3
votes
2answers
64 views

Where in a TLS connection can I get the signature of the content sent by the server?

I want to be able to prove that a given content returned by a HTTPS server was in fact served. I have looked over the whole TLS protocol and I found I can use ServerKeyExchange to get the server's ...
6
votes
1answer
46 views

VirtualBox: Ubuntu With or Without Virtual Hard Drive

I've been working on a setup using VirtualBox that uses the Whonix Gateway as a Tor middlebox and I am planning on using Ubuntu for the workstation. I don't plan on storing any information on the ...
2
votes
1answer
52 views

Use RSA Encryption With ASP.NET

My goal is to implement asymmetric encryption in an ASP.NET website to secure user-entered Social Security Numbers. I want to encrypt the SSNs with a public key, and only display a masked version, to ...
1
vote
0answers
57 views

Distribution of a public key with a dotnet client application?

I have a pretty good understanding of X509 cryptography etc, from my career in the smart card industry. So I know that the card scheme (e.g. Visa, MasterCard) is the highest level of trust - they sign ...
0
votes
2answers
104 views

Safety of Encryption Keys

I'm trying to figure out the best way to encrypt passwords for a forums site I'm working on. I've decided I'm going to use an encryption such as blowfish. From my understanding, you have a key, and ...
1
vote
1answer
103 views

What security practices should I keep in mind during development? [on hold]

I am beginning to develop apps for Android and iOS that make API calls to a PHP web application that I will be developing. Users will be required to sign up with a username, password, and (optional) ...
0
votes
1answer
17 views

hping3 - Ignoring not responding ports

Is there a way to ignore the not responding ports in the scan report? james@ahoi:~$ sudo hping3 -q --scan 1-1000 -S 192.168.0.1 Scanning 192.168.0.1 (192.168.0.1), port 1-1000 1000 ports to scan, use ...
0
votes
2answers
55 views

Conflict between cipher-suite and certificate [duplicate]

When capturing my SSL session (using Chrome) I have noticed that the server chose TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (0xc02b) as the cipher-suite and the certificate signedcertificate signature ...
4
votes
0answers
53 views

How to really treat security between peers in WebRTC

Recently I've been implementing WebRTC in my project and would like to add security and privacy to the couple. I then decided to search on and found something if it is really necessary to impose ...
0
votes
0answers
20 views

Export detailed reports from Rips Vulnerability Scanner 0.55

I am using RIPS 0.55 to scan for static source code vulnerabilities. Currently when running it at the directory level it just gives the category and the list of files. Is there a way to extract ...
0
votes
0answers
17 views

Does OAUth 2 allow authentication without UI (to an account with hard coded credentials)? [migrated]

Note: this question is not about authenticating to an account after receiving a valid access token. This is about the first leg in the authentication process that would obtain the valid access token. ...
-4
votes
0answers
45 views

XSS filter evasion when “less than” followed by an English character is filtered [on hold]

In a recent penetration test, I encountered an XSS filter that allows <,> to pass without encoding, but blocks <a, for example. The filter allows < <_ <, <ש, but DOESN'T allow ...
3
votes
3answers
50 views

What is the precise difference between a signature based vs behavior based antivirus?

I do not understand very well the difference between signature based vs behavior based antiviruses. Please clarify the distinction between the two.
2
votes
2answers
42 views

How dangerous is it to use textmods from internet sources?

I have been playing a game (.exe file downloaded from Internet) that supports the use of Textmods (altering of the game code in terms of textures) so long as they only affect visuals, and not actual ...
2
votes
1answer
65 views

Diffie Hellman parameters still calculating after 24 hours

I have a fresh install of Arch Linux on a RaspberryPi model B. I'm setting up OpenVPN and using easy-rsa with OpenSSL 1.0.2d to generate initial keys and certificates. All went fine until I ran ...
2
votes
3answers
119 views

How does a hash which contains algorithm to choose can be secure?

I was thinking about creating my own hash+salt function, something like sha1(password + md5(login)), then I read here (part 4) that creating it's own hash+salt function is a bad idea, because if the ...
3
votes
3answers
225 views

Decrypt Java Payload

I found some destructive activity on my JBoss server and after a lot of google searching I found this exploit https://www.exploit-db.com/exploits/36575/ . I know the attacker uses this exploit to ...
4
votes
2answers
579 views

HTML Input of type text for passwords

A site (I won't name it) is using an input of type text for its password field in an HTML form. The onfocus method then changes those characters to dots. Is there a security breach here ? Or is it ...
41
votes
1answer
5k views

How exactly does the Stagefright Vulnerability work on Android?

Digital Trends describes the Stagefright Vulnerability thus: The exploit in question happens when a hacker sends a MMS message containing a video that includes malware code. What’s most alarming ...
6
votes
2answers
71 views

SSL Handshake failure when antivirus is enabled

This is a problem related to SSL handshake failures when an anti-virus (Kaspersky) is in between. From WireShark, I am able to notice the SSL handshake successful (i.e towards the end client ...
5
votes
1answer
66 views

Router DNS getting automatically changed

I don't know if this is the correct forum where to ask, but I didn't find anything more appropriate. I have a TP-Link router model TD-W8951ND, and three months ago I noticed that the network was ...
-2
votes
0answers
21 views

Operating VirtualBox 5 on old Pentium 4 32bit CPU with 4GB RAM [migrated]

Trying to operate VirtualBox 5 on old Pentium 4 32bit CPU with 4GB RAM. But spinning up 32bit Linux/Ubuntu VMs is so slow. Have adjusted allocation of RAM and hard drive settings and still too slow. ...
6
votes
2answers
68 views

Detect when I do brute force attack and block the connection

My server (Ubuntu + LAMP) is infected, as I receive security alerts from the sites attacked from my IP. your Server/Customer with the IP: ********** has attacked one of our servers/partners. The ...
3
votes
1answer
88 views

how do we encrypt 100bits of plain text to get 100bits cypher text using DES?

We have a scenario like that we need to encrypt 100 bits of plain text using encryption algorithm like DES (algorithm takes 64bits plain text block and generate 64 bits of cypher text block, key using ...
3
votes
2answers
39 views

When should I drop a packet with ICMP type 3, code 9 or 10, TCP RST, or TCP ACK?

This answer says there are a few ways of dealing with a blocked packet at a firewall: At each of these levels a 1st IP packet (and any other protocol packet as an ESP or AH packet) might receive ...
9
votes
4answers
1k views

Filtered ports - What exactly filters them?

By the NMAP definition, unfiltered ports are the ones which cannot be determined to be open or closed since packet filtering prevents its probes from reaching the port. (ISBN 9780979958717 pag. 77) ...
1
vote
0answers
27 views

how to configure naxsi to accept json format in rest apis?

For example one of my APIs is: Post request: /api/v0/login body: { "username":"xxx@ggg.com", "password":"eeeee" } I want to secure this API with naxsi, I could not find anywhere to config naxsi ...
50
votes
3answers
5k views

How can common users defend against the StageFright vulnerability?

I was just informed of the StageFright vulnerability in Android devices. A specially crafted MMS message can gain access to data on the phone; so presumably it's a buffer overflow with subsequent ...
7
votes
3answers
3k views

I found my user details on already old, leaked account information list

I came across an old (>3 years) accounts information list which has been leaked to the web. The list included thousands (>10.000) of account details from a service or services. Apparently the event ...
1
vote
3answers
82 views

Malware in RevSlider plugin?

Maybe my WordPress site is hacked, because it's always send spams (5000 / day). I found one file in plugins folder which contains this base64 code. What shoul I do? EDIT: Oh, i found another one: ...
5
votes
3answers
972 views

How can I defend against malicious GET requests?

My server is getting hit with a variety if requests like the following: Started GET "/key/values" ActionController::RoutingError (No route matches [GET] "/key/values") Started GET "/loaded" ...
-1
votes
3answers
57 views

Writing an information security policy [on hold]

We are required to write an "information security policy" for our company, and I want to know how much should we cover, and if there are any template or examples that would help.
0
votes
1answer
45 views

Server authentication during the SSL handshake

I have question regarding the server authentication during the SSL handshake. I am going to write this up as my understanding of the concept. Please feel free to point out any mistakes. We generate ...
3
votes
3answers
143 views

Identify Malicious/Suscipicous Processes from Process List

I have a list of 1000 processes and I want to identify which of them are legitimate and which are not. I only have the name of the processes and I want to categorize them. Is there any way to get ...
1
vote
0answers
27 views

SEToolkit: havester not capturing credentials

I am using the Setoolkit on Ubuntu. I am testing it by cloning Facebook and logging myself in locally to see if I capture my own credentials. However,no POSTS are written to the harvester text file ...
3
votes
2answers
94 views

How to generate a password dictionary for a specific use

I have a locked work file that I need access to. Unfortunately, the company that provided the file is no longer in existence and I can't track anyone down to help me out. The file is encrypted and ...
5
votes
2answers
72 views

Limiting Concurrent Login For System Admins On Windows Domain

Quick background: we are a smaller sized team meaning that we perform multi-function roles. Thus a developer is typically a DBA as well and some developers do have domain admin access. As a rule our ...
1
vote
1answer
18 views

Diffie Hellman parameters still calculating after 24 hours [duplicate]

I have a fresh install of Arch Linux on a RaspberryPi model B. I'm setting up OpenVPN and using easy-rsa to generate initial keys and certificates. All went fine until I ran ./build-dh. It is now 24 ...
2
votes
1answer
51 views

Is there an equivalent of meterpreter's “run persistence” for Linux?

As in the question - how can I install a persistent backdoor with Metasploit on a Linux target?
-4
votes
2answers
29 views

Javascript web-based key derivation [on hold]

Is there a website with a key derivation function running entirely in client-side Javascript? The string which is used to generate the key cannot be seen outside the client. It shouldn't use a ...
2
votes
0answers
25 views

Creating SSL certificate signed by a self-signed CA certificate in Jetty [migrated]

I'm trying to configure a jetty-distribution-9.3.1.v20150714 backend running on Java 1.8.0_45-b14 with a certificate signed by a self-signed CA certificate, for SSL pinning. Following Apple's guide, ...
0
votes
0answers
9 views

How to verify Signature Value using cert file in C#? [migrated]

I am noob in security sorry for that. I have an xml file which include, <?xml version="1.0" encoding="UTF-8" standalone="no"?> <ID_VG_Response> <Result> ...
1
vote
1answer
82 views

Private VPN server in public cloud

I need to encrypt all my traffic, because I often work in unsecure network environments. My questions is this: if I buy my server from VPS providers (amazon ec2, digitalocean, etc) - how secure ...
4
votes
3answers
159 views

Using Tor browser on a Windows machine

Suppose a person is running a Windows 7/8 operating system. If she/he uses the TOR web-browser, can Microsoft see what they are browsing? Would that not defeat the point of using TOR in the first ...
2
votes
1answer
57 views

Are TLS session keys cached in a browser?

For example, when authenticating to a TLS protected service, and then closing the tab, you can sometimes reconnect to the service afterwards without re-authenticating. In preservation of perfect ...
0
votes
0answers
16 views

Multiple SSL certificates in Apache with clients using different certificates [migrated]

Our setup is like this. SOAP services are exposed and clients send requests to SOAP endpoints. Each node provides the SOAP services. There can be one or more (maximum 6) nodes as a cluster. Multiple ...
2
votes
2answers
209 views

Is it okay if passphrases to KDFs are “predictable”

I'm looking to do file encryption for small amounts of text (8-100 characters for each item being encrypted). Here's what I have: A secret passphrase and a salt. I Use Rijndael to generate a key and ...
1
vote
0answers
46 views

Where to search for vulnerabilities in a WordPress theme? [on hold]

I have been doing research on a custom WordPress theme. I'm not very familiar with this CMS and how it works on the inside: where should I start my security analysis? Should I look for SQL Injection ...
1
vote
0answers
47 views

Failure analysis to avoid locking permanently online accounts [on hold]

(I reposted here a question I previously asked in SuperUser, I think this section is more appropriate) Back in the days defining a path leading to loss of data or loss of online accounts was easy: ...
1
vote
0answers
26 views

How should end users respond to Earthlink's “Allowed Sender” feature when blocked by policy?

Some of our users are requested to click on an Earthlink antispam URL below https://webmail.pas.earthlink.net/wam/addme?a=USERNAME@earthlink.net&id=<SOME GUID> However our firewall ...

15 30 50 per page