0
votes
0answers
8 views

Need help in understanding packet analysis!

The snapshot capture below contains a single HTTP request to a web server, in which the client web browser requests some files from server, and the server returns an HTTP/1.1 200 (OK) response which ...
1
vote
0answers
7 views

File size influence on cipher speed (AES-GCM) with OpenSSL

NOTE: I don't really understand the math/logic behind the ciphering process, so this question may looks silly and/or obvious for some people... but in any case, could you point me to an article that ...
0
votes
1answer
74 views

My WiFi network is replaced by another network. Am I being hacked?

To begin with, I am not very computer savvy. I am an older person with an older computer and a 2003 Windows XP using Google Chrome for a browser. (If anyone is old enough to remember when Windows ...
1
vote
0answers
16 views

Could Diffie-Hellman be used to stop people who knows the PSK from snooping on your WiFi?

One known problem with WPA2 is that anybody who knows the preshared key can snoop on the handshake and decrypt all subsequent traffic between any parties on the network. In the typical coffee shop ...
-2
votes
1answer
10 views

Key hierarchy structure

If I am going to use a master key to generate a session key, the master key must be "stronger" than the session key. For instance, I should not be distributing a 128-bit AES keys with a 56-bit DES ...
-1
votes
0answers
18 views

Technique to put highest privileges backdoor on compromised Linux machine and how to remove it?

What are the techniques attackers use after they compromised a Linux server to put a highest privileges backdoor to get access back in future? How can I track this type of backdoor and remove it?
0
votes
0answers
13 views

Use MDC to provide origin authentication for public key encryption?

Why can't we use an MDC to provide origin authentication when using public-key encryption?
0
votes
0answers
24 views

“Rollback process” for different penetration testing in case of something goes wrong?

In some extent, different kind of vulnerability assessment and penetration testing may impact on target system. I am looking for the solution/rollback process if something goes wrong during test. ...
1
vote
1answer
38 views

What to do with an APK file containing Swf.Exploit.CVE_2015_0323-1 and ELF File?

I received an APK file from a source. Prior to installation, I ran a virus scan on it. The result had following main features: The file contained Swf.Exploit.CVE_2015_0323-1 It required ...
0
votes
0answers
19 views

Why isn't ettercap working

I am working on an ARP poisoning/browser redirection project with Ettercap but even if I follow all the steps right it still doesn't work. I tried disabling firewalls too. What I do is: Start ...
4
votes
1answer
12 views

Is flushing of all caches on any context switch between mutually-distrusting processes the only way to prevent cache timing attacks?

This article demonstrates a devastating Javascript-based cache timing attack that allows for cross-VM tracking of mouse movements and other activities by web pages. Is the only way to prevent ...
0
votes
0answers
11 views

Providing identity verification via confirmed contact info to unconfirmed address w/o leaking information?

I emailed a known e-mail address for my local telecommunications/internet company about a complaint with their service. It appears the person I emailed forwarded this to somebody else in their office ...
0
votes
1answer
35 views

Use John the Ripper to permutate cases in one password?

I'm currently testing standard pentest stuff on a Windows XP SP3 VM. I managed to compromise it and saved the SAM file with the password hashes. I used ophcrack with the "fast and free" and "small and ...
-2
votes
0answers
24 views

Help to understand how secure server works [on hold]

In a secure server environment with numerous workstations does each workstation have its own hard drive? Where are the workstations activities stored? Thank you
1
vote
2answers
40 views

Login attempt password logging and obfuscation

I have a third party app that records the password from every login attempt (regardless of success or failure). Is this a standard operation and does it really serve any meaningful security purpose? ...
0
votes
1answer
39 views

How do I wipe a disk that DBAN can't read?

I have a Samsung 850 SSD that has recently been dying on me -- there appear to be some memory issues. I'm considering sending in the drive for replacement under the warranty program, but it contains ...
-2
votes
1answer
36 views

What are the risks of an open regedit.msc in Windows?

Curious as to what sort of damage can be done with an open registry. Is it worth it applying group policy that restricts registry edit access, or is this not necessary?
0
votes
0answers
10 views

Certificate not showing up for signing in Outlook

I have a new ECA certificate installed on my Windows 7 machine, but when I use Outlook it is not letting me change the signing certificate to the new certificate, but it does let me change the ...
-1
votes
0answers
25 views

Cost estimation tools InfoSec [on hold]

Any suggestions for resources for software licensing costs and resources allocation for info-sec tools. I recall coming across such resources in the past but I did not bookmark at the time
0
votes
2answers
35 views

Is there any added security/vulnerabilities if you allow a “trusted-party” to vouch you are legit, if you were locked out of your account?

I was reading this answer on a question. http://security.stackexchange.com/a/498/106817 Recently, at the OWASP AppSec 2010 conference in Orange County, Bill Cheswick from AT&T talked at ...
2
votes
1answer
65 views

I am being DDoSed for no reason, how can I protect myself?

I recently experienced an unprovoked DDoS attack with a speed of 8Tbps against my website from over 80k unique IP addresses and I was wondering is there any way to protect myself against these ...
0
votes
2answers
28 views

How is JSESSIONID determined in this CSRF test?

I'm working on testing CSRF protection for one of our webapps. We have a test case like the following: <!DOCTYPE html> <html> <head> </head> <body> ...
-6
votes
0answers
17 views

What security requirments do all organizations face? [on hold]

Thinking about what minimum security may be required for all types of organizations. What do you think?
0
votes
0answers
57 views

How do I securely encrypt and store database encryption keys? [duplicate]

I have a database with encrypted information, and want to encrypt each entry with a different key. Then I want to store the encrypted keys in another database. I know I have to encrypt the keys before ...
-1
votes
0answers
31 views

What is elliptic curve cryptography and how does it work? [on hold]

What is elliptic curve cryptography and how does it work? Why is is usefull and how does the computer process it?
2
votes
2answers
32 views

How do I handle HTTPS certificates for a device with dynamic IP?

I'm fairly new to HTTPS and therefore risk this being a dumb question. I have a server hosted on my Raspberry Pi that allows me to configure it remotely, over a network and I'd like to convert to ...
3
votes
2answers
112 views

Is it safe to not update Windows if you dont accept any incoming connections?

I see this guy shared his thought: How to be safe even without most updated Windows updates So he claims that as long as you do not accept any incoming connections and just use sandbox of Chrome, ...
0
votes
2answers
59 views

ECDH Man-in-the-middle active attack

We have Alice and Bob. The man in the middle can manipulate(remove, add something etc.) A sent from Alice and B sent from Bob, how can he figure out what the common key K(A,B) is, without knowing ...
2
votes
1answer
93 views

How can Windows 10 not have the password in memory?

I have read that Windows 10 does not hold the password in memory from the creator of mimikatz: Starting with 8.x and 10, by default, there is no password in memory. Exceptions: When ...
-6
votes
0answers
12 views

(kali SET)Why not connet another network and Why not write keylogger in (.txt) ??? [on hold]

SET version 7.1.2 [] Cloning the website: https://login.facebook.com/login.php [] This could take a little bit... The best way to use this attack is if username and password form fields are ...
11
votes
3answers
3k views

Is a concatenation of random numbers better than a single random number?

We are generating random numbers 16 digits in length. One option that was put forward was to generate four random numbers of 4 digits each and concatenate them instead of just generating a single 16 ...
1
vote
1answer
81 views

Is it acceptable for customer service to ask for my PIN?

I tried to initiate an online chat with customer service of a company I am trying to do business with this weekend, but before they would answer any of my questions they requested that I give them the ...
0
votes
0answers
15 views

meterpreter/reverse_tcp handler other then metasploit's handler [duplicate]

Actually i am getting the error on metasploit handler "Connection reset by peer ssl_accept". On investigation, I came to know that I was running my powershell payload using powershell.exe (32 bit ...
2
votes
1answer
31 views

Is there any effective server-side prevention technique against PHP-aided CSRF?

I'm gonna start by saying it: I'm merely a cybersecurity enthusiast, not an expert. Thus, I'm gonna state what I think I know so far, please feel free to correct me at any time. Through my readings, ...
0
votes
1answer
22 views

Are there any tools that you recommend for mobile app security testing? [on hold]

I’ve had experience with HPFortify, Veracode, and Checkmarx, however, I’m looking for something that will integrate with our CI, is fast enough to keep up with agile practices, and won’t make the CFO ...
0
votes
0answers
16 views

How can I use unique PKI from host to client

I have hundreds of machines i would like to have unique credentials/certs on. I also have a even more cell phones i need to run diagnostics on the machines. Is there a way i can do this? I will also ...
-2
votes
0answers
33 views

What are the best testing tools for SQLi (apart SQLmap)? [on hold]

I'm testing SQL vulnerabilities on my website with SQLMap, and i'm wondering if there were other tools maybe not as famous as SQLMap but with other features or testing input. Thanks
2
votes
1answer
24 views

using netcat as a handler for windows/meterpreter/reverse_tcp payload

How we can use netcat as a handler for windows/meterpreter/reverse_tcp payload. I am getting the connection but unable to run any command.
4
votes
0answers
34 views

Share diffie hellman group between servers

I'm deploying several servers with TLS. The servers are different but related and each having their own certificate generated by letsencrypt. And to up the security I'm generating my own diffie ...
2
votes
3answers
131 views

Sending sensitive infromation via self destructing link in an email

I need to come up with a simple way for people within the company to send out arbitrary sensitive information to arbitrary recipients. There is an equal chance that the sender and recipient will be ...
-6
votes
0answers
46 views

I have to decode this Base64 value [duplicate]

This is the Base64 value which needs to be decoded and do tell me how to do it because i also want to learn: DJkfVUyiqKVtLzSmMFOupzHtLzIfo25aVUEiVUIm
0
votes
1answer
53 views

Possible to take hash from know result and algorithm?

I am trying to build a casino site in PHP where users can play roulette. I found this algorithm that I want to use to "roll" numbers: <?php $secret = ...
0
votes
0answers
37 views

SQL injection in find_by Active Record RoR 4

I was trying to understand the possibility of SQLi in a Rails Application, that I am currently auditing for a client, that uses Active Record 4.2.0. Now, I have limited experience with RoR so please ...
1
vote
0answers
31 views

What is the current consensus on storage of primary credentials or long-lived cryptographic tokens?

The problem: some environments need to use plain text credentials or long-lived tokens in order to unlock a specific functionality. Examples include third party legacy services which need a ...
-2
votes
0answers
27 views

Difference between card replacement / renewal / reissuance [on hold]

I want to know exact Difference between card replacement / renewal / reissuance when card is reissue but not renew or replace which are the fields get change in above 3 scenario
3
votes
1answer
26 views

Change LUKS encryption key (not passphrase) without dataloss

You can change the LUKS passphrase without dataloss, but can you also change the actual key? I reckon you would have to re-encrypt the whole disk, but that would be acceptable to me. Background We ...
1
vote
0answers
48 views

Access encrypted partition from Linux and Windows [migrated]

Just to be clear, I'm a security noob. I have a Linux (openSUSE Leap 42.1) and Windows (10). I made the home partition of the Linux encrypted but now I cannot access it from Windows. The only ...
-3
votes
1answer
39 views

Intercepting Thick client applications over HTTPS

is there a way to intercept and do pentest on thick client applications which are running over HTTPS?
7
votes
7answers
3k views

Would an encryption scheme that generates an extra key to be securely stored offsite be a safe backdoor?

Let me be clear first and foremost: I do not think installing a backdoor in security algorithms is a good idea. They undermine the trust in the software and in the company that provides the service. ...
0
votes
2answers
38 views

What is the purpose/role of the “alias” attribute in Java keystore files?

I've heard conflicting information about the purpose of the alias attribute in Java keystore files. Can someone please clarify on what exactly this attribute is, and what it should be set to when ...

15 30 50 per page