All Questions

I built my own private network with OpenVPN. I bought a VPS at hosting provider A(closer to home) and another two at hosting provider B(cheaper). Using openvpn I connected the two to the OpenVPN ...

On the last few days, one of our endpoints calls to testgvbgjbhjb.com I used TCPView to find suspicious connections and checked if there any unknown extension. The owner of the domain made it a 127....

On a Windows system, I'm able to get a good idea of most outgoing traffic by enabling DNS query logging, but I am missing those connections that are made straight to hardcoded IP addresses. What would ...

I'm trying to implement a simple container. I would like users to be able to specify whitelisted syscalls in a profile.json file. Example content of profile.json file: { "whitelisted_syscalls": ["...

How to determine a site's expiration date as an outsider? What are the different options do this?

I am having 2 cameras in my PC. When I try to trigger camera in firefox it always opens a permission prompt box with a webcam options. But I don't want to show the camera options in the prompt box. So ...

I don't know how to correctly import IP ranges in a text file for angry ip scanner. I copied the IP ranges from some website and import them in a .txt file like 45.5.0.0-45.5.3.255 45.5.15.0-45.5.15....

I want to create a pdf/jpeg file that sends a ping or request to the server when opened by the user.

I use the C libcurl library. I need to do OCSP stapling combined with mutual authentication. For that, I'll take model on the below exemples. However, I need the private key of my client certificate ...

The domain & tenant has SPF and DKIM properly configured and DMARC policy set to p=reject. Still, emails spoofed with the domain in the From header aren't rejected, but appear in the Junk Email ...

I don`t seem to find how i can negate something in the filter parameter from the sniff function in scapy. For exemple, i want to scan the network for all the ports except 80 and 443(http/s). How i can ...

I am very curious if it is possible to find the real IP address of a domain "protected" by a CDN service. For example, www.cnn.com uses Fastly service, and the domain name only resolves to a Fastly ...

I suspect it’s an attempt at getting into an existing account using a leaked email/password combo. I update my passwords regularly and do not reuse, so I don’t think the attack will be successful, but ...

I'm trying to find software for my business and I don't know what it's called that I'm even looking for. I'm trying to create barcodes quickly from a pad that I can send to a wireless printer, again, ...

Suppose my app is hosted on multiple servers, within the same data center (say in AWS or DigitalOcean). To secure communication between these servers, I use iptable to whitelist each other's IP. ...

There are standards for Time-based (TOTP) and Counter-based (HOTP) One Time Password schemes. Generated OTPs are independent of the transactions they are used for, such as authorizing a login or a ...

The Enigma was commercially available before the war, and even during the war, they got their hands on "live" such machines, heavily helping them in breaking the encryption used by the Germans. The ...

We are trying to implement a system of honeypots at a relatively large organization. What we are having trouble with is how many sensors or VMs need to be deployed. For example, given a network of ...

OpenSSH version 8.2 introduced support for FIDO/U2F hardware authenticators, via the new public key types "ecdsa-sk" and "ed25519-sk". I currently have SSH authentication set up in combination with ...

It is often cited "to load from untrusted memory to a trusted system memory" when describing the secure boot process. I wonder, when can we consider a memory as "trusted"?

Luckily, I’ve never faced an issue like this, but it came to my mind. Let’s consider tokens or QR access tickets. Do I have any option rather than banning the ID on the server? If I have a one-time-...

My main goal is to build Raspberry Pi cloud storage and I want to access it remotely. I can easily send commands via SSH. However, transferring files bugged me due to its slow connection speed, or ...

No code yet. I have used binary and base64 to embedded exe and png file into png. But none of these methods works for me. Because when I run png file exe is not run. I don't know why. I need help in ...

If you look at a DigiCert certificate: https://baltimore-cybertrust-root.chain-demos.digicert.com/info/index.html, you can see that it has the following: Key: Size: 2048 bit RSA Key Usage: ...

Are there any exploits, for: /usr/bin/tput /usr/bin/dircolors ?

I am new to this, so I applogise if this is a silly question! I have created a reverse shell on a Windows box using an exploit script and the following MSFVENOM to create a reverse shell. msfvenom -...

I am trying to understand https, as I understand https uses the Diffie–Hellman method for keys exchange and then AES for encryption. But Diffie–Hellman needs two prime numbers, where do these come ...

It appears that someone at my company (likely using stolen admin credentials) had set up backups for the whole org on G Suite using Backupify and Spinbackup. We need to secure the data. ...

I am going through the on-boarding process for a summer internship with a well-known tech/bank company. I've received mail from HR requesting me to fill out an I-9 form via the external service they ...

I have given up the idea of ever talking people out of carrying around surveillance devices or to influence the global society to remove all these surveillance cameras, mics, sensors, etc. I no longer ...

The first point, that it updates with new release. So if somebody discovered new payload for popular frameworks, it will be in burp only with new release. Does Burp app load payloads from Internet ...

Suppose I have two websites: website A and website B. Website A hotlinks to images on website B. What information will visitors to website A be sending to website B? In particular, I would like to ...

I have the followin scenario and looking for a secure solution. There is a web application, hosted on IIS. The connection is established over TLS 1.2 and is encrypted. So the steps are Client ...

Is there a way to snapshot all data in G Suite for a whole organization? The two methods I know about are "Data Export" (for an admin) and "Takeout" (for each individual user). The problem is that ...

I'm looking into Angular and read that typescript is compiled to javascript. Is everything viewable/visible to users that I write using typescript? With PHP I know you run code that's only visible to ...

I am building a system that's going to host medical records for the users. The system needs to be secure, so that only the users with correct auth can access their data (data will be encrypted, so ...

I'm very interested in attribute-based encryption (ABE). I see various working examples online, and I want to know, has it been verified as production-ready? What does it mean to have a security audit,...

I remember hearing or seeing a documentary or something a "long" time ago, likely in the early 2000s, about how a lot of Americans (USAians) refused to show an "id" even when voting, where it might ...

I'm trying to configure our Unifi USG with a site-to-site VPN into a private OpenVPN server with several computers behind it (which currently works with individual OpenVPN clients). The USG ...

Two days ago I built a Debian 10 server in the United States for use as a file server for my web application. When I created the server, I installed the fail2ban package and configured a basic, ...

What is the best way to take a wireless hotspot that is owned by someone else, create my own hotspot or VLAN to be able to Firewall / Not allow my devices to view the other individuals' devices? I ...

I have collected an encrypted RocksDB file from an Android application. By reverse engineering the mobile application I have also collected the encryption key. However, for the life of me I cannot ...

I received a text message from my son but it came up on my phone as not in my contacts and hence the number was displayed not his name. It was from an iPhone 7 fully up to date iOS and not with any ...

How can I close ports in windows 10 and what ports are unnecessary to be open? How do I find these open ports to close? Also if I close a specific port on windows 10 do I have to close the outbound ...

If I am using one a VPN Service, but it allows up to lets say 8 devices to connect, are all the devices/users able to view traffic from other users/devices? Or is each VPN connection creating its own ...

Recently I've been trying to escape sandbox Chrome OS for fun, bounties, etc. I found you can run straight system commands through chrome:// urls (such as displaying USB Detected message, or something)...

I would like to integrate the use of a USB token in a JavaFX application that my customers use on a computer I send them. This JavaFX application interacts with a Java/Spring back end. (client-id/...

The only technology "news" I ever hear about go on about "performance this" and "performance that". I haven't felt that my computer was "slow" since the 1990s. 20 years ago. Yet this is the only thing ...

I want to set up my company's laptops in a way that all files created on these laptops can only be read by these laptops. If it is copied to a USB then that file is only readable when plugging that ...

In March most browsers will stop supporting TLS 1.0 & 1.1 my website already uses 1.2 but some external apis still use TLS 1.0. What will happen with the requests to those apis? Will they keep ...