All Questions

I was reading the OWASP Cheat Sheet Series, specifically their cheat sheet for REST Security and one of the points they had under the section for API Keys was: Do not rely exclusively on API keys to ...

When re-creating a CSR from a certificate, the command: openssl x509 -x509toreq -in oldcert.pem -signkey oldcert.key -out newcert.csr creates a CSR, but the subject-alternate-name list is not ...

A cloud operator such as Google can take a snapshot of a normal VM. This includes CPU state, RAM and disk. This can then be copied to another physical and resumed there. Or it can be analyzed off-line,...

I've chased my tail into a late night circle thinking about public key authentication to cloud instances. As such, I have some questions on the function of host keys when authenticating an SSH session....

Suppose I have this: parameterized_database_call('SELECT * FROM widgets WHERE id = $1', $_GET['widget_id']); The SQL query is parameterized, as I've done for many years now. (I'm trying to repress ...

I'm currently in the process of researching for an assignment. In this assignment, I am asked to produce reports on new crimes enabled by technology and how, in Cyber Forensics, one would investigate ...

I'm taking IT Security at my University and we are learning about XSS attacks. For us to try those attacks we should steal an admins session cookie and log in as him. On a prepared website, we can &...

I'm wondering how apps that leak personally identifiable information can be taken advantage of by hackers? How would they have the infrastructure to capture all that information that come from ...

SCENARIO: If I send requests like these: http://site.com/page?safe_param=1?my_arbitrary_param=2 The server responds with a normal HTTP response but within common headers it includes also the ...

When using 4g or other cellular networks, while roaming, mobile carriers transfer data between each other, something I've seen refered to as "ITS: Internation Transit Service" how does that ...

I need to define one metric for each control. Which are the followings: Backup Classification of the information So, I need to define a metric to measure if those controls are being fulfilled.

As per some network certification training material, I noticed the following description of the Time To Live IP header: The time to live (TTL) is set into a packet when it's originally generated. If ...

I'm not sure if this is the exact right stack to post this on, please let me know. I am working on a website that has a set of regular content for pretty much everyone. A few US state governments do ...

Encoding a payload is a means of evading antivirus or IDS. With regard to scripts is there a way to do the same thing? For instance, is it possible to encode a python script in order test intrusion ...

I have a orange pi pc running armbian and need to make a sort of tunnel. I need something in case i need to leave the country to be able to connect with my laptop to my home network and then to the ...

In the company I work for we have many clients and vast majority of them have hosting with us and we made their web apps. One client though just applied for cyber security. Our CEH (certified ethical ...

I have a web application and we are working in an agile environment, and the QC team working and need to run security testing. When I can run the security test? I searched for this topic and can't ...

There is an app on Github I was in a rush, so I didn't check, but there is no explanation or source code in its repo. How could I check if it is not just sniffing my information or something? Is there ...

Hello I am currently working in an e-commerce website and I am working in Authentication I read a lot of articles about how to secure the API and this the recap of what I did when I log in or ...

I’ve been a Keeper security subscriber for years but am thinking of dropping it and going with ICloud and my google and other managed accounts because their free UN&PW vaults seem easier to use ...

I want to know if there are no real advantages of using "auth digest" over SSL, then why facebook and many other famous e-commerce websites and SM platforms still uses it. https://...

I'm working on designing a credit card payment form whose core functionality is provided by a payment processing company ("upstream"). Upon some transaction errors the upstream returns the ...

how difficult is it to turn off HP Elitebook's webcam LED. And if it is turned off by a hacker then would it turn on if I activate the camera?

Assuming I am using different secrets/keys for each MAC pass, does running both MtE and EtM creates any vulnerability? This is what I mean about doing MtEtM: K0 ≠ K1 ≠ K2 addMAC(msg, K) = msg || MAC(...

How do you find out if your built in webcam was hacked a few days ago? I have paranoia that someone might have hacked my webcam. I have an HP Elitebook. Is it really too easy to disable HP Webcam's ...

I have an instance running with access scope 'Set Access for each API', and explicitly allowing Compute Engine API with Read Write access. So I logged inside the instance, and I tried to run this ...

Just found this on GitHub: https://github.com/gnxbr/Fully-Undetectable-Techniques/tree/main/minizinh0-FUD I can imagine similar ransomware, malware, viruses exist. AV is useless? Is only Behavior ...

Im looking for a UE (cellphone) that supports the A5/4 Cipher Algo in GSM for testing purposes. Does anyone know of any such UE?

Our development team is implementing TLS protocol for a web server. The type of clients are mobile apps and web browsers. Now there is a concern about bypassing TLS in any way trough MITM attacks and ...

I started bug bounting and I am trying to do an XSS attack and my " and < > are converted in &quot; &lt; &gt; How can I bypass this?

Do I have to hash passwords on the client side of a banking mobile app since i am using a SSL network to send the password to the server end for hashing. Can the password be intercepted before ...

I was completing an assessment for a client and discovered that web application implemented a Permissive CORS policy which allowed for a Arbitrary Origin Trust. Request: Host: [REDACTED] User-agent: ...

i cannot open CustomizerGod, when i click on it, it doesn't show the window. I open Task Manager and it shows it as a process. I don't know if it matters but i am using Windows 7 Ultimate Build 7600 ...

Part of a CTF, I am given PHP code $key = '2d6d382812817d80d4add4e887c229e89fb10beabcbdf71c9658f2128f9b583e'; $iv = '7d121b056edb4745'; $decryptedstring = openssl_decrypt($stringtobedecrypted, "...

currently engaged in live competitive red vs blue team exercises in an enterprise style Windows AD environment. My device runs a modern Debian Linux OS. cscotun0 We typically connect to the lab/domain ...

I'm currently doing a pentest for a client and I've come across something new to me. When I log in, I view the username/password values in burpsuite and find they are encrypted using Cryptojs. I'm ...

We have an Apache web server with load balancer and we are planning to upgrade our TLS version from 1.1 to 1.2 due to chrome compatibility issues. Currently the load balancer has TLSv1.1 and TLSv1.2 ...

I'm trying to decide whether or not to use the Your Phone app on Windows, and not finding much information on it. It requires a Microsoft account, but I don't really see why that should be necessary ...

I'm currently developing an Android Application that communicates with a server and needs the user to login. The connection is secured with SSL and certificate pinning. For user authentication I'm ...

Currently, I'm using 1 SSD and I think it's safe. I'm thinking about using 2nd SSD for unsafe software (pirated software). Is it possible that the virus on the 2nd drive can reach the 1st drive, ...

Attackers take over a router and reconfigure the DNS settings to re-route traffic to compromised DNS servers. How do attackers create DNS servers for DNS hijacking?

I’m currently trying to get some knowledge in SQL injection. In a pen test environment, there is a challenge on which you get the PHP file and you need to try to login using SQL Injection. I’ve ...

i actually already watch anime but not when my dad is around, my mom doesn't really like my dad anymore so they were never married and i have to travel all the way to new York to see my dad. when i'm ...

As the question states. In case someone doesn't know - in the modern Russia there exists a "global firewall" (not sure what's the real name is) with the purpose of blocking web-sites that ...

The OAuth attacker model (see https://tools.ietf.org/html/draft-ietf-oauth-security-topics-15#section-3, A4) states that (A4) Attackers that can read, but not modify, the contents of the ...

I've received a phishing email and there was an evasion technique to obfuscate the url that was embedded as part of the html href element which I could not really understand. I would really appreciate ...

I'm using a VPN which works fine, unless when on Firefox a website asks if they can access my location and I click 'Yes' then it reveals my real location. How is that possible? Is there any way to ...

It happened to me a few times that I installed a Windows PC after the CMOS battery has been replaced and all sorts of things stopped working or threw security warnings, only to realize that I just ...

What are some example attacks that could be vulnerable if HTTP is used, and that can be overcome in HTTPS? The only one I can think of is man in the middle attacks, where the intercepted traffic is in ...

When you search in Google for user cookies top results are VPN services that say that it's used by ISP to track the users. Wikipedia Supercookie say nothing about HTTP headers and what exactly are ...