1
vote
0answers
83 views

Suppressing broadcast traffic in honeyd logs?

I'm trying to set up a honeyd system. How can I suppress the broadcast traffic seen by the outside interface, preferably without needing to resort to syslog filters? User subnet 192.168.20.0/24, ...
1
vote
0answers
44 views

How to manage security for multiple PC and VM?

I have a firewall VM which creates I have used to setup subnet for different purposes. For example: (fake ips, of course) 1.1.2.1/24 DMZ 1.1.3.1/24 Internal 1.1.5.1/24 security/logging I use ...
1
vote
2answers
708 views

Why are Windows computers open to network file access by default?

I'm on a work network, and I had some files I wanted to give to a colleague. I set up a shared folder and directed him to my computer name to open the shared folder. Then I remembered from a long time ...
1
vote
1answer
202 views

WDF-based vs WDM-based drivers

What pros/cons of WDF driver model vs. WDM for rootkits and antivirus drivers. From what I've seen and from personal experience (though I'm still a newbie) WDM is good in that you have to do most of ...
1
vote
0answers
116 views

Need help to Webservice in Axis2 with https in java

I have written my webservice with https. but as per requirement i should provide authentication. so thought of going with https ssl. could any one help me with steps like moving http to https and ssl ...
1
vote
0answers
133 views

Login details security using salt n hash and a login role in postgresql

I am coding up the security for a website in express.js and postgresql db. Now I have been reading about salting and hashing and I have the code set up with pdkdf2 using the crypto module, but my ...
1
vote
0answers
207 views

Problem with qgankgyefx..vbe virus

I am not sure if I am in right forum. But i am having problem with this virus. On affected computer, If we use a USB drive, all the file become hidden. I am using HFV.exe for retrieve all data in ...
1
vote
0answers
370 views

Possible exploits for PHPword/ PHPexcel

I'm trying to identify what exploits to guard against when anonymous users generate reports with PHPword and PHPexcel (or similar libraries). Specifically, I'm worried about textarea inputs where ...
1
vote
0answers
177 views

Security considerations for SQL database with employee data in blob field

With elevated SQL permissions, I am able to export a blob and retrieve a pdf with employee data (SSN) from a SQL Server database. This database is a backend to a third party web app we use internally ...
1
vote
0answers
161 views

Windows EFS on Amazon - how secure?

We evaluate using Windows EFS on Amazon EBS. There is a report about Windows flaw that allows you to copy data from encrypted volume: ...
1
vote
0answers
44 views

Writing Security Functionality Requirements [closed]

Is there any Guideline Doc. or Tutorials for writing Security Functionality Requirement (Common Criteria)for a product?
1
vote
0answers
408 views

Nessus scanner and Red Hat backport security updates

I have asked this question: False positive Apache version in scanner results on Centos I need additional clarification: Do you know if it is possible to configure Nessus to adopt Red Hat backport ...
1
vote
1answer
1k views

Help to understand secure connections and encryption using both private/public key in RSA?

I just started teaching myself cryptography, I am reading this http://www.garykessler.net/library/crypto.html to understand the basics. I am confused by Sections 3.4 and 5.3. Section 3.4 details how ...
1
vote
0answers
60 views

Needed: Reference data on the rate of adoption of secure email protocols [closed]

I am working on a security presentation in which I need to show that the incidence of unencrypted email protocols (e.g. POP, IMAP without STARTTLS) over the past 10 years has decreased and the amount ...
1
vote
1answer
125 views

How to Minimize Apache Loadable Modules (serving MediaWiki)

According to Guide to the Secure Configuration of Red Hat Enterprise Linux 6, there is this policy: "In certain scenarios, it is beneficial to remove certain httpd modules to limit the functionality ...
1
vote
0answers
59 views

What are the steps to securing encryption keys/databases on an unsecured DAAS provider?

Most Desktop As A Service providers store their virtual hard drives and the VMs RAM in a way that allows them to access their contents. Choosing a provider who offers a 'no-knowledge of server' ...
1
vote
0answers
131 views

Are VPNs using shared secret susceptible to trivial MITM attacks

I'm looking at a few VPN providers and many seem to offer L2TP VPN but they seem to share their shared secrets publicly on their website, for example : Goldenfrog ...
1
vote
1answer
195 views

One or two machines in a network have been compromised. How to proceed [duplicate]

Edit This post has been marked as duplicate. While I have read the referenced thread I see some differences in the descibed situation. My scenario below is a non-server home network with both machines ...
1
vote
0answers
29 views

How is password character validation in 3D secure is implemented? [duplicate]

We have a website which stores hashed passwords in the database. During logins we hash the password entered by user and compare two hashes. This is quite standard so far. Our client which is in ...
1
vote
0answers
392 views

Bypass Nmap Scans Being Blocked [closed]

A friend has set up a VM for me to play with, I am currently stuck on a little problem: On this network he set up, there are 6 machines and a router, 5 servers (plus the router) show up on a typical ...
1
vote
0answers
22 views

Is Webgoat's HTTP Splitting Attack corrupt? [duplicate]

This link describes my problem better: https://code.google.com/p/webgoat/issues/detail?id=42 I was doing the HTTP Splitting exercise in WebGoat. In this exercise, when you send a malformed URL, you ...
1
vote
0answers
256 views

Suggestions on how to capture network connections/traffic for determining browser/SSL versions?

I've started thinking about how to approach analyzing my network traffic for information relating to SSL and browser usage for my web server farm. I also suspect there are some shadow (legacy, ...
1
vote
0answers
218 views

forcing a traffic redirect?

I am trying to get my machines to be force through a MiTM and the MiTM to redirect them to a server of my choice (which happens to be the MiTM on port 17002) I am running ip tables: sudo iptables -t ...
1
vote
0answers
125 views

Putty Event Log

Can anyone explain me the Step by step process of Key Exchange that takes place while accessing Linux machine using Putty ? I found the Event Log of Putty but the Various Key Exchange didn't make very ...
1
vote
0answers
111 views

How do time-limited keys work for e.g. DCP files?

According to http://en.wikipedia.org/wiki/Digital_cinema under How Digital Cinema Works it states that the decryption keys are time-limited and expire after the end of the booked time. From a high ...
1
vote
0answers
70 views

Pf rules configuration

Do these rules appear to be an adequate start? _interface="en1" _linode="66.228.57.75" #lish-atlanta.linode.com _ssh=" { 74.207.224.182 66.175.210.225 } " set block-policy drop set skip on lo0 ...
1
vote
0answers
651 views

Securing REST API for use by mobile apps

I developed a REST API whose clients are mobile apps/websites under my control (API is not open to anyone). Users log into my mobile app/website with their Facebook or g+ login. I'd like to secure ...
1
vote
0answers
172 views

Implementation of different BCrypt versions

I'm fairly new to encryption, and I am investigating the different kind of encryptions. I want to encrypt passwords in a secure way. I discussed this with my colleague, and he said that BCrypt is the ...
1
vote
1answer
57 views

Protocols that are highly resistant to code injection attacks ? [closed]

After reading about language based security, it seems protocols that are defined using context-free or regular grammars are highly resistant to code injection attacks. Are there any good security ...
1
vote
0answers
90 views

A crash/mini dump concern [closed]

I just experienced a crash on my laptop. I was surfing the internet and all of a sudden everything crashed and a small blue screen (centred on the screen) popped up and was counting down. I didn't ...
1
vote
0answers
141 views

Is this good management of the Encryption Key

The site is to be hosted on a shared internet server, to store non-commercial data and it will be clearly labelled as not for sensitive information. I wish to offer a credible solution to the risks ...
1
vote
0answers
24 views

Get Service_key in the course of kerberos authentication [closed]

Built environment 1) Exchange server: The operator system of Exchange server is Windows Server2008R2, We configured it as Active Directory (primary domain controller) used for client authentication ...
1
vote
0answers
1k views

When EAPOL packets are exchanged?

I have put wireshark to capture interface in monitor mode. I have also enable decryption and set keys in Wireshark preferences, but protocol for all packets is 802.11 which I think it means that ...
1
vote
0answers
56 views

How to get Service_key and the corresponding function call interface from the Samba source TGS_REP part

1, My existing configuration environment are as follows: (1), Server_side, Redhat5.5 Enterprise with samba4.0.0 installed, Ip Address: 5.5.5.149; domain name: EXAMPLE.COM; (2), Client_side: windows ...
1
vote
0answers
60 views

Any Suggestion Exchanging shared key between process via port in untrusted machine (infected my malware)?

I am trying to get shared key between Firefox extension and a java program running in same machine. I am communicating both application via socket. My assumption is that malware is running in ...
1
vote
0answers
268 views

Throttling DropBox behind a firewall

Our office network bandwidth gets choked when an employee copies a large file into her DropBox, since it gets downloaded on several machines (of other employees). LAN Sync is an option, but needs to ...
1
vote
0answers
90 views

Is what flexi_auth does with its use of its $this->auth object good practice?

I am looking at the authentication library Flexi_auth for CodeIgniter. To use the library you have to create a object one time in the controller before the lib is used Like this: `$this->auth ...
1
vote
1answer
589 views

Forensic analysis of Android sqlite db's

In an extraction of com.facebook.katana/Database db files (fb.db and webview.db), I get: [fb.db] If I use an hexadecimal editor to open those files, even when there is no sqlite record named c_user, ...
1
vote
0answers
115 views

What are some good design practices for cross-platform certificate storage?

Question from the Bouncy Castle development list: At present we use the Windows certificate store as: var store = new X509Store(StoreName.My, StoreLocation.LocalMachine); ...
1
vote
1answer
590 views

Google's Mobile Authentication for REST APIs

So I'm trying to create and secure a mobile REST API on an existing server that runs our web app. We're not going to open the API to the public and we will be writing the client app using ...
1
vote
0answers
367 views

Implementing OAuth flow in JavaScript

I am making a custom auth flow for the application. It is inspired by OAuth 2.0. Dev sends user to an auth page on my domain, passing callback_url and api_id. I redirect user to callback_url, passing ...
1
vote
1answer
594 views

Virtual Box security [duplicate]

I am using virtual box to run a secure machine. I am not fully confident in the hosts security. My assumptions are that of course the host can read the VM when the VM is running and that if the ...
1
vote
0answers
80 views

Emails about Referrer Bombing

I have received a couple of emails recently from site owners saying that they are finding referrer links in their stats with their URL path but my domain. So if a website has a page ...
1
vote
0answers
818 views

Tor alternatives (change IP address often) [closed]

Are there any services that like Tor let you have many IP addresses and change them quite often? PS. The problem with Tor is that they list publicly their exit nodes, so its very simple to detect that ...
1
vote
0answers
185 views

Encrypted chat using any smartphone. Is it legal? [closed]

Here's my case. We have written app for Android smartphones which allows users to exchange secured cipher messages. For key-exchange we're using elliptic curve 112 bits, for messaging we're using DES ...
1
vote
0answers
72 views

DLL preloading attack - are IAT libraries affected too?

I'm about to distribute a dll library (there's also a linux version) to my users but I'm afraid of dll preloading attacks (i.e. someone substituting its malicious dll to get called by mine and gain ...
1
vote
0answers
41 views

DUKPT - more specific materials

I'm working on a simple project that implements DUKPT. I've tried searching the web for more specific information than on wikipedia and it seems that the algorithms are only covered in ANSI X9.24 part ...
1
vote
0answers
100 views

Untrusted central server and self-hosted/local client

I am wanting to develop a web service (classic client/server) where the server is not trusted, so is kept (cryptographically) ignorant about the actual content/messages. Obviously, if you don't trust ...
1
vote
1answer
265 views

Are there any potential security risks in connecting to a Murmur (Mumble) server?

I've created a free server on a website, but I'm a bit cautious on connecting to it. Are there any potential security risks in connecting to a Murmur (Mumble) server?
1
vote
0answers
52 views

What's The Easiest Way To Maintain Remote Users Access to a Webapp

Here is a real world case: A chain of high schools (several hundreds) has many websites (~ 3x number of Schools) that are content driven by users (the students). Every school maintains about 2-4 ...

15 30 50 per page