-2
votes
2answers
252 views

Changing User Account Type - User to Guest - File Deleted [closed]

One of our staff PC has a problem, the scenarios: Specs: (Alias Names) Company Name: Contoso Staff PC under Domain Alpha PC Name: Contoso1-PC Local Users are: administrators and john User profiles: ...
-2
votes
2answers
149 views

Understanding a key establishment protocol

I'm studying a one-pass key establishment protocol. Let be A client and B the Server. A sends to B: E_w(t,b,k) where t is a timestamp requested for freshness, k is the ephemeral key that will be ...
-2
votes
1answer
1k views

How long does it take to crack a 100-letter long winrar password? [closed]

i´m interested in how long time it would take for a super computer dedicated to crack to crack a 100-letter long winrar password. The password contains Lowercase, Uppercase, Digits, ...
-2
votes
1answer
835 views

Android Encryption and USB Access

I'm investigating device encryption for my Android, but what is the impact on internal storage and external SD? Also, if the device is used as a flash drive or livedisk (DriveDroid), will I run into ...
-2
votes
1answer
135 views

w3af plugin development example [closed]

I'm new to w3af, and I would like to build my own plugin. I have searched on w3af web and googled it for some examples but no luck... Can anyone give me an example how to start building plugins or ...
-2
votes
1answer
111 views

Why isn't AV software configured to recognize installed program vulnerabilities?

Background (not necessary to read): I've used a few different major AV programs day-to-day over the years, and not one has ever informed me I was running code with known vulnerabilities. Not only ...
-2
votes
1answer
302 views

OTR encrypted chatroom or IM [closed]

I need a secure, encrypted environment for conducting text based interviews online. It's for academic research purposes where data protection is paramount so there cant be any data stored on 3rd ...
-2
votes
3answers
2k views

How does Google get information about FTP servers - and how to avoid it?

I searched the internet like this inurl:ftp -inurl:(http|https). I found many FTP hosts. I can add or remove files from some hosts. How does Google get information about FTP servers? How can one avoid ...
-2
votes
1answer
293 views

When logging into a web page what exactly happens when a user types the wrong password?

I have two related questions as to what happens when a user tries to log in to a website If the entered password is wrong what should happen? I have two ideas: Redirect to a page saying "wrong ...
-2
votes
1answer
883 views

Nessus does not detect sql injection with “Web App Tests” [closed]

In my website I have an sql injection vulnerability. But when I scan my website with Nessus under "Web app tests" there is no result on sql injection. Why is this? What should I do to make this ...
-2
votes
2answers
435 views

Learn IP address of sender of a self-destructing email

How can I know the IP address of the sender who sent me a self-destructing email? If not the IP address... what all information can be extracted?
-2
votes
1answer
149 views

What do I need to worry about when moving from a compromised system to a clean one?

As a result of a targeted attack, my computer was compromised? What should I be worried about when trying to move to a new system and prevent reinfection? I purchased a new clean computer and am ...
-2
votes
2answers
430 views

End of mail spoofing?

I've made the simpliest e-mail program in C#. using System; using System.Collections.Generic; using System.ComponentModel; using System.Data; using System.Drawing; using System.Linq; using ...
-2
votes
1answer
193 views

What is the interest of Reverse Proxy? [closed]

I have read many explanations on reverse proxy I still don't understand the interest. Could someone really explains in plain english
-2
votes
1answer
736 views

Linux tools to choose suitable Cisco ASA 5500

I have a linux webhosting server which affects a high DDOS. I want to use Cisco ASA 5500 Series Adaptive Security Appliances to protect the linux server from this DDOS. I know there are many factors ...
-2
votes
1answer
551 views

Safest and most secure way for backing up private data

Here is what happened, I first collected my data into one folder,tar'd it, encrypted it with gpg, put it in truecrypt container, and after that started to copy the container to another place, but ...
-2
votes
2answers
253 views

Will winlock virus really delete information after 12 hours? [closed]

I've got virus which tells that all data will be deleted after 12 hours. I cleaned autorun and now scaning my computer with anti-virus, but still is this message just to scary people or is this virus ...
-2
votes
1answer
1k views

How to retrive domain account hashes from windows 2008 server? [closed]

I want to do password length audit of domain password using offline brute force analysis. I cannot find any domain hashes from local machines , I want an approach where i can retrieve these hashes ...
-2
votes
3answers
62 views

Basics - IP spoofing

I can't understand why IP spoofing (even basic) is very limited. Suppose Bob and Alice are about to communicate and Eve can see network communication, why eve can't use IP spoofing for making "Man ...
-2
votes
1answer
70 views

how to use tor in linux kali with other applications

I want to know how to open applications as nmap and recon-ng through tor first I have kali linux v 1.0.9 and tor I tried using proxychains recon-ng but all I get is that the normal banner of ...
-2
votes
1answer
36 views

Tools or scripts to scrape browser credentials and data?

I'm exploiting machines in a network and I'm currently trying to scrape data to further my testing from the compromised machines. There's no SOE build so i've got a variety of different environments. ...
-2
votes
1answer
97 views

Who can help me decrypt [closed]

There is a string: 51141010379856000173550010000111151512908026 which after encryption becomes: l4yAOVWeHlk4tnNu3HlJnxMUppeOWCpIqmRKkUPQHlgNawdYMDK2mnieDazPkJuI ...
-2
votes
2answers
37 views

Get the Signature algorithm from a public key? [closed]

When I do PublicKey.getAlgorithm(), it only returns me RSA. Am looking for something to return Sha1RSA. Basically to identify if it is a sha1 or sha2 algorithm. Any help is appreciated. Thanks,
-2
votes
1answer
50 views

Old e-mail text types itself back into PC later by itself? [closed]

Occasionally, I'll notice my Win7 PC is typing in text by itself. When I open Notepad leave it, the text being typed in is a snippet of text from an e-mail that I wrote and sent months ago to a friend ...
-2
votes
1answer
198 views

Hown I can test “Microsoft ASP.NET Forms Authentication Bypass” in ASP.Net 4.0.30319

I searched in google for "ASP.Net 4.0.30319 vulnerability " keyword. finally,I found "Microsoft ASP.NET Forms Authentication Bypass" in below link: ...
-2
votes
1answer
96 views

What is “Pass the hash” attack?

The article on Wikipedia doesn't explain how the attacker can authenticate to the remote server using the hash instead of the original password. According to the following article the attack is still ...
-2
votes
1answer
79 views

A future heartbleed bug? [closed]

Checking out IBM.com and Google.com: https://www.ssllabs.com/ssltest/analyze.html?d=ibm.com&s=172.230.109.66 Valid from Tue Sep 09 14:00:34 UTC 2014 ...
-2
votes
1answer
78 views

Best and most current sites for security breaches [duplicate]

I'm taking my masters in cyber-security and as a student I come across a lot of garbage when doing research. What are sites with the latest security breaches? Thanks for the help in advanced. My ...
-2
votes
1answer
105 views

Stopping nosey people on Facebook [closed]

I thought I would ask this question here as it as to do with security. There are a few people on my Facebook that are close to me in real life. I don't mind it in real life (considering my real life ...
-2
votes
1answer
75 views

Salt and password [closed]

Reading the doc for setting the password, the command is : python -c "import crypt; print crypt.crypt('password', '\$6\$SALTsalt')" SALTsalt is the 8-character crpytographic salt. Valid characters in ...
-2
votes
1answer
90 views

Scanner / tool to generate a list with all forms and input fields of a website [closed]

I'm not very experienced with information security but know some basics about injection attacks and other web based attacks. Is there a tool / crawler to find all forms and input fields of a whole ...
-2
votes
1answer
109 views

Interesting security demos for beginners [closed]

I am thinking about a creating short security demo to get people interested in the security topic. I've had a couple of ideas just want to see if anyone has anything else interesting. Edit: I was ...
-2
votes
1answer
43 views

Track mail sender from Mesh network [closed]

Mesh network have one router connected to WAN or Internet so IP address is allocated to that router will be exiting point for all the nodes.. and other routers will have Internet connection from that ...
-2
votes
2answers
121 views

Is scraping this website legal? [closed]

I'm thinking of developing a third-party client for Quora in Windows Phone. There are a few but they just run Quora in a mobile browser. The problem is there is no public or open APIs of Quora. And ...
-2
votes
1answer
54 views

Can OCSP stapling reduce or eliminate the weaknesses inherrent with OCSP? [closed]

Specifically, the problems with OCSP that Adam Langley talks about here?
-2
votes
1answer
99 views

Is it safe to use public Wi-Fi networks that may be handled by non security experts? [duplicate]

I wonder if it is safe to use public WiFi in places where the WiFi router might not be managed by professionals and anybody is able to come and connect to the network with their own device. There are ...
-2
votes
1answer
762 views

good books for learning network and web security? [closed]

I am reading "Hacking The Art of Exploitation" book . i have read till chapter 2 programming but most of it has gone above my head . I want to learn basically cryptography , network security and web ...
-2
votes
1answer
58 views

Voicemail PIN reset - what is a DDN? [closed]

Here is a recording of Glenn Mulcaire using social engineering to reset the PINs to voice mailboxes to which he did not have authorised access. (At least, that's my understanding.) He appears to say ...
-2
votes
1answer
105 views

Prevent Replay attacks via timestamp while client clock is not adjusted [closed]

I'm going to send my timestamp to server and server will check if it is in a given interval. What if My mobile clock is not adjusted (say it gives 2:00 pm while now it is 2:00 am). now I lost the ...
-2
votes
1answer
57 views

Does using a non Nexus/Google Play Editon Android device have a higher security risk? [closed]

The fact that carriers deploy the latest security updates to Android devices much later than Google does to Google Play Edition and Nexus devices, should we avoid using those devices altogether?
-2
votes
1answer
53 views

Certifications comparisons

I have been asked to compare "officially" some pentest certifications, namely: GIAC CEH OPST OSCP ...and if you have some more, they're welcome! Now, I have my points of view and I don't want ...
-2
votes
1answer
102 views

Proccess to exploit an OS vulnerability [closed]

What are the steps to use an exploit on an OS vulnerability? I tried the popular ms08-067 on an XP machine, following a guide found on the internet, discovering Metasploit etc., but I can't figure ...
-2
votes
1answer
151 views

which antivirus is best for my laptop? [closed]

I want to buy a antivirus for my laptop.but I am in a fix.I want to buy such a antivirus that doesn't slow my laptop much.laptop configaration :processor core i5,Ram 4GB,operating system windows ...
-2
votes
2answers
183 views

Life in cybersecurity: How do I get there? [closed]

I am 17 years old and my ultimate job goal is a cyber security professional. I have been extensively studying TCP/IP, along with all other subjects in the CompTIA Network+ certification which I hope ...
-2
votes
2answers
91 views

LAMP Stack Tiers - why?

What are the vulnerabilities mitigated by a tiered LAMP stack? As I understand it, any breach would allow access to the database even if it was tiered. What's the benefit? Are we better to ...
-2
votes
1answer
122 views

Spoofing SMS messages [closed]

I received a message recently on a droid phone that appeared to have originated from an Iphone in my contact list. I was able to look at the Iphone from which the message appeared to have originated ...
-2
votes
1answer
126 views

How malware spreads nowadays [closed]

How malware nowadays spreads? For example, I have a Windows computer infected with some kind of malware (someone ran malicious executable on the computer when nobody was looking at it) and it can ...
-2
votes
2answers
83 views

Could a network host and process programs while securing against piracy?

Consider an ideal service hosting network, which: Lets programmers: Publish a program in such a way that it can't be retrieved. Associate a program with a wallet. Specify a cost per request and ...
-2
votes
2answers
194 views

How to avoid session sharing inside the same network

I was thinking about a situation to avoid session sharing or hijacking, validating the IP the user logged in against the ip that is accessing any page after log in. It was working until I figured it's ...
-2
votes
1answer
57 views

Whether heartbleed is attaked while we are using heartbeat with apache(httpd)? [closed]

We are using heartbeat for high availability of httpd. In httpd we are using openssl of version 0.9.8 but about heartbeat i dont much about that but while search in google some sites are sayong that ...

15 30 50 per page