All Questions

Filter by
Sorted by
Tagged with
0
votes
0answers
5 views

Windows Fine-Grained Password Policies (FGPP) - Set Policy Duration

Trying to determine if there's a way to configure an FGPP(the policy itself) to last/be enforced only for a specified period of time or ideally, until a triggering event occurs. E.g., create temp ...
1
vote
4answers
33 views

How can Facial Recognition surveilance be misused by police?

There has been a lot of news lately about facial recognition use by police forces being banned or that it should be banned. The obvious example is that a police officer who is motivated by personal ...
0
votes
0answers
22 views

How would you know if your device is connected to a switch?

W/o using a switch port mapping tool in a linux machine. How would you know if a repeater/router you are connected to is connected to a switch?
-1
votes
0answers
11 views

How to performance test an AngularJS Web Application?

Can someone tell me how to test a web application with angular js with Burp suite?
0
votes
1answer
26 views

Disabled Network Discovery for port 5357 but it still shows up as open in NMap scan

as mentioned in the title I have disabled Network Discovery for all of the 3 profiles yet when I run an NMap scan, the port comes up to be open. I have also run the command netstat -a -b to find the ...
-3
votes
2answers
49 views

I want to hide my youtube embeded code from my source code

I have iframe in my website i want it to be encrypted so that user can't understand the link and when user try to paste on browser it should show the video <iframe id="<?php echo $...
-2
votes
0answers
29 views

A question for people in the field of information security

my name is Raphael and I am trying to learn a bit about the world of information security and investigations to get started in this area Suppose you received an alert from one of the operating ...
1
vote
1answer
38 views

Active Directory GDPR classification

GDPR classifies data into Non-personal, Personal and Sensitive personal. Sensitive personal is further broken down to Genetic and biometric, Racial and ethnical, Religion and Philosophical etc. ...
0
votes
1answer
25 views

Swift HMAC doesn't match NodeJS HMAC, but only sometimes!

I have discovered a HUGE issue in my code, and I have literally no idea what is causing this. SO, when I send requests to my server I hash a string thats in the request. This is sometimes user input....
0
votes
2answers
37 views

HTTP Basic authentication bypass

I'm trying to bypass a basic HTTP authentication, but all the methods I have found are with dictionaries or with brute force. I want to know if I can use other techniques like SQL injection or ...
0
votes
2answers
73 views

What can someone do with a Google auth token?

I just received an email from "Have I been pwned" to say my credentials have been made public via a breach. The quoted text is: "The exposed data included names, email addresses, genders, spoken ...
0
votes
0answers
23 views

What 32-bit OS keeps their OS more updated than Debian (which seems to be the least updated)? [on hold]

Because I use 32-bit, I find my list of potential OS's limited, considering that I am somewhat of a novice with linux and can not use an OS that requires a lot of knowledge to put it together to get ...
-1
votes
2answers
85 views

If my computer system is on, but none of my network connections are active, can someone work on hacking into my OS?

I thought I read that if my network connections, both wifi/ethernet, are NOT on, that if someone wanted to try and work on hacking my OS, that they would have to wait until the network connection is ...
-1
votes
0answers
33 views

Standard or common way to secure a destination-email-address of a contact-form [on hold]

I have a website with a minimal HTML-CSS-JavaScript contact form but I desire to hide the destination-email-address of that form from the HTML source code so that form users would not be able to find ...
0
votes
1answer
34 views

Difference between Trust and Federation

In the context of Identity and Access Management, is my understanding that Trust is between directory services and Federation is between IdP servers correct? I have also come across terms that are ...
0
votes
1answer
33 views

SFTP -What is Public Key is Duplicated on another server

I have an SFTP server. My ServerA wants to send a file to SFTP server, and i was told that ServerA public key needs to stored on SFTP server for Authentication purposes. My question is, if the public ...
0
votes
0answers
23 views

Unfamiliar encoding [duplicate]

I got my hands on some users for my pen test task but I cant figure out what encoding or hashing has been used. I tried different once as 64,32,16 and what not but nothing works. Any ideas? Example ...
0
votes
0answers
29 views

Just came to know about Digital Certificates. But did't understand the way clients can verify CA [duplicate]

So I just came to know about Digital certificates, and this is what I understand. Public Key, Message + PK_encrypt(Hash(message))/Message Signing, And other identifiers is what a digital signature is....
0
votes
1answer
45 views

SSL Handshake problems

I captured my network traffic to a web server and the SSL Handshake consists only of two packets. Why does that happen and why aren't there all the other packets?
0
votes
0answers
34 views

How to implement token based authentication for my API? [migrated]

I have a Django backend which will be served as my API endpoints. Users are identified by username and password and have some extra information and should be able to consume my same API, so I want to ...
0
votes
1answer
41 views

Xss payload with onpointerover?

I bypassed a waf and found an xss vulnerability using the onpointerover event handler. In the page where i found the XSS there's also a login page. My questions is: What xss payload can i use with the ...
0
votes
0answers
27 views

Geography based permissions [on hold]

One of my clients divide their work by geographic regions (jurisdictions). They want these to be driving permissions and can provide the regions as Shapefile every month. Is there a standard for ...
0
votes
0answers
28 views

How to create wordlist with name attached

I created a wordlist with CUPP (Common User Passwords Profiler) and then I ran it through Mentalist. What I want to do is run every password with a name attached. I know the name is in the password. ...
0
votes
1answer
33 views

how to get sites original ssl cert when using company firewall that returns its own ssl cert

I would like to download a website's SSL certificate but can only see my cooperate firewall SSL certificate. Question: When all traffic that flows to my computer from the network have the same ssl ...
0
votes
1answer
33 views

TLS certificate - How to assign a CN name for an EC2?

AWS console(EC2 dashboard) shows public DNS name as ec2-99-xx-xx-xx.ca-central-1.compute.amazonaws.com for an EC2 instance. But the same AWS EC2 has a different DNS name (shown below): $ hostname -...
0
votes
0answers
4 views

Modern pass-through authentication [migrated]

In a Microsoft environment one can set up a web application that will pass the credentials directly to SQL Server so that permissions are set closest to the data. How can this be achieved in modern ...
6
votes
2answers
1k views

How to encrypt using a private key file generated by OpenSSL?

When I use openssl genrsa -out yourdomain.key 2048 command to generate a key. I understand the yourdomain.key file contains both the private and public keys. But when I check the content of this key ...
0
votes
0answers
33 views

Do all Javacards have S@T Toolkit installed already

Do all Java SIMs (Java card based) contain S@T/ SIMAlliance Toolkit, making them vulnerable to SIMjacker attack?
0
votes
0answers
57 views

We need 3,000 devices to be connected with internet [on hold]

I need to make 3,000 devices use internet in one big hall. Do we need multiple public internet IPs in order to make them use internet at the same time? or Can we have just one public internet IP ...
1
vote
1answer
29 views

Protect Identity with VPN using Cloud Services - Google Drive, Microsoft OneDrive, Dropbox, etc

If you are using onedrive or any other cloud storage system is your identity safe when you connect and want to browse using a VPN or should you shut down all USERNAME / PASSWORD required services ...
1
vote
1answer
56 views

OpenSSL 1.1.1d - how does it compares to BoringSSL now?

There are plenty of comparisons but most of then for older versions of OpenSSL. Apparently OpenSSL fixed a lots of infamous vulnerabilities, cleaned up code and build process. So my question is, as ...
1
vote
1answer
37 views

Authenticate Static Public Keys

How can a static ECC public key be authenticated when being shared between the client (who has just created the static ECC public key) and the CA (Certification Authority) - who will sign and send the ...
1
vote
2answers
59 views

Convert ECDSA keys (PEM, OpenSSH)

To work with ECDSA keys I am using the python-ecdsa library. Unfortunately this library can not process keyfiles properly if they are provided in the OpenSSH format. Instead I generate them in the PEM ...
1
vote
1answer
67 views

preventing cross iframe key logging in javascript

We have a web application, where other partners can include their pages as iframes. We implemented a server-to-server way of authenticating users for the iframes, but one partner doesn't want to ...
1
vote
1answer
126 views

Is there a unique way to identify a hardware?

I'm considering an environment in which I will have to identify a computer. In this scenario all hardware parts (CPU, HDDs, RAM, etc) won't change, while I'd like to consider a changing OS. The goal ...
1
vote
1answer
77 views

Is adding a prefix to an API token lowering it's security

When creating API tokens, one can pick any format one likes. Many people choose to use 40 random characters. I'm wondering how much of a security issue is to prefix the API key with a prefix "...
1
vote
0answers
71 views

Why can leaking a kernel pointer be dangerous? [on hold]

Which attacks can be executed with a leaked pointer?
0
votes
0answers
48 views

How actually Denial of Service (DoS) attack is performed? [on hold]

I studied that in a DoS attack, attacker make a network/machine inaccessible to the intended users. Different servers have different specification like a small local server would capable of ...
0
votes
1answer
30 views

How do I get the “n” (modulus) field in the jwk response

We have a web-service that follows RFC 7515 / JWT: it supplies public keys on a /jwt endpoint and encodes data transferred on its main endpoints into JOSE+JSON. Using several standard JAVA libraries ...
1
vote
1answer
42 views

Looking for a specific quote about keys and transparent encryption implementation

I'm struggling to find a quote advising that we should be comfortable in sharing details of encryption methods and implementation with would-be attackers and the system still remain secure. The idea ...
1
vote
1answer
42 views

Why do we need DKIM to be used along with S/Mime?

S/Mime can be used to encrypt email and it can also be used by the sender to provide his digital signature so that the recipient is able to confirm the authenticity of the sender. Why then do we ...
0
votes
0answers
15 views

Have the sshd host strings that are present in /var/log/auth.log been validated by sshd? [migrated]

Since the log messages are written by the sshd daemon after an established connection, then my understanding is that the host strings have already been validated by the sshd daemon since the log ...
0
votes
0answers
34 views

Connect 3rd party devices to windows server domain

I'm working on radius authentication. Server for this moment and production is windows server 2016. The authenticator is a hp ProCurve 2610-pwr 24p supplicants is a windows pc running windows 10 1903 ...
1
vote
0answers
28 views

What's the use of an “extra” dynamic declaration in an external DTD blind XXE attack?

I've been studying XXE attacks through portswigger blog. I don't understand the extra step of a dynamic declaration (i.e. <!ENTITY % eval...) in the below external DTD: <!ENTITY % file SYSTEM ...
0
votes
0answers
21 views

Mixing customers and employees in the same IDAM

We are implementing IDAM for an organisation with 300 employees and 100,000 customers. Some of the employees are customers, some of which are using their corporate account. There are ~50 web ...
0
votes
0answers
22 views

Is it safe to share an Azure SAS token with an untrusted client?

We need to host files in Azure Blob Store, and allow access to end users to their generated "statements"(pdf) for a short period of time. We're considering achieving this by generating a short-lived ...
1
vote
0answers
38 views

'Hard-to-guess' custom header (or similar) to whitelist via a firewall

My organisation is adding a firewall to our test stacks, using AWS WAF. We'd like to whitelist all traffic from the SDKs we've built to facilitate requests between our services. We thought of doing ...
0
votes
0answers
35 views

Cache side channel capacity model

I'm wondering about a specific model I encountered in reading this paper which describes a model for the amount of meta-information that can be encoded in cache. The relevant section is repeated here:...
2
votes
1answer
92 views

Is there a name for this (unconventional?) use of RSA for authentication?

I am writing an article about a late-1980s system that uses the RSA algorithm for the purpose of authentication. However, rather than the usual approach of encrypting a hash of the message using a ...
0
votes
0answers
26 views

RSA AES Hybrid Encryption [on hold]

By default this system is vulnerable to man in the middle attack. Is there any solution to this without using certificates?

15 30 50 per page