Tag Info

Hot answers tagged

3

This is generally called 'Pass-the-hash' attack. If authenticating party performs hashing itself and sends hash over the wire then system is likely susceptible to this attack. Most web applications don't do this though. They instead send the password and server does hashing, so there's no way to send hash directly.


1

Except for the few exceptions for viruses that can run on Wine and iyou have Wine installed, Linux generally won't be affected by Windows virus. Note though that Linux can be an asymptomatic carrier of Windows viruses. If you send other people a file infected Windows virus, their machine can catch the virus, even if the file looks fine on your Linux ...


1

Anti Malware systems don't know whether the code you write is in bounds or not, something in your compiled code matches a signature in your anti-virus, hence the alert. You haven't written anything malicious, it's just a coincidence. You could try different compile flags (not sure about how to do that with Borland), or simply restructure your code a bit and ...


1

MITM attacks by ISPs are rare, but still do happen. Some mobile ISP rewrite images to be more compressed, some also compress HTML and Javascript if transferred over HTTP Some ISP DNSs respond to unknown domains and redirect to their search engine Iran's national ISP used hacked Diginotar certificates to MITM SSL connections to Google If the ISP is your ...


1

If a user logs into a system that forces his/her password to go through a hashing algorithm, then you'd need the cleartext password. Since you can't avoid the hashing step - you can't choose what steps are done and which aren't done. The (very simplified) web application does a: $user = lookup_user_in_db($username, md5($password)); if($user != NULL){ // ...


1

There is no universal standard about what "being logged in" actually means, so there is no universally applicable solution. Depending on the website, the attacker could use a javascript which attempts to load an image or other media file from the external website which can only be requested by a user which is logged in. When the user is logged in, the load ...



Only top voted, non community-wiki answers of a minimum length are eligible