2
votes
0answers
32 views

Disadvantages of self signed and cross signed certificates? [closed]

Can anyone explain what are the disadvantages or loopholes in self signed and cross signed certificates?
2
votes
0answers
35 views

Was the OSX/iOS Airdrop flaw real?

One exploit has caught my eye, mainly due to the possibility of malware incorporating it infecting businesses and schools. This exploit is, as you may have guessed from the title, the OSX/iOS Airdrop ...
2
votes
0answers
113 views

Combining id_tokens and access_tokens for new auth spec

A common misuse of OAuth2 is as a strict authentication protocol. OpenID Connect addresses this by extending OAuth2 to include an id_token. Implementing clients for OAuth2 and OpenID Connect is a ...
2
votes
0answers
72 views

If I clear my browsing data, is HSTS protection removed?

I've seen that if I delete cookies and other data on Google Chrome, SSLStrip+ works successfully on those web sites that are not included in the browser list. Is it because HSTS data is cleared too?
2
votes
0answers
45 views

How to Lead to XSS by Response Splitting in this Scenario

I have been pentesting for a company. I found a CRLF Injection that could be done using %E5%98%8D%E5%98%8A instead of %0d%0a. So I'm using %E5%98%8D%E5%98%8A in redirection parameter for CR/LF. Here ...
2
votes
1answer
62 views

Deliberate Vulnerable Openstack images for penetration testing/training or research

I was just wondering if there are already deliberate vulnerable Openstack images for penetration testing/training or research. Something in line with OWASP's DVWA e.t.c....there quite a lot out there ...
2
votes
0answers
26 views

Is it a bad practice to not use a separate database server? [duplicate]

An isolated environment for just the application data sounds good, but does it have a significant security advantage compared to the everything-in-one-place model?
2
votes
1answer
56 views

Restore GPG key after exported to a smartcard

After exporting my private key, I moved my private key on a smart card using keytocard. This worked fine, and I could sign and use GnuPG as expected. Now I would like to go back to have the private ...
2
votes
1answer
108 views

Can an attacker make in-app-purchases of my products in their app?

My iOS app needs to store a pre-shared secret. It cannot embedded within the App Bundle itself because it could be extracted by statically analysing the bundle. Apple's In-App-Purchase system allows ...
2
votes
0answers
27 views

Continuous integration SaaS security considerations

How do CI SaaS products protect themselves from bad actors? When a CI server builds and tests arbitrary code, how can we be sure this code is not some sort of exploit? Are CI companies like Travis ...
2
votes
0answers
38 views

Where can I get a list of obsolete and end-of-life software?

As per title. My objective is to check a large number of Windows endpoints/hosts for existence of obsolete software. Can anyone let me know if there is a list somewhere or any software that can help ...
2
votes
1answer
74 views

Methods root can use to elevate itself to kernel mode

When most Linux users hear "root", they think of the maximum possible privilege on a computer. Some even think that root runs in ring 0. But in reality, root is just a regular user running in ring 3, ...
2
votes
3answers
134 views

Business process based risk assessment methodology for iso 27001:2013 [closed]

I am working on an isms implementation for iso 27001:2013. So far whatever risk assessment approaches i have used asset based in which methodology focuses on asset value evaluation, threats, ...
2
votes
0answers
57 views

How secure is PHP IMAP? [closed]

I'm working on a project for one of my customers. They want a web environment where the site searches for specific emails for specific users and makes the attachments of those emails accessible to ...
2
votes
2answers
61 views

Does having multiple 'memorable info' answers reduce secuity?

I use a website that on top of requiring a username and password also requires 'memorable information'. When signing up I provided multiple pieces of memorable info as answers to multiple questions (...
2
votes
0answers
30 views

The optimal settings of Winrtgen GIU

I'm working with Winrtgen GIU on windows, but I can't fix the right settings to create a rainbow table for a: password length=1-7 Charset=alpha numeric all space What are the ideal values to put in ...
2
votes
0answers
37 views

Out of band signature application for banking transactions

I work on a banking signature project. Signing transactions must be carried out on another application to respect the mechanism "Out Of Band". When the user makes a transaction, he must pass to a ...
2
votes
0answers
65 views

Snort Portscan Preprocessor Analysis

Remarks I really apologize if this content isn't matching the community, but I am not getting approved on snort-mailing lists and I don't know what can I do for the same, therefore I feel this can be ...
2
votes
0answers
105 views

Sniff wireless (Wi-Fi) trafic with Wireshark

I have a wireless card (AWUS036H) in monitor mode (with airmon-ng start wlan0) on my Debian machine. In Wireshark, in "capture options", all my interfaces are in promiscuous mode. The test network is ...
2
votes
1answer
48 views

Intercept pinned SSL connection with private key

Can I intercept https traffic that uses certificate pinning using fiddler if I have the private key of the cert? I am trying to intercept traffic between our mobile apps and API, and the mobile apps ...
2
votes
1answer
69 views

How to get around hard coding a PFX password

I've got an application that acts as a SSL server. I've got the pfx file and in code, I've had to hard code the password to use in the following way PKCS12_parse(p12, PFXPassword, &pkey, &...
2
votes
1answer
62 views

Is installation id secure enough to authenticate device's user against a Web Service API?

...or interactively asking for password / or having some certificate is inevitable? Context My Android app wants to do secure transactions via my Web Service API. However I do not want to bother my ...
2
votes
0answers
41 views

Openssl ciphers list sorting and removing

I was playing with a ciphers app to create example list of suites. Looking at the website (https://openssl.org/docs/manmaster/apps/ciphers.html) if I run one of the examples there: openssl ciphers -v ...
2
votes
0answers
84 views

Mitm Proxy using c# SslStream issues when doing directly from host file [closed]

Im trying to create a local windows MITM proxy with C# to deal with a now unsupported application from a company that no longer exists. The Proxy has to only service one HTTPS domain which is being ...
2
votes
0answers
85 views

Nginx forwarding undesired hosts to Django

I've been getting errors from Django on my webserver (behind Nginx/uWSGI) complaining that it's being accessed with a request where the Host is the IP address of the server. Nginx is using virtual ...
2
votes
1answer
66 views

Android security document comparable to Apple's security document?

Is there an Android security document comparable to Apple's Security Document (PDF)? Does such a comprehensive document not apply because Android is only the OS and Apple makes the hardware and the ...
2
votes
1answer
82 views

Is it possible to know imei number of other mobile using any sort of wireless technology?

Are there methods to grab imei numbers of mobiles irrespective of smart or ordinary using Bluetooth or similar wireless technologies. Case : other mobile may not have Bluetooth or possibly switched ...
2
votes
0answers
64 views

Are ZeroNet websites susceptible to 51% control attack?

I've been reading about ZeroNet and thought about putting a site together but have concerns that it may be vulnerable to the issue laid out in What can an attacker with 51% of hash power do?. From ...
2
votes
0answers
142 views

How to enable ECDHE in openjdk-1.8.0 in CentOS 6.7?

I have seen many posts that hinted ECDHE is available in the SunEC provider way back in openjdk-1.6.0. My environment: CentOS 6.7 with openjdk 1.8.0.71-1.b15.el6_7. No ECDHE. Made 2 changes in jre/...
2
votes
1answer
54 views

Will browsers trust an expired self sign certificate in the Trusted Root store

I recently discovered that if Windows AD LDS services are bound to a self signed certificate, that processes will continue to trust the cert even if it's expired. My guess is this is because the cert ...
2
votes
0answers
96 views

What are the differences between the Proxmark3 and the Chameleon Mini? [closed]

I want to play with RFID/NFC cards and I need a tool to read, write and emulate tags. I know the Proxmark 3 (http://www.proxmark.org/), but I also heard about the new Chameleon Mini (https://www....
2
votes
1answer
84 views

What is the benefit of using lastpass authenticator on android compared to other similar applications?

Lastpass recently (march 2016) released a new app called lastpass authenticator. Reading their blog post and the description of the app features, it looks like to me that the app does nothing more ...
2
votes
0answers
31 views

Hydra is not going further after 5 passwords found, why?

I have a wordlist which has about 45 million lines. Hydra can find the data which I want. But the problem is that when hydra finds 5 passwords, it is not looking further and stopping working. I am not ...
2
votes
1answer
45 views

Trusting HTMLUnit with Banking Details

I figured this was a good place to learn a little about trusting libraries such as HTMLUnit with sensitive information. I want to build a service that categorises my spending, kind of like my own ...
2
votes
0answers
91 views

Disk Decipher: iOS app with TrueCrypt and VeraCrypt functionality — Has there been any security review? Is it safe to use?

http://disk-decipher.hekkihek.nl/ I am having trouble finding information about source code, software license, and code review. Is there any way to know that once I decrypt a volume with this app it'...
2
votes
0answers
68 views

Creating a dynamic malware analysis environment

I don't know much about malware analysis so why this question here. I have analysed Short cut virus statistically and its impact on USB drives and wrote a code to repair its damage. My static ...
2
votes
4answers
412 views

With Nmap it is possible to scan according mac address?

I would like to know if it's possible to use Nmap in order to scan hosts according to their mac address. Or if it's not possible to do it directly, is there an option (i didn't find) to select only ...
2
votes
0answers
47 views

NIST SI-7 experience

On a recent project we have been asked to implement NIST SI-7 parts 1, 3 and 4. I have looked for a full software solution, but cannot find anything like that. Does anyone have any experience on this?...
2
votes
3answers
81 views

VPN Server in router

I am new to using and configuring VPNs. I was thinking of setting up my router as an OpenVPN server, but as I understand that is to connect form the outside to my network. However, I want a connection ...
2
votes
0answers
29 views

What are the security risks of using public address schemes for the DHCP of your VPN'd Users?

At the company I work for we recently purchased a network scanning tool to help with asset inventory and overall PC network management. My supervisor, while looking at the different IP address ranges ...
2
votes
0answers
61 views

Bluetooth LE / Bluetooth Smart supplementary security

So as we know there are significant issues with Bluetooth LE when it comes to security at least in the 4.0 and 4.1 specs. There are many solutions to this problem that can be undertaken i.e Enabling ...
2
votes
0answers
60 views

Rogue Containment on a wired network (mostly)

I work as a security analyst for a large company. The answer must provide remote support. We are currently looking to build a piece of software (integrating existing products with home grown ...
2
votes
0answers
86 views

Is it secure to store sensitive personal information in Evernote? [closed]

I was trying to build my opinion about how safe it to upload to and store sensitive personal information at Evernote. Almost everything I've read points out that, as EN doesn't encrypt the information,...
2
votes
1answer
66 views

php's password_hash with system wide salt [duplicate]

I'm thinking about using password_hash function for generating password hashes. I have read that own salts shouldn't be generated and instead use the default one that the function generates. Own salts ...
2
votes
0answers
34 views

OpenID Connect access token to access protected API

In our setup we need both reliable user authentication and scope-based authorization. Consider the following scenario: a user logs in into our client (portal) using OpenID Connect, and our client ...
2
votes
0answers
34 views

PMK/s and Keys/s: Which is faster?

I'm practicing on Kali Linux and was struck with the fact that almost all tutorials on the internet specified speed of aircrack-ng in Keys per second and the speed of pyrite as PMKs per second. So, ...
2
votes
0answers
36 views

Breaking linear congruential generator

(I am not sure this questions fits this board, if it doesn't please redirect me accordingly) (I can only post two links, so bear with me :p) (can't find any decent tags for this... :( ) As you can ...
2
votes
1answer
101 views

Cisco Registered Envelope Service (CRES), big security flaw?

While researching so called HIPAA compliant email providers, I came across Cisco Registered Envelope Service(CRES), which claims to be HIPAA compliant. According to this instruction, upon receiving ...
2
votes
0answers
55 views

ISO27001 compliance and perceived Risks using Microsoft SQL Server Azure 2016 [closed]

Introduction My company is currently undergoing ISO27001 compliance. I originally thought that this is a purely technical issue, with the merits of different solutions being weighed up on purely ...
2
votes
1answer
55 views

Getting error in Hydra

I'm trying to test someones website for them and I'm using hydra in cygwin on Windows. When I enter: hydra -L myusers.txt -P mypass.txt website.net http-get-form \ "/wp-login.php:user_login=^USER^&...

15 30 50 per page