All Questions

Filter by
Sorted by
Tagged with
0
votes
0answers
4 views

What else can be used instead of an API Key to protect resources in a REST API as is implied by OWASP?

I was reading the OWASP Cheat Sheet Series, specifically their cheat sheet for REST Security and one of the points they had under the section for API Keys was: Do not rely exclusively on API keys to ...
0
votes
0answers
4 views

re-create CSR from certificate using openssl x509 -x509toreq

When re-creating a CSR from a certificate, the command: openssl x509 -x509toreq -in oldcert.pem -signkey oldcert.key -out newcert.csr creates a CSR, but the subject-alternate-name list is not ...
2
votes
0answers
16 views

Can Google access data in their Confidential Computing VMs?

A cloud operator such as Google can take a snapshot of a normal VM. This includes CPU state, RAM and disk. This can then be copied to another physical and resumed there. Or it can be analyzed off-line,...
0
votes
0answers
6 views

Host Keys in Public/Private Key Auth

I've chased my tail into a late night circle thinking about public key authentication to cloud instances. As such, I have some questions on the function of host keys when authenticating an SSH session....
0
votes
0answers
20 views

When using parameterized SQL queries, is there still any *security* issue with simply blindly accepting user input variables?

Suppose I have this: parameterized_database_call('SELECT * FROM widgets WHERE id = $1', $_GET['widget_id']); The SQL query is parameterized, as I've done for many years now. (I'm trying to repress ...
1
vote
0answers
26 views

What is the forensic procedure in investigating DDoS attacks

I'm currently in the process of researching for an assignment. In this assignment, I am asked to produce reports on new crimes enabled by technology and how, in Cyber Forensics, one would investigate ...
0
votes
0answers
21 views

XSS Attack as an Exercise

I'm taking IT Security at my University and we are learning about XSS attacks. For us to try those attacks we should steal an admins session cookie and log in as him. On a prepared website, we can &...
0
votes
1answer
38 views

How do hackers take advantage of apps that are known to be leaking personal information?

I'm wondering how apps that leak personally identifiable information can be taken advantage of by hackers? How would they have the infrastructure to capture all that information that come from ...
1
vote
0answers
20 views

Arbitrary query parameter reflected in server response header. Is it exploitable?

SCENARIO: If I send requests like these: http://site.com/page?safe_param=1?my_arbitrary_param=2 The server responds with a normal HTTP response but within common headers it includes also the ...
0
votes
0answers
28 views

How is security handled between mobile carriers when using roaming

When using 4g or other cellular networks, while roaming, mobile carriers transfer data between each other, something I've seen refered to as "ITS: Internation Transit Service" how does that ...
0
votes
0answers
23 views

What would be metrics to measure the compliance of the following controls? [closed]

I need to define one metric for each control. Which are the followings: Backup Classification of the information So, I need to define a metric to measure if those controls are being fulfilled.
0
votes
2answers
53 views

Can IP header TTL values be exploited as an attack vector? If so, what can protect against that?

As per some network certification training material, I noticed the following description of the Time To Live IP header: The time to live (TTL) is set into a packet when it's originally generated. If ...
0
votes
0answers
41 views

How can I test website content from different US states

I'm not sure if this is the exact right stack to post this on, please let me know. I am working on a website that has a set of regular content for pretty much everyone. A few US state governments do ...
0
votes
1answer
29 views

script encoder for IDS test

Encoding a payload is a means of evading antivirus or IDS. With regard to scripts is there a way to do the same thing? For instance, is it possible to encode a python script in order test intrusion ...
0
votes
1answer
35 views

VPN tunnel to home network and then connect to work VPN

I have a orange pi pc running armbian and need to make a sort of tunnel. I need something in case i need to leave the country to be able to connect with my laptop to my home network and then to the ...
0
votes
0answers
49 views

How best test phishing cyber security?

In the company I work for we have many clients and vast majority of them have hosting with us and we made their web apps. One client though just applied for cyber security. Our CEH (certified ethical ...
0
votes
2answers
61 views

When can I start security test in an agile environment?

I have a web application and we are working in an agile environment, and the QC team working and need to run security testing. When I can run the security test? I searched for this topic and can't ...
0
votes
0answers
14 views

how to check if an app is safe [duplicate]

There is an app on Github I was in a rush, so I didn't check, but there is no explanation or source code in its repo. How could I check if it is not just sniffing my information or something? Is there ...
0
votes
0answers
64 views

Confused about Authentication with JWT

Hello I am currently working in an e-commerce website and I am working in Authentication I read a lot of articles about how to secure the API and this the recap of what I did when I log in or ...
-1
votes
0answers
32 views

Keeper Security vs Trusting in ICloud alone [closed]

I’ve been a Keeper security subscriber for years but am thinking of dropping it and going with ICloud and my google and other managed accounts because their free UN&PW vaults seem easier to use ...
0
votes
0answers
48 views

For what good security good principles Facebook using auth digest over ssl?

I want to know if there are no real advantages of using "auth digest" over SSL, then why facebook and many other famous e-commerce websites and SM platforms still uses it. https://...
3
votes
1answer
65 views

Credit card form : Is it neccessary to obscure error messages?

I'm working on designing a credit card payment form whose core functionality is provided by a payment processing company ("upstream"). Upon some transaction errors the upstream returns the ...
0
votes
0answers
65 views

Is it possible to turn off HP Elitebook's webcam LED. And if it is turned off by a hacker then would it turn on if I activate the camera?

how difficult is it to turn off HP Elitebook's webcam LED. And if it is turned off by a hacker then would it turn on if I activate the camera?
0
votes
0answers
7 views

Is is safe to use MtEtM? (MAC-then-Encrypt and Encrypt-than-MAC) [migrated]

Assuming I am using different secrets/keys for each MAC pass, does running both MtE and EtM creates any vulnerability? This is what I mean about doing MtEtM: K0 ≠ K1 ≠ K2 addMAC(msg, K) = msg || MAC(...
0
votes
0answers
60 views

How to know if your webcam was hacked a few days ago? [closed]

How do you find out if your built in webcam was hacked a few days ago? I have paranoia that someone might have hacked my webcam. I have an HP Elitebook. Is it really too easy to disable HP Webcam's ...
0
votes
0answers
42 views

I am not able to access compute engine API with gcloud? [closed]

I have an instance running with access scope 'Set Access for each API', and explicitly allowing Compute Engine API with Read Write access. So I logged inside the instance, and I tried to run this ...
0
votes
1answer
60 views

Ransomware/Virus/Malware - modern protection(s)

Just found this on GitHub: https://github.com/gnxbr/Fully-Undetectable-Techniques/tree/main/minizinh0-FUD I can imagine similar ransomware, malware, viruses exist. AV is useless? Is only Behavior ...
0
votes
0answers
21 views

Im looking for a UE that supports the A5/4 Cipher Algo in GSM [closed]

Im looking for a UE (cellphone) that supports the A5/4 Cipher Algo in GSM for testing purposes. Does anyone know of any such UE?
10
votes
3answers
2k views

Is there any solution beside TLS?

Our development team is implementing TLS protocol for a web server. The type of clients are mobile apps and web browsers. Now there is a concern about bypassing TLS in any way trough MITM attacks and ...
0
votes
0answers
15 views

How can I bypass double quote transformation in &quot; and < transformation in &lt; and > &gt; in XSS bug bounty attack [duplicate]

I started bug bounting and I am trying to do an XSS attack and my " and < > are converted in &quot; &lt; &gt; How can I bypass this?
1
vote
0answers
33 views

Hashing of password in banking mobile app

Do I have to hash passwords on the client side of a banking mobile app since i am using a SSL network to send the password to the server end for hashing. Can the password be intercepted before ...
0
votes
1answer
38 views

Permissive CORS - Arbitrary Origin Trust, Remedial Action?

I was completing an assessment for a client and discovered that web application implemented a Permissive CORS policy which allowed for a Arbitrary Origin Trust. Request: Host: [REDACTED] User-agent: ...
0
votes
0answers
15 views

I can't open customizergod [closed]

i cannot open CustomizerGod, when i click on it, it doesn't show the window. I open Task Manager and it shows it as a process. I don't know if it matters but i am using Windows 7 Ultimate Build 7600 ...
0
votes
0answers
16 views

openssl_decrypt and gzinflate in php

Part of a CTF, I am given PHP code $key = '2d6d382812817d80d4add4e887c229e89fb10beabcbdf71c9658f2128f9b583e'; $iv = '7d121b056edb4745'; $decryptedstring = openssl_decrypt($stringtobedecrypted, "...
0
votes
0answers
28 views

Routing a site-to-site VPN through my regular VPN service

currently engaged in live competitive red vs blue team exercises in an enterprise style Windows AD environment. My device runs a modern Debian Linux OS. cscotun0 We typically connect to the lab/domain ...
1
vote
0answers
20 views

Can I read environment process variables of a react client in a browser?

I'm currently doing a pentest for a client and I've come across something new to me. When I log in, I view the username/password values in burpsuite and find they are encrypted using Cryptojs. I'm ...
0
votes
1answer
27 views

TLS with load balancer and Web server

We have an Apache web server with load balancer and we are planning to upgrade our TLS version from 1.1 to 1.2 due to chrome compatibility issues. Currently the load balancer has TLSv1.1 and TLSv1.2 ...
1
vote
0answers
46 views

What are the privacy implications of the “Your Phone” app on Windows?

I'm trying to decide whether or not to use the Your Phone app on Windows, and not finding much information on it. It requires a Microsoft account, but I don't really see why that should be necessary ...
0
votes
1answer
48 views

Challenge-Response authentication and SSL

I'm currently developing an Android Application that communicates with a server and needs the user to login. The connection is secured with SSL and certificate pinning. For user authentication I'm ...
1
vote
2answers
94 views

Is it safe to have 2nd SSD with dangerous software? (disk encryption of the first drive turned on)

Currently, I'm using 1 SSD and I think it's safe. I'm thinking about using 2nd SSD for unsafe software (pirated software). Is it possible that the virus on the 2nd drive can reach the 1st drive, ...
0
votes
1answer
60 views

How attackers make DNS servers for DNS hijacking? [closed]

Attackers take over a router and reconfigure the DNS settings to re-route traffic to compromised DNS servers. How do attackers create DNS servers for DNS hijacking?
0
votes
0answers
42 views

SQL Injection Training challenge including a PHP file

I’m currently trying to get some knowledge in SQL injection. In a pen test environment, there is a challenge on which you get the PHP file and you need to try to login using SQL Injection. I’ve ...
-4
votes
0answers
55 views

what animes on netflix should i recomend to my dad to convince him that i should be able to watch anime? [closed]

i actually already watch anime but not when my dad is around, my mom doesn't really like my dad anymore so they were never married and i have to travel all the way to new York to see my dad. when i'm ...
0
votes
0answers
80 views

How can the Russian “Global Firewall” block traffic from outside?

As the question states. In case someone doesn't know - in the modern Russia there exists a "global firewall" (not sure what's the real name is) with the purpose of blocking web-sites that ...
1
vote
0answers
28 views

OAuth Authorization Request Leakage Examples

The OAuth attacker model (see https://tools.ietf.org/html/draft-ietf-oauth-security-topics-15#section-3, A4) states that (A4) Attackers that can read, but not modify, the contents of the ...
0
votes
0answers
28 views

Decoding phishing URL [closed]

I've received a phishing email and there was an evasion technique to obfuscate the url that was embedded as part of the html href element which I could not really understand. I would really appreciate ...
0
votes
1answer
50 views

VPN access real location issue [duplicate]

I'm using a VPN which works fine, unless when on Firefox a website asks if they can access my location and I click 'Yes' then it reveals my real location. How is that possible? Is there any way to ...
2
votes
1answer
48 views

How can wrong time synchronization be exploited?

It happened to me a few times that I installed a Windows PC after the CMOS battery has been replaced and all sorts of things stopped working or threw security warnings, only to realize that I just ...
-2
votes
1answer
64 views

What type of attacks does HTTPS protect against?

What are some example attacks that could be vulnerable if HTTP is used, and that can be overcome in HTTPS? The only one I can think of is man in the middle attacks, where the intercepted traffic is in ...
1
vote
1answer
34 views

What you can do with super cookies on subdomain to harm domain?

When you search in Google for user cookies top results are VPN services that say that it's used by ISP to track the users. Wikipedia Supercookie say nothing about HTTP headers and what exactly are ...

15 30 50 per page
1
2 3 4 5
1211