Top new questions this week:
|
|
I am using netstat -acp | grep ESTABLISHED command to check established connection
between with my system.
$ sudo netstat -acp | grep ESTABLISHED
tcp 0 0 rg-Vostro-3546:51874 server-18-...
|
|
Let's say the situation is this: I'm a big corporation with a whole bunch of GDPR compliance and other regulatory stuff which means I need to ensure that certain data doesn't leak (so basically most ...
|
|
A bounty hunter reached out to us to give us information about a security vulnerability in our company's information systems. In our estimation, the risk of exploitation for this vulnerability is ...
|
|
I'm in the process of figuring out an encryption strategy for a personal Linux system.
My laptop is almost always on, or in sleep mode, except for longer travels.
My main threats are theft of my ...
|
|
Here is the TLS 1.3 handshake from Section 2 of RFC 8446:
Client Server
Key ^ ClientHello
Exch | + key_share*
| + signature_algorithms*
| +...
|
|
I maintain several Angular apps, which contain thousands of dependencies on NPM packages. GitHub's Dependabot notifies me of new known vulnerabilities every week (from the CVE database).
For example, ...
|
|
Currently, I've discovered an OOB XXE that allows me to include a .dtd file to extract a particular system file content, for instance, /sys/power/disk.
So my file.dtd is:
<!ENTITY % data SYSTEM &...
|
Greatest hits from previous weeks:
|
|
I have a public key generated with ssh-keygen and I'm just wondering how I get information on the keylength with openssl?
|
|
How can I find out if files from my computer were written/copied/moved to a USB storage device? I want to know if there is a solution that would work in a system that has not got any monitoring/...
|
|
I just got a call from a very weird number. On my phone it displays as "+1 (1) (5 )" and "USA" below.
I answered the call and there was 100% silence. Then about 2 seconds later the call ended.
Next ...
|
|
I think that it's fundamental for security testers to gather information about how a web application works and eventually what language it's written in.
I know that URL extensions, HTTP headers, ...
|
|
I need to explain SQL injection to someone without technical training or experience. Can you suggest any approaches that have worked well?
|
|
My phone number is 456-123-XXXX (American phone number + area code). Over the past few months I get fairly regular spam calls from other numbers also beginning with 456-123-XXXX, where the last four ...
|
|
Two month ago, I encrypted my Micro SD card in my Android device (Samsung Galaxy S5) for security purposes, and yesterday I forgot to decrypt it whilst removing the card I and factory resetting the ...
|
Can you answer these questions?
|
|
Fair warning - I am a security newbie.
In all container escape/breakout vulnerability scenarios I've read (CVE-2022-0185), the author assumes or states that the attacker already had shell or SSH ...
|
|
I recently consolidated some of my independently GPG keys.
I used the following the command to edit the oldest key
gpg --expert --edit-key <oldest-keygrip>
gpg> add-key --keygrip=<another-...
|
|
I have a mobile hotspot that is acting as my access point. The access point operates on the 192.168.137.x subnet. I am currently testing the effects of a de-authentication attack on the access point, ...
|
