New answers tagged

2

There are Yara rules submitted by SANS ISC to detect BeEF, and these could be repurposed by yarashop for the network layer as a early-warning detection system. The author shows how to utilize Volatility to read into a memory capture and look for BeEF-related signatures and communications -- ...


0

If the sole concern is "hook.js" browsers such as Mozilla, Firefox have script blockers addons (e.g. noscript), if you're using IE, you could enable script blocking which would render any javascripts moot. As for tracking the communications server, you could use netstat: netstat -an | findstr 8080 That would only work if whomever set a port to 8080. Your ...


0

Possibly. Not really with new browsers, as they have better security. However a video cannot cause any damage, unless it forced you to have a full hard disk. However pages can. Mostly if you have plug-ins. Scripts can cause malware, and much more.


33

but the implication in the other question is that videos in question have been downloaded and played by media software on the target computer. No it is not. The implication is that there need to be a bug in the code handling the data. For instance the ffmpeg library is used in browsers like Chrome or Firefox and it had several serious bugs in the ...


11

A web browsers video system is just another video player, so the same problems apply which were mentioned in the linked question. The smaller set of supported video codecs greatly reduces the attack surface, but doesn't make bugs in the decoders for these formats inconceivable. The Adobe Flash plugin is renowned for its plethora of security bugs in the past ...


1

Hi I am a working student at Sirrix AG and responsible for the QA of BitBox. You are actually surfing more secure, considering that if you infect BitBox with malware from the web, your host system will not be effected. The Microphone is also disabled by default, so it cannot be activated by malware to spy on you. Also all interactions between Host and ...


0

Client certificates have all the nicest quality for authentication. But because of a chicken and egg problem users have no reason to acquire a serious certificate (costs money and time because the delivery should be a face to face operation) because few sites use them, and site administrators have no reason to actively support them since their users ...


0

I work developing a site which offers smart card authentication. The user connects a USB card reader, goes to the site, and when he wants to log in, he inserts the card and supplies a PIN. The issue is that the system uses a Java Applet, and these applets are no longer supported by Chrome or by MS Edge. New middleware is being developed which does not use ...


1

This could give rise to an information leakage vulnerability. Say your whole site is served over HTTPS, without DNS prefetching disabled. There may be certain pages on your site that reference other external resources. For example, imagine a banking website that customers can login to, and that the page for managing mortgages has some external links unique ...


1

I' not sure if this can be really called a vulnerability ... However, this behaviour could be possilby be unwanted. I would imagine a possible exploit like this: User is on a website Make the user click on a button on the left bottom on the screen (fix the position of the button so that it never changes its position on the screen) As soon as the user has ...


3

Yes, it can be a security vulnerability. To exploit it, consider the following scenario. The attacker somehow convinces the user to visit a website under attackers control. A DLL is automatically downloaded to the Downloads folder. The user downloads a legit installer/setup/whatever to the Downloads folder. It is possible that this software is vulnerable ...


0

This is not a security issue in Chrome. This is more of a mistake a user can make. In order for your "attack" to work you need the following steps: 1. Get a user to place your game 2. Download a file with out the user noticing 3. Get him to click close enough to the bottom download bar 4. Assume he made a mistake and clicked the downloaded file The likely ...


0

Yes this can be done in IPTables by blacklisting known bad addresses. See the following related post for more details: Blacklisting IP addresses -- when should we take action?


2

If you have your system set up so that only connections to your bank (eg. www.bank.com and www.bankcompany.net IPs) were possible, a redirect to a third site wouldn't load. The exploiit would need to be hosted on the same site as your bank (which is admittedly rare). As with many security solutions, it's possible that some bank update makes the website not ...


6

The reason you see that message is Article 5(3) of Directive 2002/58/EC, as amended by Directive 2009/136/EC, according to which users have to give consent for the storing of information (read cookies) or retrieval of information already stored. Some cookies are exempt from this rule, namely when the cookie is needed for carrying your data over the ...


6

From their product page, we can infer a lot about how their system works. Here are the key points: Can be used with Windows XP and Windows 7 Comes with: VirtualBox 4.0.16, hardened Linux Debian 6 and SELinux and Firefox Browser execution takes place in separated virtual machine with own operating system Downloaded files are first scanned and ...


0

Apple has released the Security Update 2014-005, disabling the CBC mode with SSLv3: Security Update 2014-005 Secure Transport Available for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5 Impact: An attacker may be able to decrypt data protected by SSL Description: There are known attacks on the confidentiality of SSL ...


1

Would BD Safepay avoid this problem with its enforced virtual keyboard ? Not completely: It would mean that actual keyloggers would no longer be able to intercept your keystrokes. In fact, this is why some banks require you to enter your password by clicking on-screen buttons. However, keyloggers have adapted, and some have also become "mouseloggers", ...


0

In terms of IP address leakage you might want to see How bad is the leaking of Internal IP addresses through external DNS. Nowadays, WebRTC works only on HTTPS and you should also use WebSockets on wss instead of ws. And I guess this way you should be fine.


0

Visiting a https url carries with it an expectation of security. Visiting a http url does not. This applies not just when manually typing urls but perhaps more importantly when following links and submitting forms. One soloution to this would be to add another url scheme for "encrypted but not authenticated" but even if all browsers started supporting that ...


3

There is always a trade off between the level of security and the amount of time and effort that you're willing to put into a project. For a personal blog I would reccomend you keep these things in mind. Always update your CMS. No matter if you choose wordpress, drupal, django, or something else make sure that you always check for security updates. The ...


4

You're really asking the wrong question here Really what you should be asking is: Should I be worried that I can use tools to look at passwords stored in my Chrome browser? And the answer to that is... Kind of. Really the best way to prevent that from happening is to keep your systems hardened. If someone gets access to that data, you've already lost ...


1

If you have saved your passwords in the browser's password store, then they can be read from the browser's password store, and there's no way around that. The reason that Nir's tools works is that the browser makers have not given proper consideration to secure storage, and you can't fix that yourself. Your alternative is to switch to a real password ...


5

I doubt that this has anything to do with google. According to your description google maps was only your starting point and from there you've opened the different websites for the various business. Some of these sites might be either infected or they contained ads and through these direct infections or the malvertising you got served some Scareware which ...


3

The reason this limitation is enforced, is that the SOP policy does not apply to window.close(), instead, you can actually close any window. It would be impossible to apply the SOP policy to window.close() as normally, each window in a browser process is isolated from each other to prevent certain cross-boundary attacks, thus even your "own windows" would be ...


0

Notably, to prevent sites that suffer from XSS flaws to be "auto-closed" by malicious scripts. Though script-opened pages would still suffer from the issue.. One could argue that 'any XSS-prone site could be defaced anyways'. True, but as Matthew commented, at least you would not "lose" your history (which could be easily restored at the price of a few ...


1

Do they just appear to be more secure, or are they really? While this is always changing with Firefox's continual drive to improve their security, many of their add-on's appear more secure than they are. Mainly due to what problems haven't been discovered yet. Note the popular NoScript issues outlined in the following security article here. And other ...


0

First of all, as @Steffen Ullrich suggests, a redirect is not automatically malicious, even if it is definitely possible. In particular, I analyzed the URLs you quoted with VirusTotal, and they don't seem to be malicious. It is not clear why the second URL includes parameters related to your IP address, ISP, browser version, etc. , but keep in mind that ...


0

Existence if such redirects by itself does not mean malware in all cases, but it can be. Very often you will find such redirects when ads gets served because ad-delivery is today usually a multi-step process with several parties involved. This is especially true with targeted ads and real-time ad-bidding networks. In such delivery chains each of the party ...


1

All browser exploits do not necessarily use Javascript to reach their needs. A browser plugin can be used to escape a browser sandbox for example. This means that a malicious person could create a website, knowing that his victim uses vulnerable plugin X (that parses the text of each visited page), and display text on his website that, once parsed by the ...


0

I just wrote a web-based client certificate utility that is entirely cross browser (does require modern browsers tho). It allows users to do single-password authentication and single-click auth. Your keys get encrypted with your single password, so you're a bit safer than <keygen> keys (since those aren't password protected). Users will eventually be ...


2

First, you should read through the most famous question on this site: How does SSL/TLS work?, having a good understanding of TLS will clear up a lot of your questions. Answering your questions: a) When a browser visit my site ... will prompt the end-user (using the browser) whether he/she wanted to install those certs? No, visiting a site in a ...



Top 50 recent answers are included