Tag Info

New answers tagged

-1

can I safely assume that this application does not open a security hole on my PC? Indeed, there are some issues you have to think about: First of all, to run the pre-compiled Java application (3rd party application, as you commented), you do it at your own risks; I mean, by principle, everything that that involves trust could be a source of threat ...


3

It depends if these are security issues of the JVM or the Java libraries. Since the JVM is not used these problems don't affect compiled applications. But issues in the library might affect your application. If these issues are relevant for your program depends on the kind of issues and what your program does. For example problems affecting the validation of ...


3

I think you partially have the idea. This reminds me of when I saw aircrack-ng being released and many criticized that it would be used maliciously and perhaps to some extent it has. However, you can look at the way wireless security has grown and has actually become considerably more secure, simply from the amount of awareness. Another example, is the ...


1

Nothing is sure that apple.com website has been the vector attack. The problem could be coming from any tag, window or web pageyou opened using Interet Explorer. Given the warning message you got, I highly suspect your IE browser is vulnerable to a recent (July 2015) critical issue (Microsoft Security Bulletin MS15-065 - Critical) concerning IE versions ...


1

While the alert is alarming, based on the information provided, it does not appear to be of concern. When IE restarted, it attempted to reopen the page it was last on, which was apple.com. res://ieframe.dll/... is how IE reloads the last page it was on. Malware Bytes caught this dll loading and alerted on it.


6

In the Internet Protocol Version 4, the address 0.0.0.0 is a non-routable meta-address used to designate an invalid, unknown or non-applicable target. To give a special meaning to an otherwise invalid piece of data is an application of in-band signaling. In the context of servers, 0.0.0.0 means "all IPv4 addresses on the local machine". If a ...


0

CPU Virtualization Basics CPU virtualization emphasizes performance and runs directly on the processor whenever possible. The underlying physical resources are used whenever possible and the virtualization layer runs instructions only as needed to make virtual machines operate as if they were running directly on a physical machine. CPU ...


2

The Stagefright attack is simply a delivery method, an insertion vector, a way in. And only a partial delivery method, at that. By itself, it only allows someone to execute code within the sandbox of the MMS app or web app that's trying to play the malicious multimedia file. In order to actually do any damage they have to combine it with some other zero-day ...


1

Yes it is possible. If tokens are server generated by creating a cryptographically secure random sequence stored against the account, this token could be refreshed and reissued on a certain interval, invalidating the old one. The token would only be refreshed on active use so it won't invalidate the old one when the client computer is off. This approach ...


0

Is it possible to implement a login system that protects against this scenario, while still allowing your user the convenience of "Remember this computer for 30 days"? No. To put it bluntly, it is impossible. That will be a huge, complicated and simply a non feasible task for an authentication system to fulfill. All what you can do is to be ...


1

You can upgrade your shell to a Meterpreter with sessions -u <#> and then run post modules (e.g., post/multi/recon/local_exploit_suggestor) or you can also take an existing session (Meterpreter or not) and run a local privilege escalation exploit, e.g., udev_netlink, sock_sendpage, et al, by setting the SESSION variable. Some modules vary by OS or ...


4

At this point you've achieved the basics of a compromise on the system and you're on to the common phase two of exploitation which is privilege escalation. Exactly how you can achieve that depends very much on the system in question, what code is installed on it and how it's configured. Some options for things to look for to get privilege escalation on a ...


0

According to metasploit documentation, user priv is a module alvailable to the native Windows meterpreter only (not other meterpreters). You probably want to look into unix privilege escalation, which i do not know about. I do not believe there's an automated module for metasploit that would do that... Good luck ;)


6

I believe they already have if this article is correct: http://community.skype.com/t5/Security-Privacy-Trust-and/How-to-protect-your-IP-from-skype-resolvers/td-p/3874291 Skype uses peer-to-peer instead of traditional client/server connections to make the calls happen though. Since there's no sole middleman the data needs to know where it's going between ...


5

EMET software participates in a defence-in-depth approach of security. It adds an effective supplementary security layer when an attacker manages to successfully exploit a vulnerable software without being blocked by the anti-virus. However, in such domain is an endless race, since while EMET is getting more popular, attackers will try to craft their ...


0

EDIT: The OP has TOTALLY modified his question by reediting it AFTER I answered him, so my actual answer seems to be an answer to an other question. So please stop being chatty and take time to read the comments above before you add yours and restart the same conversation with me. was the Microsoft EMET effective in protecting user from Hacking team ...


2

Yes, this has been implemented before. In this blog post, Erin Ptacek briefly mentions how AVR has different program and data memory and how this makes exploitation more difficult. A Harvard Architecture has two distinct memories; there is program memory (imem, typically flash) and data memory (dmem, typically SRAM). They live in two different address ...


2

The problem with most operating systems is that they follow a specific "calling convention." This convention requires putting function parameters on the stack, being some derivative of the C-style calling convention. You must use this convention for ABI (Application Binary Interface) compatibility with that OS. So, without OS support, you could only use this ...


-1

It is possible, practical and dangerous! You can implement it by having a Raspberry Pi or Arduino to act as a modem, converting the digital bits into electromagnetic signals. Don't worry about the transmission range. Amplifying electromagnetic signals is not a big deal and doesn't request a lot of resources. Take a look at this example. Hackers were able to ...


6

Is it possible? Yes. Varying the electromagnetic noise of a device's circuits to transmit data has been used both in and out of laboratory settings. (For example, somebody figured out how to modulate the Raspberry Pi's GPIO pins to turn it into an FM radio transmitter, with the side effect of trashing a wide band of the radio spectrum.) Is it practical? ...


9

If the input is not carefully filtered, then that is a vulnerability called Server Side Request Forgery (SSRF). There is even a common weakness enumeration number and page for it. https://cwe.mitre.org/data/definitions/918.html By providing URLs to unexpected hosts or ports, attackers can make it appear that the server is sending the request, possibly ...


5

Well depending on how they've implemented this feature it could indeed be quite dangerous. In addition to to the risks you've mentioned there's also the potential for non-public URLs to be retrieved by the system. For example retrieving http://127.0.0.1 would retrieve localhost. This can be a risk as things like administration panels are commonly deployed ...


2

You just discover that GCC perform alignments on local variables (stack). An paper that could give you an idea of this concept is the following one: Optimal Stack Slot Assignment in GCC



Top 50 recent answers are included