All Questions

0
votes
2answers
85 views

Windows - How to restrict access to VBScript.dll and JScript.dll?

In a recent blog post from a company called Recorded Future, which specializes in data protection, details were provided on commonly exploited vulnerabilities on the Windows platform. Recorded Future ...
1
vote
1answer
54 views

Information leakage through json response

I am testing a product survey website. As a response to getSurveyResults() call, the following details of all survey participants shall be displayed to all website users. Nick name Location Rating ...
0
votes
0answers
28 views

SQL Server, aes_256 without salt [on hold]

I need to used an agnostic encryption. Is it possible to use encryption in SQL server 2017 column? and how do I disable the salt in with aes_256?
2
votes
1answer
160 views

Does the use of pepper for passwords violate Kerckhoffs's principle? ​

Kerckhoffs's second principle: "It should not require secrecy, and it should not be a problem if it falls into enemy hands." Does the use of a pepper for passwords violate this principle, since ...
0
votes
1answer
31 views

Reflected XSS which only displays in the input [on hold]

I am trying to execute an XSS in an HTTP GET request,but it just displays the input without running the script. I checked in BurpSuite and I see it added my input to referer: url and then my input. ...
0
votes
0answers
34 views

Local account authentication protocol [on hold]

I know that in a Windows Domain environment, there are two ways to authenticate users: NTLM and Kerberos. But, in a non-Domain environment, what is the protocol that takes place when trying to ...
0
votes
0answers
29 views

how to disable the Windows key and ctrl and alt keys? [on hold]

It's for security purpose on a supervisory Windows 10 Pro client.
1
vote
0answers
43 views

Key reinstallation attack how does it work without a pre-shared key?

The author of the key reinstallation attack released scripts on Github to test AP and clients. To test the clients, you have to connect to a fake AP but you still need to know the pre-shared key. Of ...
1
vote
0answers
14 views

How to intercept AD authentication attempts [on hold]

My work Windows account keeps locking and the unlocking process is frustrating (you have to call the HelpDesk to request them account unlocking). They don't have any type of log and so they can't help ...
1
vote
2answers
75 views

Work internet redirecting to Twitch?

When connecting my laptop with the work LAN, I noticed that certain websites get redirected always to a twitch channel. I have changed the DNS configuration and used 8.8.8.8 and 8.8.4.4, but the ...
0
votes
1answer
49 views

How to crack AES-based Kerberos TGS tickets (Kerberoasting)?

All material I can find is related to RC4-based Kerberos TGS tickets, since these are easier to crack to obtain the service account's password. However, I want to attempt to crack AES-based Kerberos ...
0
votes
0answers
48 views

If only getting and storing BIN part of credit card number, should I comply with any PCI (or other) specification?

I have a fraud detection system. From the client side (browser) I want to receive the store BIN section of the card number (first 6 digits) and if possible also the last 4 digits Besides the above, ...
0
votes
0answers
29 views

Finding images with high white content [on hold]

I have a large amount of mixed-content images that also contain some scanned documents. I want to filter out potential documents automatically by defining some lower bound of "whiteness" that ...
0
votes
1answer
79 views

Login Password not encrypted

So, I was just playing with BurpSuite when I found something I didn't understand. When using BurpSuite on banking websites, I see that after I supply the credentials, the form transmits an encrypted ...
-1
votes
0answers
19 views

What mechanizm of updating Last-Logon attribute in AD?

What mechanizm of updating Last-Logon attribute in AD? I suppose that its value update not just when user login (write user\pass ang login into windows? and then we whach it into AD) but plus in some ...
0
votes
0answers
18 views

Authentication on B2B server-to-server using mutual TLS considered to be a recommended solution?

Bunch fintech are doing business with each other (B2B) sharing user info that considered sensitive, we researching online I saw mutual-TLS server-server used two different businesses as solution but I ...
-1
votes
0answers
51 views

I just found out that my port 53 is opened [on hold]

My phone has been taken over. Pretty much nothing works. I can see a lot of odd traffic coming and going. Try to reboot and reset and it won't let me. It always returns the bootloader they have placed....
2
votes
1answer
51 views

What is MITM attack in terms of implementation?

When I search for MITM in the google most of the results say an unauthorized person positions himself in a conversation between two authentic users for malicious reasons, and there are several types ...
1
vote
0answers
25 views

OpenAppID with Snort on pfSense

I'm using OpenAppID with Snort on pfSense, it actually work but when I view some script detector, it just detect by http pattern, which I can replace by using snort rule (with "content" option). So ...
-1
votes
0answers
44 views

Should KYC considered as cyber a security possible threat? [on hold]

Seems like there is a lot of confusion since there is compliance for this, so not sure if KYC can also be considered as cyber security threat. More info on KYC: https://en.wikipedia.org/wiki/...
0
votes
1answer
27 views

Are there any chrome extension VPNs that use the chrome.vpnProvider API? [on hold]

Seems most extensions use the old proxy api which requires giving them full "read and change site data" access. A more recent API is available made for VPNs: https://developer.chrome.com/extensions/...
0
votes
1answer
78 views

For a cipher school challenge I need help breaking this cipher [on hold]

[CIPHERTEXTSTARTS]HI wsndtonInehbihs if at t iyoncniegtrf .e noionbpni y,iu.w ahoui hs hroyh!euecsy m.ot ew hrc hb;ntsresnmdma ipMsat ln ts , ryiceg ensh c n byr t k t oe de uhw stiytoer s ...
0
votes
1answer
57 views

VPN encryption per device

When you use the same VPN (for example NordVPN) on several devices, if one device is compromised/hacked, can it be used to decrypt the traffic of the other device using the same VPN? Or does it weaken ...
1
vote
1answer
38 views

Custom Suricata's HTTP alert isn't triggered when using “..” as part of the scanned uri. Why? [on hold]

I have a doubt with a Suricata custom rule. If I do: alert http any any -> any 80 (msg:"blabla"; content:"abc"; http_uri; sid:1000000;) I can get requests to http://x.x.x.x/abc uri in fast.log ...
1
vote
1answer
87 views

How to verify Diffie Hellman uses a “Safe” prime

I'm the developer for a web application that was recently pen tested. One of the vulnerabilities reported from the pen test is that our server uses an unsafe Diffie-Hellman prime in our key exchange. ...
0
votes
0answers
35 views

Need to encrypt RTSP over LAN

I tried googling everywhere, but got no help with what I needed specifically. Let's say I have several IP cameras on a local area network. This LAN will NOT be connected to the Internet. The IP ...
1
vote
1answer
43 views

Remote detection of spring framework

I would like to know if there is a remote way to understand if a web app uses the Spring framework. In particular Spring security. Is there any kind of analysis on HTTP headers that can provide ...
1
vote
0answers
63 views

Is zeroing out values on the stack and arguments overkill?

I generally zero out memory the moment it's served its usefulness, but only with heap-allocated chunks. Is it a sin (or overkill) to do the same with arguments and stack values? Thanks in advance. ...
0
votes
2answers
71 views

Account Recovery: Displaying username without verification

I'm not a security guy, so bear with me. As discussed in other topics, usernames in and of themselves are valid forms of verification, and there's nothing particularly sensitive or secure about ...
2
votes
1answer
69 views

XSS stored in DVWA

Trying "XSS stored in DVWA" and now I am completely confused. It is not letting me bypass, I tried many inputs and I know what the preg_replace() is doing still nothing seems to work for me. I used ...
1
vote
1answer
39 views

OPC-UA Certificate Handling

I am currently developing and extending an OPCUA-Server based on "node-opcua". The next steps would require to add certificate handling and that's also the point that makes me the most problems. My ...
0
votes
2answers
72 views

What does “This request does not comply with Chrome's Certificate Transparency policy.” in Chrome's Security Tab mean?

When you open up Chrome's DevTools and switch to the Security Tab you'll see the message This request does not comply with Chrome's Certificate Transparency policy. on some origins. (Example: https://...
1
vote
0answers
47 views

Is there any key in HKEY_CURRENT_USER which sad when user was login on pc?

Try to find information about user login time. Has no any events for searched time saved in windows security events. Thing that maybe registry can help me for that. Is there any key in ...
1
vote
0answers
65 views

127.0.0.1 host header injection

I would like to know if this configuration is vulnerable to host header injection. I think it isn't, because it's listening on localhost, but I'm not sure. <VirtualHost 127.0.0.1:[% port %]> ...
-2
votes
0answers
65 views

How do I assess the difficulty of brute-forcing combinations of some public information?

I'm designing a piece of software whose information will be public, but I'm wondering how resistant this information might be to external analysis, without using any specific security mechanisms to ...
0
votes
0answers
3 views

How to use Windows User Certificate (S/MIME) to sign data

I am working on an internal ERP for my company. The portal is written in PHP and the current purchasing process is the following: Create a new order on the ERP portal Print the order (PDF) Ask for ...
0
votes
0answers
58 views

Security Audit on AWS - question on findings

Just wondering about an assessment I'm doing regarding a client's AWS environment. I'm new to AWS to I'm having to learn a lot on the go. I used ScoutSuite and got some findings, specifically: EC2: *...
4
votes
1answer
81 views

What is the security concerns of AzureAD?

We have lots of documents about Microsoft on-premise AD security problems and methodologies to find them and test them, but for AzureAD there is not much information about the possible problems and ...
0
votes
0answers
13 views

Set BIOS password in user laptops in an organisation [on hold]

I have a Windows Server 2012 environment with 50 users in an office. I want to set up BIOS password to user laptops (50). How can I set and manage that from a central location?
-1
votes
2answers
117 views

How does this spyware intercept my https traffic? [duplicate]

The firm I'm working for has installed a "spying" software on my computer which intercepts my https traffic. No hard to understand how it works, it's something like mitmproxy, which signs on the fly ...
0
votes
0answers
6 views

restrict remote desktop users access server from internet [migrated]

I have approx 10 remote desktop users who are accessing a server from a remote desktop connection. 5 users are connecting to the server within the local environment and the remaining 5 are accessing ...
-1
votes
0answers
40 views

Security breach [on hold]

My Samsung s8 has just recently done a soft ware update, 3am this morning recived a miss call from Skype, but I'm not signed in or got it downloaded, and the phone showed no miss calls or any activity,...
12
votes
3answers
3k views

Hashing password to increase entropy

Is it secure to hash a password before using it in an application to increase password entropy? Does this practice increase entropy when a PBKDF is used in the application itself or does the PBKDF ...
0
votes
1answer
76 views

Is it possible to extract secret key in compiled code automatically?

If we have a program that contains a secret key in its compiled code, is it possible to write a program that can automatically extract the secret key? Let's assume that the program contains a secret ...
0
votes
2answers
44 views

After running a string through mysqli_real_escape_string, is it safe to remove the backslash before echoing it into a page?

I'm using a rich text editor (Nicedit) with a cms project I'm making. In order to reduce the likelihood of SQL injections, I'm using the mysqli_real_escape_string function to escape the user input ...
0
votes
0answers
39 views

How can you Bypass a WAF? [on hold]

Just curious how you can bypass a WAF?
0
votes
0answers
92 views

What are the dangers of using 3g/4g in smartphones?

Since we should always avoid public networks, is there some sort of attack that intercept my online activity or steal passwords? If exists, how I can protect myself from this type of attack? My device ...
0
votes
1answer
45 views

Verifying PGP Messages

Is it possible to sort of verify a PGP message? Alice sends a PGP Encrypted message to Bob. I know Alice and Bob's public key, and I have their encrypted and plaintext message. Can I confirm that ...
0
votes
0answers
36 views

On The Use Of Unsanboxed Plugins In The Chrome Browser

The following questions relate to unsandboxed plugins under Settings > Advanced > Content settings > Unsandboxed plugins. The first thing I'd like to know is whether this setting is basically for ...
0
votes
0answers
27 views

Arpspoof not working properly

I'm testing MITM packet manipulation on the fly between two computers on the same switch, a layer 2 switch. I'm using a Kali Linux machine as the attacker and i have written a python script to ...

15 30 50 per page