1
vote
3answers
16 views

How to fix SSL algorithm for more security

SSL uses Asymmetric Encryption like this : Server sends a copy of its asymmetric public key. Browser creates a symmetric session key and encrypts it with the server’s asymmetric public key. Server ...
0
votes
0answers
15 views

Dos Attack and other malwares!

I have been experiencing dos attacks:ack scan and rst scan. Now I know these are supposed to be normal and the internet works that way but I experience severe internet disconnection when that happens. ...
0
votes
0answers
19 views

Ubuntu server seems compromise to take part in an DDOS attack

So i have this VPS Ubuntu v12.04 Server running with DigitalOcean. Zpanel/Apache/PHP stack was installed on the Server For the past few days it was occasionally down. Initially, I didn't know what ...
1
vote
1answer
17 views

Steps after getting hit with malware or browser exploits on Xubuntu

Well, today I was browsing the internet and I suddenly got redirected to a chinese hosted malware site and firefox started going crazy. I checked the url on virustotal with my phone and it found other ...
-1
votes
0answers
8 views

Why injecting a php tag with XSS dosn't work?

So you all know about the XSS vulnerability but what I cannot understand is how come injecting a <?php ?> tag doesn't work? eg.: suppose there is a Stored XSS vulnerability in the index.php of a ...
-2
votes
0answers
11 views

How could you build a Vulnerability exploit?

So sometimes somebody finds a vulnerability of a WebApp or a program they don't release a public exploit or a PoC, if I have the source code and I have the changes in the vulnerable version and the ...
-3
votes
0answers
16 views

A Beginner Guide to Tor Browser and/or Being Anonymous

There are a lot of threads that ask a similar question. However, I am looking for some LITERATURE. I think that, in a lot of cases, many questions would not be asked if us novices had access to the ...
-6
votes
0answers
21 views

What's a good free VPN software that I can torrent with? [on hold]

Most of the ones I found either cost money or limit your bandwidth / cap your data transfer. I installed CyberGhost, but they block torrent traffic. Is there better free VPN software that I can ...
4
votes
3answers
163 views

Calculating password hashes in the browser?

I just finally got into Keybase and was surprised to see this in the sign-up page: Shouldn't password stretching and hashing be done on the serverside, as we normally don't trust a client?
2
votes
1answer
31 views

Incident Response Toolkit [on hold]

I'm trying to compile a list of tools for incident response. Working on a project to create a package that can be pushed out to a set of workstations. If/when an incident occurs, the IR ...
0
votes
0answers
15 views

how to clear results from sqlmap

Using SQLMap. I have a sql injection location that has since been fixed, supposedly. I want to retest, but SQLMap has previous results cached. That is, when I run the same command, the results ...
1
vote
1answer
29 views

How secure is WiFi roaming if clients connect automatically to access points with the same SSID and security?

After reading a bit about WiFi roaming where multiple access points are set up with the same SSID and WPA/WPA2 shared key, I'm wondering how secure the concept of WiFi roaming is. If clients connect ...
0
votes
0answers
9 views

version support policy for BYOD devices

In corporate environments where users bring their own devices for access to corporate resources, how can we determine which Android devices are currently supported and receiving security updates? For ...
0
votes
1answer
75 views

How to tell if someone else's site is vulnerable to Shellshock without hacking them?

Registration card in hand, I went to register a newly purchased power tool yesterday. But when I arrived at the manufacturer's site, I was greeted by an ancient homegrown interface that was marked ...
9
votes
2answers
250 views

Effect on PCI compliance of not checking SSL certificate?

PCI DSS states: "[You must...] verify that only trusted SSL/TLS keys/certificates are accepted." Long story short, our merchant provider just asked us to please stop verifying their certificate ...
0
votes
1answer
36 views

Techniques for bypassing zero length check in javascript?

I am working on a node.js application that allows users to sign up for accounts using social media. When they do this an entry is created in our database with their email address, and a blank ...
1
vote
1answer
18 views

Open wireless network and OpenWRT isolation function - any risk?

What security risks would be caused by using a wireless router with no encryption for the wifi and by configuring it with: vi /etc/config/wireless option isolate 1 "HW" isolation. Running OpenWRT. ...
1
vote
2answers
35 views

Free hotspot: Open wifi vs. WPA2 wifi with known password

If we would want to give internet for free via WIFI, then what would be the better option and why from a security standpoint if we could only choose between: A non-encrypted wireless network setup ...
1
vote
0answers
10 views

Repeating “Type” field in EAP expanded NAK seems redundant?

I'm reviewing the EAP RFC 3748 and I've gotten to the bit about Expanded NAKs, and the examples given there seem to contradict my understanding of the generalised expanded format discussed later in ...
1
vote
1answer
62 views

Does dual boot hurt security?

On my laptop I have a well secured Linux installation that I would like to stay this way. It has in the past and could in the future contain confidential medical data I use for my study. I also have a ...
1
vote
0answers
29 views

Decentralised password recovery

Are there good/established techniques for password/key recovery in situations without a centralised service? For example: I can imagine a system where a recovery key is generated, split using secret ...
3
votes
3answers
834 views

Can CSS file contain malware? [duplicate]

I know that javascript files can contain malware. However, I am not so sure about CSS files. They only affect how the page is displayed, right? I know that css files can be used for clickjacking but I ...
0
votes
2answers
42 views

viability scanner inside AWS

So I have 2 soon to be 3 VPC's within AWS, I want to run a automated nmap scan on all three VPC's every few weeks to make sure nothing has been opened, added etc what would be the best way to achieve ...
0
votes
1answer
39 views

Firewall log entry: need help in interpretation

I recently setup an Hardware UTM Firewall. The firewall log shows the this entry every 20 seconds: /var/log/packetfilter/2014/09/packetfilter-2014-09-30.log.gz:2014:09:30-12:06:15 utm ulogd[11342]: ...
0
votes
1answer
18 views

masking credit cards PAN with zeros

The PCI-DSS only requires you to protect the PAN if you are storing MORE THAN the first six and last four digits. Can an all zero mask be used? E.g. 4111 1100 0000 1234 to make it PCI compliant / not ...
2
votes
0answers
17 views

Enabling Unsigned ActiveX

A third-party wants to provide a web app which they say only works if we enable unsigned ActiveX (unfortunately users are required to use IE). I understand what 'signing' is, as well as the basic ...
-8
votes
0answers
62 views

Violent cracker stalking me with mobiles [on hold]

I have been threatened, ID stolen, money stolen from bank acct. 8Th mobile phone destroyed, A desktop destroyed, Phone calls recorded. Child porn, gay porn. Terrorists sites sent to me. I have done ...
0
votes
1answer
42 views

Where are the user credentials stored when remember password is selected?

Provided a user has chosen the remember me option while logged in last time into a web application,how does the web application server identifies the user next time when he logs in? The credentials ...
-3
votes
0answers
42 views

How can I implement DDoS in Cloud Environment [on hold]

I am new to the cloud environment as part of my research work i need to implement a ddos attack in cloud environment and then do a traffic analysis and create a new technique to mitigate the attack in ...
1
vote
1answer
41 views

Figure out if “correct” encryption algorithm was used

Given a database like CryptDB, is it possible to determine whether the data is actually encrypted with the correct (specified) onion? I'll elaborate a bit: CryptDB uses onions (chaining) of ...
1
vote
1answer
42 views

How to share sensitive documents with unknown/untrusted parties?

My exact use case is that I'm starting a new job, and I need to transmit sensitive personal documents to support my application. However, the same applies for applying for a loan, buying a house etc ...
1
vote
1answer
32 views

About windows services and service control Manager

I was doing some study on Windows services, when I came to know that when an account other than Local System is used to run service, the SCM automatically grants the account certain security ...
1
vote
0answers
17 views

NISTIR 7966 (Security of Automated Access Management Using Secure Shell) - is there anything new?

Tatu Ylönen (the creator of SSH protocol) and two others authored a report recently, offering their views on SSH key management. I have read the report, and am struggling to identify whether it is ...
6
votes
2answers
304 views

Does Outlook store plain-text passwords?

A long time ago when Microsoft changed my e-Mail from Hotmail to Outlook the password-interface said that I should only put in the first 16 chars of my password. But my password was longer before. So ...
1
vote
1answer
54 views

How can we represent SSL and Firewall in OSI Model? [on hold]

I want to draw an architecture diagram for a general ERP application. In that I have come across a confusing point: where should I place the SSL and Firewall? I tried to figure out exactly where ...
1
vote
2answers
77 views

How does stored procedure prevents SQL injection?

May be I am not much clear about the stored procedure. Can someone explain me how stored procedure prevents SQL injection with a simple example using MySql.
0
votes
2answers
64 views

Shellshocking Webservers, does anyone know of an attack-vector other than Headers?

i've see a lot of different webserver-attacks against cgi-pages, but have seen the malicious payload only in the headers, might it be User-Agent Cookies Referer Custom-Headers does anyone know if ...
1
vote
1answer
19 views

SSL certificate expired on the embedded device (a client)

I need some inputs for the scenario when the certificate expires which is stored on the embedded device on the network which is a client. Following is the explaination of the setup. The setup ...
1
vote
0answers
35 views

Is it possible to encrypt Word Docs with something other than default?

AES 128-bit advanced encryption is fairly simple to break and was wondering if there was any way to use a more secure one? And if so - any suggestions?
-2
votes
0answers
31 views

How can broadcast information be kept confidential?

Recently, I have been studying network security. When it comes to Ethernet security, how can broadcast information be kept confidential? Is it possible that we can have a private channel be ...
4
votes
1answer
25 views

What does EMET do for Windows 8.1?

I recall seeing, upon release of Windows 8 a while ago that a number of new mitigations and memory protections had been put in place but i'm unsure if these are the same protections offered by EMET. ...
4
votes
3answers
580 views

What are factors in evaluating the fitness of a security questions?

Attempting to understand the key factors in evaluating the fitness of security questions. By security questions, I mean for example: What was the name of your first pet? In what city was [insert ...
-6
votes
1answer
36 views

How do you find someones phones mac address using a phone number [on hold]

I know their number I just needs his phones mac address so I can change the administration in whats app
0
votes
0answers
50 views

Junkware/Virus keeps installing ad extensions in Chrome and Firefox [on hold]

I'm not sure if what I have is a virus/malware but lately I've noticed that ad extensions keep getting installed on to my web browsers which display ads from GetTheDiscount and Sharkman among others. ...
4
votes
1answer
54 views

Is it true that certificates requested with a specific CSR can only be used on the machine where the CSR was generated?

Assume that I have created a CSR and I am going to buy an SSL certificate with it. Would I be able to use the SSL certificate on another machine than where the CSR was created? Someone I know ...
2
votes
1answer
99 views

Is knowing the decrypted and encrypted data enough to find the key?

Let's say an attacker knows the encrypted content, the decrypted content and the algorithm used: can he get the key that was used to encrypt the content or does it make it easier to find the key out? ...
2
votes
0answers
47 views

Logging out of Basic HTTP Authentication

As seen on https://stackoverflow.com/questions/233507/how-to-log-out-user-from-web-site-using-basic-authentication, there are some interesting ways of logging out a user from Basic HTTP ...
1
vote
1answer
64 views

Is there any advantage in encrypting a password hash in my database?

I am hashing and storing the salt:hash of each user's password in our database. The web server is ASP.NET and the connection string to the database in web.config is encrypted using the IIS config ...
3
votes
1answer
36 views

Internal IP addresses allowed access to all DMZ hosts

Hi basically I'm doing a vulnerability assessment for at the moment. The setup includes a DMZ with a single firewall and an internal network (3 legged network model employing a single DMZ) but on the ...
1
vote
0answers
42 views

How to retrieve type of device starting from its public ip

Given a public ip, is there a way to retrieve what's lying behind? I mean if I use nmap -PO 159.149.xx.xxx I am able to know if the device is alive (responding to ping) and which ports are open. But ...

15 30 50 per page