Tag Info

Hot answers tagged

6

As Matthew Green puts it, the attack "is just on the edge of feasibility". It conceptually applies to any protocol that uses RC4, although some are more vulnerable than others. The weakness of RC4 is a bias in the first bytes of output. From the key, RC4 generates a long stream of pseudorandom bytes, and encryption is just a byte-per-byte XOR of the data to ...


3

What you describe isn't technically an attack. Nothing is exposed, nothing is exploited, and the parties involved are not affected. What you are describing is a phase of an attack called "Information gathering". Any targeted attack will involve Info Gathering at some point so that the attacker knows what to do to gain what is desired (DoS, access, data, ...


3

I worked at antivirus industry 12 years ago, so I'll try to explain, but it is possible that my knowledge is a bit outdated. Each serious antivirus vendor has antivirus lab, whose work is split to: detect new viruses and develop solutions for them: signatures, behavioral patterns for heuristic detection, specialized detection code, sometimes cleaning code ...


3

There are open source tools such as wpscan, that allow for enumeration of wordpress usernames. To stop it you could try something like this WordPress plugin which claims to be able to stop wpscan's username enumeration


3

As the comments mention, it was Bruce Schneier in a 1999 publication: Bruce Schneier. Attack Trees: Modeling Security Threats. Dr. Dobb’s Journal, Dec 1999.


3

What you describe is a wrong, spam practice but it does not cause other inconvenience over the spam aspect. Browsers allow JavaScript code initiated by a user click to add bookmarks in order to allow websites to propose friendly "Bookmark this site" buttons. However such functionality can be exploited in order to store unwanted bookmarks in visitors browser ...


2

It's possible that the device is only allowing connections from specified IP address ranges(ex:192.168.1.0/24 for it's local subnet). So while scanning it may show the port open and telnet running, unless it sees your IP address in that range, your connection will be refused.


2

Throw out < 2048 bit builtin moduli On the server: Have a look at your sshd_config and throw out the diffie-hellman-group1-sha1 if it appears in the KexAlgorithms section. And restart SSHD. Check with Nmap how can I test if that is good enough? Get Nmap and run the `ssh2-enum-algos' script against the SSH server. The diffie-hellman-group1-sha1 ...


2

Those are default Linux "consoles" or virtual terminals (VTs), Alt+F1-F6. I don't remember seeing a system that didn't have them installed by default. You'd disable them by removing them from your init/systemd/upstart/whatever scripts. Documentation for your Linux distribution probably mentions that.


2

Ping of Death, Teardrop etc. were local attacks for broken TCP/IP stack implementations and caused affected systems to crash (mostly in late 90-ties). Smurf in an example of distributed (DDoS) attack, which uses ICMP Echo Request with spoofed address to cause victim systems to be flooded by ICMP Echo Reply packets. TCP SYN flood is an attack to overflow ...


2

In bash you can generate all the combinations of the format [a-z][a-z][a-z][a-z][0-9][0-9] like this: echo {a..z}{a..z}{a..z}{a..z}{0..9}{0..9} If you want them one per line then try this: printf "%s\n" {a..z}{a..z}{a..z}{a..z}{0..9}{0..9}


1

What browser does he use? I've had users that have experienced similar issues, and one of the first places I check is the extensions running on all installed browsers. You can find pretty good clues as to the name of the program you need to remove in order to stop the pop-ups. Check his installed programs for anything that might be out of place too. If my ...


1

I had this problematic a few weeks ago. I simply resolved it by making a webservice accessible via Https. The user login from a local client application via a login/password form which is sent by https. The server get the data and send a Token to the client. The Token is stored into the application for login purpose and expires after 2 weeks. When the ...



Only top voted, non community-wiki answers of a minimum length are eligible