All Questions
69,313
questions
-2
votes
0
answers
4
views
Is it possible to remotely monitor on a cellphone without access to the phone
Spying on a mobile phone is usually something that requires hiring a security expert to get it done for you to get your desired result. These cellphone spy cloning actually work fine but most people ...
0
votes
1
answer
24
views
Are programs like snort like an anti-virus, or is it something a security professional would use
My friend told me that NIDS like Snort are an important part of a security configuration, but to me it seems like an anti-virus program. Should security be had via correctness (such as auditing ...
- 25
0
votes
0
answers
4
views
How should I solve Ubuntu 20.04 update errors? [migrated]
I have problems when I try to update Ubuntu 20.04 , when I run sudo apt update to update, I get this output:
sudo apt-get update Err:1 http://security.ubuntu.com/ubuntu focal-security InRelease Could ...
2
votes
0
answers
24
views
How could technology be used to create a false alibi? [closed]
I’m looking to have my murderer use tech as her alibi, without hacking any major systems or turning her phone off The murder (at the moment) is happening in a city - so there’ll be CCTV, dash cams, ...
3
votes
3
answers
606
views
What prevents random software installation popups from mis-interpreting our consents
I often see while browsing internet that a popup comes saying random thing like my computer is under threat or something similar and then asking me if I want to take a particular action like ...
- 183
1
vote
2
answers
41
views
Best timing/safest way to show Captchas on a website?
I implement a .NET application that has a HTTPS API. A website makes requests to my HTTPS API. The website has a login page and other features.
Do I show a Captcha on the website if a new session is ...
- 301
-1
votes
0
answers
18
views
I am working but don't show account balance... I use 18 proxy but show only one [closed]
How can I increase my account balance? I am working but don't show account balance.
1
vote
1
answer
57
views
bypass upstream proxy's forbidden website by set up local proxy, why it works?
Question
Proxy server that restricted specific IPs to specific domains. I can bypass theses blocked websites by setup my own local proxy server while using the above proxy server as upstream. What ...
- 11
0
votes
0
answers
7
views
Microsoft 365 2FA using Outlook mobile app [migrated]
My cell phone was stolen and I'm trying to reset my Microsoft 365 admin console password. However none of the four options for two-factor authentication are available to me as they all reside on the ...
- 111
1
vote
0
answers
19
views
Google security and 'find my device' - confusing info [migrated]
My Samsung Android phone was stolen 4 days ago while on vacation in Rome. I also have a Samsung Android tablet with me and I am trying to use it to help remote wipe the Samsung phone. Both are fully ...
- 111
0
votes
1
answer
76
views
Is there a private, secure and easy login system?
I am trying to figure out the implications of authentication technologies. Answers to a previous question indicate my real question is more "meta than that.
The primary requirements for an ...
- 313
1
vote
0
answers
14
views
Ret2libc exploit not working but it seems correct in GDB
I am currently trying to perform a return-to-libc attack against a locally run program. Here are the steps I did:
I calculated the bytes needed to overwrite the saved return address
I used a buffer ...
- 11
-1
votes
0
answers
31
views
What is "vacceedpasian.com"? [closed]
Last month, I noticed a bunch of CSP enforcement block actions against https://vacceedpasian.com/conversion.js, and I'm curious if anyone knows what this is.
We have implemented Content Security ...
- 121
0
votes
0
answers
11
views
Definition of "entity" in the context of Identity management [closed]
I have trouble understanding the exact definition of an "entity". My gut somehow knows what an entity is. However, I referred to two definitions. The ISO/IEC 24760-1:2019 Standard states:
3....
- 101
0
votes
2
answers
60
views
Is there an asymmetric TOTP algorithm that avoids sharing a private key over public channels?
The commonly used Time based One Time Password (TOTP) system requires the initial sharing of a key. This presents a security risk, as acknowledged by Wikipedia referencing the RSA compromise:
An ...
- 313
3
votes
2
answers
69
views
Is missing SAN in certificate a security issue?
I am running testssl scan on an http port, after running the scan I got some errors highlighted in red.
The main one that I noticed is that certificate does not have SAN.
testlssl output:
...
- 97
1
vote
2
answers
40
views
Setting up mutual TLS with a shared certificate
If i have a cluster where all the nodes share a single certificate and private key does it count as mutual TLS? Technically both parties in the communication have a certificate and present it to each ...
0
votes
0
answers
45
views
How can this unelevated tool intercept VM traffic and cause a "blue screen of death" on a personal Windows 10 computer?
Because my child wanted to access certain blocked websites (such as ChatGPT), on his school computer, which runs personal Windows 10, I decided to setup a Ubuntu VM for him.
Websites are blocked by a ...
- 1,256
1
vote
2
answers
55
views
Which security Headers for HTTPS?
I implement a server application in .NET. I just want to know which security headers I need to set if I use HTTPS. I know about the HttpOnly and SameSite Cookies. OWASP has a recommendation HTTP ...
- 301
2
votes
0
answers
23
views
Are control categories actually exclusive?
The four control categories are Technical, Managerial, Operational, and Physical, according to most sources about the Sec+ exam. Even this seems to be, for lack of a better term, controversial. Some ...
- 21
0
votes
0
answers
35
views
Asking for Offensive Cybersecurity Tool Ideas [closed]
I’m exploring the world of offensive security and looking for small tool ideas that I could develop to improve my skills. My focus is primarily on reverse engineering and cracking, and I’m also ...
- 1
0
votes
0
answers
29
views
Find missing/masked characters from Bitcoin Private Key without knowing their position [closed]
I am giving the following (masked) BTC Private Key:
L2nBmWGfAH5Vf9re41VhG6BgPx25rxqGmkbaPtG14jAPtBUzhQab
What I can tell you is that the key above has 3 incorrect characters in it at different random ...
- 1
0
votes
0
answers
41
views
How to report vulnerabilities to companies without bug bounty? [duplicate]
I recently discovered critical vulnerabilities in several multi-million-dollar companies that do not have a bug bounty program. Having previously participated in bug bounty programs, I’m familiar with ...
- 1
0
votes
2
answers
64
views
Should you encrypt sensitive files even with FDE?
I'm in the process of trying to make my current laptop setup more secure, especially I'm planning to finally use FDE and enable Secure Boot. However, I'm still unsure on how to handle sensitive, ...
2
votes
0
answers
47
views
TCP Packet Injection Mitigations
I'm trying to understand whether TCP packet injection into a plaintext protocol is possible within a switched network (or wherever there are no validations relating to IP legitimacy).
If I know there ...
- 51
1
vote
0
answers
26
views
How to transfer session between Burp browsers on different computers via IM?
Is there an extension for Burp Pro that will allow you to do something like the following?
Alice launches Burp Suite Pro & launches its browser. Bob does the same.
Alice logs in to a website ...
- 341
-1
votes
0
answers
26
views
How to investigate and analyse a domain name for Potential Issues? [closed]
I'm currently tasked with investigating and analyzing a domain name for potential issues. My goal is to identify any risks associated with this domain, such as security vulnerabilities, DNS issues, ...
0
votes
2
answers
110
views
Whats the safest way to store 2fa/mfa secret key in database?
I try to implement a secure user login in my .net application. The first password is hashed with argon2id. The salt and the hashed password is stored in a database. SSL encryption and HttpOnly Cookie ...
- 301
0
votes
1
answer
42
views
Is the example in the QUIC spec for header encryption wrong, or have I missed something?
In the QUIC spec, they've provided an example of header protection:
https://datatracker.ietf.org/doc/html/rfc9001#name-sample-packet-protection
They've got the following process (paraphrasing):
hp = ...
- 3
1
vote
2
answers
121
views
Why shouldn't I use the OAuth password grant if I have to implement a custom username+password login anyway?
I'm building a web REST API. Users must be able to authenticate themselves to this API.
I don't know ahead of time which clients will want to use the API. I want to allow for the possibility of anyone ...
- 11
10
votes
5
answers
4k
views
Is loss of availability automatically a security incident?
Suppose you need to define for an organization what should be considered an information security incident which, when observed, triggers security incident response (investigate, contain, eradicate, ...
- 475
0
votes
1
answer
37
views
CodeQL: How to resolve partial Server-Side Request Forgery warning when taking user-based input as a FastAPI endpoint?
cross-posting here on Information Security as well to request for input on the security of the Python code I've written, and whether it can be considered a false positive.
I'm writing a function to ...
0
votes
0
answers
35
views
What are reliable indicators of suspicious network traffic? [duplicate]
I often see advice in discussions about malware detection that emphasizes monitoring for suspicious network traffic. Honestly, this task seems easier said than done. For example, when using tools like ...
- 43
-1
votes
0
answers
48
views
someone reported me that he found xss but i can't find any pop anyone explain [closed]
please share what is the reason behind this .
-1
votes
0
answers
45
views
Someone signed my email up for this website [closed]
Why would someone sign my email up for this site? And what is it?.... I'm a little concerned.
0
votes
0
answers
16
views
Definition of "coercive adversary" [closed]
Im currently studying and I stumbled over the term "coercive adversary".
I'm not a native English speaker and the term seems to be exclusively used by security and privacy related topics.
...
7
votes
5
answers
4k
views
Risks of exposing professional email accounts?
I am building out a product that displays user profiles and their professional emails (either company emails like [email protected] or academic emails like @mit.edu). In order to see the user profile and ...
- 204
0
votes
1
answer
62
views
Is there evidence that using SAST / SCA brings positive ROI to software companies?
Using SAST / SCA tools within the delivery pipelines is quite common these days; however, in the software my teams are building, the SAST tools that we're using are very rarely finding even relatively ...
0
votes
1
answer
27
views
John The Ripper Numeric Wordlist [closed]
Trying to crack a hash that’s 8 numeric characters. But am confused on how to create the wordlist for the program to try all the passwords containing only numbers. Can anyone point me in right ...
0
votes
0
answers
18
views
How to make meterpreter connection persistent? [closed]
How to make a Metasploit Android raw payload persistent? whenever I create a payload and install it on my testing machine, after sometime the meterpreter connection dies.
0
votes
0
answers
18
views
WhatsApp: Can I see IP addresses that I used when messages were sent? [closed]
I was flying from abroad back to the US. Someone managed to hack my WhatsApp and send messages. I have no idea how. I didn't have 2fa or anything for the app.
I need to see the IP address that my ...
0
votes
0
answers
27
views
Its good idea to store number of login attempts in browser cache? [closed]
I spotted that there is no_of_login_attempts in browser Local Storage. I can easily edit it to 0 and then successfully login. So, what's the point of keeping that info in client side(browser)?
-1
votes
0
answers
35
views
i need someone who understands Hacking [closed]
i have no access to my instagram account, when i try to reset the password through "forgot Password" i dont receive the link for password reset. can someone help me with this challenge?
2
votes
0
answers
33
views
Is it normal to have Sysmon detect CreateRemoteThread on a fresh and clean Windows Server installation?
A fresh Windows Server installation (20212 R2), all updates applied. Sysmon v15.15 installed. Literally nothing else was installed/added. Never started a browser, never opened a web page. Only apps ...
- 23
18
votes
4
answers
7k
views
Whats the safest way to store a password in database?
I read that a password and a salt needs to be combined and then hashed. You save the result and the salt in plaintext. Is it a good practice to use the username as a salt? Why and why not?
I also read ...
- 301
1
vote
1
answer
40
views
spyware on windows pc [closed]
I have the impression that my boss knows everything i do, even when i am at home. I had to give my laptop away to install printer driver at work and i think they could installed something on my laptop ...
- 21
1
vote
2
answers
83
views
When viewing a hotlinked Google image preview, is the IP address of Google's server recorded on the original site?
When I click on a Google image thumbnail to view a larger preview, I understand that the image is hotlinked from the hosting site.
In this case, when I view the hotlinked Google preview image, is my ...
- 13
0
votes
2
answers
40
views
Does the permutation cycle of a PRNG change completely with different seeds?
Apologies if this seems like a trivial question.
I've been learning PRNG and cryptographic basics and I don't think I've found an answer to this question (At least that I understand).
My understanding ...
- 1
1
vote
3
answers
45
views
Making a keepass database more resilient against stealing of the file and potential cryptographic attacks done on that copy
I want to make sure nobody can quickly copy away my keepass database file should I ever let the person work on my PC unattended (which sometimes is inevitable unfortunately) so I was thinking about ...
- 713
1
vote
1
answer
21
views
What to consider when routing priviledged ports to sandboxed services? net.ipv4.conf.eth0.route_localnet=1 vs CAP_NET_BIND_SERVICE
The use case is: running isolated services, either as a hardened systemd unit file -- with close to a zero score on systemd-analyze security, or a linux container.
Both of those will place services ...
- 263