0
votes
1answer
22 views

Use John the Ripper to permutate cases in one password?

I'm currently testing standard pentest stuff on a Windows XP SP3 VM. I managed to compromise it and saved the SAM file with the password hashes. I used ophcrack with the "fast and free" and "small and ...
2
votes
3answers
113 views

Sending sensitive infromation via self destructing link in an email

I need to come up with a simple way for people within the company to send out arbitrary sensitive information to arbitrary recipients. There is an equal chance that the sender and recipient will be ...
1
vote
0answers
6 views

Could Diffie-Hellman be used to stop people who knows the PSK from snooping on your WiFi?

One known problem with WPA2 is that anybody who knows the preshared key can snoop on the handshake and decrypt all subsequent traffic between any parties on the network. In the typical coffee shop ...
2
votes
1answer
40 views

Are there problems with reusing strong passwords for private gpg keys

I am currently maintaining a few different identities each associated with different gpg keys (for personal, academic, professional correspondence etc., whether or not this is a good idea is probably ...
1
vote
2answers
33 views

Login attempt password logging and obfuscation

I have a third party app that records the password from every login attempt (regardless of success or failure). Is this a standard operation and does it really serve any meaningful security purpose? ...
0
votes
2answers
158 views

What can I do about being heavily port scanned?

I have two devices connected wirelessly to my Linksys router while running Symantec Endpoint Protection on my computer. A few days ago I started using the internet by connecting the cable directly to ...
-2
votes
0answers
8 views

Key hierarchy structure

If I am going to use a master key to generate a session key, the master key must be "stronger" than the session key. For instance, I should not be distributing a 128-bit AES keys with a 56-bit DES ...
1
vote
2answers
1k views

Https green bar loads then goes away

I have properly configured SSL, and it loads pages when you put https. My problem is that when the page is loading. The bar will turn green, once the page is fully loaded. The green bar goes away. The ...
1
vote
2answers
132 views

Strange 'agetty' process running on my VPS.

Recently, I had to reinstall one of my VPS servers (again), due to malware. I took what I considered to be pretty good security precautions. I also locked the root account and am using sudo as well. ...
3
votes
2answers
1k views

What OS's will “brick” a stolen phone; preventing their use or resale by a potential thief?

You can look at this question in two ways: Prior to purchasing a used phone, I want to ensure that the IMEI is not locked and I'm able to use it fully. Or you can be a purchaser who wants to devalue ...
1
vote
1answer
31 views

What to do with an APK file containing Swf.Exploit.CVE_2015_0323-1 and ELF File?

I received an APK file from a source. Prior to installation, I ran a virus scan on it. The result had following main features: The file contained Swf.Exploit.CVE_2015_0323-1 It required ...
-1
votes
0answers
16 views

Technique to put highest privileges backdoor on compromised Linux machine and how to remove it?

What are the techniques attackers use after they compromised a Linux server to put a highest privileges backdoor to get access back in future? How can I track this type of backdoor and remove it?
13
votes
4answers
2k views

How are SPAMmers using LinkedIn “http://linkedin.com/slink?code=…” URLs?

I was sent this kind of link from presumably compromised Skype account, via a skype message: (do NOT click unless you have a sandbox or something to protect you) ...
12
votes
7answers
2k views

Why do coffee shops not use WPA/WPA2? Would it solve many problems if they did?

So I'm looking into public WiFi security in places such as hotels, coffee shops etc. It seems the current standard is just to use open wi fi connections in many of these locations. I would assume this ...
0
votes
0answers
21 views

Avoid undeleting corrupted/partially overwritten files [migrated]

Recently I dealt with some computers infected by ransomware, with encrypted user files. My job was to either decrypt these files (if possible), or recover as much usable files as possible. That ...
0
votes
0answers
12 views

Use MDC to provide origin authentication for public key encryption?

Why can't we use an MDC to provide origin authentication when using public-key encryption?
1
vote
0answers
21 views

“Rollback process” for different penetration testing in case of something goes wrong?

In some extent, different kind of vulnerability assessment and penetration testing may impact on target system. I am looking for the solution/rollback process if something goes wrong during test. ...
1
vote
1answer
65 views

Incident isolation and containment approach

In incident response, there are commonly two approaches to isolation and containment after a genuine incident is reported. Compromised systems are disabled or disconnected but operations carries on ...
1
vote
2answers
66 views

Comprimising or affecting card readers, billing systems, or POS terminals using a malicious card

Our company got a new card printer for employee IDs. It was a bit expensive and we had to undergo a background as it allowed us to print both mag strips and EMV chips. I don't understand enough about ...
1
vote
0answers
92 views

Is control theory of any use in the Infosec disciplines? [closed]

I'm currently studying Engineering in a European university (not CEng, though), and I've always been fascinated by the network security/information security field. As far as I know, crypto is the ...
0
votes
0answers
59 views

What does this injected query achieve?

On this very good link you can see some SQL injection expressions for MySQL. Quick Detection Error Based SQLi For integer inputs: (select 1 and row(1,1)>(select ...
3
votes
0answers
78 views

What security features should a smart TV have?

With the proliferation of smart TVs, we can now browse the web, download movies and stream videos on a TV. A smart TV is essentially a computer. However, unlike a computer, a smart TV comes with an OS ...
1
vote
0answers
9 views

Providing identity verification via confirmed contact info to unconfirmed address w/o leaking information?

I emailed a known e-mail address for my local telecommunications/internet company about a complaint with their service. It appears the person I emailed forwarded this to somebody else in their office ...
3
votes
0answers
887 views

Social Login + OAuth2-secured REST API

I'm implementing social login with Facebook, Twitter and Google+ on our OAuth2-secured REST API (secured using spring-security-oauth). I'd like to make sure that the following flow is secure and that ...
1
vote
1answer
645 views

why gmail's phone verification code not encrypted

while using google's phone verification code system, i have noticed that google phone verification code is always 6 digits cant it be brute forced for randomly generating the 6 digits?is it there any ...
4
votes
1answer
12 views

Is flushing of all caches on any context switch between mutually-distrusting processes the only way to prevent cache timing attacks?

This article demonstrates a devastating Javascript-based cache timing attack that allows for cross-VM tracking of mouse movements and other activities by web pages. Is the only way to prevent ...
0
votes
0answers
18 views

Why isn't ettercap working

I am working on an ARP poisoning/browser redirection project with Ettercap but even if I follow all the steps right it still doesn't work. I tried disabling firewalls too. What I do is: Start ...
0
votes
1answer
34 views

How do I wipe a disk that DBAN can't read?

I have a Samsung 850 SSD that has recently been dying on me -- there appear to be some memory issues. I'm considering sending in the drive for replacement under the warranty program, but it contains ...
1
vote
1answer
366 views

How can spoofing a certain MAC address enable sending probe requests that I was never connected to?

I was wondering how could my computer that uses a spoofed MAC address be sending probe requests for APs that I was never connected to? Note: The other computer with the original MAC address I was ...
0
votes
2answers
56 views

ECDH Man-in-the-middle active attack

We have Alice and Bob. The man in the middle can manipulate(remove, add something etc.) A sent from Alice and B sent from Bob, how can he figure out what the common key K(A,B) is, without knowing ...
1
vote
1answer
297 views

Bypass SSL Certificate Pinning using SSL Vulnerablilities

I am wondering if it could be possible to sort of "bypass" the certificate pinning protection of Android or iOS using for example the POODLE SSL vulnerability. According to this blog Entry it is ...
2
votes
1answer
566 views

Nessus scanner and Red Hat backport security updates

I have asked this question: False positive Apache version in scanner results on Centos I need additional clarification: Do you know if it is possible to configure Nessus to adopt Red Hat backport ...
0
votes
1answer
70 views

How to conceal a computer in operation with a separate logon password?

Goal: Disallow physical people near the computer to see its operations. No password to start the computer. But, I'd like to conceal the screen after startup and all programs loaded. Because of the ...
3
votes
1answer
77 views

Hidden service security SSH

Pretend I have a Tor hidden service. For ultimate security I would firewall the internet entirely, except for Tor, to try to reduce IP address leakage and other security risks. My problem is how ...
0
votes
1answer
33 views

Are there any risks in wrapping asymmetric encryption in symmetric?

The web app I am developing should be end-to-end-encrypted, but for slightly better user experience, I do not want the user to enter private keys into the client. Instead I am planning to store the ...
-2
votes
1answer
32 views

What are the risks of an open regedit.msc in Windows?

Curious as to what sort of damage can be done with an open registry. Is it worth it applying group policy that restricts registry edit access, or is this not necessary?
0
votes
2answers
38 views

What is the purpose/role of the “alias” attribute in Java keystore files?

I've heard conflicting information about the purpose of the alias attribute in Java keystore files. Can someone please clarify on what exactly this attribute is, and what it should be set to when ...
0
votes
2answers
35 views

Is there any added security/vulnerabilities if you allow a “trusted-party” to vouch you are legit, if you were locked out of your account?

I was reading this answer on a question. http://security.stackexchange.com/a/498/106817 Recently, at the OWASP AppSec 2010 conference in Orange County, Bill Cheswick from AT&T talked at ...
-2
votes
0answers
22 views

Help to understand how secure server works [on hold]

In a secure server environment with numerous workstations does each workstation have its own hard drive? Where are the workstations activities stored? Thank you
4
votes
0answers
34 views

Share diffie hellman group between servers

I'm deploying several servers with TLS. The servers are different but related and each having their own certificate generated by letsencrypt. And to up the security I'm generating my own diffie ...
3
votes
2answers
108 views

Is it safe to not update Windows if you dont accept any incoming connections?

I see this guy shared his thought: How to be safe even without most updated Windows updates So he claims that as long as you do not accept any incoming connections and just use sandbox of Chrome, ...
5
votes
1answer
111 views

What do I need to do when Facebook says: “Your computer needs to be cleaned”?

I am not sure if this is the correct community for this post. If not please refer me to the correct one. I am getting a "Your computer needs to be cleaned" error message when trying to login into ...
10
votes
3answers
2k views

Is a concatenation of random numbers better than a single random number?

We are generating random numbers 16 digits in length. One option that was put forward was to generate four random numbers of 4 digits each and concatenate them instead of just generating a single 16 ...
0
votes
0answers
9 views

Certificate not showing up for signing in Outlook

I have a new ECA certificate installed on my Windows 7 machine, but when I use Outlook it is not letting me change the signing certificate to the new certificate, but it does let me change the ...
0
votes
2answers
28 views

How is JSESSIONID determined in this CSRF test?

I'm working on testing CSRF protection for one of our webapps. We have a test case like the following: <!DOCTYPE html> <html> <head> </head> <body> ...
5
votes
1answer
123 views

How do rainbow tables solve collisions?

I get the gist of it. It's like a middle ground between brute force attack and lookup table, it stores the starting plaintext and ending hash for each chain where a chain is made by reduction and ...
0
votes
2answers
162 views

Why don't the majority of today's malware use strong cryptography?

While reading another story of botnet takedown, my wondering has reached its apogee: Why don't malware authors use cryptography (encryption + signing) provided by good libraries when their creations ...
0
votes
0answers
56 views

How do I securely encrypt and store database encryption keys? [duplicate]

I have a database with encrypted information, and want to encrypt each entry with a different key. Then I want to store the encrypted keys in another database. I know I have to encrypt the keys before ...
6
votes
2answers
4k views

Can a website make an HTTP request to “localhost”? How does it get around the cross-domain policy?

I found this website which talks about fixing a Redis vulnerability by exploiting that same vulnerability. The website in question has a "patch me" button, and if you have a password-less Redis ...
7
votes
7answers
3k views

Would an encryption scheme that generates an extra key to be securely stored offsite be a safe backdoor?

Let me be clear first and foremost: I do not think installing a backdoor in security algorithms is a good idea. They undermine the trust in the software and in the company that provides the service. ...

15 30 50 per page