Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [attacks]

An attempt to exploit a weakness in a system, either for nefarious or research reasons. Questions with this tag should be about designing, carrying out, or defending against the attack itself, rather than about the underlying weakness.

0
votes
0answers
14 views

“GET //libs/js/iframe.js HTTP/1.1” 200 2305 “-” "python-requests/2.6.0 is it a try to hack into my server [duplicate]

Just Received a request in my nginx log 77.247.110.141 - - [16/Jun/2019:14:03:58 +0000] "GET //libs/js/iframe.js HTTP/1.1" 200 2305 "-" "python-requests/2.6.0 CPython/2.7.5 Linux/3.10.0-957.12.2.el7....
0
votes
0answers
48 views

How do I investigate a suspicious link? [on hold]

Long story short I made a RuneScape account about a week ago for some reminiscent play as I used to play when I was a kid. I stupidly responded to a scam but only by clicking on a link I was ...
1
vote
0answers
37 views

Centralized brute force login detection using netflow data

Is brute force login detection feasible with netflow data? With the netflow data one could check the number of incoming packets to a specific destination port (for each flow). If the number is below a ...
0
votes
2answers
104 views

Identifying a script used for vulnerability scan

The logs of a server are showing a great number of 404 responses in a short time. Apparently somebody used a tool/script to look for known vulnerabilities by combining the server and part of the path ...
-4
votes
1answer
57 views

Identifying attackers address? [closed]

I'm analysing this wireshark packet to determine the attack method, victims IP and attackers IP. It's clear that this is a SYN flood DOS attack. What's not so clear (for a newbie like me) is what to ...
-2
votes
0answers
67 views

How to forge RSA signature from two known valid signatures [closed]

Context : RSA From an exam archive: A pirate intercepts the valid signatures S1 and S2 of 2 messages m1 and m2 in Z/nZ, signed by Alice. Show how the pirate can forge the valid signature of ...
0
votes
0answers
87 views

Hacker found out my location through online chat. Could he also directly hack into my computer through chat and steal my data? [closed]

I think that hacker used some program to try and locate me. I am not worried about my safety, but I want to be sure whether he (somehow)could get some more information about me or plant into my ...
0
votes
1answer
34 views

TCP Hijacking and conflicting data handling on the OS level

Assuming I perform a TCP hijacking attack, by having access to the wire on which packets are being transmitted. In practice, the party to which I'm sending the hijack packet is going to receive the ...
0
votes
2answers
115 views

Billion Laughs Attack (XXE) - how does it work

Hi all Im trying to understand how the billion laughs attack works(https://en.wikipedia.org/wiki/Billion_laughs_attack) So far I get its obviously sending this payload: <?xml version="1.0"?> &...
1
vote
1answer
72 views

Is there any methods available other than brute force and dictionary attacks?

I am curious to know about the wifi attacks. And I have known a little bit about brute force attack and dictionary attack. Is there any other methods available other than these two...?
0
votes
1answer
123 views

Client HTTPS request redirection attack

Assume a Mam in the Middle that wants to redirect a client's HTTPS (Secure HTTPS) request from a.com to b.com. The MitM can not impersonate neither a.com nor b.com. The MitM does not have to use a TLS ...
1
vote
1answer
58 views

Self-signed certificates and ephemeral Diffie–Hellman key exchange protocol

If we use a self-signed certificate, is ephemeral Diffie–Hellman key exchange protocol vulnerable to a man in the middle attack?
0
votes
2answers
112 views

XSS in HTML class tag with only double quotes escaped

I am currently testing XSS filter and I wonder, whether it is possible to demonstrate XSS attack on class tag attribute in HTML, when only double quotes are escaped. Other characters (<, >, ') are ...
0
votes
2answers
145 views

How to conduct this MITM attack [duplicate]

For educational purposes, I want to conduct a demo for a Man In The Middle attack. The attack scenario is: 1) The client request aaa.com 2) The MITM changes the client request to bbb.com 3) The ...
0
votes
0answers
56 views

Server Side Template Injection for EJS template in NodeJS

I'd like to create a Web-App with Server-Side Template Injection vulnerability in NodeJS. The template used in the Application is EJS with Express-Framework. Below are the code bits: index.js (...
0
votes
1answer
88 views

How to implement an active Man-In-The-Middle attack that changes the request URL address

For training purposes, I need some pointers on the tools and tips to implement an active Man-In-The-Middle attack. The attack scenario that I want to do is a toy example (which has countermeasures ...
0
votes
1answer
86 views

Decrypt hash using dicionary attack

Let's consider that I'm the attacker and have access to hashes of passwords of a given database against which I will attempt a dictionary attack. My question is: Will I be able to find out by ...
0
votes
1answer
71 views

XSS: Character showing in DOM [closed]

I have created an html page that redirects user to a test site that has an XSS vulnerability. I am able to successfully execute javascript via the vulnerability. However, I have found that some of the ...
5
votes
1answer
75 views

What could an attacker do on a server where Source Control Management (SCM) files are accessible?

I'm testing some servers with OpenVAS and I run into some SCM files that are remotely accessible: .git/config .git//info/exclude .git/description .git/HEAD that contains refs/heads/master and .git/...
0
votes
0answers
48 views

Is JIT-compiler required for JIT-ROP attack?

I have been studying up on the concept of Just-in-Time (JIT) ROP attack (https://cs.unc.edu/~fabian/papers/oakland2013.pdf), and came across this question which I have not been able to find the ...
-1
votes
1answer
56 views

Is this method of storing a data-field secure?

I'm trying to convert a data field to something tokenized(that's to something not-sensitive). The current scenario is, I've got a data field (assume user-id) which is unique for each user, I don't ...
59
votes
9answers
12k views

How hard should I try to prevent a user from XSSing themselves?

Let's say a user can store some data in a web app. I'm now only talking about that sort of data the user can THEMSELVES view, not that is intended to be viewed by other users of the webapp. (Or if ...
2
votes
1answer
158 views

Should I be worried by an email which said my account was under attack? [duplicate]

So, today I received an email in my Gmail account which landed automatically in the spam folder. This was the email content: Hi! As you may have noticed, I sent you an email from your account. ...
2
votes
0answers
115 views

Format String Vulnerability - Can't read an address from stdin with read() in C

I wanted to exploit this code using format string vulnerability: int jackpot; void fmt_str(void) { char buf[128]; puts("Give me a string to print"); read(0, buf, 128); printf(buf); ...
-1
votes
1answer
85 views

How to determine where an attack came from? [duplicate]

I've noticed sometimes that I'd receive very random requests coming to a live server that I'd be hosting in realtime through my log. It would usually look something like: [14/Mar/2019 02:05:36] "GET /...
-2
votes
3answers
211 views

How can I stay anonymous in a LAN without Internet access?

I need to perform attacks (SQL injection) on a server. I thought of using a proxy to be anonymous, but the topology is a LAN without Internet access. I have no idea of the protocols used in the ...
0
votes
1answer
61 views

Does a cyber-attack influence the occurrence of faults?

I am looking for opinions and point of view of experienced people on this question, as I am not able to find a lot of resources. Let me define the terms first, so that we all talk about the same ...
1
vote
0answers
42 views

How can this Authentication/Authorization flow be improved?

I am currently building a full stack web app mainly as part of an exercice. This app is made up of a back end on a server (written in Go), and a front end written in Angular (so on a user's browser). ...
5
votes
1answer
213 views

a mysterious & pointless long-term hacking attempt?

It seems that I am the target of a mysterious ongoing hacking attempt. I have several domain names, most of which are currently parked & pointed at a single ‘main’ website. For the last couple ...
1
vote
1answer
59 views

Is a padding oracle attack possible with randomly generated keys?

In a project we collect data from devices in the field using a hybrid encryption scheme. When a device wants to send data it generates a random AES key (session key) and encrypts the payload with that....
80
votes
13answers
25k views

Is divide-by-zero a security vulnerability?

Even though sometimes software bugs and vulnerabilities are deemed as the same concept, there must be at least one distinct aspect between them, and I think the most prominent one is exploitability (...
0
votes
2answers
135 views

What are some examples of known scenarios of network attacks?

For example, it is possible that someone could spread malware with insecure wifi access point, but I don't realize how sending a bunch of network packets can result into a compromised computer if the ...
2
votes
1answer
129 views

Best ways to keep a website safe without web security and cybersecurity knowledge? [closed]

What are the best ways to keep a website safe without web security and cybersecurity knowledge? Will a top WAF service (commercial) be sufficient for handling most (of course not for all, more ...
0
votes
1answer
59 views

Virtual machines vs separate physical machines for testing potential malware

If you have to run potentially insecure executables, would using a separate laptop have any security benefit compared to a virtual machine, or would it be worse in the sense that the machine's ...
1
vote
1answer
182 views

is SSRF attack or vulnerability?

I'm reading now about SSRF attacks, and many articles "SSRF is an attack" and others said "it's a vulnerability." Which is correct?
0
votes
0answers
72 views

server logs invalid HTTP_HOST header, Bad request, 400 [duplicate]

I created a Digital Ocean droplet recently, to learn how to make Django app. Eventually they say I should use Gunicorn to serve and Nginx to face the world, however, in very early stage of learning ...
1
vote
2answers
73 views

Replicate HTTP GET request [closed]

I'm trying to verify an attack called Dahua Vulnerability. In the PCAP I've got: GET /current_config/passwd HTTP/1.1 Host: xxx.xxx.xxx.xxx How can I replicate this attack to show if an attacker got ...
57
votes
7answers
12k views

Does it make sense to consider a triggerable server software crash a DOS attack?

I've found a little vulnerability in a web application running on Node.js server. It works by sending some crafted payload to the application server, which makes the application server code to throw ...
0
votes
1answer
176 views

What are the common features to identify Brute-Force attack from Apache log file?

There are various methods to find attack patterns for different types of attacks. Apache-scalp is one such tool, but the rule set is not available to find the brute-force attack pattern via regular ...
0
votes
1answer
104 views

The Girl in the Spider's Web: SCSI hack?

In the movie, the main character is shown tapping into a network of surveillance cameras. She uses a SCSI connector which allows her to send the camera footage to a remote computer. I know it's a ...
0
votes
1answer
83 views

How to prevent replay attacks without exposing stored password security?

A common way to prevent replay attacks when logging in is for the server to present a challenge (chall) and request a response in the form hash(chall+secret) where the secret is already known by the ...
0
votes
1answer
109 views

How fill up a gig interface bandwidth with hping3?

I've been trying to test our software against DOS attacks. So, I used 'HPing3' but it just fills up 10-11M of my interface's bandwidth! I ran the tool 40 times, I mean 40 hping3 processes, ...
1
vote
2answers
135 views

How do i extract data from response and use it in url for next request in Burp Intruder?

The URL is https://www.example.com/send?session=abcabcabc. When the above URL is requested, a response comes with <a> tag which contains a new URL with a different session value like https://...
2
votes
2answers
75 views

Does red-teaming encompass the entire skillset of a blue-teamer?

Currently I am potentially facing impostor syndrome in regards to the role and skillset of blue team members (defence) and red team members (attack). I personally specialise in defence capabilities, ...
0
votes
1answer
156 views

Are these snort alerts false positives or attacks?

Can anyone describe this alert please? I am confused if an attack is run against my network or not. I run snort IDS/IPS through a pfsense firewall.
2
votes
1answer
94 views

Unauthorized API Access Without Key Header

In order to test the security of my API, I want to act as sort of an attacker in order to try and gain access to my own API without an API key. In order for me to send requests to this endpoint, I ...
0
votes
1answer
101 views

How are victims targeted from outer networks (WAN)

I started getting more interested about security about one year ago, and from all the things I have learned up to this day I never knew how particular victims are targeted from the attackers from ...
0
votes
2answers
183 views

Website is behaving strangely - was it attacked?

Our website was behaving strangely. Sometime it was down and nothing was accessible. Sometime it started loading but pages browsing was too slow. We checked apache logs and found the below ...
4
votes
0answers
123 views

Kerberos Attacks Questions

It's amazing how many "Attacks on Kerberos" articles exist out there and almost none really explains the small details. My guess is that usually they assume it's basic knowledge and sometimes, they ...
0
votes
1answer
188 views

Using hashcat for collision attack [closed]

Whenever i tried generate √N randomly(possible combinations of password length), i always find few collisons of the hash password no matter the length, if the password was made of entirely random ...