An attempt to penetrate a system's security in an effort to evaluate the protections in place.
3
votes
0answers
8 views
Securing client-side data from users
So my problem, in its general form, is encrypting test questions such that a client-side testing application can access the questions while students cannot. The naive approach, in my opinion, is to ...
1
vote
1answer
20 views
How to know an Apache web server mod_cgi module is enabled?
I am currently working on penetration test of a web site that uses an Apache HTTP server. To test a vulnerability which is related to mod_cgi module, I need to know whether this web site uses mod_cgi ...
1
vote
1answer
42 views
Tamper with post data before it is sent
I am currently doing some pentesting for my work (not my job role but i always wanted to learn). I am trying to modify post and get data as it is sent (intercept, tamper), the web app I am trying to ...
0
votes
0answers
9 views
Websphere Message Queue pen-testing
I am responsible for pen-testing client-server Message Queue system. I have access to MQ Websphere client and MQ Websphere server machines. I want to have a document which shows security test cases ...
-5
votes
0answers
52 views
Link to more active security sites? [on hold]
I have a BS/MS in Computer Science and have worked as a developer for 15 years. Currently I have been reading a lot about computer security.
Serverfault and Stackoverflow seem to be the go to place ...
0
votes
0answers
29 views
Snoop-it crashes on iOS6 [closed]
I'm trying to run Snoop-it on an iPhone 5 running iOS 6.1.4 but it crashes immediately after starting:
Feb 25 14:18:56 iPhone Snoop-it Config[745]: MS:Notice: Injecting: com.nesolabs.Snoop-it-Config ...
-2
votes
0answers
33 views
Technical Pentest Name on Intrusion via Enumeration? [closed]
Okay, first off, it so happens that I was given a penetration test which were rejected by my lower vulnerability researchers (basically coming from the bug bounty family). As a part of my job role, I ...
0
votes
0answers
16 views
theHarvester not exporting report [closed]
./theHarvester.py -d targetdomain -l 1000 -b all -f output
I am using theHarvester python application to gather data on a site for pentesting purposes. Which works well. Accept I am unable to save ...
-4
votes
3answers
104 views
Can I do hacking using Windows OS? [closed]
I have searched the web a numerous times but haven't found an explicit answer to my question.
I've studied (at school and on my own) computer networks for 2 years, doing active programming for 4 years ...
2
votes
0answers
38 views
OCSP responder penetration testing
I have to do penetration testing on an OCSP responder. Are there any frameworks for OCSP pentesting? since it does not include any web applications to test, should I only run network penetration tests ...
0
votes
1answer
88 views
WPA cracking with Crunch, JTR & Aircrack
Now I assume that everyone knows of aircrack-ng and John The Ripper with it's fantastic ability to pause and resume cracking.
With that aside, I want to add Crunch into the mix, however I can't seem ...
1
vote
2answers
65 views
intentionally vulnerable virtualbox or vmware appliances for practicing mobile pentest? [closed]
Is there any virtualbox or vmware appliances or anything like metasploitable that one can use to practice mobile pentest without the real hardware?
I can find those for traditional ethernet but what ...
2
votes
1answer
40 views
Best way to do security testing for a server behind nginx proxy [closed]
I'm trying to do some security testing for my server(not a web server) which is sitting behind a nginx proxy.
To start with it, I've done some fuzz testing using Sulley. As expected, most of the ...
0
votes
0answers
6 views
Cannot install IDSwakeup due to LibNet [migrated]
So I did download IDSwakeup and installed libnet and hping3 from ubuntu repositories. When I try to "make" IDSwakeup I get the following error:
gcc -o iwu iwu.o -lnet ; \
iwu.o: In function `main':
...
3
votes
1answer
21 views
Architecture dependency issue associated with malicious payloads
My question is regarding architectural restrictions associated with backdoor/bind/reverse tcp payloads used typically to gain shell through exploitation.
In a situation where the target box ...
1
vote
0answers
56 views
Designing a dictionary attack using hydra on web login page [closed]
I am trying to develop a pentest on a product for a customer that is really interested in implementing good security.
Using tamper data I get this information when clicking on the "Login" button in ...
8
votes
1answer
874 views
How can I find my home network's vulnerabilities when opening it for VPN connections
I want to open my home network so I can connect to it via VPN to do things™ while not at home. This concerns me because I am potentially opening doors that I don't know about.
What tools can I use ...
0
votes
1answer
79 views
penetration testing first step [closed]
I've started a course about Penetration testing and CEH on cybrary. The course begins with an introduction that quickly describes each step of pentesting. The first step is essentially to gather ...
0
votes
2answers
36 views
To release as Open Source for Audit or to Keep “in house”
For cryptography, it is considered good practice to release the code so others can audit it...is this also true for penetration testing software?
3
votes
1answer
100 views
Proving SQL Injection Vulnerability
I have recently come across what I believe to be a serious flaw in the security of a 3rd party computer program used within my company. Apologies for deliberately keeping details vague, but I hope you ...
1
vote
3answers
73 views
How to organize a CTF?
In the context of an IT event, my team would organize a CTF (Capture The Flag).
About the challenges (we’re working on them). I want to have some references on the types and levels of difficulty that ...
0
votes
0answers
12 views
Trying to use mdk3 with Alfa AWUS036NHA, wireshark detects frames but cannot detect network [migrated]
I'm testing out some various tools, trying to get them to work, but I cannot seem to get the MDK3 beacon flooding mode to work. I'm using an Alfa card AWUS036NHA, I believe it has the correct drivers ...
4
votes
1answer
143 views
How do I scan for GHOST remotely?
I'm talking about CVE-2015-0235.
I figured there's no Metasploit package for this kind of check yet and I also understood that there's a special VM by Qualys for this test.
Do you guys know of any ...
0
votes
0answers
10 views
Is pesexec only useful with administrative credentials? [migrated]
I am an apprentice penetration tester, and I am trying to read as many tutorials and practice as much as I can.
Something I continually see reference to is using psexec to execute commands remotely.
...
0
votes
0answers
51 views
How to test backend virus behavior?
I have a website that allows the user to upload files. The front-end (web tier) checks the file extension and first few bytes of the file for the magic number of an acceptable file, but then ...
2
votes
1answer
56 views
How does the Samba misconfigured '/etc/passwd' file security bypass vulnerability work?
I just found this vulnerability on http://www.securityfocus.com/bid/36363/references, which affects several samba server 3.0.xx.
Can anyone explain more about this vulnerability? How this bypass ...
0
votes
0answers
31 views
hydra password penetration test syntax [duplicate]
I am trying to penetrate a password on my own website using hydra.
Let's say that I know login and password and i just put both there like in sample below:
hydra -l admin -p password 123.123.123.123 ...
1
vote
1answer
51 views
Use THC hydra to make dictionary attack on localhost
I have programmed a log in in my webpage and now I want to test it against a dictionary attack. I am using Apache and my website is not online so to access it I connect to localhost/website In hydra I ...
1
vote
2answers
59 views
Is a REST webservice without any authentication or authorization unsecure?
There is a REST-based webservice that has no authentication or authorization whatsoever - anyone that knows an URL of a particular method of this webservice can use it.
However, the URLs of methods ...
1
vote
1answer
44 views
Other than synchronizer token, is there any way of protection against CSRF using http headers?
Recently I came across some websites using HTTP Header namely X-XSRF-Token and a cookie with similar name. Is it a better mitigation than using random token based security for CSRF?
0
votes
1answer
82 views
Brute force attacks detection risks
I would like to ask if using brute force attacks on some websites or online services can be risky in any way for the hacker?
Let's say that someone is using medusa tool to crack password on his ...
0
votes
0answers
28 views
Bruteforce with Hydra [duplicate]
I'm trying to use a Hydra script in the following scenario on localhost and Linux:
After web form login, my app redirects to another page with header(Location: internalpage.php)
I use this syntax ...
1
vote
0answers
45 views
SET tool autopwn website type penetration [closed]
I tried to hack my second computer and phone in my local network.
I am not very experienced so instead of picking the particular options and payloads i just pressed autopwn to use them all instantly.
...
0
votes
1answer
77 views
Question about padbuster … newbie
New to this type of attack trying to understand this .net oracle padding attack, i'm using this data :
padbuster ...
0
votes
0answers
39 views
Cryptographic Testing
Given an algorithm (say, AES), how to create/generate test vectors?
I have tried using the NIST test vectors for AES and found it to be working fine with a package of "chilkat". Suppose, for a ...
2
votes
0answers
50 views
Should veil framework produce packed and obfuscated binaries which bypass virustotal?
I have been working with the veil framework to test an internal IDS system I have in place. I have used a public malware sample which produces an 8/53 hit score on Virustotal and run it through the ...
2
votes
3answers
262 views
SIM card malware advice
My goal is to communicate with a sim card via binary sms and upload new firmware and/or talk to sim card api to retrieve data such as gps coordinates etc... I am not sure how to construct these binary ...
4
votes
1answer
70 views
Database Security
Would having the IP address and name of my database visible to the public be a security risk?
I have hosting with godaddy, a shared hosting plan. When I connect to my DB, via MS-SQL-MS, I can see the ...
0
votes
1answer
47 views
How I do get the correct the Tamper parameters from an internal web login [closed]
I am doing pentesting for a web application, but I do not know if am using the Tamper Data add on on mozilla correctly.
Could anyone explain how to get the following parameters, and where do I need ...
0
votes
1answer
104 views
Upgrade my Dell Inspiron laptop for PenTesting [closed]
I have a Dell Inspiron N5110 & wanna upgrade it to start practising pentesing with virtual machines. What do u suggest from specs below to upgrade (I have Kali Linux, Tails OS, XP, Metasploitable ...
1
vote
1answer
342 views
Hydra from Kali Linux + Tamper http post form syntax of the failure login attempt [duplicate]
I had asked this question in the general forum
I think it is more adequate to place it here.
...
1
vote
0answers
131 views
Is hacking my own account illegal? [closed]
I have just learned email hacking and I want to test it.
I am well aware that if I hack into any email account, there are chances that my email service provider will track me. So if I hack into my ...
4
votes
4answers
147 views
External Penetration test by third party
I am planning to engage a vendor to do pen test on my external systems. I know that pen test has a set of systematic steps .. just would like to gather some industry experience. Normally, at which ...
-2
votes
1answer
46 views
Why Application Penetration Testing is required? [closed]
I've developed application for receiving payments on my shop site. However, my clients are asking and forcing to complete a penetration testing.
Why there is need of penetration testing, when I ...
-8
votes
2answers
243 views
I need to hack my website [closed]
I'm writing a simple web framework for a project of mine and need to ensure that the websites it produces are secure. In order to check this I thought I might as well just try and hack my own website ...
3
votes
1answer
220 views
Security analysis of Dashlane
I've been asked by a user whether I would recommend using the Dashlane password manager. I'm aware that other password managers have had some significant security problems, including XSS and CSRF ...
0
votes
3answers
128 views
Effect of mail bombing
I have option in my application which send an invitation email to another user.
Someday ago, one of my friend told me that, attacker can flood any email using this function. And i have checked that ...
2
votes
2answers
103 views
database of URLs used by penetration tools
When someone is using a penetration test tool on my site sometimes I can find out what tool is that by looking at the user agent strings in the logs. But sometimes I can't because the tool uses a ...
0
votes
0answers
148 views
How to root a virtual device in android-sdk?
I was amused to see no one have ever asked such a question here before. After a little research in google I found only a few links to root a device in avd. Somewhere I also read that the sdk is ...
0
votes
3answers
77 views
Screen capture through silent install routed back out port 80
A penetration test was allegedly done through the following method. The tester sent a user a a hyperlink that:
Silently installed a piece of software/code/etc through the browser with 0 user ...
