All Questions

Filter by
Sorted by
Tagged with
0
votes
0answers
4 views

Opening OpenVPN to the world

I built my own private network with OpenVPN. I bought a VPS at hosting provider A(closer to home) and another two at hosting provider B(cheaper). Using openvpn I connected the two to the OpenVPN ...
1
vote
1answer
15 views

Suspicious calls to testgvbgjbhjb.com

On the last few days, one of our endpoints calls to testgvbgjbhjb.com I used TCPView to find suspicious connections and checked if there any unknown extension. The owner of the domain made it a 127....
1
vote
0answers
13 views

Logging connections to hardcoded IP addresses

On a Windows system, I'm able to get a good idea of most outgoing traffic by enabling DNS query logging, but I am missing those connections that are made straight to hardcoded IP addresses. What would ...
0
votes
0answers
7 views

Loading seccomp rules from file

I'm trying to implement a simple container. I would like users to be able to specify whitelisted syscalls in a profile.json file. Example content of profile.json file: { "whitelisted_syscalls": ["...
0
votes
0answers
31 views

How to determine a site's expiration date as an outsider? [closed]

How to determine a site's expiration date as an outsider? What are the different options do this?
0
votes
0answers
22 views

Customize default Prompt options (camera to share) when I trigger camera in Firefox with code development

I am having 2 cameras in my PC. When I try to trigger camera in firefox it always opens a permission prompt box with a webcam options. But I don't want to show the camera options in the prompt box. So ...
-1
votes
0answers
18 views

importing ip ranges list as a text file in angry ip scanner [closed]

I don't know how to correctly import IP ranges in a text file for angry ip scanner. I copied the IP ranges from some website and import them in a .txt file like 45.5.0.0-45.5.3.255 45.5.15.0-45.5.15....
-1
votes
0answers
20 views

File That Sends Ping/Request On Server When Opened [closed]

I want to create a pdf/jpeg file that sends a ping or request to the server when opened by the user.
0
votes
0answers
7 views

libcurl: how to use TPM private key for mutual SSL authentication [migrated]

I use the C libcurl library. I need to do OCSP stapling combined with mutual authentication. For that, I'll take model on the below exemples. However, I need the private key of my client certificate ...
2
votes
1answer
30 views

Enforcing DMARC policy (reject) on an Office 365 tenant

The domain & tenant has SPF and DKIM properly configured and DMARC policy set to p=reject. Still, emails spoofed with the domain in the From header aren't rejected, but appear in the Junk Email ...
-1
votes
0answers
24 views

Scapy sniffing in python

I don`t seem to find how i can negate something in the filter parameter from the sniff function in scapy. For exemple, i want to scan the network for all the ports except 80 and 443(http/s). How i can ...
0
votes
3answers
65 views

Is it possible to scan the whole IP range to find a domain behind the CDN?

I am very curious if it is possible to find the real IP address of a domain "protected" by a CDN service. For example, www.cnn.com uses Fastly service, and the domain name only resolves to a Fastly ...
0
votes
1answer
54 views

Someone is using my email to create online accounts; what should I do?

I suspect it’s an attempt at getting into an existing account using a leaked email/password combo. I update my passwords regularly and do not reuse, so I don’t think the attack will be successful, but ...
-2
votes
0answers
26 views

Help with barcode creator software [closed]

I'm trying to find software for my business and I don't know what it's called that I'm even looking for. I'm trying to create barcodes quickly from a pad that I can send to a wireless printer, again, ...
1
vote
2answers
48 views

is iptable whitelisting secure enough in AWS

Suppose my app is hosted on multiple servers, within the same data center (say in AWS or DigitalOcean). To secure communication between these servers, I use iptable to whitelist each other's IP. ...
4
votes
0answers
42 views

Is there a standard for OTPs tied to transaction details (that has been implemented in apps/devices)?

There are standards for Time-based (TOTP) and Counter-based (HOTP) One Time Password schemes. Generated OTPs are independent of the transactions they are used for, such as authorizing a login or a ...
0
votes
0answers
34 views

If the Lorenz cipher machine was so much more advanced than the Enigma, how was it broken without having a physical machine? [closed]

The Enigma was commercially available before the war, and even during the war, they got their hands on "live" such machines, heavily helping them in breaking the encryption used by the Germans. The ...
-1
votes
0answers
36 views

Appropriate network coverage for Honeypots [closed]

We are trying to implement a system of honeypots at a relatively large organization. What we are having trouble with is how many sensors or VMs need to be deployed. For example, given a network of ...
0
votes
0answers
30 views

Benefit of using OpenSSH FIDO/U2F support over GPG mode?

OpenSSH version 8.2 introduced support for FIDO/U2F hardware authenticators, via the new public key types "ecdsa-sk" and "ed25519-sk". I currently have SSH authentication set up in combination with ...
1
vote
0answers
37 views

“Trusted memory” What does it mean?

It is often cited "to load from untrusted memory to a trusted system memory" when describing the secure boot process. I wonder, when can we consider a memory as "trusted"?
0
votes
0answers
37 views

One-time-use methods alternatives?

Luckily, I’ve never faced an issue like this, but it came to my mind. Let’s consider tokens or QR access tickets. Do I have any option rather than banning the ID on the server? If I have a one-time-...
0
votes
0answers
4 views

Secure File Transfer with Individual Control

My main goal is to build Raspberry Pi cloud storage and I want to access it remotely. I can easily send commands via SSH. However, transferring files bugged me due to its slow connection speed, or ...
-2
votes
1answer
55 views

How to embedded exe file into png file such that when png file open then exe file also open with png? [closed]

No code yet. I have used binary and base64 to embedded exe and png file into png. But none of these methods works for me. Because when I run png file exe is not run. I don't know why. I need help in ...
0
votes
1answer
45 views

Where do you get the DigiCert CRL distribution point?

If you look at a DigiCert certificate: https://baltimore-cybertrust-root.chain-demos.digicert.com/info/index.html, you can see that it has the following: Key: Size: 2048 bit RSA Key Usage: ...
-1
votes
0answers
37 views

Where there any exploits in tput or dircolors?

Are there any exploits, for: /usr/bin/tput /usr/bin/dircolors ?
0
votes
0answers
29 views

Spawned reverse shell will not run additional commands

I am new to this, so I applogise if this is a silly question! I have created a reverse shell on a Windows box using an exploit script and the following MSFVENOM to create a reverse shell. msfvenom -...
0
votes
0answers
6 views

Diffie-Hellman in Https: How are prime numbers picked? [migrated]

I am trying to understand https, as I understand https uses the Diffie–Hellman method for keys exchange and then AES for encryption. But Diffie–Hellman needs two prime numbers, where do these come ...
0
votes
0answers
10 views

Unauthorized backups, how to seize back data? [migrated]

It appears that someone at my company (likely using stolen admin credentials) had set up backups for the whole org on G Suite using Backupify and Spinbackup. We need to secure the data. ...
0
votes
0answers
22 views

I've been an emailed a password; how can I proceed as securely as possible? [duplicate]

I am going through the on-boarding process for a summer internship with a well-known tech/bank company. I've received mail from HR requesting me to fill out an I-9 form via the external service they ...
0
votes
0answers
53 views

Is there such a thing as a “privacy helmet”? [closed]

I have given up the idea of ever talking people out of carrying around surveillance devices or to influence the global society to remove all these surveillance cameras, mics, sensors, etc. I no longer ...
0
votes
1answer
47 views

How does Burp update XSS/vulnerability scanning rules/payloads?

The first point, that it updates with new release. So if somebody discovered new payload for popular frameworks, it will be in burp only with new release. Does Burp app load payloads from Internet ...
0
votes
0answers
14 views

What information leaks to a site that I am hotlinking images from? [migrated]

Suppose I have two websites: website A and website B. Website A hotlinks to images on website B. What information will visitors to website A be sending to website B? In particular, I would like to ...
5
votes
1answer
558 views

How to mitigate credential disclosure in man in the middle attack

I have the followin scenario and looking for a secure solution. There is a web application, hosted on IIS. The connection is established over TLS 1.2 and is encrypted. So the steps are Client ...
0
votes
0answers
5 views

Snapshot G Suite? [migrated]

Is there a way to snapshot all data in G Suite for a whole organization? The two methods I know about are "Data Export" (for an admin) and "Takeout" (for each individual user). The problem is that ...
0
votes
2answers
66 views

Angular (2+) code visibility to users

I'm looking into Angular and read that typescript is compiled to javascript. Is everything viewable/visible to users that I write using typescript? With PHP I know you run code that's only visible to ...
0
votes
1answer
98 views

Is there a “generally accepted” balance between privacy and convenience when protecting user data?

I am building a system that's going to host medical records for the users. The system needs to be secure, so that only the users with correct auth can access their data (data will be encrypted, so ...
0
votes
0answers
92 views

Is attribute-based encryption safe for production use?

I'm very interested in attribute-based encryption (ABE). I see various working examples online, and I want to know, has it been verified as production-ready? What does it mean to have a security audit,...
-1
votes
0answers
73 views

How did (in particular) Americans just go along with the concept of having to own and show “photo id” everywhere? [closed]

I remember hearing or seeing a documentary or something a "long" time ago, likely in the early 2000s, about how a lot of Americans (USAians) refused to show an "id" even when voting, where it might ...
0
votes
0answers
6 views

How to config site-to-site VPN from Unifi USG to OpenVPN server [migrated]

I'm trying to configure our Unifi USG with a site-to-site VPN into a private OpenVPN server with several computers behind it (which currently works with individual OpenVPN clients). The USG ...
-1
votes
1answer
82 views

Does this iptables entry indicate someone's trying to break in?

Two days ago I built a Debian 10 server in the United States for use as a file server for my web application. When I created the server, I installed the fail2ban package and configured a basic, ...
1
vote
1answer
46 views

Looking to take a hotspot that is shared and create my own hotspot that can be firewalled

What is the best way to take a wireless hotspot that is owned by someone else, create my own hotspot or VLAN to be able to Firewall / Not allow my devices to view the other individuals' devices? I ...
0
votes
0answers
37 views

How to decrypt a rocksdb file from Android?

I have collected an encrypted RocksDB file from an Android application. By reverse engineering the mobile application I have also collected the encryption key. However, for the life of me I cannot ...
0
votes
0answers
24 views

Mobile phone number spoofing [duplicate]

I received a text message from my son but it came up on my phone as not in my contacts and hence the number was displayed not his name. It was from an iPhone 7 fully up to date iOS and not with any ...
1
vote
1answer
79 views

What ports should be closed in windows 10?

How can I close ports in windows 10 and what ports are unnecessary to be open? How do I find these open ports to close? Also if I close a specific port on windows 10 do I have to close the outbound ...
1
vote
2answers
66 views

If I am using a VPN with allowed multiple connections can each user/device be able to view traffic of the other user?

If I am using one a VPN Service, but it allows up to lets say 8 devices to connect, are all the devices/users able to view traffic from other users/devices? Or is each VPN connection creating its own ...
0
votes
1answer
111 views

Run your own code on chrome:// url?

Recently I've been trying to escape sandbox Chrome OS for fun, bounties, etc. I found you can run straight system commands through chrome:// urls (such as displaying USB Detected message, or something)...
0
votes
0answers
33 views

USB token for Java Desktop Application

I would like to integrate the use of a USB token in a JavaFX application that my customers use on a computer I send them. This JavaFX application interacts with a Java/Spring back end. (client-id/...
-3
votes
1answer
139 views

Why, with such insanely powerful computers, are no efforts to speak of spent on security? [closed]

The only technology "news" I ever hear about go on about "performance this" and "performance that". I haven't felt that my computer was "slow" since the 1990s. 20 years ago. Yet this is the only thing ...
1
vote
3answers
80 views

How to set up full disk file encryption?

I want to set up my company's laptops in a way that all files created on these laptops can only be read by these laptops. If it is copied to a USB then that file is only readable when plugging that ...
3
votes
1answer
139 views

TLS 1.0 & 1.1 support by browsers stops in March, what will happen if I keep using it?

In March most browsers will stop supporting TLS 1.0 & 1.1 my website already uses 1.2 but some external apis still use TLS 1.0. What will happen with the requests to those apis? Will they keep ...

15 30 50 per page
1 2 3 4 5 1136