1
vote
0answers
3 views

Dynamic Key Management in WPA through Radius server

Can anybody tell me in detail (or provide good links), how the dynamic key management is done by the authentication server in WPA? In other words, let's say I gave my credentials to the authentication ...
0
votes
3answers
10 views

Is it possible to send HTTP packet via spoofed IP?

I have the following PHP code that writes accepted to a file named text.txt only if the IP is equal to 127.0.0.1 (loopback). If the IP doesn't match it writes denied. <?php $file = ...
0
votes
2answers
70 views

How can I execute shell in this CTF exercise?

I am playing a CTF wargame and unfortunatley got stuck at this level, so I want to "crowdsource" it. No need for complete answer, but hints would be enough. How can I: Make strcmp to be 0 (evaluate ...
-4
votes
1answer
49 views

Safest SQL database

I am going to run a Tor Hidden Service on a Linux server. My site will have an SQL database. This DB contains user login, and a few other basic details. If it makes a difference depending on the ...
0
votes
2answers
53 views

How do botnets not get caught when using Gmail accounts for spamming?

Botnets are Spamming through web-mail services like gmail.com,hotmail.com,etc. by compromising email-accounts I read a post from this forum about how online accounts are compromised. Following are ...
0
votes
0answers
15 views

Linux service on UDP ports under MITM or fuzzing attack

I am rather new to this forum but I will try my best to explain my situation. I run a game server for an outdated game called Project Reality. The community is rather small and the remaining servers ...
-2
votes
0answers
29 views

How do I find out what CA credentials certificates are OK to disable?

I need help with figuring what is OK to disable on my certificate's and what does Hong Kong really need to be there for?
3
votes
1answer
38 views

Is it possible to hack WPS PIN of routers that lockout exponentially after failed tries?

I have been interested in Wireless hacking lately, and I can do dictionary attacks, and some other type of attacks. Though, I wanted to hack my ASUS RT-N12D1 router's WPS PIN. ASUS doesn't alllow to ...
2
votes
1answer
24 views

Does applying updates fix router vulnerabilities?

I just found some vulnerabilities (CVE's) on my device at an firmware version. If I apply the update is it enough to solve the problem? It's about DIR-600.
1
vote
0answers
19 views

Translate token into cookie

I find myself in a situation where I need to hand a user off from a mobile application into a web application. The mobile application is using WebAPI on the backend with OAUTH 2. The web application ...
0
votes
2answers
27 views

File types and ways that can infect Android devices with malware

From what sources can an Android device be infected with malware? What various file types, executable or non executable, can infect an Android device with malware?
2
votes
2answers
49 views

Is it secure to use a part of the key as IV in AES?

I seen a lot of AES implementation samples wide spreaded over the Internet in almost every language I can recognize. There is one difference that I reflect to be repeated between all. Some of them ...
2
votes
0answers
19 views

Protocols for transfering access control data

The company I am working for has decided to create an API for a few of the products we create here (we create physical access control solutions, card readers, key storage, intelligent door locks and ...
-5
votes
0answers
31 views

PHP error in isset($_SESSION['hasLoggedIn'])

$_SESSION['loggedin']=1; $mem=$db->fetch_row($uq); $_SESSION['userid']=$mem['userid']; $IP = $_SERVER['REMOTE_ADDR']; echo '".addslashes($IP)."';"); $IP=mysqli_real_escape_string($IP); strip_tags ( ...
0
votes
0answers
25 views

Usage of gpgtar.exe on windows

i want to use gpgtar.exe from command line to pack some files in a archive and then encrypt them using gpg.I am using gpg4win 2.3.1 on windows server 2008 R2 and since this process is automated from a ...
3
votes
1answer
44 views

How relevant is OWASP ASVS?

How relevant is the OWASP application security verification standard? Have you had it as a requirement made by business? What other application security standards relevant to business are there? I did ...
0
votes
1answer
22 views

How authentication tag is calculated in AES-GCM-256

I have a sample code,which encrypt and decrypt a string using AES-GCM-256. I am unable to understand,how authentication tag is being generated on encrypter side and how is that being used on ...
2
votes
1answer
38 views

How much can an attacker do/obtain in PHP with the execution of one function?

I am collecting ideas to illustrate a case I've seen once where an attacker basically could get to a situation simplified as follows (not kidding): <?php $fcall = $_GET['fcall']; $fcall(); ...
-2
votes
0answers
14 views

Kali linux 2.0) Setoolkit Port Change Question

dear I want 1 Question , How use the 8080 port in Setoolkit, Copy Clone and harvaest my apache server open 8080 port Because ISP block 80 port. so, The first 0.0.0.0:80 -> 0.0.0.0:80/index.html -> ...
20
votes
4answers
2k views

Secure usb cable for charging in untrusted enviroments

On a long haul flight, I imagine that charging a phone (in flight mode) with the inbuilt usb port, on the head rest; would be a security risk. Could I mitigate that risk by taking a regular usb cable ...
1
vote
1answer
251 views

How to make sure that the public key has not been tampered with during transit?

I understand how public key infrastructure works. There is a private and public key, and someone may use the public key to encrypt data that can only be decrypted with the private key. However ...
1
vote
1answer
27 views

Password manager login with compromised certificates

This morning I booted my work laptop as usual and logged in to Windows, then my password manager (Dashlane, if it makes a difference) as usual. Opening up Chrome and browsing to a site with HTTPS ...
0
votes
1answer
31 views

secure ways to prevent access to an application by more than one person at a time?

If an application is licensed in such a way that is set up for one user, on one computer, how can I secure it? Even if locking into one computer, how could you prevent the computer from being ...
-2
votes
0answers
18 views

How to completely restrict a device to a proxy?

Company-owned windows laptops, also chromebooks, also win & android & ios phones and tablets. Used anywhere & everywhere: office, home, trains, planes, automobiles. Is it possible to set ...
1
vote
1answer
19 views

What are common methods to verify symmetric encryption keys?

How can I be certain the same key that was used for encryption? I have an encrypted payload. I use a key and the decryption algorithm to decipher it. I understand data will be returned whether the ...
0
votes
0answers
15 views

Securing FTP Creds in a Java Open Source API

I've written a basic Java API and source code must be released to a small community for the application to function correctly. The Java API helps developers track data for their running scripts and ...
-4
votes
0answers
38 views

How was azure apps website defaced?

Recently we had 2 different html place holder websites that are hosted on azure apps had their index.html file replaced with some script kiddies hacker page and the old index file was renamed to ...
3
votes
1answer
29 views

Explanation of modern PGP?

wikipedia states that OpenPGP is currently defined with RFC 4880 which defines a very simple process that doesn't seem like it represents modern RSA + AES encrypted email: The sender creates a ...
0
votes
0answers
33 views

Whatsapp and Viber information security

Is it possible for my ISP or government to MITM communication that I have made via one of these 2 services(I live in not so developed country) ? I think I am reasonably safe from attacks at transport ...
0
votes
1answer
36 views

Checking if my username X is the same guy as username Y

I'm creating a new alias online for creative works that I don't want anyone I know in real life to see, but I'd like it to be possible for online people to check that things copyrighted and licensed ...
-8
votes
0answers
24 views

Make Website more secure [on hold]

how I make my website more secure and protect it from hack. To my knowledge https is just to Encrypts data only to a hacker can't see data Any help, any solution.
0
votes
0answers
7 views

Attacker's Potential Scope of Dmg if He/She can SSH into Android Phone

I've recently started researching the ability to SSH into an Android device. From what I've seen, this is a figured out challenge, which makes me wonder how much damage an attacker could do. Let's ...
1
vote
3answers
61 views

Could these special characters be used in a password?

To use a good password, I was thinking about adding special characters. I remember that some login services don't allow all characters. Perhaps it depends also on the keyboard layout. Could these ...
4
votes
2answers
37 views

Is this codes usage of document.location.toString() a DOM based XSS vulnerability?

I have come across the following JS code in multiple web applications. I think the reason for the popularity of this code snippet is this accepted answer on SO. Developers seem to be using this code a ...
4
votes
2answers
117 views

Is there a reason why /proc/interrupts is world-readable?

Reading this recent research paper on how to use information from /proc/interrupts to attack a system, I was wondering whether there is a particular reason why /proc/interrupts is world-readable. ...
0
votes
2answers
53 views

What's the difference between Radius and Kerberos?

Is Radius just a better version of Kerberos? I can't find anything about this. If you set up a Radius server in a modern network do you need Kerberos at all?
1
vote
2answers
76 views

Should HSTS be declared on all assets, or just on HTML files?

I am curious if the HSTS response header should be declared on every asset of a sitewide secure site, or just on the HTML pages? I imagine it should be included on all assets including all JS, CSS, ...
-4
votes
0answers
92 views

This guy claims no need to apply any Windows update or use Antivirus! Do you agree? [duplicate]

He said only need to block all incoming connections and use Chrome sandbox. You can read his claim and his other replies over here: ...
4
votes
2answers
68 views

Is SWIFT (banking) Software Architecture Secure?

With all the news about hacking banks and stealing money from banks over SWIFT, while the vulnerabilities weren't directly related to SWIFT some questions arise: Are software components of SWIFT ...
1
vote
1answer
26 views

Decypt des-sunos5.7 ecncrypted file by using OpenSSL in Linux

One of the shell scripts in our old Solaris 10 server uses below command to decrypt a file. des-sunos5.7 -d -u -k password enc_filename.tar.gz dec_filename.tar.gz Now we are migrating to RHEL 6 and ...
1
vote
1answer
48 views

Can a DNS “route” change cause an SSL certificate error?

What I mean by "route change": As a working example, mysite.example.net is set up as: mysite.example.net. 3600 IN CNAME some-other-site.elsewhere.com. ...
0
votes
0answers
57 views

Need help in understanding packet analysis! [on hold]

The snapshot capture below contains a single HTTP request to a web server, in which the client web browser requests some files from server, and the server returns an HTTP/1.1 200 (OK) response which ...
29
votes
3answers
6k views

My WiFi network is replaced by another network. Am I being hacked?

To begin with, I am not very computer savvy. I am an older person with an older computer and a 2003 Windows XP using Google Chrome for a browser. (If anyone is old enough to remember when Windows ...
1
vote
1answer
59 views

Could Diffie-Hellman be used to stop people who knows the PSK from snooping on your WiFi?

One known problem with WPA2 is that anybody who knows the preshared key can snoop on the handshake and decrypt all subsequent traffic between any parties on the network. In the typical coffee shop ...
-2
votes
1answer
18 views

Key hierarchy structure

If I am going to use a master key to generate a session key, the master key must be "stronger" than the session key. For instance, I should not be distributing a 128-bit AES keys with a 56-bit DES ...
-1
votes
0answers
31 views

Technique to put highest privileges backdoor on compromised Linux machine and how to remove it? [on hold]

What are the techniques attackers use after they compromised a Linux server to put a highest privileges backdoor to get access back in future? How can I track this type of backdoor and remove it?
0
votes
0answers
21 views

Use MDC to provide origin authentication for public key encryption?

Why can't we use an manipultation detection code (MDC) to provide origin authentication when using public-key encryption?
0
votes
0answers
35 views

“Rollback process” for different penetration testing in case of something goes wrong?

In some extent, different kind of vulnerability assessment and penetration testing may impact on target system. I am looking for the solution/rollback process if something goes wrong during test. ...
1
vote
1answer
45 views

What to do with an APK file containing Swf.Exploit.CVE_2015_0323-1 and ELF File?

I received an APK file from a source. Prior to installation, I ran a virus scan on it. The result had following main features: The file contained Swf.Exploit.CVE_2015_0323-1 It required ...
0
votes
0answers
25 views

Why isn't ettercap working

I am working on an ARP poisoning/browser redirection project with Ettercap but even if I follow all the steps right it still doesn't work. I tried disabling firewalls too. What I do is: Start ...

15 30 50 per page