Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [automation]

The tag has no usage guidance.

0
votes
1answer
62 views

How to set autorunscript of core commands?

I'm trying to automate scripts of an Android Metasploit payload. I can successfully automate any script on the /post module, however, I'm trying to automate geolocate, dump_calllog and others that are ...
0
votes
0answers
39 views

How to pass user/pass from user to api in automated fashion

I was unsure whether to ask this on StackOverflow or here, but decided that it is more appropriate here. I'm creating a fully-automated local script that will run on a schedule. Once set up, the ...
0
votes
0answers
37 views

looking for computer readable lists of CVE to package name sources [duplicate]

Redhat has a very nice xml containing all known CVEs and the package version they are fixed in (https://www.redhat.com/security/data/metrics/rpm-to-cve.xml). I would like to know if any other Linux ...
7
votes
1answer
171 views

Automatically Open LUKS Container on System Boot in a safe manner

I have a linux system running at a cloud provider where I created an encrypted container using LUKS to store personal data. The encrypted container is manually mounted at /srv; the rest of the ...
0
votes
0answers
131 views

Auto execute msfconsole commands after reverse shell connection established

I run a .rc script which commands automates the process of establishing a reverse tcp connection. The problem is that i want to upgrade this connection to meterpreter and i want this process to be ...
1
vote
2answers
562 views

Pros and cons of installing security updates automatically?

I recently got into a discussion regarding automatic installation of security updates. The system is used and managed by a small nonprofit organization—essentially one or two admins managing the ...
6
votes
2answers
2k views

Anti-bot JavaScript library identification

I'm doing a research on anti-bot measures that websites can use to prevent automation. I came across a JavaScript library and I'm trying to identify its origin. At first I thought it's a site specific ...
3
votes
1answer
857 views

Port-forwarding to a web server on Raspberry Pi

I've recently created a relatively simple smart Christmas tree which is a Raspberry PI Zero W powered LED strip. In order to control it via IFTTT webhooks, I've started a lightweight flask server on ...
1
vote
1answer
152 views

Give users a powershell script to run - Secure?

Is there a secure and practical way to give a group of users a powershell script to run on their laptops? The users all have active directory accounts, but their computers are not joined to any ...
-1
votes
0answers
26 views

enumerating write-access on an SMB share

After connecting to an SMB share, I would like to find an automated way to determine my user's write-access on the share's directories and files. As reference points, I looked at the smbclient "stat" ...
3
votes
2answers
443 views

Incident Responders: Can you give some examples of Incidents / types of incidents that are suitable for fully or partly automated response? [closed]

You setup security monitoring - either a full commercial SIEM/SOC or something home-cooked (e.g., rsyslog -> OSSIM / MozDef / Splunk / ...). You also setup some rules so that some event triage is ...
4
votes
1answer
262 views

IFTTT maker channel and Security Concerns

This is about IFTTT Maker Channel and security around it. They announced a new Maker Channel recently where you can receive and make web requests for automation. For example, I can turn ON/OFF my ...
1
vote
0answers
656 views

How safe are the password prompts of the SafeNet eToken 5110 or similar cryptographic hardware tokens?

I'll need to use an hardware token, specifically the SafeNet eToken 5110 that comes with DigiCert's EV certificates, for code-signing on Windows. I know that they issue a prompt to manually enter the ...
0
votes
1answer
103 views

About Wikipedia section about Malware for AutoHotKey [closed]

I would appreciate your advice about the Wikipedia section about malware for AutoHotkey, please. Because AutoHotkey contains many powerful automation tools, it is sometimes used to create malicious ...
1
vote
2answers
413 views

Wireshark decrypt and save wireless packets from command line [closed]

I have a question that I can't seem to find a complete answer for. This may not be something that is possible, but I am hoping someone will have a solution. At my work, we process wireless sniffs in ...
0
votes
3answers
635 views

How to tell if human is using website or automated script?

I know some websites say in their terms and services that the website can only be accessed by humans and not bots or scripts. How do they tell who is accessing? Especially with tools such as ...
2
votes
3answers
178 views

Did information technology had a increase or decrease in security with the introduction of automatic update features?

For obvious reasons we teach users Always update... updates are good... never forget updates, et cetera! Apart from the danger of malicious advertisements that make use of that showing users ...
2
votes
1answer
462 views

What security considerations should I keep in mind when setting up home automation using IFTTT?

My next personal project is going to be setting up some basic home automation for my parents (not very tech savvy but have a potential to learn). This involves some thermostat, lighting and ...
2
votes
1answer
97 views

What are proper methods to automatically detect malware and are current methods reliable? [duplicate]

What I have seen so far is the ability to automate signing hashes and string offsets as a way for an AV-engine to detect possible malware. Does this prove to be a good strategy for malware detection? ...
2
votes
1answer
4k views

How can I list all self-signed certificates in my stores on a Windows client?

I'm on a mission to list the self-signed certificates ('issued by' and 'issued to' match) on my machine via an automated method. PowerShell is available for use. Preferably the results would be ...
3
votes
1answer
49 views

How can I improve and secure automated signing?

Automated signing of files, such as software packages or file backups, is inherently risky if a certain level of trust is given to it. Having signing be an automated process means that there's no user ...
1
vote
2answers
615 views

Application that uses USB token to assign user on a server

I have the following situation: One user with a USB token certificate access a site and log-in using this certificate, the logging process ask for the USB token password; When the user is logged he ...
3
votes
1answer
780 views

Automate certificate signing in Linux

In a private network I wish to automate signing for new clients/servers. Something like this: New client is created (dockers & etc) The client create a new private key and a CSR The client send ...
2
votes
1answer
2k views

How to detect whether a GnuPG private key has passphrase on it from a script?

I've written a script to help our developers store a copy of their private keys without a passphrase inside our Puppet tree (not committed to Git) so our Vagrant boxes can use Hiera with eyaml + gpg (...
0
votes
2answers
904 views

Getting the uploaded file path without knowing the uploading destination

Imagine a scenario that we are able to upload a PHP file on the server. However, we are not aware of the uploading path. I simply mean that, we are able to upload the file but we don't know where it ...
0
votes
1answer
363 views

Automated server security testing best practices?

Is there a standard way of automatically testing the basic security of my web server? I've found a couple on-line services, (e.g. http://hackertarget.com/), and they seem ok, but I'd like to start off ...
2
votes
3answers
83 views

How do to keep programs updated

We all know we should keep our programs up to date, after all each of them could have an unlatched security hole that was fixed in the latest update. However the average computer easily contains 200+ ...
5
votes
1answer
555 views

Security in automated systems using Puppet and Chef

In an extremely interesting presentation at Puppet Camp London, Tomas Doran suggested a pretty radical approach for keeping everything automated by managing tons of Docker containers with Puppet. As ...