New answers tagged

1

The executable located at /usr/bin/python does little more than spawn the application /System/Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app. That application bundle doesn't have its own signature, but presumably it piggybacks on the signature of the parent binary.


2

Minor ranting This is a bit broad, and there may be some that are unknown at present, but there's usually good references out there if you're willing to search for them. Code execution isn't the only problem. You want to be careful of things that can lead to code execution. However, and as always, it's important to study these functions to see what ...


0

It's simple =) In no-proxy case you're tracing all the redirects yourself, so it's no problem to handle it. A proxy can be tricky as the proxy itself(not Tor case, but there are programs that behave a bit weird), so the proxy component for your language can be. Especially it happens frequently with HTTP and HTTPS proxies. Use a tcpdump - it will show you the ...


0

how does it differentiate the a normal request from a request through a proxy? Proxy detection is usually based on IP addresses. That is particularly easy for Tor, because the IPs of relay nodes are public. From Instagram's perspective it makes sense to block proxies as a mean to enforce rate limis for their API endpoints. Besides that, there is no ...


-2

Relying on NFC for authentication makes your project's security flawed by design. NFC cards alone doesn't provide a secure way to avoid eavesdropping and replay attacks. NFC cards can be easily read/write from wider distances than expected. For the VM authentication, I would advice not to store passwords either. Explore other authentication means, such as ...


1

There are the usual risks associated with explicitly or implicitly trusting something which comes from outside and thus can be controlled by the attacker. And there is a risk of assuming that environment variables provide a restricted visibility which they don't do always. Some examples: Implicitly trusting environment variables like PATH, LD_LIBRARY_PATH, ...


2

There are two primary ways to scan for the IoCs in Yara files: Against files on disk using a tool such as Loki.exe. Loki requires yara and will scan Windows machines looking for IoCs. Versus memory dumps available through a variety of memory-dumping tools. The Volatility Framework includes a plugin called yarascan with can specify Yara-rules file by using ...



Top 50 recent answers are included