New answers tagged

0

Well TBH I'd be inclined to question exactly what the customer is looking for if asked for that level of detail, it would seem excessive to need to know everything a pen tester did during a review (and surely a customer that paranoid would have excellent IDS in place and could derive it from that ;) ) That said if you do feel the need, as @abe-miessler says ...


0

If you already experienced an sql injection attack: MySQL by default doesn't log all queries[1], as it would impact performance significantly. It's also not enough to just consider the tables your webapplication directly accessed. If you don't have logging or auditing enabled, determine what tables would be considered "high value" in the main database. ...


0

The only accepted way to erase data from a hard drive using magnetism is through a process called degaussing, which involves using an extremely powerful electromagnet which alternates its polarity thousands of times a second. It is the changing magnetic field which erases data, not the presence of magnetism itself. A human being cannot rotate a magnet fast ...


2

You can use Apache Tika and create your own program to extract metadata, it is pretty easy to do and here is a tutorial on how to do that. As the other answer says there is no surefire way to extract metadata from every type of file but Tika covers an alright amount.


1

The Unix/Linux file command will extract a lot of metadata inside files, and if you are using Windows, you can install cygwin to gain access to that command. Some example output: C:\Users\stewmark\ScreenShots>file *.png ChangePW.png: PNG image data, 1167 x 1046, 8-bit/color RGB, non-interlaced ChangePW_link.png: PNG image ...


3

Where metadata is stored will be up to the OS and the file that created it (as you say about Notepad and Word docs). Some file types even create a separate file just to hold the metadata. Because of #1, there is no free "give me all the metadata" tool. There are tools that can find the metadata of a wide range of well-known file types, though. Because of ...


4

With a weak kitchen magnet this can take many passes and a fair amount of time. In fact if all you have is a fridge magnet you may be better off scraping the strip off. However a more powerful magnet can erase the card fairly quickly. See http://www.creditcards.com/credit-card-news/video-magnets-make-credit-card-mag-stripe-not-work-1457.php for details. ...


1

If you happen to use a tool like IDAPro, you can debug your malware and check the content of the memory and registers When reaching any pre-selected debug breakpoint Instruction per instruction As mentionned here (https://www.hex-rays.com/products/ida/support/idadoc/1470.shtml), you can use IDAPro to take snapshots while you are in a suspended state ...


0

I just came across a DARPA project that appears to be what you're looking for. In particular the python based tool Differential Analysis of Malware in Memory (DAMM) by 504ENSICS Labs Disclaimer, I haven't used it.



Top 50 recent answers are included