0
votes
0answers
3 views

Syslog pull method instead of push [migrated]

I'd like to know if it's possible to pull logs with Syslog (rsyslog or syslog-ng) instead of push. Thanks for any help
0
votes
1answer
8 views

PHP registration script, how to check if request is coming from a credible source

I've got a php registration script, that just takes all the data as a post request. I've got another page which sends that data to the script using jQuery ajax. How can i be sure, that the request ...
0
votes
0answers
6 views

What should I do when my warnings are ignored?

If I've discovered a vulnerability, and disclosed it to the website/app's developer, how should I proceed? I gave the developer ample time to address the issue, as recommended by this and I know I ...
0
votes
1answer
8 views

Why use XOR or OR operator for “bypass” a conditional jump

I'm currently working on a challenge on root me but had to read the solution on internet because I couldn't progress anymore. I read this article which talk about the challenge I'm currently working ...
0
votes
1answer
17 views

SQL Injection vulnerability identification using URL's GET param

I would like to learn to identify if a website is or may be sql injection (SQLi) vulnerable, without using any tool such as sqlmap. I have read something about it, but I would like somebody to confirm ...
0
votes
0answers
7 views

Public key decryption mathematical analogy [migrated]

To clarify, I'm talking about digital-signatures, not public key encryption. When I encrypt something with a private key, then it should be decryptable with a public key, as I've understood how ...
0
votes
1answer
17 views

What's the point in “authentifying an application” with its domain name against a db?

As a self-taught discovering professional development, I daily run into things that puzzles me. Simply put: I'm supposed to work on an old ZF1 application (with really ugly code, imbricated ternaries,...
1
vote
0answers
4 views

Netgear Administratrive distance

Not sure if this is the right stackexchange forum though I am using Netgear WNR1000v2 running firmware version 1.1.2.58. Open authentication is enabled, so no password is required, and only used for ...
0
votes
0answers
41 views

How secure is Wire?

I have stumbled upon this replacement for Skype, which claims to take privacy seriously. They recently open-sourced their client-side code. Is Wire secure? What data can be intersected and read by a ...
0
votes
1answer
21 views

How does the symmetric key get exchanged in SSL/TLS handshake?

I've been reading a lot about SSL/TLS handshake between a client and a server and many articles on it are very contradictory. Some say that the symmetric key that will be used to communicate between ...
0
votes
2answers
18 views

Why SPAM mails have UK Contact Addresses and Emails?

I've seen a similarity in most of the SPAM mails I receive, that majority of them are sent from Hotmail accounts and specifically from hotmail.co.uk domain. Another thing that I noticed is, the ...
0
votes
2answers
55 views

Encryption - RSA vs. AES

I have a question regarding encryption and whether to use symmetric or asymmetric encryption. The idea is to implement a form of data encryption in a variety of software. This data will be exchanged ...
-1
votes
3answers
88 views

How hard would it be to crack bcrypt hashes if the salt is unknown?

Let's say an attacker has offline access to a database in which passwords are hashed with bcrypt (no pepper added). The hashes look like: $2y$10$H0mRpD2XJZDguAzxTehwzunRkjUR8lB3O4UGrAGLiqJuvnlWjFA7G ...
-1
votes
1answer
44 views

Can I reset a password, install a few programs, and restore the old password in Windows 7? [on hold]

I have a computer I need to install some programs onto. It is a company computer, but I need to fix it with a couple programs and they will not share the password. Thanks in advance and sorry if I ...
0
votes
1answer
28 views

How to adapt my exploit strategy when “00” is part of the targeted return address and the victim uses strcpy

I intend to exploit the following program on an x86 Linux machine with NX enabled (ASLR and stack canary disabled). The goal is to get a shell. //vuln.c #include <stdio.h> #include <string....
0
votes
1answer
35 views

Google Chrome is redirecting before visiting a shopping website

I notice every few days (~5 days) that when I try to open an Amazon.in URL, before opening that URL, Chrome opens a different link which looks like an affiliate link. This link redirects to the actual ...
-1
votes
2answers
65 views

What are the odds of someone modifying binaries downloaded over HTTP?

I recently read that most software available on the Web isn't sent over HTTPS (even if the link is on an HTTPS page). This means that the binaries downloaded were never authenticated and could in ...
1
vote
1answer
53 views

How is a root certificate revoked?

I know that CAs use intermediate certificates to mitigate the impact of potentially having to revoke a root CA (i.e., the need to update all browser clients on peoples computers allover the world). ...
0
votes
1answer
21 views

public key Infrastructure hierarchy

I was studying about Public Key Infrastructure. Here I have a table of issuer and subject, Which looks something like this: Now I am stuck at a place. I need to draw full PKI hierarchies as trees ...
0
votes
1answer
14 views

Offset in Stack

Offsets in buffer overflows I can't seem to get a grasp on. Here is a quote from the book I am reading about this topic. The address of the variable "i" in main()'s stack frame is used as a point ...
0
votes
1answer
42 views

How to secure Web directories allowing only me to acess them

I have a web folder with some PHP files that are hosted in my website(e.g. www.mysite.com/myfiles/my_file.php) that I access and trade information using ajax for a Web App that I have. My question is,...
19
votes
4answers
2k views

Are security flaws acceptable if no much harm can derive from them?

Recently, I have discovered a security flaw in a business website. This website has a password-protected "Partners Area", and like many websites it provides a form to reset the user's password. When ...
-3
votes
1answer
45 views

SQL injection when the password has a MD5 hash

Whenever i put username = ') or ('a'='a' password = any string It shows the . MD5 is converting my sql string into some hexadecimals. so is there any way we can bypass it? Also why can't we see ...
0
votes
1answer
58 views

What do think about this multi-factor authentication system made by me? How can I improve it?

I designed an authentication system as a project for a cyber security class. I want you to critique it please. Here is a quick explanation: Note: Sorry no images but I'll provide links to videos for ...
0
votes
1answer
36 views

Potential consequences of signing software that's not mine

I want to teach my son to not click unsigned software. Unfortunately there some software that's highly useful (e.g. Search Everything, but it could be any other software) that's not digitally signed. ...
0
votes
0answers
43 views

Browser Autopwn2 Unable to exploit Firefox 47.0.1

Virtual Appliance: VMWare Workstation 12 Player Local VM: Kali Linux 2 Remote (Victim) VM: Windows XP Browsers on Remote VM: Firefox 47.0.1, IE 6 This article explains Browser Autopwn2 exploit. I ...
0
votes
1answer
17 views

Firewall Packet Filter Query

I was reading about firewalls and I have this query. Is each firewall a packet filter? Why or why not? I know that the first generation of firewall's were essentially packet filters, but how does ...
0
votes
0answers
16 views

Is using passfifo secure if I don't want my passphrase to be captured?

This article indicates how to decrypt remotely a LUKS partition using passfifo. Quote: ssh -o "UserKnownHostsFile=~/.ssh/known_hosts.initramfs" \ -i "~/.ssh/id_rsa.initramfs" root@remote.server \ "...
0
votes
1answer
36 views

Command and Control Infrastructure

This is an academic question, I Googled a lot but couldn't find suitable answers for the question. What are the di fferent Command & Control infrastructures (Botnets) & what are the ...
0
votes
0answers
14 views

Bypassing SafeSEH in application without unprotected modules

I'm trying to write an exploit for a vulnerable Win32 application, which has DEP, SafeSEH and stack cookies enabled. I can write anything to the stack, as there is buffer overflow vulnerability in an ...
1
vote
2answers
60 views

Is wget'ing a single HTML file basically free of risk?

There is a lot of potentially malicious stuff on the web. In fact, there are so many things that can happen that browsing to a location you know nothing about can be dangerous, like http://www.example....
0
votes
1answer
39 views

EBP bypass problem

I am kinda new to exploit development using buffer overflows. I've come across a sample code in one book I refer to, and the sample code doesn't execute properly. Here is my code... #pragma ...
0
votes
0answers
20 views

Cleartext credentials proxy logs [on hold]

I am wondering if anyone thought about this. Obviously, checking HTTP GET and POST method calls is the starting point. Is there anything else other than username:password format that should be ...
0
votes
2answers
48 views

How does software developer protect their code against binary patching?

Supposing we have a software that checks on a remote server online if the input entered by a user (a license key) is valid. The server sends in a socket to the client True or False if the license is ...
0
votes
1answer
19 views

Session id remain same after and before logging in asp.net application

Before logging in to the asp.net application, i checked the headers and there was already a session id in cookie header cookie: ASP.NET_SessionId=3de0es3brpfbcmvkzhkidsmt And when i logged in to the ...
1
vote
1answer
51 views

How safe is to leave a open port on router without anything listening to it?

I'm using plex remote, and I have a double-NAT on my local network, so I need to open ports on the two routers. As far I know, I have made secure connections to be required. And I don't plan to ...
7
votes
1answer
862 views

How can I determine (as a layman) if an E-mail was set to self destruct?

I tried to access an old E-mail to print for a court case only to find there is no content. I checked on all my devices and outlook account. The E-mail in question is from a gmail user and I have ...
0
votes
2answers
75 views

How TLS certificate chain is verified

Assume the verification of a TLS certificate chain. Suppose the chain has certificates A-B-C-D where D is the root certificate and A is signed by B, B by C, C by D. Suppose the intermediate ...
0
votes
0answers
4 views

Iterate through and decode Dot11Elt layers — Scapy

OBJECTIVE I want to iterate through the Dot11Elt layers of a beacon frame that I captured with Scapy. I also want to decode the .info of each ID layer. def packet_handler(packet) : if packet....
-2
votes
1answer
40 views

Not sure if I have got a virus [on hold]

About an hour ago a friend of mine sent me a suspicious link on Skype. It was a 'Goo.gl' link with my username in the url. I accidentally clicked on it and think I've gotten a virus. However I'm not ...
0
votes
1answer
53 views

How to Edit Malicious Webpage in BindTCP

I'm studying Ethical Hacking, using BindTCP on Metasploit, Kali Linux. This video shows the steps, and I successfully exploited an unpatched Windows XP running a vulnerable IE 6 (on my personal ...
-1
votes
0answers
31 views

Malware from TPB(piratebay) infected my pc. I need to transfer my data into external hdd before wiping my hard drive [migrated]

OS: Windows (Primary), Ubuntu (secondary). Few days back I was using TPB(piratebay) obviously for educational purposes,even though I have ad-blocker at the time of browsing some advertisement did pop-...
0
votes
0answers
24 views

Client side encryption over SSL

I need to handle hyper secure data collected from webforms on a site. I was thinking of using whole site SSL encryption with client side encryption of the forms data. Due to a higher than usual risk ...
0
votes
1answer
39 views

understanding where tor interferes (screenshot)

with just goal to better understand where tor interferes and where it hides my browsing from ISP, please look at this picture which just explains how to computers communicate. You can check on step ...
0
votes
1answer
14 views

Can 802.1X, EAP and RADIUS work together?

So this is an academic question I came up with while researching the topic. Can 802.1X, EAP and RADIUS work together to provide a secure authentication? If yes, how? Thanks!
0
votes
0answers
19 views

Iphone 6s/ Ipad mini won't connect to proxies? [on hold]

I've tried charles proxy and fiddler. I'm not really tech-savy, and the tutorial mentioned something like using an app that uses connections for charles/fiddler to detect for confirmation, but before ...
0
votes
1answer
9 views

Can software keyboard add security to decrypting FDE'd Drive

Having a LUKS Full Disk Encrypted Linux installation means that I need to input my decryption password before the Operating System can even start. This will require me to use a hardware keyboard on ...
-5
votes
4answers
115 views

Keeping passphrase away from telepathic interception [on hold]

Assuming that someone is able to telepathically intercept thoughts and words in my mind, what mechanism will allow me to authenticate securely? A solution that does not yield to physical search or ...
-2
votes
0answers
15 views

What is the use of TCPoptimizer? [on hold]

So,I have Windows 10. I switched off update option,so my bandwidth will not used by Microsoft by default. Then I made some changes and used TCP optimizer. SO which is more effective? switching off ...
-1
votes
0answers
7 views

Knowledge base solution access [on hold]

Presently working on a knowledge-based solution platform which I want to be accessed both online /offline via data and sms by searching keywords.... Please I need help with regards to the offline(sms) ...

15 30 50 per page