All Questions

When a computer has a TPM module, BitLocker doesn't seem to require a password, which makes me really uncomfortable. Where's the key coming from? What's preventing someone from grabbing the key by ...

I want help in making a project that is Intrusion Analysis and File Integrity Monitoring I don't know where to begin or what to do as I am new in this cyber security field as I am a student. At ...

I read a few articles on how DNSSec works (here and here). The DNSSec request are not encrypted, and I wanted to know if it's possible to encapsulate it into a DoH or a DoT request?

Recently I wanted to buy the particular product from an online website and was just searching that product during my leisure time. after some time suddenly I saw the ad of that product on Instagram ...

What is advantage of using one against the other. What are the differences Proof-of-authority Proof-of-space Proof-of-stake Proof-of-work

I am in the process of De-Googling myself and use complex passwords. I change my registered Gmail to an alternative mail provider I change my password to a complex one I use mostly vbulletin and ...

While setting up my Android account on my phone, I am asked If you like, you can add this phone's number to your account .... ..for example you number will be used to: Reset your password ...

Logged into same network of residence, owner knows my Mac address.. what can they see? They are techy and know my Mac address for my phone and PC. Can they see text message to and from me? My email? ...

traceroute to google.com (216.58.209.174), 30 hops max, 60 byte packets 1 192.168.0.1 0.941 ms 1.270 ms 1.575 ms 2 216.58.209.174 18.725 ms 19.184 ms 19.826 ms traceroute to yahoo.com (98....

If we need to connect to the corporate network from home, we need to have the VPN connection. However, what if for accessing SaaS applications like Google Doc, Salesforce, etc, do we need still need ...

Created at: 6/6/2016, 1:05:58 PM PDT ( Delivered after -13 sec ) SPF: pass DKIM: pass DMARC: pass # Delay From * To * Protocol Time received 0 ...

I have a question regarding approach to online security and protection against viruses, malware and phishing by one of the biggest European ISP. Below you will find my understanding of the topic. Is ...

We have some distros that require moderator's approval if the sender is not on the allowed sender's list. So the email land's in all the moderator's inboxes and one of them clicks a button to allow ...

My OpenVPN credentials work on Windows 10 but I am having difficulty connecting from Ubuntu 18.4. It is simply reporting that the connection failed on Ubuntu. The config files, cert and key are all ...

I’ve heard a lot about fuzzing website parameters with programs like OWASP-zap but what is the importance of it? A simple active scan finds vulnerabilities in a website such as XSS. So why do we need ...

Below are the DNS servers that I have been using for many years: 84.200.69.80 DNS Watch (Hostname: resolver1.ihgip.net ISP: Accelerated IT Services GmbH) 91.239.100.100 Uncensored DNS (IP: 130.225....

I read a question here about this topic but actually I am not super sure whether I understood it correctly. Unfortunately, because of my low reputation I can't comment there, so I decided to ask here ...

I'm thinking of rate limiting anonymous requests based on IP, but for users with a valid authentication token, I can't decide if it's better to log and rate limit requests based on their UserId or IP ...

I'm learning how to properly configure iptables to fend off TCP port scans on a hosted Linux-based VPS -- I'm not particularly interested in blocking this kind of attack, but rather in understanding ...

I want to use a website monitor to check that a web page is working but the web page requires that the user is authenticated. Is there a crafty way of achieving this that doesn't require storing an ...

I have a node.js environment deployed using AWS Elastic Beanstalk on an Apache server. I have run a PCI scan on the environment and I'm getting 2 failures: Apache ServerTokens Information Disclosure ...

I am conducting a penetration test on a website and am trying to prove that php code can be executed with the file upload. The website allows for file uploads but it checks for: 1: Filetype 2: ...

When you do a pentest what is your recommendation to the client on how to handle/interpret the report? What I frequently see is that identified issues - especially issues related to self developed ...

Has per security concern, I personally used this feature on blackberry. I felt more secured while unlocking the phone ,even someone watching you while unlocking they can't get the pattern or ...

I code with java How i can hack android with java image like put java code into image and execute in phone target

I am trying to clear up a doubt on security testing. If the web app (GUI, functional UIs, user roles, et all), makes use of rest web services to take actions, I believe both the web app AND the web ...

I was just surprised to see this suspicious promoted tweet, asking me to send Bitcoins I added the hand-drawn red lines so I am not responsible for propagating the apparent scam. Clicking on the ...

Suppose you use a password manager having all possible features of modern password managers: encryption with a key derived from your master password, auto-filling, cloud or local storage, browser ...

While performing the security assessment on an Android application(UAT Environment), I'm unable to capture the HTTP traffic through proxy server(Burp Suite/OWASP Zap). There is no point of ...

I am trying to do my undergrad thesis in my univeristy and want to do it on Elliptic curve cryptography. Can anyone suggest me where to apply ECC.

It just came to my mind that few years ago many iOS applications where infected by XcodeGhost (notably WeChat). This made me think about few possible scenarios: Malicious code injected in object ...

I was connected to my workplace wifi via my personal phone for 10 minutes. I did not open anything strange that could get me into trouble. I was doing some work. However, when I finished looking up ...

I have file with extension *.encrypted. Can you give me some advice how to recognise by witch tool was this file encrypted? It´s not encrypted by some ransomware but by some encrypt tool. When I open ...

I'm testing a web application checking the Origin or Referer request header as a CSRF prevention mechanism. I could not find a way to bypass these checks and they seem to be implemented reasonably ...

After I've installed OpenVPN; I faced with below errors. Would you, please, support me about ? systemctl status openvpn@server.service openvpn@server.service - OpenVPN Robust And Highly Flexible ...

This is a scenario based question. A large corporation has hired you to develop an IDS infrastructure for their network. The organization has five subnets: Marketing, Research, Development, Sales and ...

I am a user of Lastpass and I have some concern about the storage of local data. According to my knowledge about Lastpass, there is an encrypted local vault stored in my devices with the Lastpass app ...

I'm trying to Decrypt the following Encryption - B-893bc61697fae28215bf8e5ecab3a81e I do not have much knowledge of Encryption, Decryption etc. But all i do know is, i can't find anything on this, i ...

On successful authentcation, a web application issues a session cookie that is a constant length string of apparently random hex characters. ...

I was looking at a sample PCAP from 1 of configured CISCO catalyst switch configured for EAP-TLS authentication. In few snippets there were 2 EAP request and EAP response followed by EAP failure ...

![al querer conectarme desde la aplicacion me salio este error, yo estuve ejecutando unos comandos como dm-boot y dm-verity ppr problemas de seguridad en mi correo, quizas por eso me sale ese error? ] ...

If i receive an email, how does my computer verify the author origin integrity using the digital certificates? Does it use any specific protocol for this?

How is a pepper (a large constant number) used after a password has been salted with a salt by a hashing function such as bcrypt? From Sybex CISSP Official Study Guide, 8th Edition (2018): Adding ...

Let's say I receive an email from my friend, X. The email is attached with the digital certifciate of X. Suppose this digital certificate is issued by a company called DS, and my computer does not ...

I just got an email from a hacker that says Hello Dear Support Admin I hacked your site and copy entire data to my laptop. If you send me 1(one) BitCoin : 1.You have your data. 2.You have my help ...

First of all I changed my macadress and hostname. After that I connected to my neighbor's WiFi. Then I used a double-vpn connection and cleaned my computer up, connected with rdp and activated socks5 ...

I have this file and my school task is to decrypt this file. Can anybody help me how?

Background: Many shipping companies (like DHL, UPS, national postal services, etc) will allow the recipient of a package to track their package online, and will often display the address that the ...

I have a single raw-md5 hash that I want to crack. I've put it in a proper text file without a trailing linespace. I also want to use a wordlist for this. However, john exits before actually trying to ...

Where can I learn about attack and security implementations of NFC chips? Specifically Mifare Desfire EV1. Google didn't give me much on it. I want a comprehensive study.