0
votes
0answers
6 views

How trivial is identifying a tor user with Javascript enabled/ 'allow scrips globally'?

I was browsing using Tor, with Javascript enabled/ 'allow scripts globally'. I made an automated take-down request for something posted on a website, and the next day went back to check if the item ...
1
vote
0answers
8 views

Relatively simple OTP code generated by SafeNet MobilePass

I noticed something peculiar while logging into the VPN of the company I work for. I generated a one-time passcode from MobilePass, and the code displayed was “010010”. I captured an image of this ...
1
vote
2answers
32 views

What stops someone from just redirecting a HTTPS connection to a HTTP version of the site?

Let's say someone does an ARP spoofing or DNS poisoning attack to redirect traffic to their own web server. If the real site has an SSL/TLS certificate, would that stop the hacker from redirecting ...
0
votes
1answer
25 views

How do websites prevent certificate forgery?

I have recently developed interest about Wireless hacking, and I have seen in many instances in videos and stuff that people are (or more correctly, were) able to perform some kind of MitM attack ...
1
vote
1answer
9 views

Finding the cipher suites supported by a web server

So I need to find the cipher suites supported by a website. Now I can use this NMap script however this problem is research oriented so I need to write a code in order to collect the data ...
1
vote
0answers
11 views

How does JTI prevent a JWT from being replayed?

According the JWT RFC a JWT token can optionally have a jti which I interpret to be an a unique ID for a JWT Token. Seems like a UUID is a good value for a jti. The RFC claims that the jti can be used ...
0
votes
1answer
19 views

ImageMagick < 6.9.3-9 - Multiple Vulnerabilities question

Do you know any contain management system or other applications that are affected by the recent ImageMagick exploits? (I have already played with convert tool which is offered on Linux)
1
vote
2answers
23 views

How secure are webservers from linux repos?

how secure are Webserver like Apache2 or Nginx on a current linux, e.g. Debian, when downloaded from a repo of this distro? Of course, they have to configured correct and must be up to date. If they ...
0
votes
1answer
28 views

Virus in browser - affects chrome most of all [on hold]

I seem to have a virus I cannot trace on my computer, it basically rewrites pages filled with ads in the form of videos. It seems to be using AJAX here is a screenshot attached. I traced a few files ...
7
votes
2answers
342 views

What prevents me from launching an SYN-ACK flood using HTTP servers?

I've been studying networks lately and this issue came across my mind. What prevents me from sending a lot of SYN requests with source address of my (attack's) target and flooding the target's ...
1
vote
0answers
15 views

DOM XSS: Find the function that sanitizes JSON responses

I am testing a web application where the HTML is built by JavaScript/jQuery/AJAX using the JSON respones from REST calls. This being a very huge js file (require.js is also used), I'm finding it ...
0
votes
0answers
8 views

CertGetCertificateChain takes 15 seconds for chain building

I have a semi-isolated Windows 10 system, which is not connected to public internet network but connected to local network. In my application I need to verify the trust status of the received ...
1
vote
2answers
29 views

Is it possible to execute metasploit exploits from Meterpreter?

I have an attack scenario, first I send a malicious pdf to my victim, then I have a reverse tcp shell (Meterpreter session) on his computer then I want to exploit a samba server (which is already ...
-6
votes
0answers
21 views

what are Active geolocation Techniques Passive geolocation Techniques

Many companies perform IP to geo-location analysis on their clients for various reasons such as marketing, interest or security. In 5 pages (no less, no more!) explain the techniques used to determine ...
-4
votes
0answers
47 views

How long does it take to brute force a 7 character long password taken from 16 character set

A database file is encrypted with 256bits AES and the key is the first 7 characters (from the character set 0-9, a - f, all small letter) of MD5 hash . This implies 2^28 bits (268,435,456) possible ...
0
votes
0answers
24 views

OWASP-ZAP and DVWA Login

I need to do a pentest of the DVWA application. To do that, I chose the OWASP-ZAP tool. I followed all the steps of this tutorial. But when I try to run the "spider" the program doesn't find all the ...
-5
votes
0answers
39 views

How someone can attach a virus, send it to me and steal my WhatsApp chats? [on hold]

Yesterday one of my friend did this to me and I'm still wondering how he did that.
0
votes
1answer
42 views

SSL session protocol vs SSL connection protocol

Slide 8, SSL Session Protocol: Slide 10, SSL connection protocol: Firstly, in Session Protocol, there is a {S}_B, what is the function of this {S}_B? Does't it help in proving Alice's identity? ...
4
votes
0answers
56 views

What excactly is encrypted by “full disk encryption” on Android 5?

This page says "user data" gets encrypted. But that implies it's only a certain part of the full disk? Like "/data" or something? Can I copy a file from a PC to the internal storage to any place and ...
1
vote
1answer
19 views

What is the best way to get missing information used for risk analysis

The situation is that I am a software developer working for this company since last January and was asked to do information security for my business unit on the side. I don't have a lot of experience ...
0
votes
0answers
11 views

What is purpose of fipscheck utility and fipscheck library on Linux?

So I am messing around with dracut and I am trying to get my Linux system in FIPS 140 mode by passing fips=1 to my linux kernel at the boot time from grub. However, I got confused on why dracut ...
-5
votes
1answer
68 views

Avira Antivirus acting as a virus

I have a Avira Antivirus installed on Windows 7. The problem is now when I click on any button or click to uninstall any program it redirects me to the Avira website where it says upgrade it for more ...
2
votes
3answers
24 views

How to be PCI compliant with Shopkeep (and others)?

When I walk into some businesses, I see them using Shopkeep on an iPad. I don't understand how this is PCI compliant, as the iPad itself would be in scope, and it can send unconstrained traffic to ...
0
votes
0answers
18 views

How crypto module integrity checks mandated by FIPS 140 standard help to make Linux based appliances safer?

After browsing dracut and hmaccalc rpm package source code I found out sha512hmac utility that is used to do do integrity checks for linux kernel (and other binaries) from initramfs boot stage uses ...
3
votes
1answer
51 views

What medium for storing full-disk encryption keys is easy-to-use as well as easy-to-destroy?

If I were to frequently work on sensitive data on a LUKS partition and wanted to be able to quickly destroy the keys to it, I figure it would make sense to— encrypt that partition with a key file, ...
2
votes
3answers
59 views

Wireless network risks?

What are the security risks associated with installing a Wi-Fi (802.11) network in-comparison to a wired network for internet connection?
0
votes
1answer
33 views

Is it safe to login to PayPal in apps [duplicate]

How is it safe to use PayPal in an app where the app itself presents the PayPal login prompting email and password? How does PayPal even accept this risk? As an example, the coffee ordering app "Hey ...
1
vote
1answer
27 views

How to secure android REST basic authentication credentials against reverse engineering?

As far as I know, in basic REST API authentication, username and password to access web service resources are baked into the app's code. On the other hand, it seems not difficult to reverse engineer ...
-4
votes
0answers
31 views

Looking for a way to track a scammer on their proxy [on hold]

so recently a friend of mine has been being blackmailed by a scammer on skype and i managed to track their ip and their proxy but couldnt get any further i hit a slight snag with trying to dox them as ...
-1
votes
2answers
69 views

What is going on with the FBI's mysterious 'Firefox exploit'? [on hold]

Apparently, the FBI have the ability to 'hack TOR'. There was an operation against a pedophile website this year, to cut a long story short, the feds got the IP addresses of the denizens of the site ...
2
votes
3answers
48 views

Why does PKI use a hash function?

I'll preface my question with my understanding of PKI in case I have any misconception. Owner of domain D generates a public-private key pair (d,e), and constructs a certificate c consisting of (d, ...
-6
votes
3answers
74 views

Someone claims to have hacked my WiFi. What do I do now? [on hold]

My son plays Minecraft on the internet. Someone said they hacked into his WiFi. Our WiFi is locked and must have a passcode to access. Is it possible this happened and, if so what should we do?
0
votes
0answers
28 views

Need computer forensic case citation (urgent) [migrated]

My mother is about to attend court over a car which was written off by a lorry. The CCTV video recording of the accident was mishandled, such as the storage SD card not being imaged, it was also ...
-5
votes
0answers
27 views

How does Apple stores Apple ID passwords?

The question is how does Apple stores passwords from Apple IDs? Does they store hash or use some other technologies? Didn't find any info.
5
votes
1answer
94 views

Why does Mozilla Firefox encrypt saved passwords?

If you ask Mozilla Firefox to remember the login details for a website, the credentials will be stored in your profile directory in Logins.json. Instead of storing plaintext values, the username and ...
-1
votes
1answer
11 views

NET::ERR_CERT_AUTHORITY_INVALID with HSTS

This is strange error I am getting while using google.com on chrome browser for any website | Test done on Feb 5 2015 OS: Windows 7 32bit https://www.google.com/?gws_rd=ssl www.google.com Your ...
1
vote
0answers
6 views

Calculating probability of finding collisions in an invertible hash function [migrated]

Assuming we have an invertible hash function H that takes inputs of size 2n and outputs hashes of size n, I use the following algorithm to find collisions: Choose a random M as input. Compute its ...
-5
votes
0answers
31 views

Is Kerberos the most modern authentication method to use? [on hold]

Is Kerberos outdated? Or is it still the best method to authenticate users from inside the network who want to access some system or service? In this other question all the people say it's outdated: ...
-9
votes
0answers
27 views

UNION BASED SQL INJECTION [on hold]

I am trying to use a union based sql injection on a particular site but an error show up "Database Query Failed The used SELECT statements have a different number of columns". How do I proceed ...
25
votes
2answers
3k views

What triggers Google's reCAPTCHA

I noticed that Google's "I am not a robot" reCAPTCHA forces me to check correct images on my computer. I installed a virtual machine and tried there. Same thing. Used proxy. Same thing too. Then I ...
-4
votes
1answer
34 views

Use Tor browser to download in .com site [duplicate]

I'm using Tor browser to download a file from a .com website. Can the website track/identify my original IP address. Does Tor hide real my IP address during the download ?
1
vote
1answer
41 views

Vulnerability scanning vs fuzzing a web application

In the context of web applications, is vulnerability scanning a form of fuzzing? I was told it wasn't the case, but here's what I know: Wikipedia defines fuzzing as "providing invalid, unexpected, ...
3
votes
2answers
40 views

When moving beyond SSL3 is not possible, what cipher suites are immune to POODLE?

I understand that anything not using CBC will work, but are there any such modes? I'd also like to avoid weak stuff like RC4/5 and MD5 so preferrably ciphers that use sensible functions. On a SSL 3.0 ...
2
votes
1answer
34 views

How can I understand this extract, concerning basic heap overflow?

Unfortunately, I dont seem to understand one minor concept in the "Art of Exploitation" book, concerning heap overflow: a new root shell is being added to the passwd file. From page 168: However, ...
-7
votes
0answers
20 views

Does TOR hide your identity safely if you use it to download files? [on hold]

If I was to download some file off of a common, unsuspicious site using TOR, what are the odds of an attacker, or the FBI finding my real IP? Does TOR safely hide my IP in this case?
1
vote
0answers
9 views

Does altering the routing table to my hub defeat the purpose of a VPN?

I am running a VPN on my server with openvpn. When running openvpn I have a shell script that runs afterwards: ip rule add from 192.168.0.19 table 128 ip route add table 128 to 192.168.0.0/24 dev ...
1
vote
1answer
18 views

Modsecurity Encrypted traffic in 3 tier architecture

The scenario is that we have 3 tier architecture DMZ > BEA > DB with end to end encryption the data is encrypted within DMZ > BEA > DB. I have read that modsecurity doest deal with encrypted traffic ...
0
votes
0answers
16 views

Limiting access to data in a web application from IPs outside the network

My goal is to build a system (PHP + MySQL) where a user will have access to particular data only when logged in locally (from one of the office computers with a local IP), and to all the non-sensitive ...
-4
votes
1answer
38 views

Is possible to get password with stored XSS?

Is it possible to get password from a site with stored XSS? I have a forum where I can put JavaScript not directly but inside HTML (like <div onclick="alert()">CLICK</div>). Is it possible ...
0
votes
2answers
52 views

If I can disable antivirus tamper protection, couldn't a malicious worm do it as well?

I was wondering how those client softwares protect themselves from worms / malwares etc. Symantec protects their files from malicious users / admins with the tamper protection mechanism, but sometimes ...

15 30 50 per page