0
votes
0answers
21 views

Machine actions in distributed systems

I am looking at the security implications of distributed systems, and am trying to simplify the way that I can model individual machines within a distributed system interacting. The importance of the ...
0
votes
0answers
69 views

How to allow activesync, but block outlook iOS app? [migrated]

An outlook application for iOS has just been released, and it seems like it is welcomed and rejoiced by many newssites: https://itunes.apple.com/us/app/microsoft-outlook/id951937596?mt=8 ...
0
votes
0answers
50 views

XSS encode / decode strange char interpretation

Can anyone tell me why i cant get this XSS to reflect ? or why is this Filtered or not rendering ? The Post sent is : ... Content-Length: 91 add=1&reference=A</><img src=a ...
0
votes
0answers
14 views

Certificate Validation [migrated]

I need to encrypt some data using the public key certificate available from one of my client's website. My question is aroung certificate validation? How can I validate this online certificate? I ...
0
votes
0answers
10 views

How to link logins by devices to IP sessions in Cisco ACS logs

I am trying to process logs from a Cisco ACS system, initially just to determine which user was responsible for which IP in the WLAN pool. My problem is with relating 802.11 login success records for ...
0
votes
0answers
20 views

Security audit framework of Internet Explorer Outlook Web Access (OWA) add-on?

I'm working with a software company that has developed an add-on to Outlook Web Access. They are aggregating data and providing a consolidated view of a particular topic / category. I have experience ...
0
votes
1answer
39 views

XSS in options tag without forward slash

I am trying work on an XSS scenario. Would appreciate if anyone can help. URL: www.example.com/mydata "mydata" is landing in html as follows: 200 OK ... Content-Type: text/html; charset=utf-8 ... ...
0
votes
0answers
12 views

Trying to use mdk3 with Alfa AWUS036NHA, wireshark detects frames but cannot detect network [migrated]

I'm testing out some various tools, trying to get them to work, but I cannot seem to get the MDK3 beacon flooding mode to work. I'm using an Alfa card AWUS036NHA, I believe it has the correct drivers ...
0
votes
0answers
72 views

session management and login php scripts

I want to to write login scripts for clients websites to make them more secure. I want to know what best practices I can implement into this. There are password protected control panels in abundance, ...
0
votes
3answers
81 views

htaccess - protect php file execution in specific directory

How can I protect php execution in specific upload directory? Mostly, people put .htaccess in upload folder to protect php execution. But someone says it can be replaced by attackers. So how can I ...
0
votes
0answers
10 views

Is pesexec only useful with administrative credentials? [migrated]

I am an apprentice penetration tester, and I am trying to read as many tutorials and practice as much as I can. Something I continually see reference to is using psexec to execute commands remotely. ...
0
votes
0answers
21 views

Regarding the storage of Root CA certificate and any Intermediate root CA certificate on Embedded Device

The overall system setup is as explained SERVER which connects with the client(Embedded device) on SSL/TLS Embedded Device which acts a CLIENT and communicates with the server The Server can also ...
0
votes
1answer
41 views

SSO software – where is symmetric key stored?

In SSO software (Oracle E-SSO …), I heard about (primary) key encrypting user’s credentials, but I can’t read anything about how this key is managed ? When using smartcard, I can understand that ...
0
votes
1answer
34 views

Storage on Root CA and intermediate CA certificate on Embedded device

Regarding the storing of Root CA certificates on an Embedded device Setup Explaination: 1. An embedded device which is a CLIENT on the network 2. There is a SERVER which connects to the CLIENT on ...
0
votes
2answers
78 views

intercepting AJAX request and response using BURP

I would like to intercept an AJAX request using BURP. I have used BURP for web applications testing before. This, however, appears to be a weird case. I am not certain what am I missing here. The ...
0
votes
1answer
21 views

JKS is readable without providing a password

I'm at that stage in application development where I'm forced to tinker with openssl and keytool again. I was surprised to find that I could list and export certs from a JKS key store without ...
0
votes
2answers
34 views

Usability of a found OTP Token for my own system [closed]

I found a one-time-password token and am unable to find out who it belongs to or where it has been used. It seems to be manufactured by a company called "ActivIdentity" (now "HID") and called the ...
0
votes
0answers
37 views

Is WPA practically less secure than WPA2 only if QoS is enabled?

I've been looking into attacks that are effective against WPA-TKIP but not WPA2-AES (both using PSK). I've found Vanhoef & Piessens's paper that builds off an attack by Beck & Tews and can be ...
0
votes
0answers
163 views

ADFS 2012 R2 (3.0) JSON web token validation

Our client would like for us to utilize ADFS 2012 R2 (aka 3.0) as the primary means for two security features in internal apps that we are building: The web app (there are two .NET & Angular) ...
0
votes
0answers
19 views

What is the difference between “TLS” and “NETLOGON Secure Channel” authentication?

I would like to make sure what is the difference between "TLS" and "NETLOGON Secure Channel"(using signing and encryption) authentication? I know that TLS is aka SSL and I know that NETLOGON secure ...
0
votes
2answers
217 views

Generating authentication token from PHP sessions

I have a traditional PHP site which uses sessions. I've developed a real-time app in nodejs and wish to authenticate users here based on their PHP session. The procedure would go something like this: ...
0
votes
0answers
19 views

Authentication API that just returns ID with right email / password combination a security problem?

Two companies. MegaSocialPlatform CorporateCompany. CorporateCompany wants that their employees can reuse their current login credentials of CorporateCompany.com on MegaSocialPlatform, so ...
0
votes
1answer
2k views

SSL mismatch error using ISP-provided IP address but not VPN IP address

I keep seeing error messages reporting issues with SSL (Chrome, IE, Mozilla) when clicking on links in the YAHOO homepage to stories from different YAHOO sites (screen, autos, movies, hsrd, etc.) ...
0
votes
1answer
56 views

Strange block page on OpenDNS?

This morning I went to the internet and accidentally clicked on a blocked website (OpenDNS blocked it). Though there was something strange on the place of the icon there was a little router icon and ...
0
votes
0answers
23 views

Synchronizing secret codes on two different devices? [duplicate]

I was reading an article about how keyless entry systems for automobiles prevent people from recoding the signal and replaying it to open someone's car. In the article they describe the process as ...
0
votes
0answers
31 views

Application of digital watermarking for session hijack

I know digital watermarking can protect the media from man-in-middle and replay attack. Is it good also for session hijack attack or phishing attack?
0
votes
0answers
29 views

What is a Packet Identifier (pid) used for?

I'm trying to analyze a pcap file using snort using the following command: snort -r file.pcap I got the output which had n number of packets and at the top i had this Packet Identifier pid=14782. ...
0
votes
1answer
34 views

SafeBrowsing domain vs. url distinction

Does SafeBrowsing actually work with the URL paths or does it only look at the domains? If it is just the domains, does it also look at the subdomains or are the results for example.com and ...
0
votes
0answers
56 views

Web service security - authorization

I am trying to look for state-of-the-art approaches to do authorization to secure web services and SOA's in general. I found the following two articles while searching: link1 and link2. I find that ...
0
votes
0answers
92 views

Is there any method to prevent/trace ddos attack?

I have a debian linux server which run a few online game services. I have some competitors in this area and i think one of them is behind the ddos attacks. I have full access to the router, so I set ...
0
votes
0answers
33 views

Is it possible to perform one-way OTR MITM?

Here's something that is bugging me recently: suppose that me and my friend establish an OTR session and - as a result of that - DH key exchange is performed. My friend verifies my key, but I cannot ...
0
votes
1answer
41 views

MITRE's UEFI 'Extreme Privilege Escalation' and HP's SureStart [closed]

This is MITRE's powerpoint presentation version of their report: http://www.mitre.org/sites/default/files/publications/14-2221-extreme-escalation-presentation.pdf Page 54 is a straight pull from HP ...
0
votes
0answers
51 views

How to test backend virus behavior?

I have a website that allows the user to upload files. The front-end (web tier) checks the file extension and first few bytes of the file for the magic number of an acceptable file, but then ...
0
votes
2answers
112 views

Persistent Connection Attempts By Akamai Technologies

I have seen this question asked in different places, but have never seen a satisfactory answer: On different computer builds, ASUS/GIGABYTE/MSI, I constantly have outgoing connections to ...
0
votes
1answer
84 views

Two-factor encryption model [closed]

Please some on help me to understand this "Are you ready for this? With the two-factor encryption model your data is protected two-fold. First, a unique key is generated, encrypted, and turned into ...
0
votes
0answers
54 views

Someone or something tried to login to my Gmail using IP address of my shared hosting

My Gmail told me someone tried to login with the correct password. But Gmail blocked it because the IP address used is different from my IP address. When I looked up the IP address that tried to login ...
0
votes
1answer
47 views

Why not oAuth for Authentication - AKA what is bad about OpenID Connect [duplicate]

I read many questions and answers on this forum stating that oAuth is for authorization, OpenID is for authentication and more than a few of them goes on to say that OpenID Connect provides ...
0
votes
1answer
43 views

Hosting multiple websites on the same server - Prevention from DoS

I have an server which contains around 4 instances hosted on it. I am aware that if a DoS attack happens on one of the instances it will take down all the other instances too. How to prevent such a ...
0
votes
0answers
32 views

I forgot my ZIP file password. How do I bypass the encryption? Which software would work? [duplicate]

Should I use brute-force attacks? Do they even work? What options do I have? I only remember short fragments of the password and it's definitely more than 7 characters long.
0
votes
0answers
62 views

Is this some kind of Bayesian poisoning?

So I've been reading my spam lately, and today I received this: To: my actual email, but with a name found here: tel2name.com (only hit on Google) Subject: one seemingly random excerpt of a web ...
0
votes
0answers
31 views

hydra password penetration test syntax [duplicate]

I am trying to penetrate a password on my own website using hydra. Let's say that I know login and password and i just put both there like in sample below: hydra -l admin -p password 123.123.123.123 ...
0
votes
0answers
35 views

How Modification attacks works?

Theoretically... In Active attacks we have "modification attack"...ie "In a message modification attack, an intruder alters packet header addresses to direct a message to a different destination or ...
0
votes
2answers
37 views

Udp ddos prevention

Okay,if i wanted to prevent a udp flood are these 2 solutions sufficient: -Say that i have only one port open like port 80 however i never use udp interactions what if i blocked the udp port leaving ...
0
votes
1answer
32 views

SNORT only alerting on inbound traffic

I am trying to raise an alert when someone is setting up a connection to PORT 25 (tcp), whatever source or destination. For this i came up with this simple rule: alert tcp any any -> any 25 ...
0
votes
1answer
35 views

Single vs server specific ssh keys?

This question has a bit to do with procedure. Is it better for a person to have one single ssh key pair and share the public key where needed. Alternatively is it better to have server specific keys? ...
0
votes
0answers
32 views

Security schemes regularly in use on cloud

I've been looking into how connections are managed in the cloud, in order to better understand the threats users and their deployments may face. The most important and common ones in use seem to be ...
0
votes
0answers
13 views

Why do PGP Keys have expiration dates? [duplicate]

I read a tutorial to get started with PGP and so far I understand the importance and the difference between encryption, decryption, signing, and verifying. However, I don't understand why a key has ...
0
votes
1answer
48 views

Storing server generated passwords

There are some applications that generate passwords for you. Consider a case where you sign in via Facebook, the application (let's call it NEWAPP) verifies your sign in on the server using FB tokens ...
0
votes
0answers
15 views

Data encryption of commercial and scientific satellites [duplicate]

The world's first artificial satellite was launched by the Soviet Union in 1957. Since then many more satellites have been launched. Many of them still in orbit around the earth. Some still functional ...
0
votes
0answers
53 views

Detecting reflective DLL injection any other ways?

any way to detect it? maybe using mcafee hips rules? Are there any known Techniques to detect it ? like walking the VAD tree or something?

15 30 50 per page