Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [information-gathering]

The early stage of an attack during which the attacker tries to collect information about the target.

0
votes
0answers
10 views

Will the new australian telecoms bill allow to compel companies to build spy functionality into their software? [migrated]

According to https://parlinfo.aph.gov.au/parlInfo/download/legislation/bills/r6195_aspassed/toc_pdf/18204b01.pdf companies could be required to enhance their software to allow for spying. They would ...
1
vote
2answers
112 views

Is it poor practice to use the last 4 digits of a social security number as an identifier?

Is it poor practice to use the last 4 digits of a social security number as an identifier? The last 4 digits of a person's social are commonly used as a means of personal identification/...
-4
votes
1answer
65 views

information gathering on a person [on hold]

How would a hacker go about gathering information on a real person with a minimum amount of details about him? Details known: Name Face
-1
votes
1answer
69 views

How to identify the vulnerabilities in a target computer?

I ran an exploit on the victim and used a msfvenom payload. I am on the victim's computer but I have not the root privileges. I tried to use getsystem command for getting privilege but it failed. So ...
0
votes
2answers
126 views

What are the security issues of exposing default server home page in public internet?

I have seen on internet where several website companies have exposed the default home page of web server such as Tomcat, NGNIX, Apache web server. I always believe it is not the best practice to ...
5
votes
1answer
636 views

Using android auto in a rental car

I've started using rental cars frequently for work and android auto has apparently become common enough that many of the cars I rent have it built in. It could be helpful to me even over the short ...
4
votes
1answer
141 views

Which protocol could have been likely candidates for leaking a laptop serial number

Having read this article, one line in particular caught my attention: The AFP raided the boy's family home last year and found two Apple laptops with serial numbers that matched those of the ...
1
vote
1answer
51 views

SSRF when user input is appended to hostname

Is it considered a SSRF vulnerability (or is it dangerous at all) if the backend of an application fetches a URL that is somewhat based off of user input, in a way similar to this get("https://...
0
votes
1answer
70 views

How to trace who sent mail with attachment

Yesterday someone emailed me a malicious .bat script. I have his email (he used Gmail) and of course I can't track him using mail header. So I checked the .bat file details but I only see my ...
2
votes
0answers
61 views

Stack behavior on function call during a format string exploit

I have some issues trying to resolve a war game with a format string vulnerability. So here is the code of the program: #include <stdio.h> #include <string.h> #include <stdlib.h> ...
0
votes
1answer
102 views

How sensitive is information on a system's architecture? [closed]

How much easier would it be to break into a system if you knew the following information? Processor architecture / family Operating system Libraries used Application programming language Standardised ...
3
votes
2answers
94 views

Business Partner Information Leaking

I just went through a penetration test, and what was wierd was we had a comment back about a potential data leak via DNS snooping (I realise this is boiler plate, and also this is an internal only DNS,...
-1
votes
1answer
69 views

Found scam site that tricks you into giving them more contact info to remove your existing public info [closed]

I found a site where they display your political registration info (which includes contact info) that was requested from the government. If you find your contact information from this site, do NOT ...
11
votes
1answer
1k views

Should OS information be in DNS?

We are having an internal discussion about system naming conventions and there is a disagreement about including the type of OS a system is running in the DNS host record. One suggestion was to ...
4
votes
1answer
499 views

What information is in a gpg cleartext signature?

What information does a gpg2 signature contain? If you clearsign an empty file, the signature looks like this: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 -----BEGIN PGP SIGNATURE----- Version: ...
2
votes
1answer
502 views

How to secure erase files and folders? [duplicate]

How to securely erase/delete files or folders in different file systems (NTFS, ext3, ext4) ? Need to delete files so it will be impossible to recover that files and no traces of metadata and traces in ...
6
votes
1answer
77 views

Autofill on (untrusted) websites

Consider a website using https which presents a login form on the home page. Today I visited such a website, which I have a login and password for, and for the first time I was presented with a ...
0
votes
2answers
159 views

The requirements of gathering information data without any limits? [closed]

It's a well known fact that phones, computers and other devices can be tracked and be used as a means of collecting user information if the situation permits it, for example in crime investigations. I ...
-2
votes
1answer
194 views

How does GPG2 --verify knows who signed a file and how? [closed]

When I (clear)sign a file, the output is something like this. $ gpg2 --clearsign test $ cat test.asc -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 This is a test! -----BEGIN PGP SIGNATURE----- ...
1
vote
3answers
154 views

If my data is encrypted with a password, how does the website know me?

Perhaps I am under the wrong impression, but I thought that my password encrypted all of my sensitive data on a website. Let's take Gmail as an example. What I would hope, is that without my password, ...
0
votes
1answer
70 views

What files yield the most useful information when an attacker leverages a memory vulnerability?

I'm trying to understand what information is left behind after an attacker exploits a vulnerable application leveraging a memory vulnerability (overflows, ROP, etc.). I wanted to know: What are ...
0
votes
2answers
201 views

Do the 'bad guys' create honeypots?

I know companies, governments, and other organizations create honeypots (ex: SQLi pages, Open Access Points, Open Ports, etc.) to lure in the bad guys. Are there any examples of the bad guys creating ...
-6
votes
1answer
68 views

Trojans, APTs and IP Theft

If I were a CEO of a company making a revolutionary hi-tech widget and all of my firms profits were generated with this product. I would be very aware (read scared...) that the a foreign entity might ...
2
votes
2answers
381 views

​ Organizing information during a pentest [closed]

​ Currently I'm on my way to becoming a full time pentester, which means I do a bunch of CTF challenges and try to break labs that have been set up for me. The only issue I'm currently facing is how ...
19
votes
4answers
3k views

What lessons can be learned from the latest spate of Ransomware attacks? [closed]

I'm not sure this is the right place, but figured people would find it useful if they aren't too familiar with security policies and general best practices. There is a lot of information out there, ...
1
vote
0answers
57 views

T900 Skype Virus How to detect and how to remove [closed]

I hope that this is the correct forum to post this question. I wanted ask what is the best way to identify if a machine is infected with the virus T9000 and also, which antivirus programs are capable ...
5
votes
1answer
318 views

What is this user trying to do?

I work with a company that creates marketing software, we recently created a forum so we could talk with users who need support. I'm the main admin on this forum and a user, let's call them person1 ...
2
votes
0answers
69 views

IPv6 Spams dataset?

My master thesis is about "Managing Spam Under IPv6". I would like to use machine learning algorithm on information retrieved from mail headers in order to sort out spams from legitimate mails. To do ...
3
votes
2answers
485 views

What is the key to detecting all IoT devices in your organization? [closed]

In recent news, IoT devices are a target of hackers -- specifically botnet herders. The first step to securing your organization and its users is to detect all IoT devices that are functional on your ...
4
votes
1answer
299 views

Should I avoid deploying package.json or bower.json files to production?

I know it is recommended to hide OS and server version information when serving up web pages. What about js library version info contained in package.json or bower.json files? It seems like this could ...
7
votes
1answer
206 views

Any advantage to rejecting a (cell phone) call vs ignoring it?

I get several calls a month from numbers that are not on my contact list. When I search these numbers on Google, it is not unusual see message boards saying that the number belongs to a known scammer ...
2
votes
2answers
738 views

My WebSite is being attacked, should i be worried seeing the logs?

Recently i just checked my server and found in logs that it is being attacked. Seeing the logs i am not able to exactly figure out, if i should actually be worried.i checked the attacker domain rating ...
0
votes
1answer
92 views

browser can visit the url but other application can't

I did simple 'intitle:"index of" xss' search and got this page with URL 'https://repo1.maven.org/maven2/com/codesnippets4all/xss-filter/'.I can see the IP on the wireshark and the conversation of ...
7
votes
4answers
1k views

implications of incomplete TCP handshake session

In network security, why do we care about knowing incomplete TCP handshake sessions? Is there a security implication behind this?
0
votes
2answers
89 views

GPS working and anonymity

Does gps make any log, which is store in there positioning system ? Even if gps is off in our smart phone and we don't have any sim card in it and our internet is off too still is their any chance to ...
3
votes
2answers
135 views

Data 'dust' left over other than on the HDD?

I was working on a project which contained very classified information. I am now planning on using the computer for personal work but I'm worried that replacing the HDD won't be enough. Is there any ...
1
vote
1answer
73 views

Capturing sensitive data within legal restrictions? [closed]

As a web development agency we're currently taking on a site rebuild for a recruitment agency. The current site allows applicants to register as temporary workers for the agency ( our client ) who ...
1
vote
1answer
151 views

How do I get a count of unique nested URLs in an web application?

I'm scoping a web application for a pentest. The application has a number of dynamic nested URLs. I've crawled through all the URLs in the application via Burp-suite. I need to obtain a list of ...
0
votes
0answers
123 views

Help with cyberstalker

How do I find out which provider/company is behind the IP address 165.254.44.125 or 165.254.44.110 ? I have tried geolocation but I think it's a some sort of masked ID. You can tell I'm not very clued ...
3
votes
1answer
494 views

CSF is blocking so many IP's

I have been using DigitalOcean's services for about 2 years and CSF reported port blocking alerts twice a week. After I changed my country (and also the IP address of the machine changed) I am getting ...
1
vote
1answer
376 views

How to fingerprint a server with Netcat?

I am trying to follow the OWASP test guide on a Kali Linux machine. As the first step in "Information Gathering" I am trying to fingerprint the server. The guide instructs me to use NetCat: $ nc www....
0
votes
1answer
184 views

Techniques to find out the domain a given name server resolves for

So I am asking this question cause I have been stuck in this situation a few times while carrying out pen tests. A few times I find an IP with DNS service up and running and I am not able to find out ...
0
votes
2answers
192 views

Eavesdrop activities by government

My friends country is fastly moving to Dictatorship. Currently, I am not in that country but when I try to talk to my friends, they are afraid of talking to me via Whatsapp or Skype because without ...
0
votes
0answers
17 views

to find number of subnetwork in a network? [duplicate]

I need to find all the subnetworks available in the network of an organization connected via Router. You have access to a machine withing a particular subnetwork. What are the possible ways to find ...
1
vote
2answers
15k views

How to find list of IP address in a network with multiple subnets?

There are many subnets connected via a router in the same network. I need to find list of all IP address available in each different subnet. I am able to get the list of IP address available in the ...
1
vote
0answers
140 views

How often does a user type in the “last 4 digits of SSN” in the “last 4 digits of Phone”?

This may sound dumb to a Security pro, but this is about end-users and worst case interaction with a challenge-response. Background Many 2 factor authentication sites request verification of the ...
1
vote
1answer
83 views

Is threat intelligence an illegal practise? [closed]

When thinking about cyber security I like to be up to date with all the latest threats out there. So of course you would like to get the information first hand to see where the threats are coming from ...
3
votes
2answers
685 views

Can I trick a mail server into sending me an email?

Can I trick a mail server into sending me an email? I would like to do some email header analysis on the emails that are send by a mail-server in a penetration-test and possibly get to know more ...
3
votes
1answer
114 views

How dangerous is leaking knowledge about existence of objects which the user is not allowed to access?

It is my understanding that good security design does not reveal information about data which the user is not allowed to access. This includes information about the existence of said data, i.e. if a ...
2
votes
3answers
112 views

Should public access to specific filenames and -types be denied preventively?

Is it a good idea to preventively disable (public) access to certain filetypes (by extension) and/or by filenames: in the server configuration (in case of a shared hosting server) or, as a rewrite ...