Tag Info

New answers tagged

1

Your firewall rules look good to me. In particular, the "default deny" for outbound packets means that it should be blocking the packets in the report from your ISP. Are you sure your server is the source of the packets? It's easy to forge the source address for UDP packets.


1

Shellshock is a vulnerability in the bash interpreter which is mostly used on Unix-like systems but has been ported to Windows. However, Apache Tomcat, when running on windows, does not include bash by default and doesn't have CGI enabled by default either. So, generally speaking, no, Apache Tomcat running under windows is not vulnerable. To be sure, ...


4

Nope, I don't think @munkeyoto has got the right idea. The following passage is from Bruce Schneier's Secret And Lies. There’s the so-called salami attack of stealing the fractions of pennies, one slice at a time, from everyone’s interest-bearing accounts; this is a beautiful example of something that just would not have been possible without ...


-1

A salami attack is a horrendous replacement for "chained exploit." You start off with one attack, and each one builds on the next until a definitive outcome results. I suggest you read up on "Chained Exploits" which is the more technical term versus "Salami Attack" which seems to resonate with ISC^2, and other bodies not necessarily technology focused (ISC^2 ...


3

Limiting text in an HTML form doesn't really stop buffer overflows because a bad actor can edit your HTML or not use it at all. Buffer overflow vulnerabilities are caused by programming errors. Programs processing the data on the server must, if using fixed size buffers, count characters as they're stored and store no more than the allocated number of ...


1

The answer is the same for both scenarios, you need to add a length validation for the input on the server side before you do any other operation with the data. Whitelisting for only safe characters (A-Z,a-z,0-9) also helps avoid attacks that take advntage of buffer overflows in order to execute arbitrary code. a link for further reference: ...


3

Some vendors sell systems that work like you describe. The biggest problem is lack of active cooperation from vendors; there is no reliable way to build a list of hashes of "allowed binaries" since: What looks like "an application" from the user's point of view may be a collection of many executable files (to a large extent, that's what DLL are). Any ...


2

In fake authentication attack there are two types of WEP authentication (Open System and Shared Key) you can only do fake authentication for WEP enabled AP. This useful when you need an associated MAC address in various aireplay-ng for example in WEP cracking attack when there is no associated client. It should be noted that the fake authentication attack ...


1

However, the webservice for creating the account has no restrictions, meaning an attacker could spam GET requests to it from any device to create any number of users they want and flood the database/server. My question is, how can this be avoided? You can use a mix of CAPTCHA and IP restrictions to avoid such type of attack. IP restrictions: ...


-1

However, it's not login-based in the traditional sense that users don't sign up with an email or anything. We just automatically create an account for them with some randomly generated UUID as their "login" to the service. If you are just allowing ANY user to create an account with your application, without providing any personal information, it ...


3

Assuming you're just throwing data at a closed port, your friend will notice a substantial slowdown in his Internet connectivity and an increase in packet loss, but it will not result in an inability to use the Internet. Think of his connection as a pipe: you're trying to throw 4Mbps down a 4Mbps pipe, and he's trying to pull additional data down. ...



Top 50 recent answers are included