Tag Info

New answers tagged

0

As mentioned by Valmiky Arquissandas, encrypted text is generally expected to be computationally indistinguishable from random data. Thus, the only publicly known efficient way to do something like check if a file is "not already encrypted by AES" is to run a randomness test. However, your application should use authenticated encryption anyway, and if it ...


0

I haven't looked at your code. However, one thing you should know about strong encryption: encrypted text is supposed to be indistinguishable from random data. This being said, you can either make a heuristic that uses a statistical test to decide whether the text appears random and thus appears to be encrypted (this also means that you wouldn't be able to ...


0

In terms of sessions management, you got things right. However, there is more aspects to Django Application Security that I would suggest you to have a look at. My recommendation is to install and research the middleware module 'django-secure', and have a look at it's security enhancing options. Here are some suggestions: SESSION_COOKIE_HTTPONLY = True ...


4

Virtual machines work as sand boxes to keep bad things in, not bad things out. If the host is compromised, so are the containers running within it as the virtual machine has to call out to the host for many actions and the host has full awareness and control over the system running within it.


0

Very unreasonable. The first question I think you need to ask is if file encryption is necessary. Based on your question it sounds like the answer is yes. To me that means that you A) should implement file encryption and B) do it well. What you describe is A but not B which is arguably worse than nothing at all because it may give your users a false ...


3

This functionality already exists in Nmap, in the pjl-ready-message NSE script. Here's an example usage: nmap -p 9100 --script pjl-ready-message --script-args pjl_ready_message="your message here" 192.0.2.0/24 The script already checks for a real PJL service before sending the command, so you probably don't have to check for OS fingerprint results.


1

Looks like this could be facilitated by using NSE. Take for instance the following script (called hp.nse): function portrule(host, port) if port.state == "open" then cmd = "echo " .. host.ip .. " >> targets.txt" os.execute(cmd) end end function hostrule(host) end function action() end If you run: nmap -p 9100 -n --script=./hp.nse ...



Top 50 recent answers are included