1
vote
0answers
4 views

Does bitlocker have protection against accidentally deleting metadata?

I have a big problem. I inadvertently deleted a partition, which I had installed win7 BitLocker Crypt, so the entire partition was encrypted. I found a recovery tool which is called "DiskInternals EFS ...
1
vote
0answers
10 views

Microsoft RMS security

A client of mine recently fired their sole IT/RMS manager for their retail location. They have asked me to "make it secure" in case this person wants to do anything malicious. This person does not ...
0
votes
1answer
12 views

Is this sufficient text cleaning in a PHP Form?

Wondering if the following is sufficient for sanitizing input in a simple contact form that contains inputs for $name, $email, $phone, and $text. There is no SQL. I am simply wondering if I am doing ...
-2
votes
0answers
16 views

Number ways to write html codes to bypass XSS

Recently I've started bypassing XSS in existing security system's feature. For bypassing filters my very first step was to understand how the regexp is working. Following ways I've used to bypass ...
0
votes
1answer
12 views

Custom CSRF protection mechanism without persisting tokens

I have had this functionality (csrf protection) for quite some time now. The thing I never liked about it is that it saved csrf tokens in the session file. While it may not be a real problem I see it ...
-3
votes
1answer
23 views

How do i spoof a website URL address bar?

I am not sure at all how it's to be done. It isn't for anything malicious, i am just rather curious and have been for some time. I am using a free host at the moment and not a VPS or anything of that ...
0
votes
1answer
9 views

How to correct “The associate private key cannot be found” error and “certutil -repairstore” failure with Windows certificate and key files?

Old machine cannot boot into windows to perform a cert export. The cert file and key file have been retrieved from the file system and copied. Cert is for IE SSL access to a bank. ...
-1
votes
0answers
10 views

Would BitLocker and SysKey be a possible and good security combo?

Is it possible to have Bitlocker and SysKey work together on a Windows machine? If so, could you have them both work on a single USB thumb drive? Would the Thumb Drive have to be partitioned? If no, ...
-2
votes
0answers
12 views

Finding a question for my research study

I'm new to the computer security area. But I feel that this area is very interesting field. I decide to do my research on this area. Can you suggest the questions faced in industry which I can address ...
1
vote
2answers
27 views

SSL certificates and cipher suites correspondence

I have been learning about the SSL/TLS protocol (from https://tools.ietf.org/html/rfc5246) and have a few conceptual questions about the protocol. Q1) The client and server exchange "hello" messages ...
-1
votes
1answer
19 views

php doesn´t interpret my hex characters as hex

I am trying to understand a mysql injection not working as expected. I have a php script that does a login based on username and password supplied on a webpage. The query string looks like this: ...
-1
votes
0answers
27 views

Panword Checking and Random Checking

I am studying tools and methods used in cyber-crime and came across the terms Panword Checking and Random Checking in my course syllabus. Can anyone explain what exactly these terms mean?
0
votes
2answers
24 views

how we know whether our computers are part of a botnet?

When we visit websites, unknowingly our computers can be a victims of a botnet. There should be a way to identify whether we are victims or not. What is the way to identify it and how to recover from ...
0
votes
1answer
20 views

Getting the uploaded file path without knowing the uploading destination

Imagine a scenario that we are able to upload a PHP file on the server. However, we are not aware of the uploading path. I simply mean that, we are able to upload the file but we don't know where it ...
2
votes
1answer
20 views

Utility to build IP exclusion list?

Are there any utilities out there that can assist in building an IP exclusion list? Scenario: Recently suffered a brute force attack where 50000 failed login attempts came from a multitude of ...
0
votes
0answers
16 views

Sysinternals tool suite not working on low priv shell

Currently oscp student. I asked this on the oscp forum yesterday, but no responses so far. I am new to infosec, but have 18 years of education / work experience in IT. As far as I can tell, ...
0
votes
2answers
15 views

Must a Diffie-Hellman group value persist?

I've been reading about the Logjam attack on Diffie-Hellman and about how to secure our TLC-based web servers based on the recent findings. The guide suggests that we create a Unique Diffie-Hellman ...
0
votes
2answers
11 views

Advantages of Enabling Firmware Password Protection

What security advantages, if any, would be gained by enabling Firmware Password Protection on a mac that allready has filevault encryption for the disk?
1
vote
0answers
29 views

If someone hacks our server, how can we prevent them from decrypting data stored in Vault?

I have been tasked with evaluating Vault in our company and the first question asked by an architect was: If someone hacks our server, how can we prevent them from decrypting data stored in Vault? ...
2
votes
2answers
23 views

How to detect changing IP address and user agent on a HTTP session?

I have some HTTP logs where I see the hacker changing his IP every request, and occasionally changing his useragent. Is there a way to detect this automatically? Perhaps a snort rule? or any other ...
0
votes
2answers
22 views

How to use Aircrack-ng when knowing part of the password?

Let's say I know the password starts with "1234" and after that there is a commonly used password. I would like to use the word list I have for the second part of the password, but to include somehow ...
3
votes
2answers
47 views

Obsolete cryptography (SHA1) warning although certificate uses SHA256

I ordered a certificate with SHA256 from Comodo and was wondering why Chrome shows this message: Your connection is encrypted with obsolete cryptography. The connection is encrypted using ...
4
votes
0answers
39 views

How secure is CertiVox M-PIN?

CertiVox have designed a system with the aim of "getting rid of passwords". Essentially the system authenticates users with two factors of authentication: A 4 digit PIN and a token stored within the ...
0
votes
1answer
37 views

mis-use of email address to obtain services from Groupon

I recently bought a new domain name "familyname.net" and I redirect emails to this domain to my normal email address. Recently I received various emails, one of which came from Groupon to confirm the ...
1
vote
0answers
18 views

Why is OWASP CSRF-guard falsely detecting an attack when a user simply navigates to any page in my web-app? [migrated]

I'm trying to use OWASP's CSRF-guard in my Java Spring-MVC web-app but it's detecting a CSRF attack for any action a user makes. The web-app loads and as soon as the user tries to navigate to any ...
1
vote
1answer
46 views

Penetration testing approach - Is there a better method? [on hold]

Currently looking at getting some of our web sites pen tested but there are some many companies offering the same, and who are probably using the same tools (not to mention the same wordpress layouts) ...
1
vote
1answer
18 views

Is it ok to have GRANT ANY ROLE privilege granted to an Oracle account which is expired & locked?

I know it's not considered secure to grant GRANT ANY ROLE privilege to other users apart from admins. But what if the user is expired & locked? In particular, I see these 2 users having this ...
1
vote
1answer
25 views

Hooking an *unexported* API

I want to know is there any way to hook (inline hook) an unexported API of a PE? I have this binary (PE 32 bit) which does not uses any DLL (A statically linked binary) and I would like to know what ...
1
vote
0answers
36 views

Perform SSL MITM -> Decrypt packet -> Modify packet -> Encrypt packet -> Send it

I have a victim and a server. My goal is to intercept traffic, perform SSL MITM, decrypt packet, modify it, encrypt and send it further. Everything has to be on-the-fly and protocol agnostic. For now ...
-2
votes
1answer
42 views

Does penetration testing include being anonymous [on hold]

I mean, it is authorized, isn't it? But isn't anonymity a big part of hacking? Do only blackhats need to be anonymous? I'm asking this question because I wish to ask another question based on it that ...
0
votes
1answer
48 views

Google Chrome obsolete cryptography

I have a apache server running and following configuration for ssl: Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains" SSLProtocol -all +TLSv1.2 SSLCompression Off ...
20
votes
3answers
2k views

Why do “Forgotten Password?” links generally reveal usernames or registered email addresses?

It seems that most sites or systems will just state Invalid username or password As a means to not reveal usernames for use in brute force (and other) attacks. Seems like a good idea as a ...
0
votes
0answers
22 views

SHA-2 migration considerations

due to SHA-1 being in the path of deprecation, i will be migrating my SSL certs to SHA-2. Besides creating CSR using SHA-2 for signing, what other considerations should I take note of? I believe one ...
2
votes
1answer
26 views

Certificate identification that is renewal safe

We currently use some certificates in our application and we identify them by using the certificate's thumbprint. Like this: <serviceCertificate> <certificateReference ...
2
votes
3answers
88 views

How to detect self destructing emails? How to prevent from self destruction?

Recently I came across a gmail extension for Chrome browsers which claims to send self destructive emails. I tested by sending self destructive emails to my email account and it works fine Now my ...
0
votes
0answers
16 views

Wifi Pineapple :Modifying white list by client

If wifi pineapple maintains a whitelist with specific ssid's, then it responds to only those ssid probes.Is there any method or tools by which I can access/modify/interact with wifi pineapple's white ...
1
vote
1answer
22 views

Credentials for scanning a database server's vulnerabilities

what is the required credentials for scanning a database server's vulnerabilities by using vulnerability assessment tools such as Rapid 7 Nexpose?
0
votes
0answers
15 views

Localhost - OpenSSL in Xamp Mac OSX

First, I got localhost.csr, localhost.key and localhost.crt using the following commands on terminal: Request: openssl req -new -newkey rsa:2048 -nodes -keyout localhost.key -out localhost.csr ...
-1
votes
0answers
37 views

Relating SQL injection test results [on hold]

for detection I used hidden web crawler at client side whose results are doubt full ,false positive and negative and store this results in database and to confirm all vulnerability and to prevent it ...
1
vote
1answer
24 views

Abnormal SYN traffic from Blackhole DNS servers

I have been getting alerts from an anomaly based signatures for abnormally high SYN traffic. The traffic is coming from blackhole DNS servers. I hadn't had any experience with Blackhole servers prior ...
4
votes
2answers
33 views

SSH: Security of Pubkey Authentication vs Password

Why is Pubkey Authentication considered more secure than a password, and does this apply to my situation (described in more detail below)? I'm a scientist (no formal IT training), but I built and ...
0
votes
0answers
21 views

Root android apps to Tor [migrated]

I have an android and I can only use Tor through orbot to browse the Internet. Is there a way I can run all of my apps through Tor so that every app I use on my phone will be secured and untraceable?
2
votes
3answers
49 views

API Keys for REST

So I'm developing a RESTful API, but I can't for the life of me understand how API keys work. I'm using PHP, which has an HMAC function, which I've read is a good way to sign requests, but what I ...
1
vote
1answer
44 views

Are there any security disadvantages of using production SSL certificate in non-prod environments?

My client has a wildcard certificate *.thierdomain.com that they are using for half a dozen of production web sites. For each of theses sites there are duplicates in several environments, dev, qa, ...
0
votes
1answer
59 views

What exactly does ipsec and ssl do?

Im trying to figure out how SSL and ipsec works. I know the process in both SSL and ipsec but why do I need SSL if I can use IPsec when it runs below the transport layer. Wont IPsec encrypt everything ...
1
vote
3answers
122 views

Can a network admin see my computer's screen if I'm logged into their wifi network?

I had a friend try to convince me today that simply by signing into a wifi network, without any physical access to your computer, the network admin can see your computer's screen. Obviously this is ...
0
votes
1answer
16 views

How would iOS or Android app “firewall” for extended permissions (location, etc) work?

I'm interested in blocking or reporting any application's usage of extended permissions, regardless if they are granted those rights, such as: GPS / Location / Wifi Radio signal data Telemetry My ...
-2
votes
1answer
33 views

IP hijacking during SSL

I was wondering, does SSL protect from IP hijacking (an active, authenticated connection between two hosts is disrupted and the attacker takes the place of one of the hosts) and how?
10
votes
5answers
2k views

Are consumer-grade routers any more or less vulnerable?

I apologize if this is an obvious question, I'm not very familiar with hardware. I am planning on hosting a few personal websites from my home, but I'm concerned about my security. I'm using a fairly ...
2
votes
1answer
30 views

Who can see the traffic of others in different kinds of LAN

I would like to consider three types of LAN: a) 2 computers are connected to a Hub, this Hub is connected to a router for e.g. internet access. b) 2 computers are connected to a Switch, this Switch ...

15 30 50 per page