
1answer
15 views

ettercap use as local proxy [on hold]

Hi everibody and sorry for my english, I'm looking for a way to use ettercap (or another program) to alter TCP traffic (coming from local) on the fly. I used "netsed" with iptables, but netsed is too ...
0
votes
1answer
66 views

IP over HTTP GET only

Consider the following scenario: There is a client behind a really strict firewall. There is nearly nothing available to 'connect to the internet'. Just DNS resolution and HTTP/HTTPS (some whitelisted ...
0
votes
0answers
28 views

Related Standards, Specification and RFCs for this invention? [on hold]

I am working in a security laboratory that its goal is to check devices for the requirements that is mentioned in related standards, specifications and RFCs(Request for Comments). Somebody invented a ...

15 30 50 per page