0
votes
0answers
3 views

How to keep a reasonable level of entropy in an encrypted file?

Encrypted (or random) data, by nature exhibit a high entropy value and non unencrypted data will exhibit a low entropy value. From an attacker point of view the precense of this high entropy value in ...
1
vote
0answers
12 views

Why do ISPs allow faked source IP addresses?

Ok so apparently you can specify a source IP when doing a SYN request or something. Besides just asking why in the world that would even be allowed, I will move past that because I want to understand ...
0
votes
1answer
13 views

Is accidental credit card fraud possible?

If a credit card transaction appears on your account, that you did not authorize, does it have to be fraud or could it be a glitch? For example, could the magnetic strip on someone else's card be ...
0
votes
0answers
7 views

I have patched openssl but QUALYS says I am still vulnerable to CVE-2014-0224

I am running a server with CentOS 6.5, patched to recent openssl updates via yum update ssl and with indications the current version indeed has the patch to the vulnerability. $ sudo rpm -q ...
0
votes
1answer
12 views

Is it possible to redirect someone to a fake site without changing the hosts file?

Is it possible to redirect someone to a fake site without changing the hosts file? When I access a bank site, I receive a fake page. But my hosts file does not have any changes to do this. Is it ...
3
votes
1answer
15 views

MongoDB Nosql injection in python code

Here is the code snippet for accessing to MongoDB. client = MongoClient() db = client.test_database collection = db.test # Get data from fields condition = form.getvalue('name') if condition: ...
1
vote
0answers
30 views

Why would home routers accept incoming DNS traffic?

I stumbled upon an interesting paper (PDF Link) where researchers found out that more than 58% of the DNS open resolvers that are blamed in DDoS attacks are in fact home routers distributed by ISPs to ...
1
vote
1answer
32 views

Can I create an application that can decrypt data but the administrator of the application cannot?

I have a windows application with a configuration file that contains some database passwords. I'd like to encrypt this data in such a way that my application can decrypt the data, but that the ...
5
votes
1answer
272 views

How is DDoS possible if you're not listening to the DoS traffic?

I've read about DDoS attacks and specially the amplification techniques. For example, the DNS amplification technique where you can send queries to open resolvers pretending to be the victim, then [if ...
0
votes
1answer
34 views

Making a Judgement on a User's IP Usage

We have a click exchange-type web application that allows users to receive stats boosts within a game. Stats boosts are based off unique IP addresses which poses a problem for users who use proxies or ...
3
votes
3answers
60 views

Can you sniff traffic to ip address from outside of your network?

I am not sure what it is called or even if it is possible but here is the scenario I am curious about: I login to a site that does not use SSL/TLS to do some work (unfortunately I must use this site ...
0
votes
1answer
20 views

Security tradeoffs while designing a mobile Web Service API

I'm not a security expert but I want to ask about tradeoffs in a web service API I'm designing for mobile apps. It is an API which tracks users' locations so yes, the data is reasonably sensitive. ...
6
votes
8answers
800 views

Is it possible to construct a passively self-destructing message?

Is it possible to construct a message that passively degrades over time without requiring an external factor to destroy it? Things that are similar, but not what I mean: A hard drive that degrades ...
0
votes
0answers
23 views

Use WebGoat on Windows 8 [migrated]

I need to use webgoat, but I can't install it on my Windows 8 computer. Do you know how to proceed ?
0
votes
0answers
24 views

How does Relative Path Overwrite XSS Work? [on hold]

I'd appretiate if anyone could point out resources and the inner working of Relative Path Overwrite XSS? Thank you!
0
votes
0answers
17 views

how to use generators 200, 201 and 202 of dieharder? [on hold]

I have a set of samples - of fixed length N bytes ( N>36) - issued from a RNG such as: (...) 10df8a18abf067931ac6b8256cea3211b8bac89fcd14399afdcf0e9feec2d89c6993fd83a5 ...
2
votes
3answers
77 views

SSLv3 HandShake but TLSv1 client hello

I am trying to understand the handshake protocol, when we had our ssl debug mode on we saw that the handshake is SSLv3, but the Client Hello as TLSv1. http-8443-14, READ: SSLv3 Handshake, length = 87 ...
0
votes
2answers
40 views

Source code disclosure vulnerability

I am a bit confused about the discussion here about hiding javascript source code. Let's say if I browse to a url like this: http://www.example.com/site/somejs.js and then what I see is something like ...
1
vote
3answers
60 views

Can a virus persist across Windows version upgrades?

It is possible for a trojan, which allows to secretly remote control a computer, to reinstall itself after upgrading to a newer Windows ?
1
vote
0answers
27 views

500 status code and sql injection [on hold]

A web application responds with a 500 status code when some special characters are submitted via the login form. Does it indicate an SQL injection vulnerability?
0
votes
0answers
22 views

How can I improve this Snort rule [on hold]

I am trying to create a snort rule for the Achat v0.150 beta7 Buffer Overflow Exploit. This is what I have so far; alert udp any any -> any 9256 ...
1
vote
0answers
10 views

Client Authentication with DH cert example using openssl command line

I want to perform client authentication with DH certificate from client side using openssl command line tool. when i am running server and client as below client is not taking certificate provided ...
2
votes
1answer
46 views

Secure database password stored in an env variable

I need to somewhere store my DB password on my production environment to access the DB. At the moment the prod system is deployed in the cloud, so is the DB. The password, the username and some other ...
0
votes
0answers
26 views

Certificate verification

I work on a desktop application which generates Security certificates. The Business use of these certificates is - they will be used as an authentication and authorization mechanism to enable users to ...
0
votes
1answer
42 views

How can I securely delete items in a database?

I know that to securely delete files on a system I have to apply some kind of secure deletion (overwritting empty clusters, for example). But when I want to delete some information on a database ...
0
votes
1answer
37 views

Can video feed be used to track location of an IP?

I dont know if it is possible but i read that while a user is viewing video, the location of user can be traced without sharing its knowledge to the user. Even when user has disabled the option to ...
0
votes
0answers
153 views

FREAK Attack: How to disable all EXPORT ciphers in OpenSSL?

As we all know all EXPORT ciphers in OpenSSL should be disabled so that we are not vulnerable to the FREAK attack. reference- ...
1
vote
0answers
9 views

Is LTV in a pdf required if it has a trusted timestamp and the Verification Authority is guaranteed to remain active?

I have successfully managed to add valid "qualified digital signatures" using a USB token to the PDFs generated by our web application through TCPDF. I am now wondering if I should try to add a ...
0
votes
1answer
54 views

Recent “attack” to my server that might be using shellshock exploit

I just notice this repeated entry in nginx log: 31.184.194.114 - - [04/Mar/2015:10:29:53 +0700] "GET /cgi-bin/up.cgi HTTP/1.1" 301 178 "-" "() { :;};/usr/bin/perl -e 'print \x22Content-Type: ...
-1
votes
0answers
10 views

Copy-and-paste buffer sharing security

I use several remote desktop technologies - RDP, RemoteApp, Teamviewer, and VNC. The other day, I went to paste something into an email and found a series of characters that looked Chinese to me. On ...
0
votes
0answers
46 views

Spy Software - Litigation - Help! [on hold]

I have been hacked by an ex using MSpy software and this went into two laptops a desktop and an Android Samsung Galaxy 4. I also know that they exploited child protections on Google Chrome, which ...
0
votes
0answers
33 views

Restrict website access

I want website (A) to only work if a visitor came by clicking a link from a specific other website (B). Initially I thought of using the document.referrer from website A to check whether website B is ...
0
votes
1answer
39 views

How secure is it to store information in Google products

I think many people have been gradually forking over more and more personal information to Google. I was noticing how I now have details about my doctor appointments stored in Google Calendar and on ...
1
vote
1answer
30 views

Can't stop getting spammed? [on hold]

My gmail account is getting spammed by random crap relentlessly. I've changed my password, reporting over 1000 emails as spam, but still they keep coming.
0
votes
0answers
22 views

Protection against Bad USB not working for me

Protection against bad USB as described in this thread by user 10008 in the top voted answer is not working on my PC at the moment. I tried it when trying to install Ubuntu from a Live DVD to a USB ...
1
vote
1answer
70 views

Can someone explain, in simple terms, how the FREAK attack on browsers works?

Is there a reason it only affects browsers on Windows machines and not Mac's or UNIX/LINUX environments? A lot of the wording on this site is particularly complicated and I don't understand fully what ...
0
votes
1answer
40 views

Is enough to remove “..” from strings to avoid directory traversal attack?

Lets say I want to build a simple PHP script that let me access files inside a folder: $path = $_GET['path']; $path = str_replace('..', '', $path); $path = "./static/" . $path; readfile($path); Is ...
0
votes
1answer
27 views

Intercept Android's http/https traffic with shell access [on hold]

Assuming you have a shell access on a rooted Android device. Let's say the shell was given upon an exploitation, eg. Android Webview vulnerability. The question is what is the best way to intercept ...
1
vote
2answers
86 views

Why are some attacks more famous than others (heartbleed, BEAST, POODLE, etc)?

Eg Heartbleed, aka CVE-2014-0160, only has a CVE severity of 5.0. Yet the media went crazy about these bugs. Is it because they have a cool name and a logo, or is the CVE severity metric somewhat ...
0
votes
0answers
31 views

Open source database of malware signatures

I'm looking for an open source database of malware signatures/hashes (if possible regularly updated and well documented) that I could use in one of my software for scanning a huge numbers of files ...
0
votes
0answers
18 views

Java Updates Restrict Unsafe SSL Renegotiation With Active Directory Servers

We have two active directory (AD) hosts, ead01.domain.com and ead02.domain.com; we also have a corresponding service domain, at eadauth.domain.com which round-robins between these AD hosts (via DNS). ...
-2
votes
1answer
53 views

Where should I start with learning web pentesting? [on hold]

I want to learn and practice for my future career. I've searched around for how to start out but they are mostly using tools. I wouldn't call that really legitimate. I want to learn everything ...
1
vote
0answers
18 views

what security features a good Email Service Provider (for marketing) should have?

To choose the right Email Service Provider (ESP) for e-mail marketing processes, what are security requirements and checklists that we should pay attention to and ask for from vendors? In other ...
0
votes
0answers
22 views

Malware Sandbox [on hold]

I see sandbox such as malwr.com analyse malware samples on the fly, so I want to try to do the same with android based malware (using androguard). Is there any easy way to make it work? Like have a ...
0
votes
0answers
13 views

Amazon Web Services - Relational Database Service - Security Scan

My company is utilizing AWS for it's infrastructure including Mysql RDS instances for our databases. Everything we have is in a VPC and requires access through our VPN. Our databases are all not ...
1
vote
2answers
44 views

Using DNS to track browser activity on a LAN

I am trying to create a small network auditing script that tracks HTTP and HTTPS domain names visited by certain hosts using the libpcap wrapper for Nodejs. At its best the script would be able to ...
3
votes
2answers
45 views

CSR Signing simulation

Tried a lot get my test csr signed from root CA(trial versions option), somehow i am not getting it dues to some of their internal check. Few questions that cropped up Can i somehow signed that ...
0
votes
1answer
49 views

Signature Based Malware Detection

I am developing software for detecting malware based on signature, in Java. I have researched a lot for the approach to move ahead. I found that the basic idea is to store the existing malware ...
0
votes
1answer
76 views

Can zip files be cracked if they were split into parts and only one part was available?

I am talking here about zip files that were compressed using basic protection and those using AES protection. In both cases, if only one of the many parts of the zip were available, will it be able to ...
2
votes
2answers
119 views

Is plain text over https really a good idea? [duplicate]

Sending plain text passwords over https is quite secure, the traffic is encrypted, making eavesdropping virtually impossible. However, once on the server side, it is still plain text. Of course, ...

15 30 50 per page