0
votes
1answer
14 views

Problems executing shellcode via nop-sled

My shellcode instructions are changing during execution. I'm not sure why. Here is what my shellcode looks like: => 0xbffff0b3: nop 0xbffff0b4: nop 0xbffff0b5: xor eax,eax ...
1
vote
1answer
13 views

Best way to scan for an eliminate earlier versions of SSL/TLS in a production environment

Due to new PCI DSS standards mandating that nothing lower than TLS 1.2 be used in a PCI environment, I am tasked with phasing out anything lower than TLS 1.2 on every device in this environment by our ...
0
votes
1answer
9 views

Integrate POS client with HSM Luna

I want to integrate and test a terminal device (PED) with HSM Luna. But I'm not able to understand steps clearly, as to what is done when a new device is integrated. Can anyone please help with this. ...
3
votes
2answers
40 views

Wordpress infected with Trojan

So recently our (VPS CentOS6.5) server began hosting a WP site that was, or became, infected (via revslider plugin) with some kind of trojan (probably spam sender, as we ended up on Spamhaus list very ...
0
votes
2answers
32 views

Difference between brute-force and dictionary-based in the mitigation process of the IPSs

I am working with Bro IDS and CIF ( cyber threat intelligence) using the Intel framework I am testing. How can I mitigate brute-force and dictionary-based attacks? I found that the mitigation ...
3
votes
1answer
410 views

download file/folder anonymously on a ssh session

I rent a paid VPS hosted online and want to transform it to a sort of treasure chest where I can upload and download files privately. For this purpose I want to do this operation over the Tor network. ...
4
votes
1answer
144 views

Are there any known cases were antivirus software have deliberately ignored malware?

Are there any known cases were antivirus companies for some reason have choosen to make their product allow/ignore malicious software? The reason could be government coercion or former trustworthy ...
0
votes
0answers
56 views

CryptWall virus attack [on hold]

Is there something new about any solution to decrypt all my files that are infected with the CryptWall virus? All my files have extension *.abc.
6
votes
4answers
158 views

Does it matter which platform a file is scanned on for malware?

Different operating systems use different file types and file systems. Does it make a difference to a virus scan which system it is being run on and what type of malware it's looking for? I ask ...
0
votes
1answer
31 views

How to secure a websocket connection with challenge-response?

TL;DR Given that all of the state information for a web browser is accessible to a (potentially hostile) user, how can challenge-response authentication between the browser and the server be ...
4
votes
2answers
52 views

Protection of eduroam credentials

Recently my educational institution officially switched over from the their own wireless network to eduroam. If I understand correctly from the FAQ, credential authentication is performed on the ...
-4
votes
0answers
36 views

File Deletion & Recovery [on hold]

Picture number 1 and 2 is an example, of what I need to complete for picture number 3. I attached an image to this, because I thought it would be easier then explaining it out myself. Basically, ...
3
votes
1answer
52 views

End-to-End (Point-to-Point?) Email encryption

I'm looking into providing security for the email server I recently deployed, however the subject matter is a touch more complex than I anticipated and I would appreciate confirmation or correction of ...
4
votes
1answer
69 views

How to Man-in-the-middle a whole network?

When performing a MiTM attack, you generally need to specify the router's IP address and the "victim" IP address. I'm trying to demonstrate to a business owner why he needs to secure his network, but ...
1
vote
0answers
18 views

verifying digest signed with private key using a C program

I'll explain all the steps I've done so far and conclude with my question. using OpenSSL 1.0.1e-fips 11 Feb 2013 Generating a private and public key openssl genrsa -des3 -out private.pem 2048 ...
5
votes
4answers
17k views

How to prevent my website from getting malware injection attacks?

My website was banned as a malware website by Google. When I checked the code, I found out that some code injected many files on my server. I cleaned everything manually, edited all files on my server ...
1
vote
3answers
47 views

Difference between OpenSSL and keytool

I was wondering about differences between using OpenSSl or Keytool and generating certificates by them. I think Keytool is used by Java community but for someone who is not remotely connected to Java ...
5
votes
1answer
119 views
+50

How to reject e-mails spoofing your own domain targeting your employees at Office365?

One problem Office365 users deal with is that an external SMTP server can spoof the domain of an organization and send e-mails to the domain users; where the e-mails appear to be from employees of the ...
17
votes
7answers
1k views

Taking password letters not whole one, is this secure? [duplicate]

I found a site which is taking password letters from their users not the whole password. Is this secure? Or do they have saved password as salted hash (MD5)?
1
vote
3answers
44 views

Addons in Chrome

When installing any add on in Chrome, a set of permissions is needed to be granted to the add on. Many addons(including popular ones like Pocket and Adblock) have Read and change all the data on the ...
0
votes
1answer
39 views

Purpose of client and server random numbers in SSL Handshake

I could not understand why in the Client hello and Server hello in SSL Handshake client needs to send to server (publicly) a random number and vice versa. From these numbers a Pre-Master secret will ...
1
vote
0answers
32 views

Docker: Central daemon model is flawed?

I've read this article about CoreOS's new container runtime, rkt, and I'm curious about this section: Why not just fork Docker? From a security and composability perspective, the Docker ...
1
vote
1answer
28 views

Antivirus monitoring activity: why do they not have an internal firewall to prevent processes' access to user's documents?

A question that arises after an updated and licensed version of Norton Internet Security has detected a trojan installed in my new laptop (Win7 installed on 26 Aug'15 and fully updated). Trojan ...
2
votes
2answers
82 views

Encrypt part of users' data in web application vs. password recovery

I'm developing a web-application that stores sensitive user data. Although the data is sensitive we want it stored permanently because the users might want to come back later and reuse it. The user ...
0
votes
0answers
16 views

How to establish previous modification dates of a file? [migrated]

I've got some files (.ini and .lnk) and would like to establish their previous modification dates. Unfortunately no shadow copies are present. Is there any way to do that? I run Windows Vista. Thanks ...
0
votes
1answer
25 views

Vulnerabilities despite FIDO U2F?

FIDO U2F seems much more secure than one-time-passwords (OTP), especially TOTP, because of the challenge-response architecture. In what ways is a U2F user still vulnerable? I presume if a user's ...
1
vote
2answers
46 views

Is encryption application credentials using certificate encryption good practice?

I'm working on a small web application. The web application needs access to a database, so the application needs access to a database username and password. The application runs in an environment ...
-3
votes
2answers
32 views

Data to be Logged in a Web Application [on hold]

What data should be logged in a web application? From all the perspective such as security, user access, data modification, path traveled by a user in application and anything that matters.
60
votes
6answers
42k views

Does https prevent man in the middle attacks by proxy server?

There is a desktop client A connecting to website W in a https connection A --> W Somehow between A and W, there is a proxy G. A --> G --> W In this case, will G be able to get the ...
1
vote
3answers
117 views

securely storing passwords that can be retrieved

I'm trying to build a web application that can store passwords of other services like Facebook, Gmail ...etc. These passwords can be later retrieved and shown to the user. This has to be a web ...
1
vote
3answers
98 views

How to detect port scan on SIEM within LAN or same Network?

Let's suppose a host machine in the client environment has been infected and its performing port scanning on other machine within the LAN or same Network without passing through Firewall: On what ...
7
votes
3answers
4k views

CV to a Suspicious Professor [on hold]

Here's the situation: we have this professor this semester who is an excellent teacher and is very friendly, but he has some ego issues. He promised a few of us internships at Princeton, Stanford, ...
1
vote
3answers
54 views

How secure is this token url for subcontractors with no accounts?

Imagine you are a cab company that subcontracts independent drivers to drive within certain cities and towns. You send the subcontractor a link to a page that has fields for the subcontractor to ...
9
votes
4answers
2k views

How to break MAC address filtering?

If a MAC filter prevents you from connecting to a network, how can you break it or include your device's MAC in that filter?
31
votes
10answers
8k views

Is it bad to have cameras using a static IP address?

I am about to move in a new house, and I would like to install some security cameras. The contractor told me that in order for me to check the videos recorded by the cameras in real time when I am ...
98
votes
8answers
14k views

Are there technical differences which make Linux less vulnerable to virus than Windows?

What makes Linux so different than Windows in terms of anti-virus needs? My question is not if I should get an anti-virus for my Linux. I perfectly understand why an AV is important. I would like ...
2
votes
2answers
2k views

Checking domains HSTS status

The Chrome browser offers a quick way to check domains HSTS status over the page chrome://net-internals/#hsts (section query domain). The query result looks e.g. like this: Found: domain: owasp.org ...
1
vote
1answer
516 views

What is a AUTH-KEY in the security of the computers?

I'm studying security in computers and in particular the URL Spoofing. I understand that a form of URL spoofing is phishing. Then I read that a countermeasure against phishing is the authentication ...
1
vote
1answer
508 views

Questions about self-signed Certificates' Fingerprints and Client-Server Interaction through SSL

I have some questions about how the fingerprint function is performed. First of all, I have some knowledge about cryptography. However it seems to do not be good enough to understand hundreds of ...
2
votes
2answers
33 views

AD User vs SQL User for SQL Server Authentication

My company has multiple web applications that we deploy to customer sites. Often the customer has the final say in deployment options in which often it shocks me. Many of these customers are ...
1
vote
0answers
51 views

HTTP Response Splitting in practice

Have you ever seen HTTP Response Splitting in laboratory environment? There are many examples for HTTP Response Splitting vulnerability. I used old PHP and managed to get 2 responses from server ...
4
votes
2answers
46 views

Are the rules used to validate certificates in the major browsers documented anywhere?

I'm trying to get a certificate that's good for two subdomains. Essentially, the TLS equivalent of the human-level logical cert "*.*.example.com". I've tried: Name constraints: these work in the ...
3
votes
2answers
71 views

Does enabling EnableLinkedConnections pose a security risk?

As shown Microsoft's TechNet, network shares that are mapped by logon scripts are shared with the standard user access token instead of with the full administrator access token. Here's the gist of it: ...
0
votes
0answers
34 views

What are the consequences of revealing OAuth2 client secret?

Basing on this post, I understand that the client secret is used in the "Authorization code" flow to: Create an authorization request for a registered domain Exchange the returned code for actual ...
48
votes
2answers
8k views

How exactly does the Stagefright Vulnerability work on Android?

Digital Trends describes the Stagefright Vulnerability thus: The exploit in question happens when a hacker sends a MMS message containing a video that includes malware code. What’s most alarming ...
1
vote
2answers
195 views

Real-world risk of a Cisco ASA 5505 running IKEv1 aggressive mode with PSK

We have a vendor configured Cisco ASA 5505 running on our network to provide VPN connectivity into their networks. The ASA 5505 was purchased by us but configured by the vendor and we have no ...
23
votes
5answers
2k views

ZX Spectrum tape loader: how was copy prevention implemented?

I am curious how copy prevention was implemented for games or other programs loaded from cassette on the micro computers of the early 1980s, such as the ZX Spectrum 48k. If I recall correctly, some ...
7
votes
3answers
103 views

Conducting a succesful phishing test

How do you usually conduct a safe phishing exercise to test the staff's security awareness? How do you ensure that staff are not offended by such an exercise? Would you in some circumstances also ...
0
votes
1answer
37 views

Authentication on remote, unmanned, unconnected machines/devices

What proven methods exist for authentication of a user on remote, unconnected machines/devices where establishing unique login credentials for the users isn't practical due to the number of ...
7
votes
0answers
46 views

How can mobile sign-on be secured from imposter authentication screens?

History seems to have come almost full circle where old issues are shown in new/emerging technologies. Background If you trust the operating system, Windows originally had the Control - Alt - Delete ...

15 30 50 per page