Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [attacks]

An attempt to exploit a weakness in a system, either for nefarious or research reasons. Questions with this tag should be about designing, carrying out, or defending against the attack itself, rather than about the underlying weakness.

0
votes
0answers
21 views

What vectors and attack surfaces do we consider when creating an attack tree for applications hosted on AWS resources?

When illustrating an attack tree for web and mobile applications hosted on AWS resources what vectors do we include. To start out I can include taking over a sub domain using S3 and EC2. I have gone ...
1
vote
1answer
64 views

What layer does dictionary attacks take place on?

This may be a stupid question, but I'm fairly new to cyber security and networking and I'm looking into different types of attacks. I was wondering if dictionary attacks only took place on the ...
0
votes
1answer
51 views

Can Arbitrary Code Execution be done using CSS Injection?

As part of our class project, we are studying the attacks that could be done using CSS Injection. In our threat model, attacker can manipulate any CSS file on the server. If attacker replaces original ...
0
votes
1answer
26 views

Is it possible to completely prevent Speculative Execution Side-Channel attacks?

I'm learning about computer architecture recently, and I heard that branch prediction is really tricky but may improve the efficiency of cpu a lot, then I came across this term. My question is that is ...
0
votes
1answer
77 views

How to prevent buffer overflow attack?

int main(void) { char buff[15]; int pass = 0; printf("\n Enter the password : \n"); gets(buff); if (strcmp(buff, "thegeekstuff")) { printf("\n Wrong Password \n"); } ...
2
votes
2answers
82 views

Incident response and recovery from a security breach with unknown attack vector

Security breaches, hacks, “cyber” attacks or server compromises happen quite frequently, unfortunately, such as Quora in December 2018, Facebook in September 2018, Equifax in September 2017, Exactis ...
5
votes
4answers
199 views

Are there any practical attacks on random number generators?

I'm creating an internal security course for developers. To make it more interesting, I'm trying to reinforce each chapter with some real-world attacks but stumbled upon insecure random usage section. ...
2
votes
1answer
39 views

Is it safe to have port 443 unprotected by firewall without application?

Say I have a website, http://www.mostlysecuresite.com, which runs on a server at my house. Let's say I wanted to get an SSL cert in a few weeks. Because of this, I had my Port 443 forwarded on my ...
19
votes
4answers
5k views

Is strategic cyber-warfare feasible today?

Cyber attacks that target a nation's infrastructure are a documented fact and as such a danger that political and military leadership across the world needs to worry about and act proactively. These ...
2
votes
1answer
27 views

Can non-malicious faults provoke malicious faults?

I am wondering about this for a long time. With the exponential raising of critical cyber-physical systems (CPS) in our all-day-life (cars, metro, UAVs, ships...), how would an attacker be able to ...
0
votes
0answers
72 views

Injecting a payload into an exe file

How do you inject a payload (for example windows/x64/meterpreter/reverse_tcp) into an exe file? Basically, when the target opens the exe file, it looks normal and operates as such but in the ...
2
votes
1answer
90 views

Does printk() cause any security issues?

I'm asking myself if the function printk() causes security issues on Linux. When an attacker has user level access to the system, does it make his life easier if he has access to kernel pointers? Does ...
0
votes
1answer
81 views

Why are there no browser feature or extension to only check the domain and username to prevent phishing?

One of the recommendations to prevent phishing using look-alike domain names (like www.google.com.phishing.org or IDN homograph attacks) is to use a password manager or a physical security token like ...
2
votes
1answer
49 views

How does CRIME work against cookies

Wiki on CRIME: CRIME <...> is a security exploit against secret web cookies RFC 2616 on Content-Encoding: The Content-Encoding entity-header <...> when present, its value indicates what &...
1
vote
0answers
20 views

SOP for an API specifically serving a single SPA [duplicate]

SOP (same origin policy) provides some security for the users against some attacks, but it is not very strict as it still allows you to send GET and POST requests from a different origin that APIs by ...
0
votes
1answer
55 views

Security implications of running multiple virtual machines on shared CPU cores

Recently there has been the recommendation to disable hyperthreading. I was wondering if there is an increased risk of an attack or information disclosure when multiple virtual machines use the same ...
27
votes
5answers
8k views

I detected someone probing my site for weaknesses, what can I do about it? [duplicate]

My site has been getting probed by a bunch of IPs from Morroco (trying to submit forms, trying out potential URLs, trying to execute scripts etc..), I have a strong suspicion it's the same person ...
2
votes
0answers
113 views

PHP Upload-show images securely [closed]

I've read various posts about how letting users to upload files can create vulnerabilities to your website such as a user injecting php code in an image. So i've created a small test project where ...
0
votes
1answer
99 views

What famous attacks used a use-after-free vulnerability?

I'm compiling vulnerabilities and related attacks, and I need to find a famous attack that exploited a use-after-free vulnerability. I've looked for a while though I can't seem to find any. I know ...
0
votes
0answers
44 views

Detecting network attacks by processing individual or multiple network packets?

I am trying to create a tool that identifies network attacks using machine learning, something like a small intrusion detection system. I have collected benign traffic from the network and then ...
3
votes
3answers
96 views

Should I block IP adresses that made attacks attempts and were block from an IPS through the rules?

We have an NIPS blocking attacks based on bad behaviors (rules checking the data in the network packets). Should I block the IP that the NIPS linked to attack attempts? It feels like the NIPS is ...
0
votes
2answers
66 views

Locale detection & huge Accept-Language header, can this be considered an atack vulnerability?

I was looking for some examples of automatic locale detection as I needed to do the same in my PHP app. Most of the answers I found were similar, only differing in the parsing methods. An example '...
-1
votes
1answer
104 views

Timing Attacks: Against PHP Server - Prevention/Tutorials [duplicate]

What is the most simple and effective way to Prevent the Timing attacks for the programmers who use PHP? I'm a high school student, I'm new to programming and I've been learning Security since few ...
1
vote
4answers
159 views

Attacks on server-side web

What types of attacks are specific for server-side web, but not client-side? From what I have found on the Web the most attacks focus on client-side rather than server-side.
11
votes
4answers
3k views

Eavesdropping vs. sniffing

I'm taking a coursera course, and they take pains when talking about network security to distinguish between eavesdropping and sniffing. According to their definitions, sniffing involves reading or ...
0
votes
1answer
225 views

Why hasn't the one-click attack taken over the world?

This is a follow-up question related to Is single-click phishing possible?. If such a convenient attack is possible, I assume everyone on the internet should already be hacked. Why hasn't that ...
0
votes
1answer
177 views

What kind of attack sends strings like V\x00Y\x00z\x005 and how to protect the server against these?

Revising the file access.log in a server I've noticed the classic attacks, requesting for login.php, membersHandler.ashx, etc. but this is strange to me: 198.51.100.22 - - [02/Oct/2018:02:20:20] "...
0
votes
1answer
70 views

Why are SQL servers not attacked as frequently as ssh servers?

I have a server running with both SSH and MySQL accessible to the public internet. Both run on default ports (22 and 3306). The ssh server is attacked by bots all the time. This is the output of ...
0
votes
0answers
17 views

Malicious php files and strange directories appear in an HTML only directory [duplicate]

I host a website at a hosting company. I believe it is the "shared" kind of hosting. I was hacked somehow and sudden php files and directories pop up with certain frequency. Also, on my error logs I ...
0
votes
1answer
75 views

What type of exploit is an attacker performing by executing the code snippet?

I just started on secure coding.Does anyone know what type of exploit is an attacker performing by executing the code snippet?
1
vote
2answers
95 views

Hide ports being knocked during Port Knocking

A while ago I wrote an article about implementing Port Knocking using iptables. Later in the post, I also talked about making this mechanism more secure. The way it works is that in order to open a ...
0
votes
1answer
195 views

A replay attack was detected (4649) & Exchange Healthmailbox

We received alarms for this in our SIEM today. I believe it is expected and just "noise". The alarm was triggered immediately after Exchange cleared the ThrottlingConfig.log. I know Exchange Server ...
6
votes
3answers
243 views

What is the (literally) lightest way to run a second secure system?

My goal is to have two separate systems where one is secure even if the second one is full of malware. My current approach is to have two separate laptops and the only way these two communicate with ...
1
vote
1answer
92 views

Recent attacks and vulnerabilities [closed]

How can I be up to date and get news on recent attacks and vulnerabilities? Is there any trusted source of information (websites, databases, ...)
0
votes
1answer
89 views

Is my Vino server being attacked?

I installed vino on LUbuntu 18.04, and configured and started my vino server according to https://askubuntu.com/a/530196/1471 without understanding what the commands mean: $ export DISPLAY=:0 $ ...
2
votes
1answer
190 views

Difference between DNS flood attack and DNS amplifier attack [duplicate]

I am trying to understand DNS flood and DNS amplifier attack. I have read the definition and am still confused, could you give me an example of each attack or tell me the differences between them? It ...
-1
votes
1answer
115 views

someone has access to my acer chromebook and my phone also

I lived with another person while I was attending school online. I was using his WiFi for phone and computer. When I left, all my passwords were changed, my settings, everything that could possibly be ...
-1
votes
1answer
215 views

What Are the Algorithm and techniques of IP Traceback?

In most of the cases the cyber attacks such as a DDoS attack or other kinds, it is sometimes hard/impossible to identify the real source IP addresses. This is because when you review the logs and ...
0
votes
2answers
81 views

Can JavaScript code in browser be modified by hacker to gain access to unauthorized resource?

I have Spring Boot API app on the server side and VueJS app on the client side. Upon successful login, the server side sends JSON response that includes accountType with value either VIEW_GOLD or ...
0
votes
1answer
109 views

How can Insertion attack ever work and fool an IDS on a TCP connection?

An IDS can accept a packet that an end-system rejects. An IDS that does this makes the mistake of believing that the end-system has accepted and processed the packet when it actually hasn't. An ...
1
vote
2answers
85 views

How do so many vulnerable IoT devices stay alive and online?

With attacks like Mirai and similar "script kiddie" threats giving access to so many IoT devices, how do they manage to stay online? Suppose I have a device online which can be accessed (as root) ...
0
votes
1answer
417 views

Comparison between WAF and IPS/IDS

I would like to know the difference between WAF and IPS/IDS? Can IPS/IDS handle an attack on a web application? If there are differences functionally between the two applications, how they work ...
2
votes
1answer
91 views

Port Knock logs suggest machine has been compromised?

On my CentOS machine, all my ports are filtered with the Iptables rule: DROP all -- * * 0.0.0.0/0 0.0.0.0/0 So from the Internet, every port timeouts. The only way to ...
1
vote
0answers
293 views

Using Reaver in various UK routers results in stop after 90% progress

I've been trying to make use of the current wifi audition techniques in regards of Router Password retrieval. GEAR: I've been through car boot sales and acquired some of the current routers on the ...
0
votes
1answer
65 views

What attacks does the disclosure of VPN user credentials allow?

Many popular VPN services (that provide encrypted tunnels between the users' devices and distant VPN servers) authenticate users using a pair of email address and password. What attacks would the ...
2
votes
3answers
157 views

Partitioning database to enhance security/anonymity?

The goal here is to prevent identification of the users and their data. Is it a good idea to partition my database into multiple ones, one for each kind of sensitive data, hiding the links between ...
0
votes
0answers
107 views

Problem using padding oracle attack on this base64 - url coded message (AES CBC 256)

I'm supposed to write a script that will get the plaintext of a message which is firstly coded in base64, then URL coded (encoded ciphertext in AES-256-CBC). Padding is used as well such that the ...
4
votes
1answer
285 views

Can an air-gapped PC receive malicious code even when completely clean, apart from all physically attacks?

The Basic question is in the title there are more questions bellow but it is in context of the question in the title...hopefully What i have read is that it can eavesdrop the Airgap PC via acoustic ...
3
votes
1answer
173 views

How can you change the plaintext of the given secret message which is in AES-256 CBC

Say you have the secret message encrypted with AES-256 in CBC mode 5a04ec902686fb05a6b7a338b6e07760 14c4e6965fc2ed2cd358754494aceffa where the first 16 Byte is the initial vector, the second 16 Byte ...
0
votes
0answers
383 views

Host header injection attack with Spring boot embedded tomcat

Our application has been checked by PEN Test tool, and there are description of issue: An attacker can redirect the application using the host header on the below mentioned URL to redirect them ...