5
votes
1answer
61 views

Preventing Server-Side Request Forgeries in Java

The application lets users specify a URL for their profile picture. It fetches the data from the URL and saves it on the server. However, the app is vulnerable to server-side request forgery (SSRF) - ...
0
votes
0answers
40 views

What's is a security vulnerability that lets you inject server-side code called?

What is the name for a security vulnerability, that lets you inject server-side code into one of their server-sides pages (say PHP or ASPX)? I have googled 'Code Injection' though I'm not sure this is ...
0
votes
0answers
20 views

Renewal of ssl client certificate on iOS app

I'm a bit confused on how ssl renewal would work on an iOS app. I've gotten a LetsEncrypt certificate for my domain name to secure data transfer between my iOS app and my web server. In the ...
0
votes
1answer
30 views

What is LinkedIn's “email challenges” feature?

A LinkedIn blog post about the recent password dump says: We take the safety and security of our members' accounts seriously. For several years, we have hashed and salted every password in our ...
-1
votes
1answer
46 views

Svg width element XSS

I'm working on a svg image generator. Now I want to set the user width and height value. Can a user exploit this element tags? And what should I do to make this secure? <?php $user_input = ...
1
vote
0answers
55 views

Does CAN bus communication need encryption?

I'm currently researching into CAN security for in-vehicle communication. I would like to know if anyone knows a reason why the CAN payloads of an ECU communication (between CAN nodes) should be ...
0
votes
1answer
36 views

Is it secure to get auth TOKEN from server with javascript?

Is it secure to manipulate with auth token inside client side javascript over https ? I want to pass that token to websocket after login. $.getJSON( $SCRIPT_ROOT + '/jscript_get_auth_token', {}, ...
12
votes
2answers
3k views

How does Internet Explorer know what text files I have viewed?

I am using Windows 8.1 and Internet Explorer 11. Each time I use File Explorer to view a .txt file the history of Internet Explorer shows that I viewed that file in pages visited on this PC. ...
0
votes
0answers
38 views

Passwordlist generation, permutations and long passwords

I was wondering what could be a way of generating a list where the passwords were like: CorrectHorseBatteryStaple BanjoTurtleNinjaHobo PizzaSurfMotherMetal etc... I already fiddled a little with ...
-4
votes
0answers
56 views

Zip file password cracker script not working [closed]

I wrote a simple python script to bruteforce a zip file password using a dictionary file: import zipfile from threading import Thread def extractFile(zfile,password): try: ...
0
votes
1answer
61 views

Authentication scheme security: unique link and birth date

Recently I had to make an appointment at a hospital. I got an email with a link with a token in the form of a GUID. This brought me to a page where I had to enter my birth date to see the details. ...
0
votes
0answers
20 views

ostinato as replacement for fiddler

Can ostinato be used like fiddler? Fiddler acts as a proxy for recorded traffic and all responses on Wireshark appear to be coming from a local IP where fiddler is hosted. I have a use case where the ...
1
vote
1answer
116 views

Wireshark SSL stripping

well this question could be asked in Wireshark forums or Stackoverflow forums but, I think the question invloves development and security factors as well so i find the Information Security forum is ...
-3
votes
0answers
60 views

How Cryptographic engine affect in cryptography? [on hold]

I find everything on the cryptographic engine, but I did not get a proper Information related to it
0
votes
0answers
15 views

Recon-ng on Windows disables all modules [migrated]

I was running Python 3.5 but got to know that recon-ng tool runs on Python 2.8 or below. Therefore I installed Python 2.7.11 also on my Windows 10 system. I installed the dependencies also mentioned ...
3
votes
1answer
96 views

Is Google using canvas fingerprinting for their ads?

Given the fact that canvas fingerprinting is a hype, I raise my eyebrows whenever I see fillText or strokeText in JavaScript code executing on websites. I noticed that Google uses some of these eye ...
0
votes
2answers
85 views

Firefox and chrome infected with hohosearch and newsearch123.com [duplicate]

A fortnight before, I downloaded a keygen file, which I presumed to be fine, but when I started the installation, I felt there is something weird. So I was about to start the installation, but I ...
0
votes
0answers
39 views

Risks with shared informations of an Network Attached Storage

I'm trying to create a file server with my RaspberryPi to deploy all over the private network. I therefore mounted my disks on installed Samba and began to modify the settings. By default shared ...
-1
votes
1answer
48 views

Testing File Upload Functionality

I want to test a file upload functionality and I wasn't able to upload exe files, but I could upload file.exe.jpg (adding jpg extension). What threat this file possesses after it uploaded on the ...
1
vote
0answers
16 views

How do atom's apm and npm verify package integrity?

Are there built in verification methods to make sure the packages contain the correct code? Do they use a hash of some sort?
3
votes
2answers
64 views

Is it OK to do a security testing in parallel with a QA testing?

This may not be a very technical question per se, so please feel free to move it to the respective forum/stack. However, I would really appreciate anybody experienced or experiencing a similar ...
0
votes
0answers
39 views

Is publishing Certificate Authority dangerous for a network?

I've created a server for our company and set up a local chat network for it using "Skype for Business" application. In order for the employees to log in using this application it asked a certificate ...
0
votes
0answers
27 views

Web service authorization to specific applications: certificates, embedded secret or both?

My needs are somehow similar to this answer, but I would to be more specific. I have a set of web applications (A and B) that access to a REST service (R). A, B and R could be on the same server or ...
0
votes
0answers
14 views

Cisco ASA Access List Summary / Visualisation Tool

I have a Cisco ASA firewall config with about 50 interfaces and approximately 4000 rules. I am trying to find a tool that can sort this into an easier to consume list or even a visualisation of the ...
3
votes
0answers
76 views

Security of the shared secret key for a smart meter (Linky) [closed]

Reading the specs of a new electricity smart meter (called Linky in France), I was surprised about the chosen encryption method (128 bits symmetric key AES), based on a single secret key (called CCC ...
1
vote
2answers
76 views

Is there a difference between getting encryption key versus encrypted data from server in terms of security

Suppose we have web and application servers and trying to encrypt credit card information for our financial web application. Communication between web and app servers are secured through SSL/TLS. Lets ...
0
votes
0answers
50 views

How to check my public IP while i am using a cloud proxy? [closed]

I want to check my public ip. But I am using a cloud proxy so I check on internet by typing "what is my public ip" its shows ip which is cloud proxy ip. how can I check my real public ip??
-3
votes
0answers
53 views

Tool like Netflix Security Monkey [closed]

Is there any open source tool like Security Monkey for monitoring AWS Infrastucture. Tool to monitor Security Group changes in AWS,IAM Policy changes in AWS,VPC setting changes in AWS,Ec2 Instance ...
0
votes
1answer
158 views

What threats are associated with using Teamviewer?

I was under the impression that Teamviewer is a safe form of remote control as: all of its traffic is encrypted; searching for Teamviewer exploits does not turn up anything. But I recently heard ...
-1
votes
0answers
45 views

Elliptic Curve Diffie-Hellman (ECDH) Key Exchange in Plain English

Can someone please explain to me what Elliptic Curve Diffie-Hellman Key Exchange is in plain English? Similar to the top answer found here: "Diffie-Hellman Key Exchange" in plain English ...
0
votes
0answers
17 views

What is the latest patched version of Tomcat7? [migrated]

I am running on tomcat version 7.0.52 , i know this is a old version. I looked into https://tomcat.apache.org/security-7.html, according to this page , the latest version is 7.0.68 , so i am in ...
-3
votes
0answers
28 views

Redirect to an unknown URL [closed]

My website is: https://pressbangladesh.org But it redirect to http://ww2.pressbangladesh.org/?folio=7POYGN0G2 and a message display here: This domain name expired on Apr 11 2017 11:43AM Click here ...
-1
votes
0answers
45 views

How to use Openssl to implement circle of trust?

An alternative to the hierarchical certificate model is provided by a circle of trust in which we believe that a signed document is authentic or 'safe' if it has been signed by someone whose digital ...
1
vote
1answer
75 views

How does JDBC send passwords to the server?

I am really curious about how JDBC sends passwords to the server. While I understand that is simply an API and it depends on the implementation, are they usually hashed and then sent to server? If I ...
2
votes
2answers
87 views

Pentesting - best bang for your buck? (credentialed versus non-credentialed)

My day to day activities consist primarily of penetration testing (white/grey/black). Throughout my engagements, I try to educate my clients on the differences of testing types. E.g., credentialed ...
0
votes
0answers
13 views

bitlocker identifer not valid [migrated]

I was given a new Windows 10 laptop at work and the initial setup required me to enable bitlocker and create a pin. I was warned to make a recovery key so I did. This was a file created by bitlocker ...
-3
votes
0answers
54 views

Metasploit community paid? [closed]

I've use metasploit a couple of years back and it was just shell version today i installed and activated and web version is in place.. after a scan with nmap i clicked on exploit and for my surprise ...
0
votes
0answers
16 views

Suspicious Active Internet connection in Netstat [migrated]

I recently discovered the tool netstat on my Macbook Pro terminal and there are a lot of these connections that seem to be allowing any ip and any port to connect to my machine. Is this a sign of ...
0
votes
0answers
61 views
+50

Secure Handshake and register for Auth

The registration The Start - pre-authentication Let's assume there are Alice and Bob. They know each others public keys and each of them generates a random string - Bob's Bobkey and Alice's ...
0
votes
0answers
55 views

Executing arbitrary code with cat command when reading access.log

I made this file based on a combination of hexadecimal that can breakcat and the terminal showing the file with cat, and the reset command does not work anymore: Download Cat Killer Version 1 To ...
-3
votes
2answers
63 views

What could an attacker feasibly do if he/she compromises a DNS server? [on hold]

I know one could impersonate sites and steal credentials but that is about it. Are there any other types of other attacks, and do companies actively check DNS servers to protect their clients? Also, ...
0
votes
0answers
11 views

Using a Service Principle as a user account

An answer on this question made me curious about the security implications of using a service principle as a user account under (Azure) Active Directory Fundamentally it strikes me that its just a ...
1
vote
0answers
35 views

Confusion with format string attack

I am working on this overthewire challenge called behemoth. I am trying to fight level3 which is a format string attack. And I think I understand the basic concepts. But right now I at this challenge, ...
0
votes
0answers
19 views

Changing timestamp on an Online account [closed]

Is there a way to implement a Facebook or Google account in the past? For instance manipulating the status update as being posted a year in the past or changing the time of account creation/ ...
5
votes
1answer
80 views

Why does Android care about differentiating multiple fingerprints?

I was reading through the Android Compatibility Definition document after a friend pointed me there while we were discussing fingerprint scanners and other biometric authentications. I noticed this ...
1
vote
1answer
41 views

What is a root method and how is it achieved?

I'm wondering what exactly happens when you are finding a root method on Android. Is it just poking and prodding? I know it's high privileges, but how can that not be enabled through a regular ...
3
votes
2answers
56 views

Why use WPS on an unsecured WiFi AP?

I was searching for my home WiFi AP (router's broken and am trying to fix it), when I found a WiFi access point that does not have any security but does have WPS enabled: Thinking that it probably ...
2
votes
1answer
29 views

Can the server detect when a client has disabled certificate pinning?

Many mobile applications enforce certificate pinning in order to make a man-in-the-middle attack difficult to accomplish. However, with a jailbroken/rooted device, it's possible to disable the ...
0
votes
0answers
16 views

CIPSO & CALIPSO implementation

Trying to understand how to implement security labels into IP packets. There is minimal documentation. Can anyone assist on how one can do this? Do you need raw sockets, or is there an API that UDP ...
-3
votes
1answer
75 views

Telnet alert on SIEM

We are currently setting up the McAfee SIEM. Some rules have been set up using signature ID. Below is the alarm that triggers frequently: Summary: Signature ID 'Suspicious - Remote Shell ...

15 30 50 per page