Tag Info

New answers tagged

0

From CEH Book Shrink-wrap code attacks. These attacks take advantage of the built-in code and scripts most off-the-shelf applications come with. The old refrain “Why reinvent the wheel?” is often used to describe this attack type. Why spend time writing code to attack something when you can buy it already “shrink-wrapped”? These scripts and ...


1

In the Information Security world, internal attacks or inside malicious attacks are known as Insiders. Someone who can poke, sniff and even can do anything with a trusted identity is an Insider and can install malwares and anything bad.


1

For me, insider attacks and internal attacks perfectly fit your description. If you want to find a more specific name maybe try to be more specific on what kind of malicious activities the node is carrying out in the network. The paper [1] is from the field of wireless sensor network (WSN) security. A WSN is a distributed system of sensor nodes. There are ...


3

I would say a malicious internal actor. Internal actor meaning that he is validly participating in the network, but malicious indicating he's abusing the system.


1

Normally we call that kind of attack "spoofing". It usually implies that there's some kind of active interaction involved, whereas sniffing is passive.


0

It was probably an attempt to exploit the vulnerability outlined here: https://www.online24.nl/blog/security-risks-associated-with-unicode/ The link would appear to be one thing, but actually be linking to a different domain, such as the reverse (eg., elpmaxe.com instead of example.com). One way to avoid such exploits is to type domains yourself instead of ...


0

So, you have been able to get the teamviewer id of the attacker (like in this Thread)? If so i would recommend you read this Technet-Entry (even it is Microsoft). But regarding your Question: Stick with the officials. Srsly.


3

Users of applications cannot. They can only try to not have rogue apps running on their systems. In this case we have an app that is normally harmless or even (attempts to be) beneficial unless it detects you're approaching a juicy login. Some, each alone insufficient, ways of "protecting": do not install untrusted apps or from untrusted sources. pay ...


2

I agree that this isn't the best wording. Essentially, it means that there are unusual circumstances in order to exploit this. In the specific case of this bug, you have to get the user to connect to a malicious server under your control, or Man-in-the-Middle a connection to a legitimate server. The vulnerability is a simple stack overflow on the version ...


-1

To start analysing if any mail might contain an attack using HTML code, 1st rule is to read this exact same message in plain text. Plain text will never possibly fire anything. To achieve this analysis, as an example, with Thunderbird (which is BTW a pretty good E_mail client to avoid a lot of attacks), just select your suspicious message, and select: View ...


9

If you ever need to check a suspicious URL, you can use a service like urlquery to check if it has a malicious reputation, the HTTP transactions that take place, any java script that runs, etc etc. Very useful. They also provide a screenshot of what the visited page looks like. http://urlquery.net/


6

%E2%80%8E is percent-encoded UTF-8 for the Unicode character "U+200E". It's used to make the text after it display in left-to-right reading order, such as when displaying an English-language quote in an Arabic text. Unless you've got some seriously broken software, it has no use as an attack. My suspicion is that this was a prank that didn't work out: if ...


1

The last resort attack in this case is the way some of the early BluRay keys were obtained, that is burning away the outer layers of the chip with HF and reading off the crypto key from the chip itself.


18

No. This is known as a known-plaintext attack (or a chosen-plaintext attack if you are not only aware of but can select the plaintexts), and is a type of attack that AES is highly resistant to: there are no known attacks of either type that are faster than brute force. If you've got access to the encryption coprocessor (and a good electronics lab), you may ...


1

The most powerful feature of oclHashcat is the rule based attack. The rule engine can accept characters to rotate the passwords in the list, so using the '{' character in the rule file will rotate the word left by one char. 'abc' will become 'bca', then 'cab'. You can also reverse the word using 'r', 'abc' will become 'cba', then rotate left or right if you ...


1

There is no proof that the message was intended for B. So, intruder I can intercept the message signed by A and redirect it to B, authenticating I as A. But what is a harmful attack? For example in a bank-client interaction scenario? If I understand you correctly, you've just described the first part of a Man In The Middle (MITM) attack.


1

Being disconnected results in an annoyance for legitimate users if we make a mistake coding the "misbehavior detection" With proper code review, mistakes like these can be avoided. Killing the client eliminates the need for "clean up" response code. Although it is important to "kill" a malicious client in order to prevent further issues, personally, ...


0

After reading different sources I would like to answer this myself. Currently Karsten Nohl has not released details or tools about how this works. With the given information it should be difficult to reproduce his work. This will change on August 7 when he will release proof-of-concept tools at BlackHat 2014. There are three widely spread USB controller ...


10

Stay calm, and be nice to the person reporting this. If they are contacting you, they only want to help, so do not threaten them. Also don't ignore them, make sure they understand that you are interested in fixing this. Explain to them that you need time to do this; ideally you can give them a time frame in which you think that you can have this fixed ...


-1

I think just an URL is not good enough to prove that your site is insecure(in most cases). I assume that you might know neither the security architecture nor the functionality of your site, i suggest you to take things(reported URL) to your IT department. It would be great if they are able to identify the problem. If not ask that critic for more ...


0

First thing is to follow Tim's advice with regard to responding to your contact. If it isn't clear what the nature of the problem is it would be worth asking them for more information as they appear to be interested in helping. I suspect since you are asking here you don't have access to developers with experience of secure development or an IT department ...



Top 50 recent answers are included