6
votes
2answers
70 views

Detect when I do brute force attack and block the connection

My server (Ubuntu + LAMP) is infected, as I receive security alerts from the sites attacked from my IP. your Server/Customer with the IP: ********** has attacked one of our servers/partners. The ...
3
votes
1answer
90 views

how do we encrypt 100bits of plain text to get 100bits cypher text using DES?

We have a scenario like that we need to encrypt 100 bits of plain text using encryption algorithm like DES (algorithm takes 64bits plain text block and generate 64 bits of cypher text block, key using ...
3
votes
2answers
41 views

When should I drop a packet with ICMP type 3, code 9 or 10, TCP RST, or TCP ACK?

This answer says there are a few ways of dealing with a blocked packet at a firewall: At each of these levels a 1st IP packet (and any other protocol packet as an ESP or AH packet) might receive ...
9
votes
4answers
1k views

Filtered ports - What exactly filters them?

By the NMAP definition, unfiltered ports are the ones which cannot be determined to be open or closed since packet filtering prevents its probes from reaching the port. (ISBN 9780979958717 pag. 77) ...
1
vote
0answers
29 views

how to configure naxsi to accept json format in rest apis?

For example one of my APIs is: Post request: /api/v0/login body: { "username":"xxx@ggg.com", "password":"eeeee" } I want to secure this API with naxsi, I could not find anywhere to config naxsi ...
53
votes
3answers
5k views

How can common users defend against the StageFright vulnerability?

I was just informed of the StageFright vulnerability in Android devices. A specially crafted MMS message can gain access to data on the phone; so presumably it's a buffer overflow with subsequent ...
7
votes
3answers
3k views

I found my user details on already old, leaked account information list

I came across an old (>3 years) accounts information list which has been leaked to the web. The list included thousands (>10.000) of account details from a service or services. Apparently the event ...
1
vote
3answers
84 views

Malware in RevSlider plugin?

Maybe my WordPress site is hacked, because it's always send spams (5000 / day). I found one file in plugins folder which contains this base64 code. What shoul I do? EDIT: Oh, i found another one: ...
5
votes
3answers
979 views

How can I defend against malicious GET requests?

My server is getting hit with a variety if requests like the following: Started GET "/key/values" ActionController::RoutingError (No route matches [GET] "/key/values") Started GET "/loaded" ...
-1
votes
3answers
57 views

Writing an information security policy [closed]

We are required to write an "information security policy" for our company, and I want to know how much should we cover, and if there are any template or examples that would help.
0
votes
1answer
45 views

Server authentication during the SSL handshake

I have question regarding the server authentication during the SSL handshake. I am going to write this up as my understanding of the concept. Please feel free to point out any mistakes. We generate ...
3
votes
3answers
144 views

Identify Malicious/Suscipicous Processes from Process List

I have a list of 1000 processes and I want to identify which of them are legitimate and which are not. I only have the name of the processes and I want to categorize them. Is there any way to get ...
1
vote
0answers
28 views

SEToolkit: havester not capturing credentials

I am using the Setoolkit on Ubuntu. I am testing it by cloning Facebook and logging myself in locally to see if I capture my own credentials. However,no POSTS are written to the harvester text file ...
3
votes
2answers
96 views

How to generate a password dictionary for a specific use

I have a locked work file that I need access to. Unfortunately, the company that provided the file is no longer in existence and I can't track anyone down to help me out. The file is encrypted and ...
5
votes
2answers
81 views

Limiting Concurrent Login For System Admins On Windows Domain

Quick background: we are a smaller sized team meaning that we perform multi-function roles. Thus a developer is typically a DBA as well and some developers do have domain admin access. As a rule our ...
1
vote
1answer
20 views

Diffie Hellman parameters still calculating after 24 hours [duplicate]

I have a fresh install of Arch Linux on a RaspberryPi model B. I'm setting up OpenVPN and using easy-rsa to generate initial keys and certificates. All went fine until I ran ./build-dh. It is now 24 ...
2
votes
1answer
55 views

Is there an equivalent of meterpreter's “run persistence” for Linux?

As in the question - how can I install a persistent backdoor with Metasploit on a Linux target?
-4
votes
2answers
29 views

Javascript web-based key derivation [closed]

Is there a website with a key derivation function running entirely in client-side Javascript? The string which is used to generate the key cannot be seen outside the client. It shouldn't use a ...
2
votes
0answers
25 views

Creating SSL certificate signed by a self-signed CA certificate in Jetty [migrated]

I'm trying to configure a jetty-distribution-9.3.1.v20150714 backend running on Java 1.8.0_45-b14 with a certificate signed by a self-signed CA certificate, for SSL pinning. Following Apple's guide, ...
0
votes
0answers
9 views

How to verify Signature Value using cert file in C#? [migrated]

I am noob in security sorry for that. I have an xml file which include, <?xml version="1.0" encoding="UTF-8" standalone="no"?> <ID_VG_Response> <Result> ...
1
vote
1answer
85 views

Private VPN server in public cloud

I need to encrypt all my traffic, because I often work in unsecure network environments. My questions is this: if I buy my server from VPS providers (amazon ec2, digitalocean, etc) - how secure ...
4
votes
3answers
166 views

Using Tor browser on a Windows machine

Suppose a person is running a Windows 7/8 operating system. If she/he uses the TOR web-browser, can Microsoft see what they are browsing? Would that not defeat the point of using TOR in the first ...
2
votes
1answer
60 views

Are TLS session keys cached in a browser?

For example, when authenticating to a TLS protected service, and then closing the tab, you can sometimes reconnect to the service afterwards without re-authenticating. In preservation of perfect ...
0
votes
0answers
16 views

Multiple SSL certificates in Apache with clients using different certificates [migrated]

Our setup is like this. SOAP services are exposed and clients send requests to SOAP endpoints. Each node provides the SOAP services. There can be one or more (maximum 6) nodes as a cluster. Multiple ...
2
votes
2answers
209 views

Is it okay if passphrases to KDFs are “predictable”

I'm looking to do file encryption for small amounts of text (8-100 characters for each item being encrypted). Here's what I have: A secret passphrase and a salt. I Use Rijndael to generate a key and ...
1
vote
0answers
47 views

Where to search for vulnerabilities in a WordPress theme? [closed]

I have been doing research on a custom WordPress theme. I'm not very familiar with this CMS and how it works on the inside: where should I start my security analysis? Should I look for SQL Injection ...
1
vote
0answers
47 views

Failure analysis to avoid locking permanently online accounts [closed]

(I reposted here a question I previously asked in SuperUser, I think this section is more appropriate) Back in the days defining a path leading to loss of data or loss of online accounts was easy: ...
1
vote
0answers
26 views

How should end users respond to Earthlink's “Allowed Sender” feature when blocked by policy?

Some of our users are requested to click on an Earthlink antispam URL below https://webmail.pas.earthlink.net/wam/addme?a=USERNAME@earthlink.net&id=<SOME GUID> However our firewall ...
-7
votes
0answers
30 views

what reconnaissance or foot-printing tools for network or web, do you recommend? [closed]

what reconnaissance or foot-printing tools for network or web, do you recommend?
3
votes
1answer
131 views

Is this the end of malware use of DNS?

I read about the release of a free dataset of malware related DNS queries called "Predict". A researcher or network security team can download or query this data set and use it to identify malware ...
0
votes
1answer
57 views

Is injecting malicious file with browser localstorage possible?

Lets say, I visited a "malicioussite.com" and the server had a "malicious.js" in it whose job is to write malicious code to my browser localStorage and save it to the my computer then execute it to ...
6
votes
0answers
94 views

Which format of secret would be the most efficient for human memory? [closed]

I am talking about something-you-know identification factor. Examples of those formats are passwords, passphrases, pin-s, picture passwords ( ...
1
vote
2answers
126 views

Password Manager use and safety [duplicate]

I just recently read an article advocating the use of password managers, and while I understand why someone might think using these programs might be a good idea, it's my understanding that these ...
2
votes
0answers
24 views

Patterns for asynchronous authentication (after message is sent)

I'm looking at a scheme where users/servers post messages to each other. One of the main challenges is to prove "ownership" of a URL - defined as the ability to receive messages. This can be done ...
22
votes
2answers
2k views

How does this HTML5-based “Mass Router Infection” scheme work?

I read this article stating that purely through a website, "without any user interaction" mass router infection is (/was?) possible. I'm not sure that this problem still exists as it was posted 3 ...
4
votes
1answer
91 views

Is it possible to trace a backend through a reverse proxy?

I'm creating a reference network topology for a WebSocket chat application at work, and I'd like to have something clarified for my own understanding. The current topology involves a reverse proxy ...
9
votes
4answers
2k views

Why disable JavaScript in Tor? [duplicate]

Why it is not advisable to use JavaScript with Tor? Yet with JavaScript, you cannot get the IP address of the user except through an external website. How could using JavaScript with Tor expose one's ...
7
votes
2answers
4k views

Do these regex show that I was hacked?

What do these regex commands mean? I found them when I ran the history command: grep --include=\*.php -rnw . -e "update.creditcard" grep --include=\*.php -rnw . -e "e41e" grep --include=\*.php -rnw . ...
2
votes
2answers
80 views

How does web site defacement monitoring actually work?

I wish to outsource a web site defacement monitoring services to a third party and am wondering how does this type of monitoring work? If my front page has a lot of dynamic components, eg image ...
3
votes
2answers
79 views

Is my shell prompt visible to public?

Let say my local system's shell prompt is in this format: myname@mysurname:~$ Is it logged in some server when I login there via SSH/FTP? Or is it completely private information?
72
votes
8answers
14k views

How dangerous is it to reveal your date of birth, and why?

At some point I told a friend that it's dangerous to reveal your birth date (kind of like your social security number or your mother's maiden name), because it's a crucial piece of information for ...
-4
votes
0answers
31 views

Wifi penetration testing aireplay-ng does not send packets [closed]

bt ~ # aireplay-ng -1 0 -a 00:19:7e:4d:79:79 -h 00:11:22:33:44:55 -e 4ae8 rausb018:27:07 Waiting for beacon frame (BSSID: 00:19:7E:4D:79:79) on channel 10 18:27:08 rausb0 is on channel 10, but the AP ...
3
votes
1answer
65 views

Browsers root CA accepted, countries and checking fingerprints

This is a question derived from several others, and I can not comment on those, so it is not duplicated, please read: In some related questions some users comment that: "They wouldn't ...
6
votes
1answer
100 views

What is legally required to store HIPAA data in the “cloud”?

I was looking into storing SQL DB backups of a healthcare system in the cloud in the event of a disaster to be HIPAA compliant. The solution I came up with was to use Cloudberry backups. What I would ...
2
votes
0answers
24 views

How do I completely delete the “Chrome Remote Desktop Viewer” that comes with Google Chrome? [migrated]

I had installed Google Chrome (Version 42) some weeks back because it looked like it was needed for some corporate purposes. Today I happened to go to the about:plugins page and noticed that it came ...
2
votes
1answer
57 views

XSS in Content-Disposition

Lets assume i have found a xss on site example.com, now to trigger an XSS, i use the following URL: https://example.com/a.php?v=%22%3E%3Cimg%20src=x Which results in following response: HTTP/1.1 ...
2
votes
0answers
24 views

Is it possible to reuse a OTP Token with another security provider? [closed]

My bank issued a new security device replacing the Go 3 Security Token manufactured by Vasco and I would like to know if it could be used with my Google multifactor security or with LastPass as a ...
-2
votes
2answers
47 views

Is there any way to formally ensure privacy to my clients by technical means?

Imagine you are a software solutions company. One of the solutions you provide are domains, email and forwarding mail to their Gmail accounts. After we have created a domain and several email ...
7
votes
2answers
79 views

Can client-side hashing improve after-the-fact security in response to password leaks?

Several questions on this site address client-side password hashing, and none of them admit to any security benefit beyond protecting other sites the user might use the same password for. However, ...
-5
votes
3answers
64 views

What File Types Should I Scan Before Opening? [closed]

In general, a person downloads some files from the Internet. Secure practice is to, at least, scan them before opening them. In light of this, what file types (i.e. extensions) should a normal user ...

15 30 50 per page