0
votes
0answers
5 views

How far I can go with SQLmap

I'm new in SQL mapping I try to test my own website which is written in PHP for developing my penetration testing skill. I find all Database and Table information. But after that what can I do next? ...
0
votes
0answers
16 views

Unable to access internet Kali Linux

I have dual booted my Macbook Pro, connected my Panda Wireless USB adapter, and configured my WIFI, but I am still unable to access the internet on my Kali Linux distribution. I was curious if there ...
1
vote
1answer
14 views

How do modern browsers isolate different addons?

A user may have multiple addons installed on a browser. But typically, the browser is running in userspace with an unprivileged uid. I was wondering how modern browsers can, in such a setting, provide ...
1
vote
1answer
13 views

Way to properly escape user input which gets run by shell_exec() in php?

i have the following script: $user_input = $_POST['user_input']; // If there is a way, i want to escape it here. shell_exec("php some_file.php $user_input"); Is there a way to properly escape the ...
-1
votes
1answer
16 views

SHA 512 value for true crypt? [on hold]

I downloaded truecrypt not from website can someone please verify the SHA 512 value
1
vote
2answers
20 views

Is there a point to set up passwords for services like MySQL, Redis etc. if we disable their related ports?

Redis' default port is 6379 and MySQL's default port is 3306. Let's say we disable these ports to outside of the world with ufw. And let's say only I have access to the servers. Is there still a point ...
0
votes
0answers
10 views

Categorizing CVE product name

I'm looking for a way to categorize CVE product names by operating system, application etc. Is there any dataset available to deal with this? https://www.cvedetails.com offers these categories for ...
0
votes
2answers
26 views

How do cert authorities set and determine subjectAltNames if not provided by end user?

Let's say as an end user I generate a CSR (for a server cert) to send over to a CA and I don't include a subject alternative name. How or what would they do in order to include that information on the ...
0
votes
1answer
29 views

Public / Private Key Cryptography for offline systems

Are there any best practices around distributing an encrypted package to multiple end user systems, specially if the end system are offline ones, in context of asymetric cryptography? Is it a must to ...
1
vote
1answer
109 views

I would like to get scammed

I would like to get scammed via email to have some fun. How can I achieve this? (I have looked online and have found no answers only how to not get scammed.)
1
vote
1answer
52 views

CSRF Protection Is Needed for GET Requests

I have a REST API that allows authenticated users to read data about their own account and make changes to their accounts. For authentication I use JWTs stored as httpOnly cookies. To protect against ...
1
vote
1answer
29 views

Why am I allowed to add exception for some sites but not others when using a proxy with a self signed cert?

I have a proxy server that runs on my local system. It's designed to capture traffic that passes through it for testing. It generates a self signed certificate that it uses to sign traffic. Here's ...
1
vote
1answer
16 views

Sending p12 certificate through OWASP ZAP

Is there a way to get OWASP ZAP to send a p12 certificate? I have an https website that receives p12 certificates for authentication. I have the certificates installed in the browser. Previously, ...
1
vote
1answer
40 views

How to determine if Windows 10 executable can connect to my network

I'm considering use of a scanner driver I see on a website. I don't know the site or the owner so I'll be paranoid and assume that this Windows 10 exe is malicious. I can run the code in a throwaway ...
0
votes
0answers
20 views

How to use binary search for blind SQL injection queries

From what I read online, it's possible to apply binary search to exploit blind SQL injection vulnerabilities, and that is probably what tools like sqlmap use to lower the number of queries that need ...
1
vote
0answers
15 views

DNS search lists cause ambiguity, but what are practical examples of this?

Browsers and other Web software tend to allow the system resolver to use the local domain search list when resolving URLs. E.g. www -> www.example.com., if your domain search list is example.com. ...
-2
votes
0answers
37 views

Protected WHOIS data [on hold]

How can I get a list of privacy emails? I have a list of emails, and I want to filter only the emails that bought email privacy service (For them to be anonymous) for example: 'noreply@data-protected....
1
vote
0answers
41 views

Any security reason why I should use framework like Angular and not semantic templates like handlesbars, ejs or pug?

I was wondering what will be the risks when I am only working with semantic templates like handlesbars, ejs or pug?
2
votes
2answers
113 views

How is intercepting my own HTTPS traffic possible?

I have a slight misunderstanding in the way TLS works. I know that I can use Burpsuite Proxy to intercept HTTPS traffic coming from my browser. How is this possible when the server is going to see the ...
2
votes
1answer
30 views

False positive SQL Injection by ZAP with adding new parameter query

I have a spring MVC web application and am running ZAP Active scan on it. I noticed that ZAP will modify URL , and add additional parameter named query and value query+AND+1%3D1+--+ to test SQL ...
0
votes
0answers
30 views

When developing a web application why should I enable case sensitivity for routes and strict routing mode?

Example for enabling case sensitivity will be for example "/show" route is not the same as "/Show". What are the best security best practice will be here? I was also wondering if I should enable ...
4
votes
1answer
106 views

Which protocol could have been likely candidates for leaking a laptop serial number

Having read this article, one line in particular caught my attention: The AFP raided the boy's family home last year and found two Apple laptops with serial numbers that matched those of the ...
0
votes
0answers
32 views

Securing web application AWS [on hold]

How to secure a web application hosted on Amazon Web Service AWS? Securing web applications on the cloud is different and require more measures
0
votes
2answers
39 views

Sha256 hash + secret GUID + RNGCrypto random number to hash passwords

I'm maintaining a website which uses Sha256 hashing of passwords. The passwords are hashed with a GUID key, and a RNGCrypto generated random salt. I'm just trying to understand the security risks ...
1
vote
1answer
42 views

How do CORS proxy websites work?

While I was developing the front-end side of my web project, I got an CORS protection error. Not surprising since my front-end project was not in the same origin. After some search on how to bypass ...
1
vote
1answer
19 views

Security implications of using long lasting authentication cookies

I'm trying to find some information about potential security risks with allowing long lasting cookies for website authentication. Initially it was set to not persist the login session, so it would ...
0
votes
2answers
77 views

Should I change my built-in Administrator password?

I had never thought much about this until the only account on my home PC somehow lost admin privileges (changing to guest - I suspect this is a Microsoft bug but will probably never know). So, ...
1
vote
1answer
68 views

Suspiscious HTTP request to nginx server in server log, what is it?

I have an nginx server running an instance of and express/nodejs server. I was going through the logs to see what was being requested, and I noticed a few normal attempts for common flaws in things ...
0
votes
1answer
29 views

Reasons to transition Kerberos secured web applications to OAuth2/OpenId

We have five internal web applications written in Java / AngularJs that are secured via Kerberos/ Spnego ( Spring Security implementation) . We are looking to transition these apps to AWS ( EBS) . ...
1
vote
2answers
49 views

Directory transversal in PHP with the $_FILES array

I'm working on a php application that is handling file upload. I'm trying to inject a path transversal payload in the filename such as /../../../../etc/. The thing is that the vulnerable line of code ...
1
vote
1answer
89 views

Am I getting MITM'd?

Recently I've noticed a delay in my Internet speed. Pages seem to start loading a little later than they used to. I decided to do a speed test on speedtest.net, but it wouldn't do the speed test ...
0
votes
0answers
32 views

Crack google account password [duplicate]

I am trying to crack a google account that I own personally. I have forgotten the password I have a wordlist that might have the password for the account. When I try to crack it using hydra it returns ...
2
votes
1answer
51 views

When to rotate a client TLS certificate?

What is the recommended rotation period of a TLS/client certificate? I have seen organizations rotating at half life and some that rotate only 30-50 days before expiry. For example, for a certificate ...
2
votes
1answer
59 views

Sign a lot of messages with same private key

I'm creating platform where I need to sign a lot of messages (1k/sec), I want to use Ed25519 signature, because it has the best performance. Is it safe to sign that many messages with the same private ...
0
votes
0answers
21 views

Central storage of passport biometric data? [on hold]

Is biometric data (photo, fingerprints etc). on new EU passports stored somewhere centrally?
-2
votes
0answers
30 views

Machine learning method that used in IP spoofing detection?

I wonder if machine learning method has already applied to security issues like IP spoofing detection. Would like to see if you could offer some sources/journals that combine these two fields, thank ...
0
votes
2answers
47 views

Certificate verification fails for self-signed certificate

I'm trying to use a service that uses a self-signed cert. Download the cert: # printf QUIT | openssl s_client -connect my-server.net:443 -showcerts 2>/dev/null > my-server.net.crt Check that ...
2
votes
1answer
59 views

Difference between DNS flood attack and DNS amplifier attack

I am trying to understand DNS flood and DNS amplifier attack. I have read the definition and am still confused, could you give me an example of each attack or tell me the differences between them? It ...
39
votes
9answers
8k views

IT will only give password over phone - but is that really more secure than email?

Every year an automated password reset occurs on a VPN account that I use to connect to the institution's servers. The VPN accounts/passwords are managed by the institution's IT department, so I have ...
1
vote
1answer
40 views

Is it possible to send cookies from third party server to browser using CORS

UPDATED FROM THE LAST QUESTION WITH MORE DETAILS I'm building a full javascript app from Salesforce.com API with no server side script that will be hosted on salesforce.com domain (https) This app ...
0
votes
0answers
43 views

How is the crytography system used in Windows XP and does it need to be enabled?

The root certificates on my Windows XP machine have expired. As far as I understand it, Windows XP only uses crytography for doing "intranet" data transfers, which in my case is irrelevant because I ...
0
votes
1answer
50 views

Does flushing DNS cache clear search history

I do not want to lose my search history (i.e entering a phrase in the URL bar and the most related searches) because I use that to access all my websites with ease.
3
votes
1answer
41 views

Methodology for finding existing adversary presence on network

A technology company starts small in the early 90's and, for various reasons, blows up into a multi-million dollar company in a very short time around 2013. The problem is that this company is ...
-1
votes
2answers
61 views

IP reputation lists of malicious/suspicious IPs (paid or free)

I am looking for (also paid) option to get a list of bad, malicious IPs. Are there some vendors selling those? So far I found many IP lookup website and lists, but they relate mostly to SPAM. I want ...
2
votes
4answers
89 views

How do mobile apps prevent HTTPS MITM attacks when the user installs the attacker's CA certificate?

I am using a mobile app that installs a fake trusted CA certificate and therefore can capture the HTTPS traffic of other apps. Most of the time, this MITM attack is successful. However, I noticed ...
0
votes
0answers
94 views

Dirty ajax calls allows me to get free pizza [duplicate]

Recently my buddy at work wanted to order some food for lunch from a website that we usually order from. The site allows the visitor to become a member of the site by registering and then logging in. ...
1
vote
3answers
111 views

How to understand GitHub's password policy?

Today I tried to change my password on GitHub, but the site rejected my new password: The new password you provided has also been reported as compromised due to re-use of that password on another ...
-1
votes
1answer
141 views

People using my email address (and only that) for booking hotels. What kind of scam is this?

I have faced the same issue twice: 2 people, whose names are definitely not the same as mine, used my email address to book hotels through a well-known hotel company and a lesser-known hotel booking ...
0
votes
0answers
31 views

Drupal Site Compromised [duplicate]

My personal website Drupal compromised. I replaced all Drupal core modules. I scanned all malicious php scripts in sites folder, found some shells and removed. Now when i hosted in wamp there are ...
2
votes
2answers
62 views

Is RSA key-like browser authentication feasible?

I see that password based authentication is out of favor today, and Internet is moving toward RSA keys-based authentication. Coming from that fact, I am wondering if there would be a real benefit to ...

15 30 50 per page