Questions tagged [attacks]

An attempt to exploit a weakness in a system, either for nefarious or research reasons. Questions with this tag should be about designing, carrying out, or defending against the attack itself, rather than about the underlying weakness.

Filter by
Sorted by
Tagged with
0 votes
0 answers
33 views

How to Recover Windows machine and iPhone that is Being Remotely monitored [closed]

I'm running a Windows 11 device and an iPhone that is being remotely monitored by some individuals in my neighborhood. Somehow both my Windows laptop and iPhone are being remotely monitored to the ...
user avatar
0 votes
0 answers
22 views

Need help identifying and erradicating Cobalt Strike beacon and persistence [closed]

Posted this over in the Unix section earlier and was recommended here: I'm stopping by trying to further narrow down my understanding and ultimately the eradication of one if not multiple Cobalt ...
user avatar
  • 1
1 vote
1 answer
53 views

can these encryption methods for a text file protect against physical access to machine by adversary?

My threat model is that, the adversary has physical access to the machine and root access. I don't care about any data on the system other than a couple python scripts that contain sensitive ...
user avatar
1 vote
1 answer
83 views

Can BeEF also work in public?

Is it possible to run the tool called BeEF to do penetration testing on real domains like example.com? As far as I know, BeEF can only be used within localhost. I can only test my site for XSS on the ...
user avatar
0 votes
0 answers
55 views

Is storing a username in session storage a security risk?

Goal I have a page which verifies the user's email address, that has access to their user id. From this page they're redirected to the login page. I want their username to be filled in already. In ...
user avatar
0 votes
1 answer
78 views

How could attacker know user names of my Google Workspace? [closed]

I found in my Google admin logs that someone from outside my organization is trying to log in frequently by testing all our user accounts against weak passwords. I'm wondering how could that happen? ...
user avatar
  • 109
1 vote
1 answer
99 views

How risky is it to let someone know the name of your Windows PC?

I have here a situation where if I share this file with someone on the internet, the file may contain: 1. data pointing to the directories where it is stored on my computer, along with 2. the name of ...
user avatar
  • 13
3 votes
1 answer
121 views

Are CSRF attacks a thing of the past?

If the default value for the samesite directive in the Set-Cookie header is lax, then surely the only way for a CSRF attack to work, is if the website's developer, for some reason, puts a less ...
user avatar
0 votes
1 answer
40 views

I'm testing an app that uses only v4 UUIDs as a cookie for authentication. What are some attacks I can try?

What are some attacks I can try against this form of authentication? How do I test if they are cryptographically secure as well?
user avatar
4 votes
1 answer
112 views

Is there any type of cyber attack for which the geographical distance between the attacker and the target matters?

Context I cannot remember the source, but it was most likely within the comments box for a clip about cyberattacks happening after the Russian invasion of Ukraine. It was something along the lines: ...
user avatar
  • 2,183
0 votes
0 answers
22 views

Slow Loris Attack Wi-Fi variant

I watched a Computerphile video. In the end Dr. Bagley talked about the fact that a router can only receive/send a packet at a time, so if one device is slow it will slow every device down, because ...
user avatar
5 votes
2 answers
401 views

Friend's Instagram account repeatedly hacked despite changing all information and enabling 2FA

My friends Instagram account has repeatedly been hacked. Someone is gaining access to her account, proceeding to change all the security information to lock her out. Then posts scam ads on her account....
user avatar
1 vote
2 answers
164 views

Refresh token replay detection

I'm trying to detect refresh token reuse / replay. A typical approach: send refresh token (on login or refresh) create refresh token as opaque value (e.g. buffer from a CSPRNG) base64 encode value ...
user avatar
  • 363
0 votes
1 answer
40 views

Determining threat when performing OSINT

I am new to ethical hacking and I often find myself really confused when evaluating and determining the danger level of information that can be found regarding a domain when performing OSINT. I'm not ...
user avatar
  • 197
1 vote
0 answers
86 views

Why does a password guessing robot repeatedly test nonsense?

I log repeated invalid login attempts on a small custom made e-shop (no open source system is used). Last year, I started recording repeated failed logins from a single IP address. That's why I ...
user avatar
1 vote
1 answer
48 views

owasp crs 3.0 rule functuonalityconsult

I have built a waf and using CRS 3.0, this waf can inspect the request body to limit the file size that upload to the server, I am wondering ,if I just disable this feature manually, it will cause any ...
user avatar
0 votes
0 answers
55 views

Docker for canary file and virus detection

I am looking to create a pipeline for cleaning a large amount of files which may include files infected with viruses or canary tokens (to communicate with the attacker). My strategy at the moment is ...
user avatar
4 votes
1 answer
365 views

What is the need for firewall to be in "stealth mode"?

There is a firewall deployment case called "transparent mode", when the firewall does its job without routing and having IPv4 addresses, i.e. it is invisible. "Stealth mode" is ...
user avatar
  • 141
1 vote
2 answers
223 views

Is a 3-character password secure enough for a Macbook's login? Why or why not?

My question relates to a concern about theft in specific. I'm not worried about the FBI cracking the password. I'd like to know whether three characters for a local password, a password for macOS ...
user avatar
0 votes
0 answers
107 views

What should I do after an attempted Mozi attack?

I was testing a small webpage using Django's built-in server. The webpage simply shows the IP of the visitor of the webpage, and prints the IP address in the terminal. The server is hosted on a Ubuntu ...
user avatar
1 vote
1 answer
103 views

Are there any known SSH (protocol or implementation) vulnerabilities which can be performed on a tor hidden service?

The last couple of weeks I have been researching possible attacks that can be performed on a Tor hidden service using SSH from a location different from that of the server, assuming the .onion address ...
user avatar
1 vote
2 answers
191 views

How evil could an HDMI/VGA adapter be?

I recently bought a HDMI to VGA + Audio Out adapter on the internet for the purpose to playing Xbox on an old monitor. It came just inside a plastic bag, so I don't have any guarantees that the ...
user avatar
  • 747
0 votes
1 answer
145 views

What's the purpose of 'instagram password cracker tools/hacker tools' websites? [closed]

There are over 9000 websites on the web claiming that they can hack Instagram accounts. In reality, none of them does what they say they do. So, What's their purpose? These website owners do know that ...
user avatar
0 votes
1 answer
173 views

What can happen when you click on a bad link? [duplicate]

I sleepily clicked on this bad link yesterday (DONT CLICK Unless you know what you're doing: https://6to.me/idsoni7kjv with a "?fbclid=" param - presumably identifying me) I'm wondering how ...
user avatar
  • 1
5 votes
1 answer
2k views

Is packet sniffing or other manipulation possible at a DSL or cable wire between my modem and the ISP?

Can a DSL or cable wire between my modem and the ISP be manipulated in any way at the hardware level to sniff the traffic data? For example by neighbours with physical access to the wires in a big ...
user avatar
  • 61
0 votes
2 answers
555 views

Any known SSH attacks/vulnerabilities other than brute force, dictionary attacks and compromising keys?

I am looking for attacks over Tor that can be applied to a server running SSH. I have been looking at SSH.com, IEEE papers, SpringerLink papers/books, etc. but so far I have only found that the ...
user avatar
0 votes
1 answer
131 views

Can't find anomalies / abnormalities in wireshark capture

Previous post was deleted for not enough context, which I apologise for. I will try to provide as much context as I can. I am aware this appears to be an example of a SYN flood attack with spoofed ip ...
user avatar
1 vote
2 answers
269 views

Possible attacks using public key in a certificate

this is purely an exploratory question. If this is not the right place to ask for it, please point me to the right one. TLS version: TLS 1.2 CIPHER SUITE : TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (any ...
user avatar
0 votes
0 answers
67 views

aireplay-ng sending deauth broadcast but it is not deauthentificating anything

I started killing all processes that might interfere, by using: airmon-ng check kill then I started monitor mode with the channel using: airmon-ng start wlan0 8 (8 being the channel of the network) ...
user avatar
0 votes
1 answer
109 views

RAM as a attack target

What is the simplest or most common method to read a value, for example a text, from the RAM of a personal computer? What access requirements are necessary for this? Is a search in a hex dump always ...
user avatar
  • 246
26 votes
1 answer
6k views

How do attackers use compromised computers to do things over the internet?

How can an attacker use a compromised computer to do things over the internet? For example, if an attacker infects a PC with a general payload, other than searching through the computers files and ...
user avatar
0 votes
0 answers
91 views

How to show optional steps in attack trees?

I'm new to security and I'm trying to create an attack tree based on MITRE ATT&CK techniques. What is unclear, is how I can incorporate some steps that are optional. For instance, if the attacker'...
user avatar
  • 101
0 votes
1 answer
186 views

Do Spyier or similar products really hack the phones remotely?

Spyier makes lots of claims; How to Hack Someone’s Phone Remotely How to Hack Someone’s Phone Without Touching It We have Signaling System No. 7 (SS7) flaw that can be used to monitor activities, ...
user avatar
  • 5,389
0 votes
0 answers
104 views

Equivalence of UNC Path Injection and Kerberoasting Attacks on SQL Server

An Active Directory domain is deployed, a domain controller on Windows Server 2019. A computer with SQL Server 2016 is added to it, which is launched under the srv service account. The attacker has ...
user avatar
  • 13
1 vote
0 answers
136 views

How to do forensics on RaspberryPi in home network?

while debugging some strange effects in my home network (bad video call quality due to packet loss) I found out this only happens when my RBPI is connected to the network. When I wanted to log in I ...
user avatar
  • 111
0 votes
1 answer
2k views

How to bypass an XSS filter encoding single quotes? [duplicate]

I'm trying to do an XSS attack test on a website. I am using " and <> just fine and I have managed to escape the string. Now I'm trying to send my own cookie to my server that saves it to a ...
user avatar
  • 3
30 votes
6 answers
7k views

Is it insecure to display the number of characters when users enter a new passphrase?

When users are entering a new passphrase somewhere, it's helpful to provide feedback on the number of characters received by the system. In a user experience (UX) test I just ran, my user created a ...
user avatar
  • 409
1 vote
2 answers
159 views

Inbox filling up with "confirm your registration" emails - what kind of attack is this? [duplicate]

My google inbox is filling up with hundreds and hundreds of "please confirm your new account on our website" messages. A coworker reports he had the same thing happen to him a couple of ...
user avatar
0 votes
1 answer
136 views

How to prevent attacks due to Insufficient Logging & Monitoring?

A10:2017-Insufficient Logging & Monitoring This is one of OWASP Top 10 vulnerabilities. Given that we log and monitor sufficiently, how can this prevent an attack for example - attack where ...
user avatar
  • 103
0 votes
0 answers
85 views

Can hashbang (#!) URLs be used to SEO attack a website?

Apparently Google indexes hashbang URLs: https://www.youtube.com/watch?v=kDs-MufuiAg Can an attacker link to another website with fictitious hashbang-URLs and use it to hurt that website (if the ...
user avatar
  • 1
0 votes
0 answers
67 views

Could I have prevented my Facebook password from being stolen by these trojan apps? [duplicate]

According to this Dr. Web article: Doctor Web’s malware analysts have discovered malicious apps on Google Play that steal Facebook users’ logins and passwords. These stealer trojans were spread as ...
user avatar
1 vote
1 answer
86 views

Is it called Drive-by Compromise if attacker provided his website for user to access?

If the website is legitimate and the attacker exploited that legitimate website, and the attacker gains access to a victim's system that visits the website, then it is a drive-by compromise. However, ...
user avatar
0 votes
0 answers
21 views

How likely is it that publicly available data will be decrypted in the future? [duplicate]

As we already know, with the rising power of machines and new technologies like quantum computers today's methods of encryption might be much faster to crack in the future. With locally saved data you ...
user avatar
1 vote
1 answer
1k views

How to properly deal with WPAD attacks?

I have already read those 3 topics about WPAD attacks but I'm still confused, so I'm here looking for a deeper explanation. CONTEXT I think a WPAD attack is happening in my home and I was not aware ...
user avatar
  • 747
0 votes
0 answers
114 views

Routing attacks on Peer 2 Peer networks?

I've started creating a framework that aims to make anything into an IoT device. In order to stay online, a peer 2 peer layer needs to be implemented. On top of it, common point services will give the ...
user avatar
0 votes
0 answers
243 views

What is this HTTP attack full of backslash encoded data? [duplicate]

I use nginx configured with HTTPS and an unsigned cert to send files to people sometimes. Despite being just an IP address listed no where, I get traffic from various crawlers and other bots. The ...
user avatar
  • 101
1 vote
2 answers
153 views

Are high traffic apps and websites used in DDoS attacks?

Isn't it very simple for one rogue programmer in a big institution to add a small code change in the application/website thereby sending unintended HTTP DDoS attacks? Like is it possible for Tiktok/...
user avatar
0 votes
2 answers
199 views

Password Strength Determination

Recently, I've checked the some articles including R. E. Smith, The Strong Password Dilemma. ch. 6., Password Strength: An Empirical Analysis, Distance between two passwords and Password strength ...
user avatar
  • 103
1 vote
1 answer
186 views

E-mail with just an image attached: could it be an attack? [closed]

Today I received an e-mail to my GMail account with just an image attached, empty subject and body. E-mail came from another GMail account, with SPF and other checks passed. Sender account differs ...
user avatar
11 votes
3 answers
3k views

Concerning GET request in logs

I have a Django application running on a Digital Ocean Ubuntu server. I am using NGINX and Daphne to serve the application because I am using Django Channels. My websockets keep crashing, and I ...
user avatar
  • 213

1
2 3 4 5
25