Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
The results are in! See what nearly 90,000 developers picked as their most loved, dreaded, and desired coding languages and more in the 2019 Developer Survey.

Questions tagged [replay-detection]

The tag has no usage guidance.

2
votes
3answers
406 views

How do websites protect against 2fa replay attacks?

I'm imagining a scenario where an attacker can read traffic between a user and a server. The attacker grabs the user's password and the 2fa code they used. The attacker then logs in with that ...
-2
votes
1answer
570 views

How are replay attacks prevented? [closed]

I imagine it’s due to time stamps and sequence numbers. However, those can be replayed as well. The attacker can't create new sequence numbers or time stamps without being detected if the integrity ...
-1
votes
1answer
296 views

Is Nonce always +1 to replay replay attack?

i understand nonce is to prevent replay attack. May i know when server first sent nonce to you. Client then has to proceed to +1 the nonce sent by the server back? IS this always the case? Is nonce ...
5
votes
1answer
2k views

Preventing replay attacks with JWT

I am currently building a RESTful API that will be used for a web and mobile app. Authentication to the API will be done using JSON Web Tokens. When using JWT, we can use the exp claim to expire the ...
0
votes
1answer
49 views

Attacks on email validity service

In order to have a better user experience during registration on mobile apps, I had added a web service to check if email ID exists before submitting the form. Based on the error logs, it looks like ...
4
votes
2answers
5k views

How to access Replay Protected Memory Block (RPMB) in eMMC?

RPMB is a special partition in eMMC 4.5. Internet research suggests that it is used for saving keys and is the only special partition that responds to commands like READ, WRITE. etc. Can anyone ...
0
votes
1answer
2k views

How does Replay attack works on SSL/TLS authentication?

In security+ 401 cert guide there is a line about replay attack as follows, In a replay attack a hacker might use a packet sniffer to intercept data and retransmit it later. In this way the ...
0
votes
2answers
83 views

Developing Home Automation Protocol, How to make messages secure?

Let's say we have a hub called H and a door lock controller called D1 Now, we have a malicious electronic which imitates H called M H sends D1 a command to open the door, D1 unlocks the door. M ...
1
vote
2answers
321 views

Secure Radio Frequency TX, RX module from replay attacks

Background I am building a Home Automation system using RF 315/433 MHz Transmitter-receiver module, an Ethernet shield and AT Mega AVR Micro controller(ATMega328 PPU) that works as follows. A set of ...
-1
votes
0answers
155 views

Replaying client hello from previous session

I am testing an SSL server. I need to capture the client hello and then replay the same client hello with the exact same field values. Here are the steps that I performed: Captured the client hello ...
24
votes
1answer
18k views

How does JTI prevent a JWT from being replayed?

According the JWT RFC a JWT token can optionally have a jti which I interpret to be an a unique ID for a JWT Token. Seems like a UUID is a good value for a jti. The RFC claims that the jti can be used ...
4
votes
1answer
1k views

What is a replay attack for OpenVPN

I'm trying to understand why would I have less security if I disable a replay attack protection in OpenVPN config. It's not really explained in the man page, only Don't use this option unless you are ...
3
votes
3answers
2k views

Why would a replay attack be considered a threat to integrity and not confidentiality?

I came across a test where the instructions were to circle all the correct answers. I'm looking for an explanation to the answer for this question: Question: a replay attack is a threat against ...
4
votes
1answer
469 views

HMAC password reset link and replay attacks

I like the look of this technique for sending password reset links: https://neosmart.net/blog/2015/using-hmac-signatures-to-avoid-database-writes/ (TLDR: don't store token in database. Send password ...
4
votes
4answers
4k views

Securing REST API without HTTPS

I'm developing a REST API but I am unable to use HTTPS without using self-signed certificates. I understand that that might be acceptable for some, but I don't want security messages popping up on ...
1
vote
0answers
187 views

how IKE (Internet Key Exchange) protocol reacts to the replay attack?

I mean how IKE in any mode (quick,aggressive, main) responds to an attacker that tries to replay one or more messages?
4
votes
1answer
4k views

Kerberos replay attack

Suppose I want to send a command to a print server on a netwerk that has been secured with Kerberos. To do so, I authenticate myself to the KDC and get a TGT, and then another ticket from the TGS for ...
3
votes
1answer
120 views

Challenge Response with a Tan Book?

i am trying to secure a connection between a Mobile Device (Client) using a webApp and a Home Device (Server) in a potentially unsafe Wifi Network. The communication is asynchronous and i am trying ...
1
vote
1answer
342 views

What is stopping me from replaying an SSL certificate?

Say I have the SSL certificate for google.com. I intercept it, edit the certificate with my own domain name and public key and use it to intercept all traffic to google.com. What mechanisms exist in ...
-2
votes
1answer
840 views

Prevent Replay attacks via timestamp while client clock is not adjusted [closed]

I'm going to send my timestamp to server and server will check if it is in a given interval. What if My mobile clock is not adjusted (say it gives 2:00 pm while now it is 2:00 am). now I lost the ...
3
votes
1answer
2k views

When SSL detect a replay attack?

Suppose an attacker records all messages of a SSL handshake (RSA one-way), and starts a replay attack. When (after which message) can the server possibly detect the attack? Now suppose the attacker ...
2
votes
2answers
5k views

SSL Finished message contents

I'm a little bit confused about the contents of Finished Message used during Handshake Protocol. In particular, this message (clientside) contains the connection-id originally sent from the server and ...
1
vote
1answer
199 views

Issues of using HOTP w/ iteration window

I am using HOTP to generate OTP to validate a request, in order to prevent replay attacks. I'm thinking about using a window of 10 (or so) iterations to accommodate a possible mismatch in the counter ...
1
vote
2answers
1k views

Is it safe to use Diffie-Hellman public keys as nonces to protect against replay attacks?

I have an interesting case regarding protection against replay attacks. Under the assumption that Alice and Bob have used Diffie-Hellman key exchange to establish a secure temporary session, would it ...
3
votes
1answer
2k views

SSO via HMAC and shared key. Can this be improved?

Given an authenticated user on A.com, we want to redirect the user to B.com so that she'll be immedaitely authenticated. The scheme I'm considering is very basic: A.com and B.com both share key S. ...
2
votes
1answer
941 views

What extra protection is added to an REST API over HTTPS by the use of some kind of HMAC?

I'm designing a RESTFUL API that will always be used over HTTPS, what security advantages over the use of HTTP Basic Auth could be brought to my system by using such kind of message authentication ...
1
vote
1answer
82 views

Authentication and removing the ability to replay information from a compromised machine

Consider this scenario. You have a client machine which is compromised, and a "master" machine which monitors that client's status (IsCompromised = {True|False}). The client has an agent which ...