All Questions

Filter by
Sorted by
Tagged with
0 votes
1 answer
28 views

How to handle trojan executed on my laptop? [duplicate]

Unfortunately, I have executed an .exe file on my PC. After scanning the file I understood that it is a trojan and after checking its behaviour using VirusTotal I understood that it left many files on ...
VSB's user avatar
  • 185
0 votes
0 answers
11 views

Key Usage and Extended Key Usage for X.509 Certificares on Yubikey

I want to deploy X.509 certificates onto a Yubikey into the certificate slots 9a: PIV Authentication 9c: Digital Signature 9d: Key Management 9e: Card Authentication (see Yubico: PIV Introduction - ...
user2690527's user avatar
0 votes
1 answer
23 views

Execution profile for web server

I would like to know if there is a way to run an app to exhaustion in terms of all possible outcomes that it can provide. What do I mean by that: Let's assume that someone has an (Apache) HTTP Server. ...
und3rd06012's user avatar
0 votes
0 answers
7 views

How to access iframe.contentWindow.document of a nested iframe inside an iframe? [migrated]

I've been trying all day to nest created iframes and access their contents, but security restrictions dont let me. Is there a way? I shared my code and everything i tried so far in a codepen. https://...
serapath's user avatar
0 votes
0 answers
20 views

At what point does data wipe after incorrect password attempts become reasonable? [closed]

So a while ago I was talking to a guy who was a high-up security officer for a big bank, and he told me something interesting. He told me (and this isn’t private information or anything,) that after ...
security_paranoid's user avatar
0 votes
1 answer
28 views

How to verify the salt in the SCRAM protocol?

I've recently read about the SCRAM authentication protocol. One of the stated design motivations is to support mutual authentication, but how does the client verify that the salt and cost parameters ...
n-l-i's user avatar
  • 246
9 votes
4 answers
993 views

How long does malware last "in the wild"?

I watched this YouTube video where the uploader connected a Windows 2000 virtual machine directly to the internet, no NAT or firewall. Why does this happen for systems that are 20+ years old? ...
ElectricHellKnight's user avatar
0 votes
3 answers
51 views

Goal of CA is to allow clients ability to determine if TLS was tampered with while "in-transit"?

I believe my question will be a continuation of questions such as: What's the point of the CA? How does a digital certificate prove authenticity? In short, I still don't have a firm grasp on why a ...
learningtech's user avatar
2 votes
1 answer
502 views

How to store private keys on flashdrive

I'm trying to create a secure and private way to access my personal PC from most desktop PCs. The method I've devised so far is: Create an SSH tunnel to my PC The connection is encrypted The ...
TwiddleMouse's user avatar
-1 votes
0 answers
24 views

Is it possible that a fake UPI ID can be generated? [closed]

Today my parents got a call from police office that my brother is in a serious problem . they threaten then a lot . At same time my brother number was switched off . For this all my parents sent them ...
jagjeet kumar's user avatar
0 votes
0 answers
12 views

TLS-1.3 gnutls_aead_cipher_init from SSLKEYLOGFILE secret

I have a PCAPng file with it's corresponding SSLKEYLOGFILE. This file contains valid (random/secret) couples. I'm using libpcap to parse the file and glutls as cripto API. from client-hello I ...
Fulup Ar Foll's user avatar
-1 votes
0 answers
58 views

Is it possible that Anti-Cybercrime Police catch and track DDOS black service buyer? [closed]

Is it possible that Anti-Cybercrime Police catch and track DDOS black service buyer? My IP is being attacked for years (DDOS) from IPs and IP ranges from hundreds of different IPs. The story is: I ...
Frost's user avatar
  • 1
4 votes
1 answer
108 views

How can I safely buy a USB memory stick?

I need to buy a USB memory stick to create a Windows recovery drive. As we all know, USB drives have serious security issues, and the (slightly) paranoid part of me wonders about the safety of buying ...
Brian Rak's user avatar
  • 141
-1 votes
0 answers
61 views

Can world coin be hacked? [closed]

There's a new startup by Sam Almatan, they give away cryptocurrency, through their app, for iris scan. If it's a real cryptocurrency, where do they get enough to give it away every month? As I know ...
Den4ik's user avatar
  • 19
0 votes
0 answers
27 views

WinRAR password help me [closed]

12 years ago, I created a WinRar archive with a complex password (about 13-15 characters with lower case and special symbols). I had the password written in a book but I can't find it. Is there a way ...
blink's user avatar
  • 1
1 vote
0 answers
50 views

How to generate high entropy from physical sources?

What could be the main sources for strong noise generation for an AVR128DA64, so that the obtained entropy approaches or even equals 128 bits? I'm interested in good sources of physical entropy.
Hanna's user avatar
  • 11
3 votes
1 answer
354 views

Multiple certificate chains on a single server for TLS

Is it possible for a single server to use two different certificate chains for TLS? For instance, rootCA1, intermediateCert1, serverCert1, rootCA2, intermediateCert2, serverCert2. If this is possible, ...
Devz's user avatar
  • 33
0 votes
0 answers
11 views

Most Effective Methods to Master Reverse Engineering [migrated]

I am excited to begin learning assembly. I intend to learn it to guarantee security assurances when writing code for cryptography. One of the skills I wish to gain are reverse engineering. This is a ...
T. Salim's user avatar
  • 101
1 vote
0 answers
18 views

Terminology clarification on IdP-initiated, SP-initiated SAML flow

Background In SAML, there is IdP-initiated and SP-initiated login. IdP-initiated login ends up posting an unsolicited SAMLResponse to the SP, which has known security disadvantages. However, what if ...
mxxk's user avatar
  • 111
0 votes
1 answer
43 views

Breaking the Key Management Cycle

I'm working on securing encryption keys in a software application. The common practice of storing encrypted keys in configuration files leads to the challenge of securely storing and accessing the ...
Quan Nguyen's user avatar
-1 votes
0 answers
31 views

Bell-Lapadula model "Execute" permission

In all BLP model descriptions I've seen, the permissions set is defined to be {Read, Write, Append, Execute}. None of the three BLP security properties The Simple Security Property states that a ...
hegash's user avatar
  • 99
0 votes
0 answers
25 views

Is there a way to check when an SD card was last formatted [migrated]

My car was recently in the garage for its service and it has come out with damage (scrapes) to the bodywork both front driver side and rear passenger side. This particular garage has form and I have ...
LJS's user avatar
  • 1
0 votes
0 answers
14 views

Strengthening API security far SaaS application [closed]

I have a SaaS application which will interact with on premises applications and also with various other cloud providers using rest API calls along with access keys or tokens for authentication. These ...
Jasper Henria's user avatar
0 votes
1 answer
37 views

Running blog under /blog, security considerations

I'd like to set up a self-hosted Ghost.org blog for a SaaS. I have two options: example.com/blog blog.example.com Everywhere I read they recommend the /blog for SEO. However, I'm concerned about the ...
hyperknot's user avatar
  • 101
0 votes
0 answers
30 views

What does this payload mean? [closed]

My server was attacked recently and while going through the logs I found this payload 0x160x030x010x000xee0x010x000x000xea0x030x036{0xd80x12:R0xb3c0x86Ss0xbdI0xf50xc90xc6;.3Q0xf0O0x0e0xd50x880xcc0xe4)...
Caesar's user avatar
  • 1
0 votes
0 answers
27 views

"Duplicate" of Chrome Tabs causes stale tokens

Our implementation for authentication works like this User provides username/password to /login API API returns access token and refresh token in payload We store the access token and refresh token ...
Vin Xi's user avatar
  • 101
1 vote
1 answer
57 views

Does giving a user a Admin / Privileged account plus a standard account violate "Separation of Duties"?

Let's say a user requires admin privileges as part of their role for installation of required tooling. Would allowing them a separate admin account to perform these activities be best practice as ...
Ake33's user avatar
  • 11
2 votes
0 answers
53 views

Why is IPsec transport mode "vulnerable" for not having integrity of variable fields? Why is this so important?

With IPsec transport mode we CAN'T have integrity of variable fields (eg TTL and checksum). Why is it a problem? Is it? What could be the attack? I think TTL expire or checksum modification (so both ...
allexj's user avatar
  • 21
0 votes
0 answers
13 views

Shamir secret sharing beats XOR in theory or in practice too? [migrated]

The paper introducing Shamir's Secret Sharing Scheme starts as follows: In 2, Liu considers the following problem: Eleven scientists are working on a secret project. They wish to lock up the ...
ghosts_in_the_code's user avatar
0 votes
0 answers
14 views

LKM key copy to new component [closed]

How we may copy the already loaded LMK from the HSM, because the 3 components previously copied are lost?
Defaru Afework's user avatar
0 votes
1 answer
94 views

Securely store password for API sessions

Scenario: I have a PHP web application that needs to make an API call using a password provided by the user. I want to temporarily store this password so I can use it across multiple requests without ...
Techlands's user avatar
0 votes
0 answers
46 views

Have I got malicious activity on my home router? [closed]

Just got back from a week away and noticed unusual behaviour on the home wifi. Examples: Partner clicked "unsubscribe" on an email in the gmail app, the link loaded the typical scammy "...
Heartthrob_Rob's user avatar
0 votes
0 answers
20 views

node.js:server-side javascript running in task manager, malware or legit? [closed]

The path is C:\Users\mante\AppData\Roaming\Java\jre8\bin I'm cautious because a day before I noticed this, Windows Defender detected a trojan. I admit that before this I never paid attention to the ...
Salman 's user avatar
0 votes
0 answers
19 views

Minimal permissions for EXCEL COM operations

I have a situation where i'm trying to limit the required permissions for an account that leverages Excel COM / process operations. Worth to be noted, this account is an AD Managed Service Account. ...
Segfault's user avatar
1 vote
0 answers
26 views

How to verify the downloaded Mozilla Firefox binary? [duplicate]

I'm wondering about the correct steps when you want to download Firefox from their server and validate it has not been tampered with. Assume you download the latest Firefox tar-bz2-package from https:/...
Gere's user avatar
  • 147
10 votes
2 answers
3k views

Why isn't LD_PRELOAD disabled by default in Linux?

The Linux dynamic linker includes a mechanism of dynamically loading arbitrary code into every process using the LD_PRELOAD env variable and the /etc/ld.so/preaload file. This sounds dangerous, and is ...
Egor Sozonov's user avatar
2 votes
4 answers
6k views

Is this idea for secure password storage a good one?

Being interested in security, hashing in particular, I thought of a strategy that could either help or compromise password security. The main way to ‘break’ hashes is to brute force them. So, while ...
security_paranoid's user avatar
2 votes
1 answer
33 views

sqlmap will not save half dumped data in CSV File?

Is there any way to save half-dumped output in csv file or in table format in sqlmap? Look below image for better understanding. The target is boolean-based blind injection vulnerable. For sure, this ...
Solo's user avatar
  • 31
1 vote
1 answer
61 views

Couldn't an HDCP bypass "attack" always be done losslessly, given a known compression algorithm was used?

When DRM-protected video is displayed on an output device, these streams are sometimes saved and re-encoded, resulting in quality loss. However, let's say we can obtain the outputted video in a pixel-...
stenlan's user avatar
  • 1,271
0 votes
0 answers
34 views

Cannot exploit Metasploitable 2 VM using Tomcat 5.5 on Metasploit with Parrot OS

I've being trying to perform a simple exploit with msfconsole on Metasploitable 2 without any results. I'm using a host-only network adapter with DHCP enabled so I'm getting 192.168.56.104 on the ...
Martin Montas's user avatar
1 vote
5 answers
194 views

Is it safe to derive the salt from the users email/phone number when pre-hashing a password to be sent to a server?

I'm working on making an end-to-end encrypted app that will store sensitive mental health information. The goal is to make it completely impossible for someone with access to the server to see the ...
Gradyn Wursten's user avatar
0 votes
0 answers
23 views

chkrootkit output interpretation help [closed]

I ran the following command: sudo chkrootkit -x | more And the output is as follows: ROOTDIR is `/' not found ### ### Output of: /usr/bin/strings -a /usr/bin/basename ### @(#)PROGRAM:basename ...
dumbdump's user avatar
0 votes
0 answers
20 views

Firebase Cloud Messaging (FCM) what is the impact of a exposed or leaked fcm_token?

When an attacker obtains such a token (via a broken webapp or jailbroken mobile phone), what would be the consequences? Would it be possible for an attacker to obtain messages with sensitive info (...
Booger21's user avatar
0 votes
0 answers
13 views

PHP JWT token flow in Symfony [migrated]

I am working on an app with separate front-end and backend. I need to create API routes which are protected by a JWT token. On login/register the user gets back a JWT token(short lived) and refresh ...
PVit's user avatar
  • 1
4 votes
3 answers
2k views

How to track PBKDF2 progress?

Background: We have an application with password authentication. We now need to raise the number of PBKDF2-iterations and this means that the login takes quite a bit longer than before. Therefore, ...
n-l-i's user avatar
  • 246
1 vote
0 answers
17 views

SmartCard rollout for Windows RDP clients

We want to deploy a thin client architecture, where the users can sign-in into their session from every client by inserting their SmartCard into an attached reader but we have a hard time finding ...
Marcel Körbler's user avatar
0 votes
0 answers
46 views

Will reinstalling OS in company laptop still alert the company [closed]

I have moved out of the city in which I used to work for an IT company, it's a medium size company, it's been 4 years since I have worked with that company. They gave me a laptop for work which they ...
Pricter's user avatar
0 votes
1 answer
50 views

Mails in my iCloud mailbox with a foreign mail address as recipient

How is it possible that my iCloud address is not the recipient but has been spoofed in some way? I don't have any forwarding active and I don't know the sender or recipient addresses.
Yannic's user avatar
  • 3
0 votes
0 answers
29 views

Can I provide database names and tables to sqlmap to check if it is true or false? [closed]

Is there any way I can run sqlmap tool to test whether the database names I already have are true or false? I made some mistakes while testing on one target. The target is time-based blind injection ...
Solo's user avatar
  • 31
2 votes
1 answer
118 views

Is it possibile to capture unlock pin of smartphone(android/ios) using usb cable?

For example, bad USB cable( charging devices) loaded with script to record the unlock code of an android phone which is current being charged. so basically, the bad usb cable and the usb charger is ...
Maxfield's user avatar
  • 149

15 30 50 per page
1
2 3 4 5
1379