Tag Info

New answers tagged

1

Except for the few exceptions for viruses that can run on Wine and iyou have Wine installed, Linux generally won't be affected by Windows virus. Note though that Linux can be an asymptomatic carrier of Windows viruses. If you send other people a file infected Windows virus, their machine can catch the virus, even if the file looks fine on your Linux ...


1

Anti Malware systems don't know whether the code you write is in bounds or not, something in your compiled code matches a signature in your anti-virus, hence the alert. You haven't written anything malicious, it's just a coincidence. You could try different compile flags (not sure about how to do that with Borland), or simply restructure your code a bit and ...


1

MITM attacks by ISPs are rare, but still do happen. Some mobile ISP rewrite images to be more compressed, some also compress HTML and Javascript if transferred over HTTP Some ISP DNSs respond to unknown domains and redirect to their search engine Iran's national ISP used hacked Diginotar certificates to MITM SSL connections to Google If the ISP is your ...


3

This is generally called 'Pass-the-hash' attack. If authenticating party performs hashing itself and sends hash over the wire then system is likely susceptible to this attack. Most web applications don't do this though. They instead send the password and server does hashing, so there's no way to send hash directly.


1

If a user logs into a system that forces his/her password to go through a hashing algorithm, then you'd need the cleartext password. Since you can't avoid the hashing step - you can't choose what steps are done and which aren't done. The (very simplified) web application does a: $user = lookup_user_in_db($username, md5($password)); if($user != NULL){ // ...


0

It depends. Most password cracking tools (oclHashcat, John the Ripper, etc.) support some kind of password "mangling". The most common types of changes will be things like CaSe VarIaTion, l33tsp34k, appending1 numbers2014, and the other kind of changes people commonly make to their passwords. So, given input like 'password', it might try 'p4ssw0rd', ...


0

oh you're so close, it's ./sqlmap.py -u http://example.com --tables


1

There is no universal standard about what "being logged in" actually means, so there is no universally applicable solution. Depending on the website, the attacker could use a javascript which attempts to load an image or other media file from the external website which can only be requested by a user which is logged in. When the user is logged in, the load ...


0

You either need to take system management seriously and use NT, or you could make an extra endpoint on your server poll the server for it's time. For example, you could send a request to the server and record the request timestamp. The server should respond back with it's timestamp, and then the client can figure out the difference here and adjust your ...



Top 50 recent answers are included