Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [programming]

Programming is the act of issuing commands that a computer system executes, via certain interfaces called programming languages.

1
vote
1answer
109 views

Why malwares need to be light

I am learning about how malwares work and I read that a lot of them are written in assembly or C to keep the binary size as small as possible. In an example C++ source code, authors decided to remain ...
0
votes
0answers
58 views

Maintaining persistence in my own reverse shell

In my attempt at learning more about how backdoors like meterpreter work, I have written a reverse shell in C++ for linux. To achieve persistence, I tried looking into meterpreter's source code which ...
0
votes
1answer
53 views

print statements

Is it possible for a bad guy to read print statements done in the swift programming language? Ex. If I release an app to the Apple Appstore and it has following print line: print("my-secret-password"...
0
votes
0answers
33 views

is it to possible to programmatically destroy a PC? [duplicate]

is it possible to totally destroy the PC with use of code only, if possible how? i mean like: frying the RAM frying the GPU overclocking the CPU till its dead In a TV series called MR ROBOT there ...
0
votes
1answer
77 views

Cybersecurity Career [closed]

I am considering going into Cybersecurity. I was wondering what is important in a program for getting a bachelor's? The one I am looking at doesn't have any software development in it, which I thought ...
3
votes
0answers
113 views

How is it possible that the Metasploit meterpreter can take pictures without “notifying” the user?

Im curious how the Meterpreter can take pictures from my webcam without turning on the webcam LED? Ive read that you have to write/change a driver, or a firmware, or you just change some DLLs, but ...
0
votes
2answers
78 views

Secure algorithm for transferring data between users via QR Code

I'm building a mobile application that transfers points between users via QRCode. I'm concerned about security and am looking for effective simple yes secure algorithm to use. The scenario should be ...
0
votes
2answers
122 views

Deploy verifiable webapp source code

Recently there have been quite some discussions about the security approach of ProtonMail. Since it do crypto stuff at client-side, loading the javascript code in the user's browser, as far as i know, ...
1
vote
3answers
911 views

Any hints for programming my own password manager? [closed]

I mostly want whatever help & suggestions you can give me about what I should avoid & what I should think about when making this. I'm a reasonable programmer & I want to make my own ...
0
votes
2answers
158 views

How to Verify Integrity of Transferred Files in a Client Server Protocol

How do I implement integrity verification using the checksum of files in a client-server protocol where the client sends multiple files to the server. I am using the following steps: The client ...
1
vote
2answers
140 views

Programming Metasploit

I try to make a Metasploit AutoRunScript for android. The First .rc file has this config use exploit/multi/handler set PAYLOAD android/meterpreter/reverse_tcp set LHOST xxx.xxx.xxx.xxx (my IP) set ...
0
votes
4answers
242 views

Track who leaks your software

I'm releasing some software in python which is impossible to fully encrypt. I was thinking of changing the variable names slightly for every copy that I release. Is this a good way to figure out who ...
117
votes
19answers
30k views

Is it common to allow local desktop admin access and rights for developers in organizations?

I work at a company with a staff of about 1000+. We currently have programming development staff that work on web based projects (approx 50 people). Recently due to security concerns our IT and ...
8
votes
3answers
268 views

Sealed Room Security - Possibility of writing assembled binary code

Assume the existence of a sealed room, containing a network with a single terminal. You are not allowed to bring in any electronic material into the room. The target machine is running default ...
0
votes
2answers
119 views

While installing Go programming language trace.exe detected as virus by KAV

When I tried to install Go programming language, Kaspersky AV in my system detected a path to file: C:\Go\pkg\tool\windows_amd64\trace.exe as suspicious one and triggered a virus alert. my doubt is ...
0
votes
1answer
70 views

Working from a USB [closed]

I have a Mac for my work laptop and I would like to work on my xCode project, I can't work on the laptop directly and save the file to computer due to fears that it could one day be recovered & be ...
0
votes
0answers
256 views

Pen testing, Windows: Using credentials to impersonate users from SYSTEM

Following simple scenario during pen test: I have remote code execution on a windows box and am SYSTEM (either because of the way I got onto the box or because of the persistence method I chose) I ...
81
votes
19answers
16k views

Good analogy needed: Sec issues due to different coders implementing the same features in different ways for the same app

I have to give a school presentation about vulnerabilities found in the Moodle platform. Of course, they only apply to a legacy version which has since been patched. The catch is that the ...
3
votes
1answer
190 views

What is properly way to manage and remove symmetric key in C#

If I have a symmetric key in a byte[] array in C#, how can I erase it securely? for (int i = 0; i < array.Length; i++) { array[i] = 0; } Is this good enough?
9
votes
1answer
292 views

Is it worth it to fuzz Rust-written software?

If a program is written in C, then it is worth it to fuzz it with something like afl since it might have memory-related bugs. But how about software written in Rust? Would a fuzzer still find bugs? Or ...
0
votes
1answer
1k views

How can hackers get 1 billion passwords per second?

So I'm interested in Brute Force attacks and I have made them with Python 3 and C++. However, those only reached a max of about 20 million passwords per second. I know for a fact that 1 billion ...
2
votes
1answer
690 views

stdin does not wait for next input after ROP chain

I was trying to exploit a vulnerability in a ctf but I can not make fgets() reopen stdin to put my second stage ROP chain. I am using pwntool but the problem is more socket oriented. I recreated ...
-1
votes
1answer
150 views

Iwant to learn programming but i dont know where to start from [closed]

I'm really into hacking and security aspects. But I'm wondering about several things that is stopping me from pursuing this passion for the time being. One of the them is actually Programming language....
1
vote
0answers
169 views

Having trouble installing zxcvbn [closed]

I'm a high school student conducting a science fair project that analyzes the strength of the average person's password. I've decided to use the Java version of zxcvbn, nbvcxz, to estimate password ...
4
votes
1answer
372 views

Does it matter in which programming language you write the shellcode?

I have been searching a lot and I didn't find anything. I still wonder: does it matter in which language you write shellcode? Will shellcode in Assembly, C, etc. work everywhere they can be used and ...
1
vote
0answers
155 views

I want to know if exist a vulnerability in using sp_send_dbmail of SQL Server?

I'm using the next stored procedure sp_send_dbmail in SQL Server 2012, the DBA ask me if it possible make SQL Injection using this SP, or SMTP Injection? In the configuration of the Database ...
1
vote
1answer
138 views

How does the ipv4 option “record route” work? [closed]

As written in the RFC 791 this option is useful to record the addresses of the routers that an ip datagram goes through. I'm sending an ip datagram with an ICMP echo message, i've set the option type ...
-5
votes
1answer
102 views

Capture location over ip? [closed]

I want to ask you is it possible to programm a programm (in python) that can track people over their ip adress. Or do you know a programm that can do it.
1
vote
1answer
307 views

How do I securely store a API key in a PC program? [duplicate]

I have a PC program which uses a API. I have the API key stored in the code, because there is no other way I can think of. Since I have no code/string obfuscator, how do I secure the API key, so no ...
0
votes
1answer
273 views

Are some programming languages more secure than others? [duplicate]

I'm going to write a program that stores passwords and was wondering which language would be good for this. Do languages really have an inherent security? People speak as if they do, for example: .....
0
votes
0answers
155 views

Detecting duplicate encrypted strings without iterating over entire data structure

I have a long list of a specific data structure, each entry contains an encrypted string (uses AES-GCM). I want to be able to detect duplicates efficiently, without iterating over the entire list. ...
-3
votes
2answers
1k views

How to encrypt a file with code? [closed]

How can I encrypt a file using my own programming code? I am a beginner, I want to learn encryption.
3
votes
2answers
233 views

Would the Cloudbleed have been prevented if Rust was used?

Would the Cloudbleed have been prevented if Rust was used? I know it is not the same as Heartbleed, but Rust would probably have prevented Heartbleed.
2
votes
1answer
6k views

Example Seed and Key Algorithm

I am attempting to design a seed and key algorithm for an Engine Control Unit. This is used to secure resources such as the ability to reprogram the ECU. The idea is that I request a seed from the ...
0
votes
0answers
29 views

Retrieve information about “memory protection”

I read in Wikipedia that there were two ways to achieve "memory protection" Access control lists "Traits" where a SUN processor used traits for pointer and the memory. That particular processor had ...
1
vote
1answer
196 views

What are some tactics to overcome the externality problem of developers not getting enough security training? [closed]

What are some 'pitches' to management to overcome security training issues?
0
votes
3answers
205 views

Why is security generally overlooked in application code until it's too late? [closed]

Programmers do not receive security training, is it due to costs? How can we overcome the externality problem?
1
vote
0answers
180 views

Libraries, functions, and tools that help with secure C/C++ programming on Linux [closed]

When writing software in a language such as C/C++, what tools/libraries/functions are available to help make the program more secure from exploitation on Linux? For example: one can use chroot() and ...
4
votes
1answer
168 views

Are there any IoT Systematic Creation Security Checklists?

Are you aware of any publicly available documents that would help IoT/Connected product creators develop a systematic/programmatic approach and/or process to securing such new age devices?
0
votes
1answer
272 views

Learning how to code advanced Windows malware [closed]

I often see advanced malware on Windows platform - rootkits, bootkits, web injection, formgrabbers, injecting into other processes etc... Some of this looks so difficult to understand. If you knew ...
3
votes
1answer
376 views

Dynamic forking of a process in win32 vs modern antiviruses

Most tutorials about crypters assume that popular antiviruses don't scan programs executed directly from memory. However from what I've seen, some of them (e.g. Nod32) are able to scan RAM in search ...
1
vote
2answers
735 views

How to prevent malicious DLL from getting used in LoadLibrary or DllImport (.NET) calls

I have a situation where malicious files are being copied to the installation directory of some software and the software will load those files when making a call to LoadLibrary or DllImport (in .NET ...
0
votes
2answers
644 views

Does Computer Programming and Hacking necessarily involve math? [closed]

Is it possible to study the subfield of Computer Programming and Hacking without being very good in Math? Apart from Cryptography and Computer Programming and Hacking - Are there any subfields of ...
0
votes
2answers
237 views

What is actually happening in the background when using such things as airmon? [closed]

Firstly: Apologies if this is not the relevant place to ask this, if not then some direction would be good (thank you). I have been interested in Information Security for some years now, but have ...
2
votes
2answers
2k views

Do high-level programming languages have more vulnerabilities or security risks than low-level languages? [closed]

Do high-level programming languages have more vulnerabilities or security risks than low-level programming languages and if so, why? Image source: http://a.files.bbci.co.uk/bam/live/content/znmb87h/...
3
votes
3answers
4k views

Is this integer overflow vulnerability exploitable?

Is this integer overflow exploitable and if the answer is yes, how can i exploit it? char buffer[20]; int len = atoi(argv[1]); if(len < 20) memcpy(buffer,argv[2],len); If I set len to -1 the ...
5
votes
2answers
1k views

Do the skills of a software developer transfer well into working in computer security or white hat hacking? [closed]

I am conflicted. I want to become a software developer but I am also interested in the networking side of things… Is software development and network security 2 whole different beasts? If they are, ...
1
vote
1answer
882 views

How does (Py)NaCl work exactly?

At the moment, I deal with PyNaCl (Docs) and have a question about it: My situation is that I want to create a server that interacts with clients. Both the server and the client will have a long-term ...
8
votes
3answers
11k views

Methods for determining if a file is encypted?

I am working on a anti-ransomware project. It simply monitors the filesystem, and watches for files being created, and deleted. (also monitors for known ransomware file extensions.) Basic Operation: ...
1
vote
1answer
186 views

How can programming knowledge help towards information security [duplicate]

Im interested in becoming a cyber security expert. I feel comfortable with my networking skills but im worried about my programming skills. How important is for a cyber security expert to have ...