0
votes
0answers
2 views

How does this wordpress XSS work?

There is a new Wordpress exploit in wp-includes/formatting.php $textarr = preg_split('/(<.*>|\[.*\])/Us', $text, -1, PREG_SPLIT_DELIM_CAPTURE); General problem here is that they try to parse ...
0
votes
1answer
13 views

What is the difference between YARA and CLAMAV?

Can any one explain the difference between YARA and ClamAV ? Are they just two different ways of writing AV or Malware signatures ?
-2
votes
1answer
13 views

PHP get_file_contents & curl

These two are the functions can capture remote address, for example this is a social network site example.com/user?privacyemail.php, this site is containing email of user or some kind of private info, ...
0
votes
1answer
10 views

Wildcard DNS entry from a security PoV

We are going to release our new product which will have customers create their own subdomains. This requires having a wildcard DNS on our main domain (We have no other options, right?) Are there any ...
-2
votes
2answers
29 views

Wireshark and Playstation 3

Im looking to capture all network traffic when playing my ps3 and find the external IP addresses of other players in my servers or game. Im wondering if this is possible ? if so how?
0
votes
4answers
46 views

Is converting `<` to `&lt;` sufficient to prevent execution of JavaScript from arbitrary HTML?

This is kind of a bar-bet question. An acquaintance of mine has made the claim that, given an arbitrary glob of HTML, it can be completely prevented from executing JavaScript if, before slapping it ...
0
votes
0answers
9 views

cross-signed end-entity certificates: usage in apache/openssl/gnutls

A previous question, What is the use of cross signing certificates in X.509? described cross-signed certificates well. I have a situation where the clients trust CA1 xor CA2, and both need to reach a ...
0
votes
1answer
15 views

What is 0xXXXXXXXX.asc.sig and how can I generate this?

When I am exchanging PGP keys with someone, I receive the regular 0xXXXXXXXX.asc file and regularly receive a file called 0xXXXXXXXX.asc.sig. What is this file? How can I generate one and send it ...
0
votes
1answer
35 views

Clicked link on fake email which appeared to be from friend

I receieved an e-mail which at first glance appeared to be from a friend, I clicked on the link provided without thinking as we would often exchance links to sites. The link went nowhere i.e page not ...
10
votes
2answers
705 views

Can JavaScript be used to capture users screen?

Can JavaScript be used to capture users screen, and if so, is this functionality available in any JS framework? (I do not need code examples - I am mainly asking to form an opinion about the security ...
0
votes
0answers
20 views

Why is the public key extracted from the CSR different than the one extracted from the associated certificate?

I am playing around with pyopenssl. I am trying to extract the public key from a CSR and to check if it is the same than the one I find in the associated certificate. There is a small difference ...
-4
votes
0answers
35 views

Pentesting in PHP [on hold]

I intend to learn PHP and servers (I am oblivious of all web technologies currently, despite working as a programmer). My current progress is querying client's IP and ISP using $_SERVER['REMOTE_ADDR'] ...
4
votes
1answer
71 views

What is the best way to store password in memory (RAM) in Java?

Imagine there is a login form in Java application. We need assign usename and password to variables. Moment after we can Hash or HMAC password and keep it just for authentication step (no caching). ...
2
votes
1answer
31 views

Do I need to save the IV generated to the database?

I see plenty of answers for what and how to use IV. But is it important to keep the IV saved for decryption? I would think so, but I haven't seen anyone saying anything about this. If you want a ...
0
votes
1answer
49 views

Finding the location of this Strange Virus, if it is one! [duplicate]

Despite several attempts listed below certain websites are getting redirected to a certain ad website automatically, out of the blue on linux. When some website starts redirecting to this ad website ...
0
votes
1answer
56 views

Open source alternatives to tamper data

I'm developing a browser(firefox) plug-in which essentially checks for malicious input. My current approach is to store all input fields sent in GET/POST requests, try to heuristically determine ...
0
votes
0answers
9 views

Sliding expiration with oauth

We are developing a multi-tenant website with an SPA front end and a rest api backend. We have a mobile version planned after the first release of the SPA. I am working on the authN and authZ piece, ...
0
votes
0answers
14 views

Federation Service to Azure with users from trusted domain.

I want to set up a website on Azure according to the following requirements and are wondering if it is even possible? As a internal team member, I must be able to login to the site with Windows ...
8
votes
3answers
1k views

Are photographs of fingerprints security flaws?

It should be trivial to get fingerprint patterns for many of the most important people in the world, as they frequently (enough) wave their hand, palms forward, to many HD cameras. Is it possible to ...
0
votes
0answers
28 views

Cyber security ontology [on hold]

I'm trying to build a cybersecurity ontology graph, starting not from scratch would be helpful. Anyone have the knowledge of an existing open cyber security ontology (taxonomy), it would be very ...
-4
votes
2answers
62 views

Which is more in demand Web or Wireless pen-testing.? [on hold]

I am familiar with both and wanted to know what company's are most interested in and will pay the most for. Please do not down vote this question, I think it is a good question for people who want to ...
-1
votes
1answer
50 views

Weird characters from contact page [on hold]

We've just recreated a contact form on a HTML webpage. We've implemented Google reCaptcha to prevents bots and spammers from abusing the form. We've received some feedback from our client, saying ...
2
votes
2answers
108 views

With HTTPS, what information would a MitM attacker be able to glean?

Consider a user accessing a site that is using HTTPS for all its traffic. A hacker is trying to use a man-in-the-middle to snoop on the user. What information can he glean? Obviously the content is ...
0
votes
0answers
24 views

IIS server get flood [on hold]

I've build one application for a company. It's a client side windows application. In that application, I am sending data to a server using a TCP port. That process is working fine. But, suddenly! that ...
1
vote
2answers
25 views

ISAKMP and OSI layer

I'm trying to find out on which OSI layer the ISAKMP protocol resides on? It isn't listed under the wiki's list of network protocols, and the internet says it's either on the transport, network or ...
0
votes
0answers
36 views

What's the difference between authorized_keys and authorized_keys2 [on hold]

For many years I have used ~/.ssh/authorized_keys2 file to store my public ssh key on the servers, sincd they are set up to use ssh version 2. I just found out that there is a nifty tool that ...
2
votes
3answers
150 views

Company decrypting SSL, is it common?

We've just implemented a proxy that decrypts all SSL traffic in order to classify and scan it. Naturally a lot of our users feel concerned. We're a small company (100 users) owned by a big company ...
0
votes
4answers
80 views

Basic question about why it's useful to have VPN encrypt traffic

There may be a basic flaw in my understanding of how the internet works so sorry if this is a simple question. What type of attack does VPN protect against? For example if a local area network (let's ...
13
votes
3answers
2k views

Is too long salt reducing security of stored password hash?

Suppose we have statistically 7-8 characters long passwords. Is appending a 200-characters long salt less secure than 5-characters salt, because of similiar hash function inputs? I was wondering, ...
5
votes
4answers
131 views

Are there any disadvantages to encrypting the password hash?

Is encrypting the password hash in database more secure than storing only the hash? Suppose we store encrypted SHA-256 result with AES instead of hash directly. Is this a good protection from a ...
1
vote
1answer
28 views

Android/iOS application security testing checklist

According to OWASP, we have a list of top ten mobile application vulnerabilities. But we are damn sure that the number of vulnerabilities on mobile apps, especially android apps are far more than ...
-4
votes
0answers
17 views

Longitude and Latitude in iOS mobile application [on hold]

I have one requirement from my project working - native mobile application "User is not in the internet connection mode, try to manually enter the address (street name, number, district, zip code). ...
33
votes
7answers
4k views

Can a lock picker slowly undermine the security of a deadbolt door?

I have a space for computers secured with a simple deadbolt. Someone keeps coming to pick the lock. While working there, I have scared them away three times. There are cameras, but not in useful ...
0
votes
0answers
27 views

How can a VPN use a virtual router and not send encrypt traffic and still be safe?

Today in networking class we were talking about VPNs. The prof got on topic of virtual routers and said that a way some VPNs work is by a client would purchase the service from the ISP and the ISP ...
0
votes
0answers
14 views

OCSP stapling: Staple just my domain/root CRT, or Combine/Concatenate including Intermediates?

I cant seem to find a specific well documented resource on this question. Should I staple just my domain/root CRT, or staple my combined crt (Combine/Concatenate file which includes my root cert plus ...
0
votes
2answers
50 views

Is there a way to make Tor network your full VPN?

Is there a way to use Tor network as your VPN, proxy or something alike? I have been gone to their website but I've seen just browser (Tor Browser), bridge, relay and exit. Is there way to tell ...
0
votes
0answers
27 views

Source code for Defense Techniques [on hold]

I just want to ask if anyone know how to get the source code of these techniques: Libverify & Libsafe: https://www.usenix.org/legacy/events/usenix2000/general/full_papers/baratloo/baratloo.pdf ...
3
votes
2answers
71 views

Choosing TLS / SSL cipher suites - What considerations are there?

Most of the advice on choosing cipher suites I find tends to be one of these forms: Here's a string to paste into your application, or Here's a list of 30,000-foot generic criteria to use ("favor ...
-4
votes
0answers
18 views

Unix access control List for Process and android [on hold]

can I take some help for my questions?
1
vote
1answer
21 views

What does “hosts-modifier” tag in VirusTotal Intelligence means?

I went through the help pages of VT and VT Intelligence, saw documentation about most tags, but couldn't find anything about the "hosts-modifier" tag, can anyone explain to me what does it mean?
0
votes
3answers
139 views

How strong is a simple XOR encryption with random IV?

I'd like to implement some kind of simple (yet as strong as possible) encryption for my client-server application network traffic. Data to be encrypted can be both textual, and binary. Now I'm ...
0
votes
1answer
40 views

Is there a protocol for securely trading information between possibly uncooperating agents?

Is there a protocol or best practice for trading information between parties where one, after receiving his share of the information from the others, might refuse to answer or might alter his answer, ...
0
votes
1answer
75 views

How secure credit card order system with blank mail

I want to know how to secure credit card order with blank mail. My boss instructing to create new site like as below: 1) User send "Blank e-mail" to new site. 2) The site returns mail including ...
0
votes
1answer
61 views

How to identify which storage USB device is BadUSB-free at store?

Are there certain things I can look for when buying a new external hard drive or flash drives to ensure that the one I purchase does not contain BadUSB? Would popular commercial brands, such as ...
0
votes
1answer
63 views

How do I view a list of known unpatched windows xp arbitrary code execution vulnerabilities? [duplicate]

I know there is secunia and cve.mitre and ms kb database but I could not find a way to filter results only for operating system "windows xp" (or 2003 server, they share about the same code) with ...
0
votes
0answers
28 views

Is it possible to intercept traffic by using a WAN facing DHCP server on an ISPs cable network?

I am running pfSense on an edge firewall conncted to a cable line. I can see many DHCP requests hitting my firewall. I guess this requests are getting send by cable modems currently booting up and ...
0
votes
1answer
67 views

Why does this CSRF vulnerability work?

Recently Laravel 4 was updated to address a security concern: there was a CSRF vulnerability in their code. Here's the old code: if (Session::token() != Input::get('_token')) { throw new ...
-1
votes
0answers
7 views

Pages, groups or forums suitable for publishing a Location Privacy Survey [on hold]

I am doing my thesis regarding to location privacy in online social networks. During my work, I have prepared a survey and need to publish it online. I have considered some groups in Facebook to ...
0
votes
0answers
28 views

Capture a packet at the MAC layer [migrated]

I want to implement a security solution similar to MACsec that captures a packet in its entirety (including the MAC header) at an intermediate network node (e.g linux based switch), perform some ...
0
votes
1answer
64 views

Why does my TLS configuration not work with IE 8 / XP? [on hold]

After all the last news about TLS/SSL faults and problems, I'm working on strengthening our TLS config — yes, I dropped SSL; at least, that's something. The main effort is to enforce, as much as ...

15 30 50 per page