All Questions
0
votes
0answers
2 views
how can an IPS be fingerprinted (snort IPS)?
Does anyone know how to fingerprint an IPS ? is there any tool available to do the job?
I want to detect snort in my network .
Would appreciate any kind of help.
0
votes
0answers
3 views
Pivoting without Meterpreter
Please help me out with the method to pivot without using meterpreter. The scenario is : A Network Pentester, owned a system of the target network needs to enumerate other systems in the network via a ...
0
votes
1answer
20 views
Python SSH vs SSL?
I read the What is the difference between SSL vs SSH? Which is more secure? , and it mentions there is the possibility they can be affected by similar attacks. Now that the heartbleed thing is out, ...
1
vote
1answer
22 views
Sql Injection and no priviliges to write files
I have a sql injection in my site and im using sqlmap but when i try --os-shell it says cannot write file due to permissions . now is it impossible to write a file to the server?
0
votes
1answer
26 views
Outbound Port 443 Open but Not Allowing SSH
My college wireless network has a firewall blocking all outbound ports except 443 and 80. The wired network, however, has none of these restrictions.
I can connect to HTTPS sites (obviously). On my ...
1
vote
0answers
42 views
How the decryptor author found the initialization vector for the AES CBC- whatsapp CRYPT5 db uses?
I was going through DECIPHERING MSGSTORE.DB.CRYPT5, THE NEW DATABASE WHATSAPP
& Steal WhatsApp update.
The author of the first link published a decryptor which sets the iv for the aes_192_cbc to ...
0
votes
1answer
23 views
Aside from Remote Exploit Code/Physical Security or Social Engineering - Is there another way to gain access to a network?
After spending some time looking into security and remote attacks on a client/network, I feel like I've hit a wall - Every remote attack seems to boil down to one of the following approaches:
...
0
votes
0answers
26 views
Instant Messaging End-to-End
I plan to create an application for secure instant messaging, now I don't know whether or not I want to implement the encryption by myself. This project is also mainly for educational purpose so I ...
-1
votes
1answer
20 views
my own computer's name is listed for sometime in peers list during torrent downloads [on hold]
While downloading with torrent.I saw my own computer name being written in the peers list . After few seconds it vanished and then reappeared after sometime ,again vanished, why is it so.
-1
votes
0answers
23 views
Secure connection failed (OCSP)
I've been getting a lot of failed connections lately, namely from Facebook and now Google (German site works, French does not). This happened to other sites as well but these two are the kind you do ...
0
votes
0answers
19 views
Length-constant password comparison in scrypt? [duplicate]
E.g.: XORing the candidate against stored then comparing against 0.
Do I need to worry?
(my question is much in the same style as this question: Does bcrypt compare the hashes in ...
2
votes
3answers
85 views
Risk in buying SSL cert from non well-know party
Let say I knew a guy is selling SSL cert in a very cheap price, assume they will generate a real and valid cert for me, since I need to submit my CSR to them and they pass to th CA, are there any ...
1
vote
1answer
39 views
NTLM/LM Hashes on Domain Controller
I've noticed that when extracting password hashes from a domain controller (using Elcomsoft proactive password auditor) sometimes I'll get LM and NTLM hashes and other times I'll only get NTLM hashes.
...
1
vote
1answer
41 views
Web Application Authentication Using Computer Properties
Introduction:
I am in the process of building a web-based game that requires user authentication. The vast majority of other gaming sites utilize the typical username/password method for ...
1
vote
1answer
35 views
Using Fiddler to capture few important Details
I want to implement the following requirement.
In an online Bank Transaction, a User wants to send an amount of $1000 to an Account A. I want to see that the request is going unmodified to Banking ...
2
votes
2answers
85 views
Keepass Dictionary Attack Protection Strategy
Though pretty interested, I'm everything but an expert in Information Security, please redirect me to any helpful resources if my question is stupid or correct me if my assumptions are wrong.
When ...
4
votes
1answer
128 views
What are the OpenSSL standard Diffie Hellmann parameters (primes)?
I recently generated some custom Diffie Hellmann parameters which are basically just long (in the below case 4096 bit) primes. Those are then used in the key exchange process.
I used the following ...
1
vote
1answer
79 views
how secure is javascript based oauth2.0
Javascript based oauth exposes the client id of the application and it trusts only on the domain requesting the access token. The domain name can be forged with a dns hijack(or a virus affecting ...
-5
votes
0answers
21 views
VPN cyberghost free verson [on hold]
Whenever I connect to it, it disconnects..
Does that happen to anyone else? Do they do that so you have to get the paid verson?
What's a good free VPN that wont give out your info to law ...
1
vote
1answer
27 views
Linux kernel 3+ system call table modification detection
Is there any available tool which can check kernel 3+ system call table for modifications?
Also I want to know, is there any automated general tool to check Linux for unknown rootkits? Not like ...
3
votes
1answer
22 views
Does the ARM TrustZone technology support sealing a private key under a code hash?
One of the extremely valuable functions of a Trusted Platform Module (TPM) chip is its ability to seal a private key under the hash of the code that will use it. This means that one can create a ...
1
vote
0answers
16 views
Metasploit Pivoting on loopback?
I'm pen-testing a Windows 7 machine, and have access to a limited remote shell.
I can see there's a vulnerable SMB service running on the machine's loopback, but it's not available externally.
Is ...
0
votes
1answer
24 views
Evaluation of cryptosystem for authentication and keyexchange
I'm a masters student in computer science who works part time with my own company as a consultant.
My lastest project is based on my bachelor thesis which handles everything except the security. The ...
-1
votes
0answers
36 views
How to trace an active cell phone call? [duplicate]
I have searched many websites but found none that contains information on how to trace the location of an active cell phone call.
I already know that the connecting cell site and signal strength ...
0
votes
1answer
24 views
Apache 2.2 mod_ssl configuration Forward Secrecy/BREACH/BEAST/CRIME
I am looking for mod_ssl configuration which protects against common attacks like Breach, Beast and Crime. I already disabled gzip to avoid Crime but I'm unsure about the others.
RC4 should only be ...
3
votes
2answers
106 views
Can Heartbleed expose a TOR user's IP address?
It is interesting to observe, that TOR exit nodes with out-of-date OpenSSL implementations can themselves be affected by the Heartbleed bug.
Can Heartbleed expose a TOR user's IP address merely by ...
0
votes
1answer
24 views
Allow loopback in Iptables?
I'm trying to write Iptables rules for a small web server. Almost every source I've encountered recommends to allow loopback access to the web server, but doesn't explain why this is necessary.
...
-2
votes
1answer
29 views
How to decrypt javascript code extracted from PDF
I analyzed PDF, and extract javascript code.
But javascript code is encrypted.
I can't decrypt it.
Please advise me.
javascript code
...
2
votes
0answers
23 views
How does BGP filtering work to prevent routing hijacking?
I've been reading for a while but yet do not properly understand how is BGP filtering used to prevent "attacks" such the recent Indosat's problem.
Do not copy&paste Cisco's site, I have read all ...
-3
votes
1answer
80 views
Hack into a computer through MAC and IP address [on hold]
Can I hack into someone's computer if I know the MAC address of his modem and his public IP address?
Is this possible? What kind of stuff would I be able to access?
1
vote
1answer
17 views
Encrypting multiple blocks with an asymmetric scheme
I have a general question how asymmetric schemes are usually implemented.
Typically, there is a parameter in an asymmetric scheme which limits the message length. For example the modulus in RSA.
I ...
1
vote
1answer
100 views
How to know what personal information companies know about myself
I've been learning about Cyber Security and how to protect myself online after reading some books on the subject and I want to know how much Information i've handed out to companies.
2
votes
1answer
24 views
Wipe free space or take image and wipe entire disk?
Read some of the stuff here regarding wiping disks and securely deleting files. From what I've understood, after deleting (not securely) files they become part of the unallocated(free) space of the ...
1
vote
0answers
30 views
Storing private messages in a database
I am creating a portal where users can send private messages (PMs) for a very large audience. So I want to encrypt the messages and store them in the database. But I do not want to ask the users for ...
-2
votes
2answers
58 views
Is it legal to hack forum bots? [on hold]
I have a standard forum, currently plagued with bots. In the registration agreement, I included the following text:
SPAMBOT OWNERS, YOU HEREBY WAIVE ALL YOUR RIGHTS TO PRIVACY. ANY AND ALL ...
1
vote
1answer
50 views
Why is GPG file encryption so much slower than other AES implementations?
Correct me if I'm wrong: When encrypting a file, GPG creates a one-off AES encryption key and encrypts that key using RSA. This is supposedly to take advantage of AES's superior performance when ...
1
vote
0answers
11 views
How to Compile SSL onto Cygwin for windows? [migrated]
Below is what showed when i configured. I included all of the packages in the cygwin installer (it took me forever to tick off all the "skip" boxes)
`$ ./configure
Starting hydra auto configuration ...
1
vote
2answers
58 views
How to make an efficient bruteforce attack on Windows? [on hold]
I've been trying to figure out a way to efficiently bruteforce on Windows, but the method I currently have isn't very efficient. I did some profiling and found out that on average it can go through ...
1
vote
0answers
17 views
Storing encryption keys on a server using Node.js and MySQL
I am writing a web backend/api for an iOS application using Node.js and MySQL. In my database I have a table for posts. I would like the posts content to be encrypted. Let's say I'm using this AES for ...
1
vote
0answers
33 views
Login Authentication with SSL and HMAC
My question is pretty similar to : http://stackoverflow.com/questions/5487757/using-hmac-sha1-for-api-authentication-how-to-store-the-client-password-secure.
Basically, I want to write an API for my ...
2
votes
1answer
59 views
How difficult it is to solve a salt if knowing the original data and the hash output that uses the SHA-2 algorithm
I am reading the documentation for Kentico where it describes using hashes to validate query strings
...
1
vote
1answer
34 views
Booting into Live USB Linux
If I have a Live USB Linux stick and I plug it into a computer which is not connected to the internet and boot the computer using the Live USB stick. How secure is this interms of not leaving any ...
0
votes
1answer
27 views
Downloading list of pinned certificates
I'm thinking about implementing certificate pinning in a mobile app. The app will need to connect to several secure sites. Rather than having to update the app every time one of their certificates ...
1
vote
1answer
23 views
What is the different between CMP and SCEP protocol?
What is the different between CMPV and SCEP protocol?
Which one is better ?
1
vote
1answer
29 views
Is it bad to put a certificate as CA in Firefox?
I know I can add a self-signed certificate from a website to Firefox, but only in the CA list of it.
Question: does this mean I have to ultimately trust that self-signed certificate? Can someone ...
1
vote
1answer
30 views
Is it safe to use localstorage to store session variables and user password? [on hold]
I'm trying to make a web application in Java with a login/session system using com.sun.net.httpserver and as far I know, it does not have an inbuilt method to this. So, I had the following idea:
1 - ...
1
vote
1answer
40 views
Why an attacker would use a trojan over a spyware?
I'm trying to figure out some possible attack scenarios for a project I'm conducting.
I've read plenty of material about malware and, in particular, spyware and trojans. While it's hard to find unique ...
1
vote
2answers
79 views
Sql injection is not working on my site?
I have set up a page and database so I can practice SQL injection. Ive tried some examples and it doesn't seem to work. It seems to add the username and password to that database, even though I input ...
1
vote
2answers
41 views
Hidding ip address in a peer to peer connection
I'm curious is it possible to hide the ip address in a peer to peer connection. Mainly considering you have 2 computer connected remotly in a browser session. I would like to know if it's possible to ...
2
votes
7answers
99 views
How can I allow only authorized browsers to access a website?
I have a website and I want it to be accessible only by authorized clients/browsers (ex. with a certficate).
The idea is that the users can only access the webpage in their office's computers ...
