3
votes
1answer
61 views
Do websocket-powered web apps (e.g. “comet” apps) have to worry about CSRF?
The standard advice for HTTP applications wanting to prevent Cross Site Request Forgery is to include a random token on each state-changing request (usually POST) which is verified by the server ...
3
votes
1answer
70 views
Session Cookie Stealing Protection
I am looking at how to secure a web site against getting its session cookie stolen. These are the controls that I know are widely known/used:
HTTPS Everywhere
Only use a securely created random ...
2
votes
1answer
40 views
Can attacker break out of apparmor jail with the following profile?
Below is an example profile I've created for web apps, in which I've limited files / commands it can access. It includes profiles to nginx, php-fpm and mysql, no commands is allowed, only few ...
2
votes
1answer
62 views
What cellular network is used for automobile theft recovery? Can that be used for PCs and mobile devices?
I'm interested in sending a remote wipe command to stolen IT devices, such as a cell phone, or wifi connected device. However most remote wipe technologies require that the cellular service (or wifi) ...
1
vote
1answer
22 views
Does providing OAuth for mobile apps pose a security threat?
Let's take a look at the basic OAuth workflow:
The basic idea is that the Consumer (App) asks the user to grant him access to the Service Provider. The service protects the user by asking him each ...
1
vote
1answer
114 views
Exporting data beyond a cryptographic boundary
Scenario
We're working on putting a FIPS 140-2 compliant SQL database on a dedicated machine behind the internal firewall of an organization, and need the capacity to push a specific document or ...
-1
votes
1answer
117 views
How to find IP Addresses that have been attacking my Computer Ports ?
I am a newbie at Info Sec, and wanted to know which IP addresses are sources of attack traffic.
Can I also find out which ports are being attacked?
Can this information be found in windows firewall? ...
-1
votes
1answer
82 views
What service could penetrate my Firewall via UDP on Port 17275?
Has anyone monitored various requests from all over the world on Port 17275 via UDP?
My firewall logs show huge amounts of such requests from lots of different IP Adresses.
I can't find any ...
-1
votes
1answer
59 views
Giving privilege with validity in Windows 7
In parental control I can restrict the games, applications, and also set time for usage. But how can I grant some privilege (like using some application or playing games) with a validity? To be more ...
7
votes
0answers
145 views
Help in understanding an application's crash - exploitable?
Being new to researching vulnerabilities in native applications (as opposed to web apps), I'm having difficulties understanding a crash in Debian's browser, Epiphany (version 2.30.6), and determining ...
6
votes
0answers
137 views
Getting exploit reliability when using the off by one framepointer overwrite on linux
scenario:
we have a program that is vulnerable to a one byte framepointer overwrite (note: stack is marked executable, Linux machine with aslr disabled and stack cookies disabled also standard x86 so ...
4
votes
0answers
112 views
Webapp2 security
I am coding a REST web application that runs on Google App Engine, it authenticates API requests to privileged data using sessions by cookies provided by webapp2_extras.auth and ...
4
votes
0answers
179 views
Migrating GPG master keys as subkeys to new master key
Currently I have 3 private GPG pairs which are all master keys.
I want to convert these keys into subkeys for a new key pair (and keep that in the vault).
I have read the following thread ...
3
votes
0answers
111 views
MPPE-Send and Receive key derivation from MS-CHAPv2
I am trying to get the MS-MPPE-Send-key and MS-MPPE-Recv-key from the MS-CHAPv2 challenge material. I am able to follow the RFCs 2548 3078 and 3079 to the step of getting the GetNewKeyFromSHA() it is ...
2
votes
0answers
30 views
Validate XML-DSig by DVCS
Is it possible to validate an XML message (with XML-DSig or XAdES signature) by a Data Validation and Certification Server (RFC 3029)? Should it understand XML signatures or not? Could it parse XML? ...
2
votes
0answers
26 views
How to handle two sets of OpenID credentials providing the same information, on the same or different OpenID providers?
I recently encountered a situation where one site assumed that if two different people's credentials for the same OpenID network produce the same email address then they were they same person. Also, ...
2
votes
0answers
76 views
How do I make or get computer certificates to use with IPSEC user authentication?
I am having trouble and need some direction using computer certificates with windows 7 firewall IP Security rules, using certificates only for user authentication. I can get everything to work ...
2
votes
0answers
101 views
IIS 7.5 impersonation threat?
I am using IIS 7.5 and I want to impersonate users for my different applications in an intranet environnement. To do so, I am considering using the asp.net mechanism with the user/password in the ...
2
votes
0answers
39 views
PIV or GIDS compatible token availability
I am researching smartcards for corporate implementation and have hit a small bump. We need to support Windows RT, and Windows RT does not support Windows minidrivers for smartcards. Instead, it only ...
2
votes
0answers
188 views
What are the security concerns with turning off Extended protection for authentication in IIS7 on ADFS?
In setting up SSO for Office 365, in order to make Chrome and Firefox access services on the Intranet, Extended Protection for Authentication must be disabled on the ADFS sever.
As the ADFS server is ...
2
votes
0answers
106 views
Use Token in Windows Server 2008 AD RMS
I have a Windows Server 2008 with AD RMS on it, another Windows Server 2008 with DC on it, and a client of the domain I've created on DC server.
How can I use a token in this scenario to provide ...
1
vote
0answers
53 views
Decrypt from cipher text encrypted using RSA
I am sniffing a client side application traffic and I found some encrypted data. I am not able to decrypt it. Information which I have is
Public Key:
...
1
vote
0answers
44 views
POC of a Java exploit using leftover JREs
Summary: I would like to show a proof of concept of a Java exploit using an old JRE on an up-to-date machine to cut short discussions on the "but we are patched so why removing older versions" ...
1
vote
0answers
29 views
SSH says Authentication tried for XX with correct key but not from a permitted host
I am using and authorized_hosts file to authorise certain keys. One of those is restricted with the prefix from="1.2.3.4", the others are valid from anywhere.
When accessing from a machine that has ...
1
vote
0answers
39 views
SAM Card deployment best practice
As part of my current project we will be deploying smart card readers containing SAM cards for decryption purposes. The deployment process involves a third party software integrator who will control ...
1
vote
0answers
34 views
AppEngine Sandbox
Does anyone know how the AppEngine sandbox is implemented? I heard they use a SecurityManager with Java but surely they are using another layer as well like LXC. I've looked at the whitelist and there ...
1
vote
0answers
74 views
How can I implement authentication in my proxy server?
I have a proxy server, it will have a captive portal page. Users will be required to sign in before gaining access to the internet.
So far I am aware of IP and/or MAC address based authentication.
...
1
vote
0answers
66 views
Security Onion:snorby alerts shows all local nerwork source IP(public and private)
I have just installed Security Onion distro based on ubuntu. This distro does a great job of combining multiple tools like snort/suricata,sguil,snorby,elsa,bro ids,squert. In my Security Onion ...
1
vote
0answers
36 views
How do you evaluate and audit Central Authentication Service (CAS)?
This is in reference to Jasig's CAS software and I'm looking for a checklist to audit the state of security of a CAS implementation. While the Jasig site has a lot of documentation and their mailing ...
1
vote
0answers
48 views
krb5 and pam_mount
I successfully installed and configured krb5 on a Red Hat 6.4 server, now I can authenticate against an active directory with kerberos.
pam_mount is installed and configured, but it only mounts a ...
1
vote
0answers
91 views
VMware server 4.1 -how can I prevent VMs being exposed to each other through VMCI?
I have realized there are issues such as virtual machines being exposed to other VMs within the same system when they're connected to the VMCI socket interface. How do we prevent this ?
1
vote
0answers
126 views
SSL Certificate Authentication Issue 403.7
I have been trying to configure SSL for authentication and was unable to resolve this error 403.7 on IIS 7.5 windows 2008r2 vps server. I would like to give access to few computers where client ...
1
vote
0answers
69 views
Determine deployed 802.3x encryption/authentication protocols? Or, why can't I access Eth0?
Is there any means to identify deployed 802.3x authentication protocols on a wired interface (eth0) under Windows 7 (CLI), or from wlan0 on a *NIX based system?
The scenario is as follows: I am a ...
1
vote
0answers
91 views
Swatch installation's issue to detect intrusion
I have installed snort and I want to use the swatch tool to send me an email when it detects something going wrong. I am using OSX and I followed the installation guide: ...
1
vote
0answers
269 views
Compatibility between OpenSSL 0.9.8r and OpenSSL FIPS Object Module v1.2?
I have a private key in PEM format that was generated by OpenSSL FIPS Object Module v1.2 using a proprietary third party tool (that I cannot avoid using). This third party tool encrypted the private ...
1
vote
0answers
64 views
Distinct databases with the same Kerberos Authentication server
Should two deployed applications within a private network requiring distinct databases (for storing their own users credentials) require distinct Authentication servers (implementing Kerberos)?
Or is ...
0
votes
0answers
3 views
PDF files on webserver file system
We create PDF files as relevant to a customer's e-mail communication. These PDF's contain some personal information, specific to the client.
The client is emailed a link to the PDF. The link to the ...
0
votes
0answers
33 views
Protect java WEB application inside the server(against reverse engineering)
I have a web application running on glassfifh 3.1.2 server and I need a way to protect the compiled java classes, I tryed to ofuscate the source code but it didn't work, the project contains a lot of ...
0
votes
0answers
20 views
Is the GTK or MIC in the unencrypted portion of a WPA protected frame?
In order to decrypt traffic you must have all 4 portions of the WPA Handshake. In WPA protected data frames, is there an unencrypted portion of that frame that has some sort of identifiable value to ...
0
votes
0answers
75 views
404s with /like and /undefined
We recently got hacked and after cleaning the virus from our machine we pushed out site to go through cloudflare. Although I've noticed scanning attempts on the site have dropped we do for some reason ...
0
votes
0answers
157 views
Snort Parallelization Techniques and its effect on DDOS detection capability
I want to ask a query about snort parallelization.
1) Can snort detection rate remains same for all attacks after parallelisation?
2) As the parallelisation of netowrk traffic in each core is based ...
0
votes
0answers
47 views
Can Jasper files be used as shells to attack java web apps?
JasperReports is an open source Java reporting tool that can write to a variety of targets, such as: screen, a printer, into PDF, HTML, Microsoft Excel, RTF, ODT, Comma-separated values or XML ...
0
votes
0answers
68 views
Client Side Negotiation
I have -MultiViews set and SSLInsecureNegotation off ( in ifmodule of mod_ssl.c) in Apache.
But still vulnerability report says I am vulnerable to client side renegotiation and "This server is ...
0
votes
0answers
113 views
HDI interpret Ettercap “PASS” fields?
I'm running ettercap (with Moxie Marlinspike's sslstrip), and I can't interpret a huge amount of the username / password output I get. I get a huge amount of traffic through my network that looks like ...
0
votes
0answers
287 views
Java Servlet request.getRequestURL() logged abnormal string
I had asked this question in stackexchange.com ( http://stackoverflow.com/questions/10496410/java-servlet-request-getrequesturl-logged-abnormal-string/10496937#10496937). Since this place is more ...
-1
votes
0answers
31 views
Routable Domain for DC?
What is the impact of having a routable domain name in windows network infrastucture ?
Having example.com in place of exemple.local as domain name have an critical impact ? if yes what should I keep ...
-1
votes
0answers
35 views
How to block WCF services using Firewall or any other security setting
For an application testing purpose I want to know how to block applications that are trying host http WCF host services. Could someone please point me the right place to block? I've been guessing and ...
-1
votes
0answers
53 views
TLS Certificate in OSX Mail
My question hasn't been asked before here but when I googled for an answer I arrived at this thread @ macrumors.com. The question is quoted below:
I'm just curious, but in Lion's Mail there is a ...
-1
votes
0answers
31 views
SYS access to the ORACLE database. Table with Sensitive/Production data
Having SYS access to the back end Oracle database in SAP can be deemed critical. However, due to the vast number of 25000+ tables
in the database it might be impossible to find exactly where the ...
-5
votes
0answers
43 views
Where can I look for malware that may have been installed on my machine?
I want to analysis my ubuntu box to detect if it was been hacked.
My question is:
what are all the place where to look to discover if some malicious software are started ?
The following is some kind ...
