-1
votes
1answer
32 views

Decompiling folders inside a jar file [on hold]

I am in possession of a jar file that I have reason to believe has a RAT inside. I downloaded it inside of a virtual machine with jad installed and began to attempt to look at the source. I found that ...
1
vote
1answer
23 views

Security in transferring sensitive data over web apps

I am working on an app that has to transfer sensitive data over HTTPS and I have an idea but I am wondering if it is overkill or good. One of the issues is I need the ability to "share data" between ...
0
votes
0answers
13 views

Digital Signature on a Passive RFID tag with small-ish memory constraints

I'm pretty new to the crypto and security worlds and I'm looking for some guidance. Briefly, my project involves Widgets (physical items that need to be authenticated) and Gadgets (physical machines ...
7
votes
1answer
32 views

Does the use of a smartphone's Secure Element really offer security benefits to a banking app?

My bank's Android application allows users to perform financial transactions without the use of the physical token generator (which requires an ATM card to be inserted and a valid PIN to be provided) ...
2
votes
0answers
24 views

Is FAR (False Accept Rate) a property of algorithm or a property of the system?

As known in biometrics: https://en.wikipedia.org/wiki/Biometrics#Performance False match rate (FMR, also called FAR = False Accept Rate): the probability that the system incorrectly matches the ...
4
votes
1answer
33 views

Does Firefox use OCSP?

And if it does use Online Certificate Status Protocol, is there a way to disable it, so that it uses CRL instead?
1
vote
1answer
21 views

Unable to PSEXEC into machine with admin hash

I'm doing a penetration test at the moment, and I am trying to PSEXEC into a machine for which I have the local administrator hash. I am attempting this with metasploit and metasploits psexec module. ...
17
votes
5answers
2k views

Who is responsible for revoking a certificate?

The CA issues certificates to clients/servers. Whenever a request is made by the client/server, the certificate is used to verify the identity. Now, if a certificate needs to be revoked then who does ...
1
vote
0answers
12 views

web view addjavascriptinterface exploit

I have been banging my head around this for almost 56 hours now (+/- a few that I took out to have a couple of naps and RedBulls) and have not been able to get anywhere with it so far. I am trying ...
1
vote
1answer
72 views

What website accepts only TLS 1.2 so I can verify client capability?

Is there a publicly accessible website which will only accept TLS 1.2 connections so that I can test to see if my application can successfully, securely connect to it? Background: I have an old VB....
1
vote
2answers
73 views

If I only know part of a password and part of the hash is it possible to get the full password?

I'm trying to learn more about hashes and cryptography and doing my own pentesting, but I seem to be stuck on this problem. The hash function being used is SHA1. If I'm trying to determine a ...
0
votes
0answers
29 views

Java Exploits - Not using the browser plugin

I'm looking for examples of Java exploits that do not leverage the Java browser plug-in/Browser applet to run. For example: Drive-by downloads that download a Java file that is run by the JRE but ...
2
votes
1answer
64 views

To protect against clickjacking, is it safe to have a web page display its content until framing is detected?

Let's assume we have a web page that can't use X-Frame-Options, and the Clickjacking protection has to be JavaScript based. On this page, all sensitive actions and the display of sensitive information ...
4
votes
0answers
28 views
+50

Access-control-allow-origin: * with a bearer token

When testing a single page application, I've identified that the REST endpoints return CORS headers that allow cross-domain access: access-control-allow-credentials: true access-control-allow-methods:...
1
vote
1answer
38 views

How is CSRF token verified?

I would like to know how the CSRF tokens are verified on form submit? Please tell me whether the following is correct: Server issues a random string which is set as the session cookie, and a value ...
0
votes
4answers
151 views

Encrypting text data by replacing characters?

I have been thinking on this method but did not really get into it because I thought it was stupid to do for some reason, maybe because I've never heard of it and it's pretty obvious. But today I got ...
1
vote
4answers
38 views

Remove possibility to read system files with PHP from Apache

When I upload a php file (file.php) with following content on Apache server <?php $file = $_GET['file']; include ( $file); ?> I am able to read any file of Apache using the below URLs http://...
-1
votes
2answers
59 views

Spying through wifi by the person who sets up wifi

A friend of mine has set up WiFi on my PC, knows the password for the WiFi and knows my WiFi id. How and to what extent can he spy on my PC? And can he see the sites I visit?
0
votes
0answers
44 views

SSL certificate problem: self signed certificate in certificate chain [migrated]

Behind a firewall, using chrome, I am able to access a github repository like so: https://github.com/Squirrel/Squirrel.Windows Chrome uses our certificate for this access. If I try to access the same ...
3
votes
2answers
33 views

How to see when a HSTS domain is about to expire?

We have a customer who claims his site (which we host) is under HSTS, but we cannot confirm this. I told him to open that chrome page chrome://net-internals/#hsts and query for his domain, and indeed ...
1
vote
1answer
18 views

How can SHA256-hashes as input to MD5 be revealed?

I know that you shouldn't use unsalted MD5 hashes of passwords in databases. But unfortunately, people do, see https://hashes.org/public.php. From this site I downloaded a file with passwords which ...
-6
votes
0answers
25 views

How to increase Website traffic from different IP? [on hold]

How to increase website traffic from different IP address. Hope to get a guide from expert. Thanks.
0
votes
0answers
6 views

Python windows reverse shell one liner [migrated]

can anyone help me on a python reverse shell one liner for Windows ( has to be windows oneliner) I am tring to modify the one for linux which i have used many times but this is my first time for ...
0
votes
3answers
262 views

How can I prevent myself from barcode payload attacks?

Recently I came across a tool which can inject payloads into a barcode. How can I prevent myself from this kind of attacks? Attack scenario: The attacker prints vulnerable barcode / sends ...
0
votes
2answers
92 views

How secure is the hashing/salting/stretching process as described in this diagram?

Question I was just brainstorming about the hashing, stretching, salting part of the user password in the authentication process and I want it to be as secure as possible (no matter how paranoid that ...
1
vote
1answer
53 views

How to capture all traffic from a new device?

I have a new IoT type of device that requires a wifi connection to work. I have no use for the device but I'd like to poke around it and learn more about it. How should I go about intercepting every ...
26
votes
7answers
6k views

How to securely ask for passwords of customer as consultancy firm?

In my work as a developer, I need username/password combo's from the customer sometimes to make sure the settings on 3rd party services are correct to work with the website/application we are building....
3
votes
2answers
66 views

Do the most used browsers have similar security?

I read that Pwn2Own stopped attacking Firefox, apparently because it didn't make "serious security improvements" since the last competition. Should I understand it as "Firefox is significantly more ...
1
vote
0answers
12 views

Relay Attacks on Bluetooth LE

Is it possible to perform a relay station attack on Bluetooth LE? For example if I installed an August smart lock or similar on my front door (which uses BLE to communicate with my phone to decide ...
1
vote
1answer
20 views

does openssh support authentication using public key fingerprints?

Cisco have two ways of enabling public key authentication: using the public key and using the public key hash. ip ssh pubkey-chain username <user> key-string <public key> OR ...
-1
votes
0answers
19 views

Compile C programme into standalone DLL using mingw [migrated]

Im wondering whether it's possible to generate a standalone DLL from a simple C programme. I have the following code to create a user and add to admin group on successful execution. I can compile ...
0
votes
2answers
106 views

Can an SQL injection attack happen if the input is only allowed to be hexadecimal characters?

I've set up a login system that works more or less like this: 1) The user enters the data 2) The data is hashed locally using SHA256 (To reduce the risk of someone stealing the password through a ...
-4
votes
0answers
47 views

Why would a website have a maximum character limit on passwords? [duplicate]

I was just about to sign up for a website but the maximum password length was 10 but I can't think of a rational reason as to why a site would implement it that way. Can you guys think of anything?
1
vote
1answer
49 views

Should every website or web-application have a Responsible Disclosure Policy and what are the drawbacks of having such a policy?

The Dutch National Cyber Security Centre, NCSC* (daughter of the Ministry of Security and Justice) published a news article* regarding a Responsible Disclosure Guideline in the beginning of 2013. The ...
-1
votes
0answers
28 views

Preventing denial of email (Gmail)

Case 1: The attacker is or has access to MITM the ISP(3g/2g). The ISP also happens to be the GSM company. This could be because of police supervision. He is forced to use computer with a backdoor. ...
-1
votes
0answers
35 views

MS16-032 Privilege Escalation - how to get system in the same shell? [on hold]

When I used MS16-032, it opened a new CMD with admin privilege, but I want to do it remotely without showing a new window to the user. How can I use it remotely and get admin in the same shell not ...
0
votes
0answers
42 views

How do anti cross-site request forgery tokens work?

Can anyone explain how CSRF tokens work in simple terms? Why should the CSRF-token be stored in a session cookie as well as in a hidden form field?
-1
votes
0answers
25 views

s/mime edit an existing certificate

We are using an encryption appliance that is capable of creating S/MIME certificates for internal users. The appliance is synchronizing with AD to get the user. When the certificate is created it will ...
0
votes
0answers
80 views

Possible to detect Metasploit trojan installation on Windows 10?

I'm concerned my Win 10 installation may be infected with one of Metasploit's trojan variants. How could I go about confirming or disproving this suspicion? Are there ways to detect Metasploit hacks?
5
votes
1answer
112 views

What should I store in the case that a user posts a threatening post?

I am building a social-media type website. I am going to have the users create a profile with their name, email and phone number. When a post is created I plan to have a spot in the database that ...
2
votes
3answers
106 views

What's the safest way to enter information on a website?

On-screen keyboard you have to work with a mouse? Copy and paste? Type a string of random characters and then delete the extraneous ones? Something else?
3
votes
1answer
59 views

Question about AES-CBC IVs

I'm writing a Java program that encrypts strings with AES-CBC encryption. (Eventually I'm going to add steganography functions too). As you are well aware, CBC needs an IV in order to encrypt the ...
0
votes
0answers
17 views

We have a manual process for encrypting a key and want to use a servcie for decryption? [on hold]

We are creating an encryption app to use a certificates thumbprint and serial number to use as the values for the AES managed encryption. Then will have a web service that will get the same ...
-1
votes
0answers
45 views

Advice on design security review [on hold]

I'm looking for some advice and guidance on how to perform a design security review. I'm interested on the process and phases involved during the design review. Also, if you could point me to any ...

15 30 50 per page