48
votes
6answers
7k views

Why is leaving a passworded SSH over the internet so bad?

I've heard multiple multiple times to never leave SSH with a password open over the internet. Why is this so bad? I understand the password can be bruteforced, but what if it is a very strong ...
1
vote
2answers
49 views

Banner grabbing OpenSSL versions with OpenSSL

With the recent news about a new OpenSSL vulnerability (affecting 1.0.2 only), I'm looking to conduct some research and I was wondering if there was an way to identify what version of OpenSSL a server ...
0
votes
0answers
21 views

How to update a non clientUpdateProhibited domain name?

So I recently learned about domain name locking after having found the *.co domains of a top web site weren’t protected against server and client updating/transfering. (while the .co tld offers all ...
2
votes
2answers
72 views

Should it be possible in a good software, using a “Change Password” link for a single user, to try to guess passwords for every user of a Application?

I am having a fight with the "Security Expert" of my team about this very basic question and I need help in getting a good valid argument(s). The pretext is as follows: Should it be possible/valid to ...
6
votes
4answers
658 views

Using unusual port numbers [duplicate]

Are there any security benefits to setting up the ports on your firewall to non-standard numbers? For example, using port 15 for the SQL service.
20
votes
5answers
2k views

Should I use a second/dedicated IP address for SSH?

When running a public web server (e.g., with Apache), I've heard it's recommended to bind SSH to a second IP address, different from the one Apache is listening to. But for me it seems like this is ...
0
votes
1answer
31 views

SETOOL Kit:Error: “Unable to Clone the site. Check your network connection”

I have to tried to check whether a site is vulnerable to Phishing attack or not using "Setool kit" in Kali Linux. But when I tried to clone a site using this Setool Kit in Kali Linux, I got an error ...
3
votes
1answer
76 views

web application extracts uploaded tar files, is it vulnerable?

I have a python based web application running on a linux server, Is the following flow vulnerable? HTTP file upload (regular post from browser) server validates max size before processes the file ...
3
votes
2answers
38 views

HSTS on a subdomain with includeSubdomains

Suppose that my site is located at foo.example.com and I send the following HTTP header when visitors accessing my site using HTTPS: Strict-Transport-Security: max-age=31536000; includeSubDomains ...
-2
votes
0answers
15 views

Need help to ensure that TLS 1.2 is enabled on RMI port [on hold]

We need various helpful ways to test whether traffic flowing through the RMI port follows TLS 1.2 protocol. We tried with wireshark but did not observe any traffic flowing through localhost/ip address ...
3
votes
2answers
59 views

Is URL redirection in PHP safe if I use ../../ as a prefix?

I am developing a PHP web app and I'm in the process of implementing a redirection functionality. I know that redirection can be dangerous when it can be set on the client side and I use ../../ as a ...
0
votes
0answers
17 views

How to convert the PRIVATEKEYBLOB structure generated using CryptExportKey to bigendian?

Private-key BLOBs, type PRIVATEKEYBLOB, are used to store private keys outside a CSP. Extended provider private-key BLOBs have the following format. PUBLICKEYSTRUC publickeystruc; RSAPUBKEY ...
0
votes
5answers
269 views

What is the safest way to store passwords in a company for the case when the CISO leaves?

What is the best and safest way to store passwords in a company to ensure nothing is lost when the CISO leaves. I know this might be subjective and there isn't THE best way. But I'm curious about your ...
3
votes
0answers
26 views

How to check if redirected site like OAuth is genuine?

One common security advise is to open sites only from bookmarks (see also Explain to non tech savvy person how to check that your connection to mybank.com is safe? ). This approach fails if a site ...
-5
votes
1answer
65 views

What does this code do? [on hold]

I found the following code when performing an IP scan of my network. Does anyone know what it will or can do? It looks to me like something is trying capture my username and password upon logging into ...
5
votes
1answer
116 views

I emailed someone a picture of a check I wrote for them. What now?

On a whim, I emailed the intended recipient of a check I wrote a picture of that filled-in check to indicate I was about to mail it out. The full front of the check, with amount, my signature, account ...
1
vote
1answer
33 views

Are snort rules applied per packet or per flow

I would like to understand if snort rules are applied for each packet in a flow between a source and destination separately? For instance, when packet 1 of the flow arrives at the IDS, all the rules ...
0
votes
0answers
50 views

Is my mobile phone tapped, or what's causing this…? [on hold]

I have the following very strange behavior with my cell phone (provider is US T-Mobile). When anyone calls me and leaves a message on my voicemail my phone will automatically and promptly call my ...
0
votes
0answers
45 views

Account Signup/Login: Code-via-SMS + email verification

In an effort to make the sign-up / login to a mobile app more streamlined, I am considering alternatives to the username/password signup/login. In this case (as is with most mobile apps) login event ...
1
vote
1answer
44 views

John The Ripper Unknown ciphertext format name requested

I wanted to crack my windows xp passwords contained in the SAM file with john the ripper, this file contains hashed passwords with NTLM algorithm, but when i use this command to specify the hashing ...
-2
votes
1answer
80 views

Possible phone tapping [on hold]

Only when one of my contacts calls me (my son) when I pick up there is somebody else on the line, usually with a foreign accent. When I hang up and called my son, he confirms he made the call and ...
0
votes
0answers
6 views

Autofill Username Creation [migrated]

As an administrator I have found various usernames in the autofill bar when you attempt to log in to sites. These usernames are unknown and I was wondering if anyone knew of a way that I can find out ...
1
vote
1answer
44 views

Is it possible to prove that a forwarded email has been tampered with prior to being forwarded?

I have requested that an old email exchange between myself and HR be forwarded to me by a previous employer. They complied with the request but I suspect that the body of the exchange which they ...
0
votes
1answer
41 views

show previously hacked passwords with John The Ripper

I tried to crack my windows passwords on the SAM file with john the ripper, it worked just fine, and it shows me the password. But when i try to hack the same file again, john just tells me : Loaded ...
3
votes
1answer
55 views

Is There a Library of Well Known Threat/Attack Trees?

[I'm surprised that my searches didn't find this questions before, but then I may just not be asking it "the right way."] A project I am on is starting to look a threat trees for a connected piece of ...
67
votes
11answers
13k views

Will typing my password twice make it more secure? Or typing each character twice?

If I type my password twice (like: PwdThingPwdThing), OR type every character twice (like: PPwwddTThhiinngg) will that make it substantially more secure than it already is? Assume that it is already ...
-1
votes
1answer
43 views

Is this MITM attack possible? [on hold]

I am wondering if this would be possible. Lets say that I have a server in my home and it is properly port forwarded and everything which means that the website can be accessed outside of the network. ...
0
votes
0answers
17 views

airbase-ng: How to apply `iptables` rule to packets on `at0` tap-interface

airbase-ng: How to apply iptables rule to packets on at0 tap-interface Reading a tutorial on the net, I see this iptables command used with the tap-interface at0, created by airbase-ng. iptables ...
0
votes
1answer
23 views

samdump2 Error reading ControlSet: _RegOpenKey

I copied both SAM and SYSTEM files from my Windows7 OS, and then used this command to read the content of the SAM file samdump2 SAM SYSTEM > mdp_chiffres.txt, but i'm getting this error Error ...
0
votes
1answer
24 views

How can I use ECC 163?

I will be working with a Sentinel dongle. In the 3rd tab, it says it supports ECC 163. I will be both encrypting and decrypting with the dongle, as well as on a server. The server uses PHP but I can ...
3
votes
2answers
35 views

Efficient way to demonstrate the value in Active Directory security improvements?

Working hard on Active Directory security in a corporate environment: getting rid of excess permissions, monitoring, patching, etc. Nothing comes free, and to keep the budget going, I need to somehow ...
1
vote
1answer
75 views

How secure and how to find if a website use Flexible SSL from Cloudflare?

How secure is that technology? Can someone tamper with your traffic between a server and Cloudflare in the first place? And if the answer is yes, how can you check if a website is using the ...
1
vote
1answer
264 views

Law enforcement cracked my phone?

Police took my android phone a few months ago. It was encrypted and had the 10 max tries destruction thing set on. I noticed that yesterday the device disappeared from my android device manager. ...
1
vote
0answers
29 views

Should I worry about NoScripts anti-XSS warning when making a 3DSecure payment?

When I make an online payment using 3DSecure (Verified by Visa or Mastercard Securecode), NoScript informs me that it has stopped a potentially insecure script where site A (the bank or the credit ...
3
votes
1answer
29 views

OpenSSH < 7.0 Multiple vulnerabilities question

Nessus reports this as Critical however there are issues such as 'CVE-2015-5600' that CVE is 8.5 but Red Hat reports it as a 'Low' issue. https://access.redhat.com/security/cve/CVE-2015-5600 Reports ...
5
votes
0answers
287 views

Would a Rubik's cube be a trapdoor function? [migrated]

It's easy to scramble a Rubik's cube but it is hard to solve, unless you know the algorithms for solving it. This makes it a trapdoor function, correct?
0
votes
0answers
16 views

TPM based authentication without a trusted third party

Consider a scenario - Device manufacture provides in advance the TPM’s endorsement key certificate(containing EK public key) for device to be deployed. In general, what are the TPM operations that ...
3
votes
1answer
47 views

Identifying cipher mode in TLS

I'm trying to check my private server for TLS poodle attack. In Microsoft's article it says: "TLS 1.0, TLS 1.1, TLS 1.2, and all cipher suites that do not use CBC mode are not affected" How can I ...
0
votes
1answer
32 views

Issues importing Burp cert in FireFox - secure HTTS links not working

I have issues accessing HTTPS links using Burp and Firefox (all was working until sudden issue appear last week). Now when trying to access the HTTPS links I see a message: "Secure Connection Failed. ...
4
votes
1answer
37 views

Keeping login in sync with third party providers

When you use a third party for authentication (E.g. Google/Facebook javascript SDK), their SDK keeps track of the login status. If I have my own server, which requires an access token of it's own ...
-5
votes
0answers
36 views

how to secure my OS? [on hold]

1) i need network intrusion system to see what data is going in and out. how do i install which software? Let's say some malicious force has access to my ISP and monitoring my router. i wish to see ...
-1
votes
1answer
87 views

Does the page that links to my login page need to https?

So I realise the login ajax call must be https, and the page that ajax call is made from should also be https to prevent a man in the middle potentially changing the page and changing the form that ...
25
votes
7answers
4k views

Explain to non tech savvy person how to check that your connection to mybank.com is safe?

I was reading the security advice given by the Swedish Bankers' Association. They included these two pieces of advice (my translation), that I assume is to teach the user to check for SSL/TLS and ...
2
votes
0answers
57 views

How often are codebases compromised? [on hold]

I'm currently trying to research which get compromised more often; databases or codebases? My guess would be that databases are the obvious answer and most of the time easier to compromise, because of ...
0
votes
0answers
27 views

Detecting specific running application of types chatting,multimedia,gaming,etc [on hold]

I'm implementing a network monitoring system using JADE (Java Agent Development Framework) to classify malicious and un-malicious activities within network. At this stage, we are only considering a ...
0
votes
1answer
36 views

How to secure card payment? [on hold]

I am bothering how to secure my organizations ATM, POS, and mobile payments. Please some advice or suggestions.
-3
votes
0answers
25 views

download file from shorten url [on hold]

we are getting shorten urls for file download from our manufacture. When we click on those urls, it is redirect to dropbox or other well knows ftp websites. these website is allowed in our network. ...
0
votes
0answers
21 views

Memory Forensics dumping the memory contents of a running PID [on hold]

There was an old security tool called PMdump that could dump memory contents of a running PID without disturbing those contents, which is useful for analyzing suspicious processes. However this tools ...
3
votes
1answer
42 views

Restrict user from executing shell commands using PHP

Let's say that i have shared hosting and i want to secure that place, from executing shell commands. I'v installed suphp, so that users can execute PHP separately. I also did some other things in ...
0
votes
1answer
43 views

How can a RSA-2048 certificate be vulnerable to logjam attack? [duplicate]

Most likely I am missing some fundamentals: Our web servers are secured with TLS encryption. We use RSA-2048 bit certificates. The logjam attack targets the DH algorithm. How can our web servers be ...

15 30 50 per page