Tag Info

Hot answers tagged

8

Because SFTP runs over the same protocol as SSH, there is no valid technical reason to refuse to enable SFTP. That said, there may be company policies that prevent this. There is a big difference between an SSH connection to issue commands, and an SFTP to transfer files. A company might accept the risk of allowing an approved account to access another ...


3

Microsoft is hoping to incorporate SSH: http://blogs.msdn.com/b/powershell/archive/2015/06/03/looking-forward-microsoft-support-for-secure-shell-ssh.aspx However, that has been attempted before and then fell by the wayside. As for your question, there is no standard or overriding reason why a user might enable SSH but disable SFTP, but there can always ...


3

I worked at antivirus industry 12 years ago, so I'll try to explain, but it is possible that my knowledge is a bit outdated. Each serious antivirus vendor has antivirus lab, whose work is split to: detect new viruses and develop solutions for them: signatures, behavioral patterns for heuristic detection, specialized detection code, sometimes cleaning code ...


2

This is how migrate works in meterpreter: Get the PID the user wants to migrate into. This is the target process. Check the architecture of the target process whether it is 32 bit or 64 bit. It is important for memory alignment. Check if the meterpreter process has the SeDebugPrivilege. This is used to get a handle to the target process. Further details ...


2

For the most part, smartcard integrations requiring pointing your email client at your smartcard reader & middleware, ensuring the proper crypto library is selected. There is mucho information on doing this with both OpenPGP smartcards and x509 smartcards Depending on the email client, the Windows trust store can be used, or not used. Your operating ...


1

There are a few possible scenarios, even after assuming Man in the Middle is not happening. Missing patches: If your system is missing a patch that allows RCE, that is an easy win. There are plenty of remote exploits that exist, and new ones every so often. Mitigation: Patch your system! Are you on a domain? You didn't mention Windows 7 Home or ...


1

When I hear this question, my first response is don't. If you are at all concerned about your personal network and your personal data, don't expose any part of it directly to the internet by hosting services. If you feel you must, here are some steps: Host the website on an entirely separate machine with nothing else on it Put that machine on a DMZ (most ...


1

Security is a process, where new software bugs are discovered from time to time. Sometimes by good people, and sometimes by bad people. Software bugs can be discovered in both user software, like Excel, but also in OS network stack. Windows 7 is based on rather well tested code, in which hundreds of remote vulnerabilities were found and patched during last ...


1

A port scanner, like nmap, connects to a port and analyzes the traffic being returned. A firewall's most basic function is to block access to a port. This means that there is no way to scan a port that is being blocked by a firewall. With some exceptions... Some firewalls will allow traffic to a port unless it determines that the traffic is malicious (like ...


1

Shared would send a plaintext query to authenticate clients which would be encrypted and returned. This left the key vulnerable to a known-plaintext attack. Open would allow anyone to authenticate, but wouldn't pass plaintext around, making the key harder to guess. Here and here are links to more details.


1

There is no way to completely stop the hacker, you can only slow him down. No protection is 100% effective (yet).


1

If you have control over the environment in which the application runs — basically, if you have access to the account under which the application runs — then you can observe everything it does. Simply run the application under a debugger and put a breakpoint or a trace on calls to CryptGenRandom. If you don't have control over the execution of the program, ...


1

According to CryptDeriveKey() documentation, upper WORD of dwFlags parameter specifies desired key size in bits. In your case it should generate 40-bit (0x28) keys, effectively discarding all but first five bytes of the MD5 output. To achieve similar behavior with CommonCrypto you can try this: CCCryptorCreate(kCCDecrypt, kCCAlgorithmRC4, 0, ...


1

As it often happens IE does not fare well with certificates of other authorities. Basically your IE does not recognize "The Git Development Community" as a valid issuer of certificates. If you are still unsure, you could do a research on the community, or try to upload the screen shot the same way you did it earlier. Using an already proven and working ...


1

If you have Windows Authentication on IIS you are effectively allowing the following protocols: NTLM Kerberos Negotiate - which automatically chooses one of the above to use. If it is your internet users that are getting the prompt, it is most likely that they will not authenticate with Kerberos unless you have internet facing authentication and ticket ...


1

The answer is "no" it can't be done, at least not with a directory traversal attack by itself. There are several issues here. 1) Directory traversal attacks should be blocked by the Web server to begin with. Of course, since you set up a lab environment, you have control and may have defeated the protection against it. 2) Directory traversal attacks like ...



Only top voted, non community-wiki answers of a minimum length are eligible