0
votes
0answers
1 views

Untrusted connection visitng https://www.opensource.apple.com/

Somebody on Stackoverflow posted some code from https://www.opensource.apple.com/ When I click this link in Firefox (36.0) it says "This Connection is Untrusted". But other people on that thread on ...
1
vote
1answer
494 views

Digital Ocean “Droplet” allgedly compromised for trivial, unpublicized website. Should I be worried abouty my own machine?

I got a message from D.O. about my Droplet saying they shut it down because there was a lot of outgoing traffic that looked like an attack. The site I had on that server was not very known at all. ...
1
vote
1answer
19 views

ssl+symmetric with my own encryption algorithm?

I am a final year student currently doing my project, the title is "Mitigating man in the middle attacks using ssl+symmetric key algorithm". I would like to create my own encryption algorithm. I need ...
0
votes
0answers
5 views

nmap not running as root shows unknown open ports

On a server running Ubuntu 14.04.2 I was doing some basic security auditing when I ran the command nmap -p -d 1-65535 as a non-root user. Interestingly it reported a few (1-5 at a time, average, ...
0
votes
0answers
6 views

OWASP Orizon implementation

I am working on developing an efficient tool for source code security testing. I have looked into OWASP's Orizon project. It looked interesting, but I am not able to get proper example implementations ...
1
vote
0answers
25 views

How can I view the Chrome padlock SSL certificate information in Chrome Mobile on Android? [migrated]

When I'm on my Desktop Chrome, I can click on the padlock icon in the address bar and see the information about my SSL connection, like the TLS version, the certificate strength, the authority that ...
0
votes
1answer
22 views

Does recursive hashing weaken properties of a cryptographic hash algorithm?

Specific example of mine concerns the probability of collision, where I have two plain texts A and B that I want to hash using MD5. Given the cryptographic hash function H and the following: A' = ...
1
vote
1answer
497 views

Improving stateless REST API authentication token - or ditch it for database persistence?

I'm looking to implement stateless REST authentication into an API. I've been reading up on articles here, and have implemented an idea that works, but I was hoping to get some feedback on its ...
1
vote
2answers
925 views

SSL interception with Burp Suite using Firefox - Strange behavior when intercepting twitter

I am learning Burp Suite(Free Edition v1.6). I have set it up with the default settings. The proxy listener is listening to 127.0.0.1 on port 8080 and Certificate option is set to 'Generate CA-signed ...
4
votes
2answers
146 views

In light of the FREAK TLS vulnerability, why do so many servers still offer RSA-EXPORT keys?

Ars Technica is reporting on a new attack against HTTPS. Called FREAK, the devices reported as vulnerable include iPhones, Android devices, and Macs running OS X. The attack (as I understand it) is ...
4
votes
2answers
195 views

Is Google API Key a sensitive information that needs to be protected?

I'm making use of google API for location (in Android, iOS apps).. Can the key be hardcoded? Or should it be protected? If It's sensitive, why is it sensitive and how can attackers exploit this?
1
vote
0answers
8 views

What sort of attack can reset MySQL Privileges and unmount remote drives without root or shell?

ATTACK VECTOR Monthly hits via a globally DDoS attack. Resolved with Cloudflare. Attacker can now somehow unmount network drive links and reset MySQL user permissions for applications. Attack is ...
1
vote
0answers
18 views

What methods can be used to prevent the browser (IE11 specifically) from storing credentials / autocomplete

Going through Pen Test and it was asked of us to disable auto complete in our CC payment fields. We tried adding autocomplete=off and also tried false on the input filed. A ny suggestions to ...
1
vote
1answer
30 views

What are the biggest security risks/considerations for hosting your own private website?

I have a small personal website hosted through go-daddy. I also have an old machine sitting in my garage collecting dust. I know enough to make my old dumpy machine a Linux server for my tiny website ...
1
vote
1answer
71 views

What does this PHP injected-code do?

I've just found out that all of my websites on one of my server has been hacked. Some seemingly malicous code was injected into all index.php files: /*EngineWork*/ if(!defined("FDSJERIUI234FSDF")){ ...
1
vote
1answer
156 views

Is this a good approach to secure my REST API?

My application consists of a nodejs back end API but I am also developing a "reference" implementation of a JavaScript client, which is a backbone SPA. First of all; the API accepts only HTTPS ...
-2
votes
1answer
30 views

Is there a successor for PGP in progress? [on hold]

I heard there is such a tool in progress, but I cannot find it anymore. Maybe it was a crowdfunding or a big foundation like Mozilla that is working on this. What projects are working on a better ...
21
votes
5answers
2k views

Open-source penetration-test automation

What order do typical open-source penetration tests operate? Which tools are run first, second, third -- and how do you control them? Does one simply use Metasploit RC files? A network vulnerability ...
4
votes
1answer
36 views

Realistic: Exploiting a computer on BIOS/ hardware level in less than an hour? (Infinite preparation time)

I wonder how hard it it to infect a laptop or netbook in 60 minutes or less in a way the victim cannot easily clean their machine by wiping hard disk drives. Let's assume the following: The ...
0
votes
2answers
51 views

Can a school legally access an account that a student logged in to at school? [on hold]

Is this scenario legal, A school has a few public computers that can be used. The only browsers that are installed are chrome and internet explorer, and the entire network is man-in-the-middled. ...
43
votes
11answers
7k views

Are there “secure” languages? [closed]

Are there any programming languages that are designed to be robust against hacking? In other words, an application can be hacked due to a broken implementation, even though the design is perfect. ...
4
votes
1answer
37 views

Securing client-side data from users

So my problem, in its general form, is encrypting test questions such that a client-side testing application can access the questions while students cannot. The naive approach, in my opinion, is to ...
0
votes
0answers
12 views

Why should I include a client_id in an OAUTHv2 password grant request?

Like little red riding hood, you don't know who is knocking on the door... Why even bother accepting a client_id in case of API <-> Javascript-website or API <-> Android App password grant ...
2
votes
1answer
2k views

Can a file .exe.part already have caused damage?

If on a Windows machine, an antivirus program has found a Win32:Rootkit in a file ...\Temp\...\xy.exe.part, could the file possibly already have caused damage or not given that it seems to be an ...
3
votes
4answers
1k views

Is it possible to force a browser to use http in an ssl enabled (https) website?

I was doing a security research on storing the session id in local storage instead of storing it in cookies. I understand that it is not possible to tag the values in local storage as HttpOnly and so ...
0
votes
1answer
62 views

SSO software – where is symmetric key stored?

In SSO software (Oracle E-SSO …), I heard about (primary) key encrypting user’s credentials, but I can’t read anything about how this key is managed ? When using smartcard, I can understand that ...
0
votes
2answers
59 views

Subordinate Certification Authorities and managed certificates

How many different certificates can a subordinate certification authority manage? Please, supply me also some reference. Thanks
1
vote
1answer
28 views

How to grade / judge / evaluate a steganography approach?

When it comes to evaluating a text steganographic approach, I think we have to consider these things: How unlikely it is for someone to guess that there is a hidden message in the message being ...
4
votes
1answer
17 views

What security problems does copying .Xauthority to another user present?

If I want to use a GUI application with another user (example: webbrowser), I can copy the .Xauthority file to that given user's home then I can "su - user" and start the GUI app. Question: but what ...
2
votes
1answer
30 views

Ideas on how I can fragment captured network traffic?

I am trying to create a lab environment where I can analyze common IDS solutions (starting with Snort specifically) and their ability to reassemble fragmented IP trains. I have a collection of ...
1
vote
0answers
27 views

rootkits subverting the windows kernel source code [on hold]

I just purchased the book "rootkits: subverting the windows kernel" by Greg Hoglund and James Butler for a research project at work. However, this book constantly refers to the source code that can be ...
0
votes
0answers
8 views

Tomcat client certificate authentication, client certificate not sent [migrated]

I've add client certificate based authentication on our Tomcat servers. Both client and server are tomcat servers with internal CA issued certificates. Each tomcat has its own keystore (PKCS12) ...
0
votes
0answers
18 views

Decrypted True Crypt Hard drive And now it shows as RAW [on hold]

I have the recovery disk when I originally encrypted it. The volume no longer shows as encrypted but not sure if I should restore the original volume or try a data recovery software? Thank you.
1
vote
1answer
82 views

ARM TrustZone with Normal and Secure World

I am new to Security testing and I am working on a 64-bit ARM server. We are using ARM TrustZone technology. Is it possible for me to check if I am in the Secure world or the Normal world? How do I ...
-3
votes
1answer
81 views

I'm getting thousands of JS button clicks per second on my site. What could be doing that and why? [on hold]

I just set up a front end event tracking system using Segment.com and I found out that there are thousands of button clicks from one IP with a ~2 millisecond difference. These are not HTTP requests, ...
16
votes
4answers
2k views

How does Android L achieve strong encryption with a low entropy passphrase?

After upgrading to Android L on my Nexus 5, I was pleased to find that I can enable encryption using a pattern as the passphrase. However, it soon got me thinking. I'm guessing the encryption key is ...
1
vote
0answers
18 views

List of cookie parameter names to identify load balancing mechanism [duplicate]

I need to create my own web application security assessment methodology. Within fingerprinting section I have one test case such as "Checking for load balancing". One part of that test case is to ...
0
votes
1answer
38 views

What are the repercussions of a DDoS attack on a website? [on hold]

First of all, I'd like to know what exactly a DDoS attack is- my understanding is that it's a collection of infected or "zombie" computers, all controlled by a central computer, with the intent of ...
1
vote
4answers
700 views

Configure Firefox against malicious 302 redirect from a embedded image resource?

Today my friend demonstrated such a attack. I am using RenRen, a social networking website in a way very like Facebook in China. And I saw an article he wrote. Actually there is only an "image" ...
2
votes
1answer
53 views
+50

SMB/CIFS shares on HP-UX vulnerabilities

So, I've run an unauthenticated Nessus scan against a critical piece of infrastructure as part of a pen-test but I'm getting back some weird stuff and i can't seem to re-create the issue to ...
15
votes
4answers
10k views

Checklist on building an Offline Root & Intermediate Certificate Authority (CA)

Microsoft allows a CA to use Cryptography Next Generation (CNG) and advises of incompatibility issues for clients that do not support this suite. Here is an image of the default cryptography settings ...
5
votes
1answer
85 views

Why some routers ask for PIN but can't be cracked using PIN-based attacks?

I've been working with WPS assessment tools like Reaver and Bully for some time and i could successfully crack my router's PIN code and find its password on both QSS PBC and QSS PIN code. when each of ...
1
vote
0answers
66 views

What is the security of Powershell “TrustedHosts”? (is it just a name match)?

Powershell has a TrustedHost section that is configured like this: winrm s winrm/config/client '@{TrustedHosts="CorpServer56"}' What security is implied for CorpServer56? Is it just an ASCII name ...
1
vote
0answers
33 views

Random SYN_SENT connections to Amazon EC2?

I have looked around but couldn't find anyone else with this issue. On my console (standard asus i7 laptop) running Ubuntu 14.04 LTS - I noticed in tcptrack that there are a lot of connections being ...
6
votes
3answers
113 views

Is e-mailing personal information significantly riskier than transmitting the same information another way?

I've been asked by bankers, school administrators, insurance agents, car salesmen, realtors, you name it to send them all kinds of information over e-mail over the years. Everything from my address ...
0
votes
0answers
20 views

How do you all differentiate attack protocols (inclusive too layer 7s)? [on hold]

Say like dns or tcp. Or something less usual like essyn or ntp? Would you guys mind listing differences?
1
vote
0answers
18 views

Unrestricted file upload on a cloud based platform [on hold]

We have an unsecured file upload for the user to upload any file they want, our application is Azure based so they are stored as blobs not as a traditional "file on disk". Could malicious code still ...
5
votes
1answer
1k views

Why is my debugger detected as a Trojan by anti-virus software?

I'm trying to use a deugger (namely OllyDbg) to analyze some exe files. However, all the versions I downloaded from the Internet are considered as Trojans by some anti-virus software. (I use ...
0
votes
1answer
120 views

Windows netsh pivoting

I am pentesting a windows box to which I have gained system privileges. This box has two network interfaces. I have been able to reach machines on the second interface via the below netsh command. ...
3
votes
2answers
102 views

Demonstrating SQL injection

I want to do a demo for a login page that is vulnerable to SQL injection for training purposes. I already tried to build one using PHP and MySQL. I commented the code sanitation to make the page ...

15 30 50 per page