Questions tagged [attacks]

An attempt to exploit a weakness in a system, either for nefarious or research reasons. Questions with this tag should be about designing, carrying out, or defending against the attack itself, rather than about the underlying weakness.

Filter by
Sorted by
Tagged with
0
votes
0answers
38 views

Docker for canary file and virus detection

I am looking to create a pipeline for cleaning a large amount of files which may include files infected with viruses or canary tokens (to communicate with the attacker). My strategy at the moment is ...
4
votes
1answer
284 views

What is the need for firewall to be in "stealth mode"?

There is a firewall deployment case called "transparent mode", when the firewall does its job without routing and having IPv4 addresses, i.e. it is invisible. "Stealth mode" is ...
0
votes
0answers
10 views

ufw logs BLOCKS from 2 sites while BLOCK logging is completely disabled for ALL sites [migrated]

Logging is enabled. Only allow rules are logged. The very last line of my firewall rules is: Anywhere DENY Anywhere No logging is asked for, however two IPs repeatedly show ...
1
vote
2answers
210 views

Is a 3-character password secure enough for a Macbook's login? Why or why not?

My question relates to a concern about theft in specific. I'm not worried about the FBI cracking the password. I'd like to know whether three characters for a local password, a password for macOS ...
0
votes
0answers
52 views

What should I do after an attempted Mozi attack?

I was testing a small webpage using Django's built-in server. The webpage simply shows the IP of the visitor of the webpage, and prints the IP address in the terminal. The server is hosted on a Ubuntu ...
1
vote
0answers
50 views

Are there any known SSH (protocol or implementation) vulnerabilities which can be performed on a tor hidden service?

The last couple of weeks I have been researching possible attacks that can be performed on a Tor hidden service using SSH from a location different from that of the server, assuming the .onion address ...
1
vote
2answers
145 views

How evil could an HDMI/VGA adapter be?

I recently bought a HDMI to VGA + Audio Out adapter on the internet for the purpose to playing Xbox on an old monitor. It came just inside a plastic bag, so I don't have any guarantees that the ...
0
votes
1answer
130 views

What's the purpose of 'instagram password cracker tools/hacker tools' websites? [closed]

There are over 9000 websites on the web claiming that they can hack Instagram accounts. In reality, none of them does what they say they do. So, What's their purpose? These website owners do know that ...
0
votes
1answer
84 views

What can happen when you click on a bad link? [duplicate]

I sleepily clicked on this bad link yesterday (DONT CLICK Unless you know what you're doing: https://6to.me/idsoni7kjv with a "?fbclid=" param - presumably identifying me) I'm wondering how ...
5
votes
1answer
2k views

Is packet sniffing or other manipulation possible at a DSL or cable wire between my modem and the ISP?

Can a DSL or cable wire between my modem and the ISP be manipulated in any way at the hardware level to sniff the traffic data? For example by neighbours with physical access to the wires in a big ...
0
votes
2answers
224 views

Any known SSH attacks/vulnerabilities other than brute force, dictionary attacks and compromising keys?

I am looking for attacks over Tor that can be applied to a server running SSH. I have been looking at SSH.com, IEEE papers, SpringerLink papers/books, etc. but so far I have only found that the ...
0
votes
1answer
88 views

Can't find anomalies / abnormalities in wireshark capture

Previous post was deleted for not enough context, which I apologise for. I will try to provide as much context as I can. I am aware this appears to be an example of a SYN flood attack with spoofed ip ...
1
vote
2answers
178 views

Possible attacks using public key in a certificate

this is purely an exploratory question. If this is not the right place to ask for it, please point me to the right one. TLS version: TLS 1.2 CIPHER SUITE : TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (any ...
0
votes
0answers
42 views

aireplay-ng sending deauth broadcast but it is not deauthentificating anything

I started killing all processes that might interfere, by using: airmon-ng check kill then I started monitor mode with the channel using: airmon-ng start wlan0 8 (8 being the channel of the network) ...
0
votes
1answer
95 views

RAM as a attack target

What is the simplest or most common method to read a value, for example a text, from the RAM of a personal computer? What access requirements are necessary for this? Is a search in a hex dump always ...
27
votes
1answer
6k views

How do attackers use compromised computers to do things over the internet?

How can an attacker use a compromised computer to do things over the internet? For example, if an attacker infects a PC with a general payload, other than searching through the computers files and ...
0
votes
0answers
78 views

How to show optional steps in attack trees?

I'm new to security and I'm trying to create an attack tree based on MITRE ATT&CK techniques. What is unclear, is how I can incorporate some steps that are optional. For instance, if the attacker'...
1
vote
1answer
133 views

Do Spier or similar products really hack the phones remotely?

Spier makes lots of claims; How to Hack Someone’s Phone Remotely How to Hack Someone’s Phone Without Touching It We have Signaling System No. 7 (SS7) flaw that can be used to monitor activities, ...
0
votes
0answers
68 views

Equivalence of UNC Path Injection and Kerberoasting Attacks on SQL Server

An Active Directory domain is deployed, a domain controller on Windows Server 2019. A computer with SQL Server 2016 is added to it, which is launched under the srv service account. The attacker has ...
1
vote
0answers
122 views

How to do forensics on RaspberryPi in home network?

while debugging some strange effects in my home network (bad video call quality due to packet loss) I found out this only happens when my RBPI is connected to the network. When I wanted to log in I ...
0
votes
1answer
253 views

How to bypass an XSS filter encoding single quotes? [duplicate]

I'm trying to do an XSS attack test on a website. I am using " and <> just fine and I have managed to escape the string. Now I'm trying to send my own cookie to my server that saves it to a ...
30
votes
6answers
7k views

Is it insecure to display the number of characters when users enter a new passphrase?

When users are entering a new passphrase somewhere, it's helpful to provide feedback on the number of characters received by the system. In a user experience (UX) test I just ran, my user created a ...
1
vote
2answers
129 views

Inbox filling up with "confirm your registration" emails - what kind of attack is this? [duplicate]

My google inbox is filling up with hundreds and hundreds of "please confirm your new account on our website" messages. A coworker reports he had the same thing happen to him a couple of ...
0
votes
1answer
119 views

How to prevent attacks due to Insufficient Logging & Monitoring?

A10:2017-Insufficient Logging & Monitoring This is one of OWASP Top 10 vulnerabilities. Given that we log and monitor sufficiently, how can this prevent an attack for example - attack where ...
0
votes
0answers
77 views

Can hashbang (#!) URLs be used to SEO attack a website?

Apparently Google indexes hashbang URLs: https://www.youtube.com/watch?v=kDs-MufuiAg Can an attacker link to another website with fictitious hashbang-URLs and use it to hurt that website (if the ...
0
votes
0answers
67 views

Could I have prevented my Facebook password from being stolen by these trojan apps? [duplicate]

According to this Dr. Web article: Doctor Web’s malware analysts have discovered malicious apps on Google Play that steal Facebook users’ logins and passwords. These stealer trojans were spread as ...
1
vote
1answer
81 views

Is it called Drive-by Compromise if attacker provided his website for user to access?

If the website is legitimate and the attacker exploited that legitimate website, and the attacker gains access to a victim's system that visits the website, then it is a drive-by compromise. However, ...
0
votes
0answers
19 views

How likely is it that publicly available data will be decrypted in the future? [duplicate]

As we already know, with the rising power of machines and new technologies like quantum computers today's methods of encryption might be much faster to crack in the future. With locally saved data you ...
1
vote
1answer
829 views

How to properly deal with WPAD attacks?

I have already read those 3 topics about WPAD attacks but I'm still confused, so I'm here looking for a deeper explanation. CONTEXT I think a WPAD attack is happening in my home and I was not aware ...
0
votes
0answers
104 views

Routing attacks on Peer 2 Peer networks?

I've started creating a framework that aims to make anything into an IoT device. In order to stay online, a peer 2 peer layer needs to be implemented. On top of it, common point services will give the ...
0
votes
0answers
112 views

What is this HTTP attack full of backslash encoded data? [duplicate]

I use nginx configured with HTTPS and an unsigned cert to send files to people sometimes. Despite being just an IP address listed no where, I get traffic from various crawlers and other bots. The ...
1
vote
2answers
144 views

Are high traffic apps and websites used in DDoS attacks?

Isn't it very simple for one rogue programmer in a big institution to add a small code change in the application/website thereby sending unintended HTTP DDoS attacks? Like is it possible for Tiktok/...
0
votes
2answers
182 views

Password Strength Determination

Recently, I've checked the some articles including R. E. Smith, The Strong Password Dilemma. ch. 6., Password Strength: An Empirical Analysis, Distance between two passwords and Password strength ...
1
vote
1answer
166 views

E-mail with just an image attached: could it be an attack? [closed]

Today I received an e-mail to my GMail account with just an image attached, empty subject and body. E-mail came from another GMail account, with SPF and other checks passed. Sender account differs ...
11
votes
3answers
3k views

Concerning GET request in logs

I have a Django application running on a Digital Ocean Ubuntu server. I am using NGINX and Daphne to serve the application because I am using Django Channels. My websockets keep crashing, and I ...
5
votes
0answers
409 views

How did ntpd get patched to prevent NTP time synchronization attacks?

I recently tested the NTP Time Synchronization Attack as described and demonstrated by Jose Selvi in 2015. Basically, the attack was mostly used to send the victim's clock in the future, so the ...
1
vote
1answer
93 views

In which settings is it possible to launch a HTTP Response Splitting Attack but not completely replace the HTTP message?

I wondered in which settings is it possible to launch a HTTP Response Splitting Attack but not completely replace the HTTP message? The examples I saw all allowed full replacement of the HTTP response,...
0
votes
0answers
101 views

SSL stripping - how is it possible to send back the HTTP page? [duplicate]

Been trying to wrap my head around SSL stripping. An explanation here writes: Keep in mind, however, that when you install SSL, you’re essentially creating a duplicate of your website with HTTPS URLs....
0
votes
1answer
273 views

Is Bluetooth low energy (BLE) still secure?

Some time ago, Bluetooth was hit by a severe exploit (KNOB attack) that rendered its encryption pretty much useless. Publishers like the German Heise summarized it in an article* as an issue in the ...
0
votes
0answers
126 views

Why does Mitre T1203 technique includes macros as software vulnerabilities?

I was reading a recent report about an APT and jumped into this Technique: https://attack.mitre.org/techniques/T1203/ This technique is called: Exploitation for Client Execution And that might match ...
1
vote
1answer
384 views

Received a strange text message. What is it? [closed]

This morning I received the following text message from a Gmail account: v3s5f3rs4f3gs3.nf5j4k8j4k3o.solar?G$1?V&?KL?O=$HO?&S?K0?$1T A couple of my friends got it too. I have an iPhone and it ...
1
vote
1answer
251 views

Layer7 DDoS Protection vs WAF, which should I use?

I have Layer3 ddos protection, but I want to upgrade it to Layer7 ddos protection. But when i look about Layer7 Ddos attacks, I see that they are usually HTTP/HTTPS based attacks. I have 3 questions; ...
0
votes
0answers
75 views

I got a call from a contact on What'sApp and that person says they didn't call me even by accident. Should I be worried about using What'sApp?

I got a call from a contact on What'sApp, and when I picked up there was no audio. The person says they weren't even holding their phone when it happened, and it even took a minute for the call to ...
1
vote
0answers
69 views

How does one label malicious traffic in generated workloads?

I have been writing on some code that automatically puts together differently parameterized attacks of common pen testing tools, i.e. sqlmap, nmap, patator etc. These attacks are then launched against ...
3
votes
0answers
423 views

How plausible is this article on how SciHub acquires its papers? [closed]

Sci-Hub is a piracy website that provides free access to usually-paywalled academic papers & books. Sci-Hub's owner Alexandra Elbakyan says that many people with legitimate access to the papers/...
0
votes
1answer
133 views

Can a hacker install known-vulnerable software on a machine in order to control the PC and elude antivirus?

I recently discovered that on one of my PCs the SolarWinds software was installed. I didn't install this software on my machine. I also saw that SolarWinds was cracked by Russian hackers and also ...
1
vote
1answer
127 views

How to exploit open redirect vulnerability which must contain the original url

Let's say I have the following url: https://secure.sub.domain.com/?continue=https://sub.domain.com I found out that I can put anything I want before sub.domain.com in the continue parameter as long as ...
11
votes
1answer
663 views

Why are water treatment facilities or similar connected to the internet? [closed]

I have a (sensitive) background in security, in short, I believe that the infrastructures MUST NOT connect to the internet. If you connect to the internet, it is a matter of time before it is breached....
0
votes
2answers
108 views

Regarding Dictionary Attack

Since most websites will let user retry their password, lets say 3 times in a row, in case of mistype or forgotten password. Exceeding the set number of retry the account will be locked or timed out. ...
1
vote
2answers
82 views

What is a reasonable timeframe that should be defined and enforced for access token expiry to reduce the risk of unauthorised access? [duplicate]

What is a reasonable timeframe that should be defined and enforced for access token expiry to reduce the risk of unauthorized access?

1
2 3 4 5
25