2
votes
1answer
81 views

Remote network security option

I'm a bit confused with some different network security techniques. Say we want a secure communication with a particular mail server in a remote company network. Reading and sending mails should be ...
2
votes
1answer
3k views

CentOS - Local privilege escalation - CVE-2012-0056

I have a server with these properties : cat /etc/lsb-release LSB_VERSION=base-4.0-amd64:base-4.0-noarch:core-4.0-amd64:core-4.0-noarch:graphics-4.0-amd64:graphics-4.0-noarch:printing-4.0-amd64:...
2
votes
2answers
850 views

Force clients to use proxy [closed]

Here's my network configuration: The proxy server is running Ubuntu with Squid on port 3128 and DansGuardian on port 8080. I'd like to force all clients to use the proxy server - specifically, ...
2
votes
1answer
2k views

SSH says Authentication tried for XX with correct key but not from a permitted host

I am using and authorized_hosts file to authorise certain keys. One of those is restricted with the prefix from="1.2.3.4", the others are valid from anywhere. When accessing from a machine that has ...
2
votes
2answers
438 views

Does glibc2 version of the crypt function still use DES for alternative hashing methods?

I'm trying to understand how typical Linux distributions generate the password field for entries in /etc/shadow. I can't figure out what encryption algorithm is being used to produce the encrypted ...
2
votes
1answer
7k views

Snort/IDS detect and alert on possible DoS/DDoS attack?

As per the title, I'm attempting to configure Snort to detect and alert on a incoming Denial of Service attack. Looking at the rulesets, which are primarily signature based rules, I can't see a ...
2
votes
1answer
176 views

Send credentials by sms [duplicate]

If a user forgets his login credentials for a web site, is it secure enough to send users credentials by sms?
2
votes
3answers
739 views

How good is validating source with request.referer than checksum?

I have 2 portals(both are under my control & domain names are different) In 1st portal, there is a link on click of which User can directly get logged into 2nd portal. Link which will be hit in ...
2
votes
1answer
217 views

Will “upgrading” www-data user open up known security issues?

On a isolated local test/dev server I have elevated the nature of the www-data user to enable a smooth workflow for using Dropbox in a web/webapp development pipeline. It has worked quite smoothly in ...
2
votes
2answers
398 views

Barracuda antispam access to active directory in dmz : opening port or not?

I have a Barracuda Antispam unit and look to use recipient validation with active directory to stop sending NDRs (non-delivery reports) when we are being spammed. What I see on the web is people ...
2
votes
1answer
407 views

TrueCrypt External Multimedia Hard Drive

I have an external multimedia hard drive (1.36TB). I made 4 partitions of 350GB each. Then I shredded the free disc space of all the partitions. Now I want to put Truecrypt on the disk. I can't ...
2
votes
1answer
312 views

SSH Protocol classification version exchange messages

I am trying to classify network protocols over network traffic . Now my task is SSH protocol. I read the RFC and know SSH starts with protocol exchange message from both client and server . Format ...
2
votes
1answer
310 views

User Authentication API

I'm developing a web API for a user database that will be used to verify a given username / password combination is valid. I'm just looking for comments / criticism on the following method that I'm ...
2
votes
1answer
60 views

RECon 2012 and before

Anyone knows where can I get materials/presentations/trainings from RECon 2012 and before? Is there any place where I could buy it or download it, if it's free - I doubt it, but who knows?
2
votes
1answer
411 views

Identifying strange Perl CGI script

Recently, while looking at some Perl CGI files, I came across this. I am not familiar enough with Perl to know exactly what it means, but I did attempt to base64 decode the string to no effect. Can ...
2
votes
1answer
193 views

Offline registry analysis - Hardware info?

Is it possible to get information about the hardware from an offline version of HKLM/SOFTWARE hive? There is OEMInformation in there, which gives things like machine manufacturer, but does the machine ...
2
votes
1answer
2k views

Is it possible for someone to send a spoofed text message via iMessage to my iPhone4?

After the reports of the SMS spoofing security issue Apple released a statement claiming that the iMessage system was 'secure' and should be used to prevent text spoofing. I have received several ...
2
votes
1answer
201 views

Picking exponents for Diffie-Hellman

I'm taking a class on Cryptography and the professor mentioned that given mod N and base g with a certain order, you should pick powers m and n such that they create a certain property with the order ...
2
votes
1answer
1k views

COMMUNITY SIP TCP/IP message flooding directed to SIP proxy

I have installed Snort IDS and most alarm is: "COMMUNITY SIP TCP/IP message flooding directed to SIP proxy" And i use home DSL Internet connection , should i be worried about this alarm ? I have ...
2
votes
3answers
759 views

rancid like tool for config files [closed]

I need to be able to watch directories on our servers, and track changes to files as part of our audit compliance. I have adjusted auditd to watch the directories, and send all writes and attribute ...
2
votes
1answer
91 views

VPN using SmartPhone Location

When you VPN using your smartphone as a hotspot, can the VPN tell your location like it can when you VPN over a wireless connection hotspot?
2
votes
1answer
805 views

Detecting Virtualization from web browser

is that possible active adversaries who injecting malicious iframes (root kits), without Flash, Java or any other plugin detect that we using virtualization by javascript or timing differentials and ...
2
votes
1answer
2k views

Changing locks on server cabinet [closed]

I work in higher education, and we have a server room with various server cabinets, mostly APC and Belkin. The room is secured via card swipe access, however each server rack has the same lock, which ...
2
votes
1answer
972 views

snort ignores packets with matching src/dest IP address

This is my rule: alert udp 192.168.1.1 4000 -> 192.168.1.1 7000 (msg:"This rule doesn't work"; sid:1234567;) I am running snort against a precaptured packet file where there are UDP packets that ...
2
votes
1answer
158 views

Best practices for setting up client connections to a server with app credentials

The question title is... ugly to say the least. Here's an overview of what I've got: I work on an online tool. Data is sent to it, it processes the data (an intensive task) and sends results back. ...
2
votes
1answer
140 views

Where can I find articles about identity disclosure attack?

Where can I find more details about identity disclosure attack and it's prevention? If the adversary tries to steal the identity of an individual like mobile patterns and start appears in various ...
2
votes
1answer
615 views

How to do security configuration for ibm http server?

We are using IBM HTTP Server Version 7.0 Need help related to Cross Site Scripting Prevention in IBM http server. Cross Site Scripting Prevention in Sun Java System Web Server 7.0 mentioned in ...
2
votes
2answers
1k views

New Undetected Virus?

I am having difficulty with my laptop right now. All of a sudden some partitions would contain a link to the previous contents of that partition. For example: Before: Partition T:\ \...
2
votes
2answers
1k views

What certification would be considered equivalent to the U.S.-EU Safe Harbor Framework?

The Safe Harbor website says the following: The European Commission’s Directive on Data Protection went into effect in October of 1998, and would prohibit the transfer of personal data to non-...
2
votes
2answers
1k views

how to specify only the named curve in CSR request?

I am trying to send a CSR to a server and it is successfully signed when generated from the command line but fails with a (0 length ASN.1) error when generated programatically. I suspect, perhaps, its ...
2
votes
4answers
411 views

Open an e-mail account from only one particular system?

Is there a way to configure e-mail so that it can only be opened from one particular system? Or from multiple systems having some sort of unique key or particular static IP?
2
votes
1answer
869 views

Newline XSS vulnerability

So I was experimenting with XSS using new line (%0A) character. So I got to the usual vector: '%0Aalert(/xss/)// and one thing came to my mind. What if you can't insert a quote? A new line will break ...
2
votes
1answer
132 views

Return AWS signature over HTTP

I am performing multipart upload to S3 straight from the browser, i.e. bypassing my back-end. My JS code sends a hand-shake request to S3 (a POST), then uploads the file in chunks of 5MB (a PUT for ...
2
votes
1answer
326 views

Can we reverse engineer binlog with row format to make MySQL AES_ENCRYPT visible?

Suppose if I am using the mysql database based encryption using AES_ENCRYPT function & insert records, is it possible to decode the row formatted binlogs generated by MySQL to obtain the actual ...
2
votes
1answer
548 views

Does SQL Server CE 4 decrypt data securely?

I am going to store data in an encrypted SQL Server CE 4 database, where the database is doing the encryption. (Note that SQL CE is the embedded version, not the fully installed server.) When the ...
2
votes
1answer
335 views

Normalizing Windows Advanced Firewall rules

How can I best normalize our Windows Advanced Firewall rules while implementing network segmentation? I want them to be as clear and concise as possible for audit purposes. What few examples I've seen ...
2
votes
1answer
230 views

Can Jasper files be used as shells to attack java web apps?

JasperReports is an open source Java reporting tool that can write to a variety of targets, such as: screen, a printer, into PDF, HTML, Microsoft Excel, RTF, ODT, Comma-separated values or XML files. ...
2
votes
1answer
845 views

Black box testing javascript MVC web applications

I want to test a web application that has been built using the backbone.js framework. Currently I have used a few tools for crawling and testing without any luck. When crawling the website they can ...
2
votes
1answer
2k views

sha-512 vs sha-3? [duplicate]

Does the new SHA-3 Keccak hashing algorithm offer any benefits from SHA-512? "Even worse, none of the SHA-3 candidates is significantly better. When SHA-3 is announced, I'm going to recommend that, ...
2
votes
1answer
1k views

Loki How to crack the password hash OSPF?

I have created for myself a lab of routers in GNS3 . Routing protocol between routers is OSPF. Now,by Loki penetration testing, I found that routers are the feature authentication. Using wireshark, I ...
2
votes
1answer
6k views

Android apk malware

I was browsing some website last night and that website suddenly sent me an apk called 'browser_update_install.apk', DrWeb light detect it and was able to delete it. My question here is about the apk ...
2
votes
2answers
153 views

Which hard disk encryptions schemes are tied to the original hardware?

When using a laptop, an encrypted HD/SSD can be an important security measure. However, laptops are prone to accidents (fluid spills, dropping on the floor, etc) that may mandate some or all of the ...
2
votes
1answer
100 views

Quick Security Mitigations to Impending attacks

Suppose you are the sysadmin, and you know of an impending attack that just started or about to start soon. You can either wait it out, or try a few tricks and quick mitigation to fend off attackers ...
2
votes
1answer
499 views

Good tools for reverse engineering colaboratively? [closed]

Does anybody know a good set of tools for doing reverse engineering of binaries in a collaborative way?. My original idea is to disassemble a binary, allowing to add information about functions, ...
2
votes
1answer
92 views

Privacy laws' right-to-amend (and right-to-delete) requests and archived data/backups

Under HIPAA and some privacy laws (in US, EU and other countries), the user has the right to amend (under some laws even delete) his/her data. What is the right way to handle a request to amend/delete ...
2
votes
1answer
354 views

Accessing encrypted data with multiple users

I'm building a web based, LDAP authenticated password manager for internal use. We don't want to store the passwords in plain-text in the database, and we want multiple users to be able to access the ...
2
votes
1answer
189 views

Does OAuth 2.0 provide a way to reliably regenerate a key only when a session is active?

I want to encrypt sensitive data on my app server (facebook app) in such a way that my app may only decrypt this data when the user is in an active session. I need to be able to reliably derive/...
2
votes
3answers
600 views

Boot or reboot to clean state on Windows each time?

I use virtual box to securely surf the web, but it's easy to get lazy and use the same image more than once. Currently, I have a golden Win 7 image that I built and loaded my required software. I ...
2
votes
1answer
1k views

Reverse shell attack and proxy interceptions.. . is there anything worng?

First I've got a few questions about Reverse shell. REVERSE SHELL I'm trying to understand the Reverse shell technique. My reasoning is as follows (I'd be glad if you could point out any mistake ...
2
votes
1answer
267 views

unix malicious scripts/ksh execution

I'm wondering whether my architecture poses a security risk. Details: The whole website is not ROOT owned but still, the APACHE user used instead has some pretty advanced permissions. I have a ...

15 30 50 per page