0
votes
3answers
798 views

How can this xss challenge be solved? [closed]

I found this : http://research.insecurelabs.org/xssmas/ And so far my solutions were: 1.http://research.insecurelabs.org/xssmas/search.php?query=<script>alert(0)</script> 2. ...
1
vote
1answer
118 views

Who should I use for auditing/cerifying server software or specific deployment

Background: our company provides an online service. The service is provided both to general public, and to enterprise customers. Enterprise customers are signed on as part of sales efforts. We have ...
0
votes
1answer
226 views

is there any program that can tell me which files have been transferred from my computer thru the web

Is there a program that can tell me which files have been transferred from my computer thru the web? So if I have virus on my computer that transfer files I will know about it according to the files ...
2
votes
3answers
408 views

Alternatives to Common Password Retrieval

Wired wrote an article recently about the top tech fails of 2012 and to no surprise, the password was on the list, more specifically the way a user can retrieve their passwords. What are some nifty ...
2
votes
1answer
167 views

Reflection Attacks on Server

I was reading a research paper entitled "Steps to Defend Against DoS Attacks" when I came across this point: "A reflection attack on a server would require server-client-server communication, ...
3
votes
2answers
1k views

SSL/TLS: Version Change during Renegotiation or Resumption?

Can the version proposed by Client be changed during SSL Resumption or Renegotiation? Resumption Case: In case of Resumption, as I understand, Client will send a Client Hello with the Session ID of ...
18
votes
2answers
17k views

Chrome SSL Warning: “You cannot proceed because the website operator has requested heightened security for this domain. ”

I'm trying to go to the URL below, and Chrome warns me that the wildcard certificate is not valid for this domain. ...
2
votes
2answers
851 views

Command injection Windows platform

Let's say there's a site which is vulnerable to user's input. For example users can ping a specified IP. Since the site is vulnerable to Os command injection, a user as well as an IP address ...
4
votes
1answer
364 views

How big is the risk of hash fixed points/cycles?

It's established wisdom to hash password multiple times with a salt to increase the time it takes per brute force iteration. At the same time (unless the algorithm guarantees otherwise) there's a ...
4
votes
4answers
696 views

What mechanism enforces user permissions in Unix/Linux?

One of the core pieces of security in Unix/Linux systems is limiting privileges by user. For instance, certain actions can only be done by the root user. In theory, this can keep a malicious process ...
4
votes
1answer
238 views

Combining MAC and Encryption

What is the most preferred and secure way of combining both Encryption and MAC. There was a lecture on different combining strategies adopted by different protocols on a cryptography course by ...
3
votes
1answer
528 views

Mitigation Strategies for Response Spliting Attack

I am not going into basics of HTTP response splitting attack as above figure completing describes the working of such a attack. Previous Post have also discussed working of such a attack ASP.NET ...
1
vote
3answers
3k views

How can hotels securely receive your credit card details (for a custom, one-off payment)?

A hotel belonging to a large chain (400 hotels in 60 countries) has just requested me to send my credit card details via standard (unsecured) email. I have negotiated a deal for accommodation with ...
2
votes
3answers
5k views

Cracking a wpa2-psk wifi

I'm cracking a wpa2-psk wifi with aircrack-ng. After popullating the *cap file I'll apply brute-force with john. The question is: What time is it recommend to run airodump-ng before killing it's ...
2
votes
1answer
153 views

Xbox 360 Security - Why must you be the data owner to move content?

Xbox 360 does not allow you to move content (such as to a usb), unless you are the owner of the content (Same gamertag as save file). This seems pointless considering, I can simply sign into any ...
9
votes
4answers
707 views

How to evaluate the strength of a hashing algorithm?

At work the hashing algorithm we use for passwords appears to be bespoke. Obviously that's a pretty bad idea, but the management don't seem bothered. The algorithm always produces 20 character long ...
5
votes
6answers
844 views

How can a novice find proof of a system compromise?

I am almost certain a colleague has installed a keylogger on my system. I am totally new to IT security, but have substantial linux / windows / programming experience. The system I believe is ...
2
votes
2answers
495 views

How to define different firewall rules for different users on the same machine running on Windows 7?

Provided that one machine running on Windows 7, connected to LAN, and connected to the Internet via a gateway in the LAN. There are two logon user accounts A and B on the machine. I want: 1, User A ...
2
votes
3answers
4k views

Making a Windows cert say it's purpose is “Ensures the identity of a remote computer”

Maybe this is a superuser.com question, I don't know. Anyway, I want my cert to show up like this when I double click on it in Windows: If I just double click on a random cert I get this: The ...
8
votes
4answers
21k views

how to import a private key in windows

Say I have an X.509 cert and a private key that corresponds to it. I can import X.509 certs easily enough into Windows but what about private keys? Is the only way I can do that by converting both ...
4
votes
1answer
829 views

How to simulate a WEP cracking scenario for faster cracking in local lab?

I need to illustrate WEP cracking methods, I'll be using aircrack suit for that. There is a little problem that I want to speed up the method for very fast packet capturing, since this is just an ...
3
votes
2answers
9k views

Block all internet access from a computer except for allowed applications and domains?

I want to block all internet access from a computer except for allowed applications and domains. E.g. BLOCK ALL Except security.stackexchange.com/... Except skype.exe How can I do this? -It needs to ...
0
votes
2answers
352 views

encrypted cloud storage with partial local copy

Is there a cloud storage solution with the following features: partially copied locally. Not fully like dropbox so it can be larger than the local disk. Not fully in the cloud but just a local disk ...
0
votes
3answers
171 views

How to retrieve a site whose server is running Linux

I'm struggling to find a way to retrieve through Google a list of sites having Linux as their server operating system. Actually, I'd like to be able to test the following command: nmap -O ...
1
vote
1answer
161 views

how to protect from Network scanner on android?

How can I block and detect network scanners on android platforms to stop scanning vlan of my hot spot. My question is: which scanners they use? how can i detect such scanners? Can i protect ...
-1
votes
2answers
419 views

Secure risks of online chat for customer service

Some merchants provide the ability to chat over the web for customer service or help. Are there any risks in using these online chat channels? If so, what are the primary risks? Can the chat ...
3
votes
8answers
626 views

Generate user a password instead of asking for one?

I'm trying to weigh the benefits of not allowing users to create their own passwords, but must pick out of a generated selection. Are there any examples of sites that use this approach? Workflow ...
5
votes
1answer
2k views

OpenVPN Why CBC mode is recommended?

I just set up my installation of OpenVPN on my server. I am curious why the OpenVPN manual recommends CBC mode. I heard that CBC is predictable and not secure; is that true?
2
votes
3answers
790 views

Strange file named Aview.exe - WinClient

Today I've just discovered some strange files on my Win 7 PC. I was browsing through the Windows Firewall Inbound Rules and saw two ACCEPT rules for a program, Aview.exe. It is located in ...
10
votes
3answers
896 views

Calculating how secure my password is

I generally use GnuPG for encrypting my files and as far as I know its strength ultimately depends on the passphrase I use. So, I would like to know: how can I mathematically calculate how secure my ...
5
votes
1answer
3k views

What makes PINless Wi-Fi Direct using WPS on Android secure?

I've read from Wikipedia that Wi-Fi direct uses WPS (Wifi Protected Setup), and I know that in Android (at least what I have which is 4.0.1 on Galaxy S3) uses the WPS method of the "push button" to ...
2
votes
3answers
2k views

Identify a process that uploads data

I am using the tool "Internet Traffic Agent" to monitor my in- and outbound traffic. It shows me clearly that over a period of approx. an hour, some process on my machine is uploading data, about ...
-5
votes
1answer
66 views

Is it likely that security authorities track downloads of pen-testing related software? [closed]

Lots of security related software, like backtrack and metasploit, can be used for illegal purposes. Is it likely that national security organisations (e.g. federal police) track the downloads of such ...
0
votes
2answers
955 views

Networking books for programmers [closed]

I have some programming experience, mostly in web apps, based on pre-existing frameworks. That is, all the networking side of things are handled already, and no knowledge of them is necessary. I ...
1
vote
1answer
546 views

What's most standard way to secure internet connections and protect privacy?

It's common knowledge that Wi-Fi, or other Internet connections, should be encrypted via a VPN to be secure, and to hide our real IP address from intermediary network observers. However, one can't ...
7
votes
1answer
1k views

How isolated are files on a VirtualBox virtual machine from the host filesystem?

When transferring ownership of a computer from one party to another, it's advisable to perform steps to clean out personal data from the hard drive. Depending on needs, the type of data, and/or level ...
0
votes
2answers
371 views

How to restrict web access to certain countries

What are the better ways of filtering access to the web application based on Geographical location. Is it possible with a network layer firewall or we need an application layer?
-2
votes
1answer
861 views

using exploit/unix/webapp/tikiwiki_graph_formula_exec

I have backtrack and metasploitable running on my Macbook pro and I am trying to run **exploit/unix/webapp/tikiwiki_graph_formula_exec** exploit on msfconsole to penetrate the metasploitable operating ...
4
votes
1answer
613 views

Trying to figure out Gmail login in Wireshark

In my pentesting lab I'm using ettercap for do a mitm to a XP VM. I go to gmail, accepting the false certification, and here I start to sniff with wireshark. I put some false account like ...
7
votes
1answer
6k views

How to connect Tor to the web using a specific server?

Some websites restrict access based on which country the accessing IP comes from. I'd like to use TOR to circumvent such restrictions. So I'd like to use an exit node that's located in a specific ...
5
votes
4answers
6k views

What does scorecardsresearch.com/beacon.js - added by Disqus.com - do?

I recently added Disqus to my site. Looking at the "scripts" tab on Firebug, I noticed a script called, http://scorecardresearch.com/beacon.js (here is a prettified version - the script is not ...
9
votes
1answer
612 views

How secure is Windows 8 email authentication?

I boot up Windows 8 and the first thing I notice is that it allows you to login with your email credentials. Let's say if my laptop is stolen then what are the advantages or disadvantages of email ...
2
votes
3answers
429 views

Forged SSL without installation of root CA, possible?

Consider visiting a secure website like Gmail. Is it possible to forge the website certificate only by having full control over the internet provider? I mean is it practically possible for a provider ...
18
votes
2answers
914 views

Security threats of wireless charging?

It is well known that plugging your mobile device for charging in public/uncontrolled places through Micro-USB can be a security hazard. USB protocol supports much more than just transferring power, ...
7
votes
3answers
2k views

Are Web Views in android secure?

"Web Views" are views that display some online content, usually a webpage within an android app. Implemented "Web Views" usually don't seem to have any kind of status bar or an address bar to confirm ...
3
votes
1answer
3k views

How Chrome avoids sslstrip?

I'm trying out Moxie's sslstrip tool in my pentester lab. It works in all my VM's but no in all browsers. Firefox and IE are vulnerable but Chrome seems to has a protection against. Anyone know how ...
5
votes
2answers
219 views

How much should I care about the iOS/Android version when pentesting mobile app?

Lets say I am performing penetration testing on mobile application, How significant is the version of operating system I am using while running the application? I.e. if I test mobile application ...
3
votes
2answers
254 views

Doesn't adding requirements to a password, such as must contain 2 digits, decrease the strength? [duplicate]

Possible Duplicate: Doesn’t imposing a minimum password length make the password weaker by reducing the number of possible combinations? Doesn't any constraints added to a password policy ...
0
votes
2answers
579 views

Network security: Public and Private keys

In Pretty Good Privacy, it is said that Sender sends compressed message and encrypts the message with the private key of himself. And then Receiver will decrypt that message with the public key of the ...
5
votes
1answer
5k views

How does a CSRF token prevent an attack, and how can I safely use/avoid it for my JSON API?

I'm trying to make an iOS app communicate with a Ruby on Rails website using JSON. While trying to post a login to create a user session, I discovered I was missing a CSRF token. I had no idea what ...

15 30 50 per page