3
votes
1answer
651 views

Filtering network access on a user/group/process basis

I am interested in peoples thoughts on what the best approach would be to controlling access to network interfaces at a user/group/process level for a Linux based host. The scenario I have in mind is ...
5
votes
4answers
3k views

Obtaining the IP address of a virtual machine to use Metasploit

I am beginning to learn Metasploit and, to play safe, am practicing it out on a virtual machine. The target machine, which is a virtual machine, is under NATing. How do I access it/ connect to it- ...
1
vote
1answer
267 views

Detect Axcrypt files on hard drive

I have lost some Axcrypt files on my hard drive, as I have changed the extension. Is there a way to detect those files (via header, size, etc.) If not, are there some tools to detect discordance ...
1
vote
1answer
150 views

Is there a compatibility issue between IPv6 and security testing tools?

Now that IPv6 is slowly coming into the picture, will there be a compatibility issue with using security testing tools, e.g.,: Network vulnerability scanning tools Web Applicaiton vulnerability ...
2
votes
3answers
8k views

Config Server Firewall: What Outgoing ports need to be open for wget and apt-get install?

I am just configuring CSF and I have to specify my outbound ports here. I am trying to close as many as possible leaving only what I need open, however what do I need to leave open for wget? # Allow ...
6
votes
4answers
30k views

Testing Snort IDS installation

What is the easiest way to test Snort IDS after installing? Would using and writing a rule that captures all of the traffic work? alert ip any any -> any any ( msg: "ICMP packet detected!"; sid: ...
3
votes
3answers
1k views

Published data sets for IDS/IPS evaluation

I am looking for data sets published by researchers or freelancers which can be used for the purpose of IDS/IPS testing and evaluations. The data sets may be for portscans, DoS attacks, Remote to ...
12
votes
6answers
3k views

How do I get started with security? (beginner) [closed]

I have been working in web development for a fair amount of time. I am looking at developing in either Python (Django etc.) or PHP. I am new to security. Where do I begin looking? What are basic ...
1
vote
1answer
184 views

What does Bluffdale mean for privacy?

I posted a question related to tracing webserver attacks over here and the responses got me google-ing. My understanding has always been that privacy is dead and that essentially there's always ...
4
votes
3answers
198 views

Is using encryption the only viable option to thwart password sniffing?

I'm using HTTPS Everywhere on my browser to chose SSL versions of websites when available, but many sites don't offer a secure version. Is SSL the only viable option to thwart password/clear text ...
1
vote
2answers
100 views

Preventing a socially-engineered transaction

Can you explain what this blog means when it says: Something to think about when it comes to transaction signatures – demonstrating the need to keep the entire process off the PC (in this case) ...
2
votes
3answers
647 views

Is there such thing as a password enforced write protected flash drive?

We would like to provide a flash drive to a client, that they can boot to, which includes a read-only operating system of our own customization, probably Linux. Every boot, it starts from clean slate. ...
1
vote
1answer
532 views

Using Tokens to Keep Users Logged In

I'm a PHP web developer who has been reading up on security recently and consequently this question entered my mind: How to properly and securely authenticate already-logged in users with a token? ...
33
votes
2answers
15k views

Are prepared statements 100% safe against SQL injection?

Are prepared statements actually 100% safe against SQL injection, assuming all user-provided parameters are passed as query bound parameters? Whenever I see people using the old mysql_ functions on ...
3
votes
1answer
269 views

Multibyte Character Exploits JSP/PostgreSQL

I am trying to secure a web application, written in Java/JSP and running on PostgreSQL, against SQL injection. I ran into this very interesting answer, which refers to PHP and MySQL. Is there any ...
2
votes
2answers
1k views

'SSL Session Resumption using Cached Session IDs'

Is supporting 'SSL Session Resumption using Cached Session IDs' by SSL Servers secure ? Is Session Hijacking possible in any way if this feature used ?
2
votes
1answer
323 views

How confident is MIME blacklisting on a proxy server?

We are blacklisting a number of MIME types on our proxy server so users can't download certain file types, for example, executables. Could it be possible that somehow, a malicious server can trick a ...
-1
votes
1answer
177 views

About important hacks in history [closed]

I would like to know how important hacks happened, because I can figure out how they hacked a website but I can't figure out how did they hacked into NASA International Space Station source code. Or ...
3
votes
2answers
120 views

Vertical information portal security with a customized web browser

I am creating a SaaS that will be delivered through a Vertical Information Portal (VIP). In my research I have found that by developing a custom lean web browser and installing it on the clients ...
1
vote
2answers
642 views

Security issues with an append-only log in UNIX

I'm going over past exam papers for a security module I'm taking at university and there is a question which I can't give a great answer for. As a security manager in a bank you are asked to ...
3
votes
4answers
791 views

Automating Metasploit attacks, is it possible to generate all (most) modules?

I work on creating signatures for all metasploit modules. I need to stimulate pretty much all the attacks (exploits) in metasploit without actually targeting a real victim (I don't think autopwn can ...
2
votes
1answer
233 views

What's the benefit of using a specific implementation framework vs using the generic steps presented in most developed security frameworks?

Background Information: This post is for some research I’m working on for a course I’m taking at the University of Advancing Technology as a Network Security student. I’m researching some ...
2
votes
4answers
472 views

Securing private IP space

As we all know, routers that you buy from the store come preset to hand out IP addresses using DHCP, generally on one of three networks: 10.0.1.1/24, 172.16.0.1/24, and 192.168.1.1/24. I personally ...
1
vote
2answers
553 views

How can I create a service that automatically logs onto a third-party service without storing credentials in plain text?

I know that storing log-in credentials in plain text is one of the cardinal no-nos of security, but I'm working on something where I can't think of any other solution. My service connects to a user's ...
2
votes
2answers
558 views

I've just purchased a VPS to use for developing and managing my clients hosting packages. What necessary steps do I have to take?

The VPS is running CentOS and I have full access. I only looked around using the cPanel installation and already disabled anonymous FTP access. What other security risks are there with a default VPS ...
6
votes
4answers
447 views

Are there a standard method(s) for me to give someone else read-only access to my data?

Are there a standard method(s) for me to give someone else read-only access to my data? There are several situations where I may want to give a few people read-only access to some data, but I would ...
3
votes
1answer
391 views

For what malicious activity can one use a computer with a high-end GPU?

I'm currently researching what malicious activities can one do with a computer containing a high-end GPU. So far the only uses I found were Bitcoin mining and password cracking. Are there any other ...
1
vote
2answers
6k views

How to connect sensors such as Snort to AlienVault SIEM?

I want to connect some sensors such as Snort and OSSEC to AlienVault SIEM. How can i do that?! Is it possible to send logs via syslog?
1
vote
1answer
612 views

Best Practices for Storing Digital Certificate

I'm building an application where certain sensitive files need to be digitally signed before being stored in the file system using ASN.1 encoding, so they can be verified against a digital certificate ...
12
votes
2answers
4k views

Using iframes to sandbox untrusted code

I'm trying to create an extensible platform, where my site will provide a model and some views (both client-side, in the browser) and third party sites may add their own views as well. The goal here ...
1
vote
1answer
178 views

WEB long basic authorization string/Buffer Over Flow

I have a external user getting a weird error in the middle of using my website. The user authenticates, post a search for information, and then with the address of the search results page they get a ...
2
votes
2answers
1k views

How to use 'key material' so that multiple people can access protected files?

I'm not sure if this is the right SE to ask this question, but it seems more I have a database of files that needs to be encrypted such that multiple people with different passwords/logins to this ...
6
votes
2answers
1k views

How does IP tracking work?

Excuse the naive question (I'm more of a dev than a web-sec person) In the past I've had webservers hacked and usually i've traced it to some random machines which seem to have been compromised (i ...
2
votes
2answers
300 views

Are GUID visible when compiling a .NET project?

I know if a person has a GUID from a machine that person can figure out if other guid belongs to that machine. In a .NET project (csproj and the visual studions solution file) GUIDs are generated. If ...
1
vote
1answer
137 views

DoS and Serialization

I got the following message from Fortify static code analyser. Incorrect serialization and de-serialization can lead to unpredictable behavior and cause denial of service attacks. Can anyone ...
1
vote
2answers
1k views

Vulnerability scanner tools to use with Snort

We plan to add Snort with the firewall for our network to have improved security. The purpose, apart from protection from malicious traffic, is to customize Snort to detect and block specific traffic ...
3
votes
1answer
134 views

Spurious SSL Certificates when accessing sites through enterprise network

I've noticed recently when I log on to sites like Hotmail that IE has been telling me there is something wrong with my SSL certs. When I examine the certs, the Issuer appears as "Blue Coat" from ...
6
votes
4answers
591 views

Is there any chance PHP developers themselves implement backdoors in PHP core?

This is not a concern that I personally have,no! In my job environment I've heard from programmers and non programmers that PHP developers always put secret backdoors in PHP that no one has access to ...
2
votes
3answers
418 views

sanitizing likes/unlikes in application?

I've got a function in my app where users can click on a "thumbs up" image and a like is recorded in the database; all that's recorded is the user's ID and the ID of the post that the user liked. I ...
10
votes
3answers
1k views

HMAC Based Request Signing - Storing the Salt

I'm working on a (non high security) project that currently isn't live but might go live at some point. We have a REST API (implemented using Restlet and Neo4j) running on a server and an Android ...
7
votes
0answers
72 views

What do studies show are best practices for password expiration policies? [duplicate]

Possible Duplicate: How does changing your password every 90 days increase security? What are best practices for password expiration policies? There are some questions that already address ...
8
votes
1answer
809 views

Is there repetition in the Solaris 11 hash routine? Can I add some?

Solaris 11 now uses SHA-256, so we can have longer than 8 character passwords now, by default. That is nice. I'll just make it clear that this password is never used as a line of defence. Only a ...
259
votes
22answers
292k views

I found that the company I work for is putting a backdoor into mobile phones

I have found out recently that the remote assistant software that we put in a smartphone we sell can be activated by us without user approval. We are not using this option, and it is probably there ...
8
votes
5answers
11k views

How to trace a DDOS attack on a dedicated server and block it?

I have a dedicated server and I'm hosting a game, and the web page (using Apache) for account registering. The server is being ddosed since 8 months ago till today. I've tried to talk with the server ...
1
vote
1answer
413 views

DNS query through squid? [closed]

My IDS picked up our squid proxy server doing a dynamic DNS request. I wasn't aware squid passed DNS requests from the client to the internal DNS server. Is this possible? Snort Alert: ET POLICY ...
1
vote
1answer
136 views

Is there a router that acts as a VPN to get into the network but also sends traffic out through a VPN?

I have several servers that I want to lock down so they're only assessable from inside the network so I need a router that allows me to VPN in. On top of that I want certain ports(22,8022) from my ...
1
vote
2answers
406 views

Does vulnerability exist when using XHR with GET method and custom anti-CSRF HTTP header?

Imagine button after clicking which browser sends XHR http request with GET method. Characteristics: after executing request sensitive action is performed sensitive information is sent in GET ...
7
votes
1answer
3k views

Does NIST really recommend PBKDF2 for password hashing?

We hesitated between BCrypt and PBKDF2 for password hashing. In many forums and blogs people say something like "In their Special Publication SP 800-132 NIST basically recommends using PBKDF2 for ...
3
votes
5answers
3k views

What's a free recommended anti-spyware program for Windows? [closed]

Its been years since I installed an anti-spyware program. Keyloggers and other nasties might have gotten installed and so I'm looking for a program to flush them out. I used to use Spybot-S&D, but ...
2
votes
2answers
3k views

How to check an Android Application for SQL Injection or XSS bugs?

I was just wondering how could i check my client's Android application for SQL Injection or other similar kind of bugs. I mean if its an application, where should i write the queries. If through ...

15 30 50 per page