Questions tagged [attacks]

An attempt to exploit a weakness in a system, either for nefarious or research reasons. Questions with this tag should be about designing, carrying out, or defending against the attack itself, rather than about the underlying weakness.

Filter by
Sorted by
Tagged with
0
votes
0answers
45 views

Difference between impersonation and masquerading attacks

According to a book that I am reading, an impersonation attack is a more active attack than masquerading but I thought they are the same thing. How is this so.
0
votes
1answer
69 views

Are fingerprints scans susceptible to either dictionary attack or pass-the-hash-attack? [closed]

If a user scan his fingerprint, and this fingerprint (let's say a [x,y] image) is hashed and then sent to a server that stores this hash, is the fingerprint scan susceptible to either dictionary ...
22
votes
7answers
7k views

How to secure a mobile app against its user?

I have created a mobile application that monitors the accelerometer activity and based on that it rewards the user if a specific pattern is observed. How I can secure the application against the user ...
0
votes
0answers
91 views

What type of attack is this? '[0]

This is the example query: GET directory/file.txt?lang=it'[0] HTTP/1.1 I don't know what language it is. The ' (single quote) reminds me of a SQL Injection. I don't think it's a typo because I saw ...
0
votes
1answer
75 views

using Uuid for security

I read that uuid does not bring any security advantages But I can't find why It doesn't bring a little bit of extra security in the scenario below ?: Consider that right now the session id is ...
0
votes
1answer
39 views

Are Thunderbolt-enabled computers without Thunderbolt ports vulnerable to Thunderspy?

Could these two attack scenarios exploit the recently publicized vulnerability? Using a Thunderbolt adapter like an USB-to-Thunderbolt adapter on a computer without any Thunderbolt port Temporarily ...
0
votes
1answer
64 views

Spam link sets cookie(s) then redirects to google.com - what would be the point of this? Should I be concerned?

Received a spam link about "a package soon to be delivered" via an SMS message. Didn't click it in my phone, but couldn't help myself but to go to the URL in a browser on my laptop :grimace: (not ...
0
votes
0answers
52 views

Architecture of smartphone security: why FBI needed apple's help? [duplicate]

I want to focus on technical aspects, not on the fact that they wanted to make a precedence. i assume the smartphone security architecture is following: cryptography chip. it's read only and ...
1
vote
0answers
21 views

Creating a Secure Modern MMO From the Ground Up [closed]

MMOs have been around along time. As a result, there are lots of past attacks on MMOs that we can learn from and apply to a modern MMO. As a security novice, I was wondering if in today's climate you ...
-1
votes
1answer
52 views

System Process PID 4 Attempt to connect to many risky IPs using local port 137 [closed]

I noticed in our APT solution that many endpoints in my company initiate connection attempts: Process initiate: system process PID 4 Remote risky IP 185.94.111.1 remote port: random remote ports ...
0
votes
2answers
72 views

My VPS was used for DDOS Attacks [duplicate]

I got an email from my hosting provider telling me that my VPS was used to perform DDOS attacks on this website: cpanel4.vhosting-it.com. Unfortunately I haven't read their email sooner, so they ...
0
votes
1answer
59 views

Attacking through an open but not listened port [duplicate]

Let us say, we open a port, say port 123, so that upon listening, an application on the server can receive incoming packets through the port 123. If there is no way that an inside application on the ...
0
votes
0answers
40 views

AWS EC2 instance traffic spike on port 80

We received an "abuse report" from AWS indicating we may have experienced a DDOS attack. From what i could see there was definitely some spikes in the last two days. According to AWS it was through ...
0
votes
1answer
104 views

Is there a way to lock down a network? [closed]

If supposing I discover that my network is being attacked by some hacker or is being compromised in any way and I am able to detect it. So, is there any software-oriented way of 'locking-down' the ...
0
votes
0answers
51 views

Disguising attacks through well known bugs

In the movie "Minority Report", the Precogs can foresee murders and store in video log files that can be inspected in the future. There was a known "won't fix" bug where these visions would "echo" and ...
0
votes
0answers
25 views

Which kind of attacks could be done on CoAP protocol?

I'm a student and I'm studying the security of the CoAP protocol. So, thinking on the attack-surface my thought was about internal attacks (i.e inside the network) and the external attack (i.e. ...
0
votes
0answers
28 views

Why does a tool that analyses unidirectional traffic provide conditions for a Fake Session attack?

When I read this document about Fake Session Attack: Bearing in mind that today most networks have asymmetric traffic routing (in which incoming and outgoing packets are being sent via different ...
2
votes
1answer
136 views

How to find buffer offset for Return to Libc Attack

I am trying to find the buffer for where the implement my buffer overflow attack The lab link is also here: https://seedsecuritylabs.org/Labs_16.04/PDF/Return_to_Libc.pdf How I find X Y Z in a ...
2
votes
2answers
218 views

Can cross origin iframe be detected in web logs

A recent blog post shows hackers owning a web server - at least the content and injecting a web skimming attack. https://blog.malwarebytes.com/hacking-2/2020/03/criminals-hack-tupperware-website-with-...
1
vote
0answers
21 views

Name of 'smart brute force' attack against sequential cipher lock [duplicate]

I remember learning about an attack against sequential cipher locks - ones that don't have a 'reset' or 'enter', you just enter digits and as soon as the last n consecutive entries match, the lock ...
1
vote
1answer
251 views

There seems to have been an attempt to attack my website [duplicate]

I am using PHP as a server side language. And I don't use CMS or Framework. From the nginx log the website attack seems obvious. I wonder what kind of attack the attacker attempted. The attacker ...
0
votes
1answer
134 views

What type of activity at the WAN port of router can cause massive data uploads, when no devices are connected? [closed]

I have Airtel Broadband PPPoE connection with Public Dynamic IP assigned to my router Dlink DIR 615 (It’s old model and now discontinued). Intermittently I have noticed instances of unusually high ...
1
vote
0answers
100 views

Unknown website tries to connect to my website [duplicate]

A few minutes ago an error popped up on my error tracing app. I'm hosting a Django app which has login system. The error says: Invalid HTTP_HOST header: 'www.moxing.one'. You may need to add 'www....
0
votes
1answer
431 views

exploiting CVE-2020-0668 problem

I've been trying to get mentioned security error working on my machine so I could fully understand how it works. I've been following those instructions: https://itm4n.github.io/cve-2020-0668-windows-...
5
votes
1answer
152 views

How dangerous are SWEET32 and LUCKY13 vulnerabilities?

I wonder how vulnerable are Sweet32 and Lucky13? I mean, how often do the attackers use these vulnerabilities to gain access?
0
votes
0answers
87 views

Bypassing Secure Boot in System on Chip

To bypass a secure boot for System on Chip (SoC), some attacks target the phase of copying the bootloader from where it is stored to the main memory. Instead, a malicious code will be copied to the ...
0
votes
1answer
101 views

What should I do during the Man in the middle attack? [closed]

I have a question about Man in the Middle attack. What should I do during the Man in the middle attack? In case I am already connected with a friend of mine on the net, but I suspect that there is ...
0
votes
0answers
39 views

What are the main differences between a covert timing channel and a covert storage channel?

I am trying to find the differences between a covert timing channel and a covert storage channel in terms of detectability, performance, features, and any other advantages and disadvantages. Is ...
1
vote
2answers
140 views

See the contents of https/ssl data weeks after leaving the wfi

I just recently broke up with my ex boyfriend, I am not computer smart but he is, scary computer smart and can basically do anything, with lots of schooling and whatever it is he does for work... I ...
79
votes
6answers
19k views

Can malicious code fit in 14 bytes?

I was reading this The New York Times (NYT) article about the hack of Jeff Bezos's phone. The article states: The May 2018 message that contained the innocuous-seeming video file, with a tiny 14-...
1
vote
1answer
124 views

Attack that stops internet access for several minutes

I have a question that might sound a bit weird: A friend of mine (Person A) is being attacked by a former friend (Person B) and now person A asked me for help. Person A and Person B know each other ...
65
votes
5answers
16k views

My email address is being used to enroll for online services. Should I be concerned?

Just before Christmas I received the following message in one of my GMail accounts: Sign-in attempt was blocked ********@gmail.com [redacted by me] Someone just used your password to try to ...
2
votes
0answers
475 views

TCP reset attack / forged TCP reset prevention

How do you prevent someone from doing an TCP reset attack between client and host without having acess to host? I am trying to solve a CTF for fun and learning purposes. In one of the challenges I ...
0
votes
1answer
67 views

In what ways can the contents of RAM be (inadvertently) written to disk?

I'm working on improving the security of my own system by mitigating the chance sensitive information, (e.g. encryption keys) stored in RAM, are inadvertently written to disk. As of now I know of ...
0
votes
1answer
46 views

Is a differentially private SQL database relatively more secure from an SQL injection?

I've been in security for a while now but I'm relatively new to privacy. I've been studying differential privacy and its application to databases. However I'm still a little confused about where ...
1
vote
4answers
355 views

Possible attacks over SSH

Let's say there is a target machine T, to which I want to connect. T is in a private network so I need to connect to it via some proxy machine P (which is connected to that network). For this reason I ...
1
vote
2answers
186 views

How do we secure image parsing libraries against buffer overflow?

New to buffer overflow through image parsing. How can one design a secure library that parses images, and ensure there are no security vulnerabilities in it? It is common knowledge that image parsing ...
4
votes
2answers
3k views

Can someone hack my phone by sending me a file (e.g. PDF) via Whatsapp?

My work requires (and depends on) Whatsapp for daily sharing of files with many people (PDF, PowerPoint, Word, Images, Web links...), and I was wondering if it is possible that someone can hack our ...
0
votes
0answers
52 views

Are there LTE attacks besides aLTEr?

Background: I understand that most attacks on cell network-subscribed individuals rely on exploiting the poor authentication of GSM/2G comms. And if the victim is on LTE, then the next best strategy ...
0
votes
0answers
79 views

How does an IMSI catcher “impersonate” a base station/cell tower?

On reading about IMSI catchers, I keep seeing that they "impersonate" a real cell tower or "base station" so that the phone drops its signal-carried data on that machine while on its way to the ...
1
vote
0answers
139 views

Wi-Fi passphrase changed overnight—bug or attack?

This morning I discovered that the WPA-Personal passphrase of my residential ISP–provided wireless router had been truncated to the first 3 characters. Everything else in its configuration appeared to ...
0
votes
0answers
35 views

Keeping devices secure on a WIFI network [duplicate]

I am using a public WIFI network before work how do i keep my devices secure on this network? I am looking to prevent a attacker using a packet sniffer to grab my data and i am looking to prevent ...
-2
votes
1answer
335 views

Is editing a link using inspect element a valid XSS attack?

Using inspect element, I can edit a link opens a popup in edge with the text "1". Is it a possible XSS attack?
0
votes
1answer
69 views

Thought process on Network Protocol Attack

I'm preparing for an introductory information security examination in university and this is one of the tutorial question on Network Protocol attacks. I tried (a) and came to this conclusion: Since ...
2
votes
2answers
164 views

What should I think about users with huge numbers of successful login attempts in a short period?

What to think about a user making thousands of successful login attempts over a short period? What are the dangers of such a behavior and how to protect against them? A couple of examples of dangers ...
1
vote
0answers
203 views

Display filter to see WPS attempts in WireShark [closed]

My neighbour is actively trying WPS pins on my router - I know because the "WiFi/WPS" LED on my router lit up when I have permanently turned it off! I double checked the setting using the router admin ...
0
votes
0answers
18 views

What kind of attacks can a virtual keyboard limit? [duplicate]

If I was going to let someone typing using a virtual keyboard instead of a traditional physical keyboard for filling in a form or anything else with form submitting, what kinds of attacks can be ...
1
vote
0answers
99 views

Some questions regarding Red Hat Linux and a case study [closed]

As part of a course I'm doing, it's presented a case study. I'm a bit stuck and not too sure where to find further info. If someone could point me in the direction, I'd appreciate it. In this case ...
44
votes
9answers
8k views

I have just 4 hours a month to security check a cloud based application - How to use my time?

I've been tasked with looking after an application deployed to azure. I have been allocated 4 hours a month. I essentially have half a workday to secure this application / keep it secure. What is an ...
0
votes
4answers
163 views

Attacks on password-based encryption

Frequent attacks on password-based encryption are dictionary attacks with special hardware. I suspect that this is the only promising attack on the ciphertext. Is that correct? Another attack ...

1
2 3 4 5
23