All Questions

1
vote
0answers
37 views

WebRTC.Local.IP.Addresses.Disclosure

We have Fortigate perimeter firewall and today i detected this event. What should I do to improve protection? How can someone take local IP address' through a Firewall? The following intrusion was ...
1
vote
2answers
82 views

Is it ok to allow a web application to write its own executable files?

Usually I setup my Ubuntu server to have at least 2 users: A user behalf which the web server (Apache or Nginx) runs, e.g. www-data in group www-data A user that updates and maintains the web ...
0
votes
0answers
76 views

Is it possible for a hacker to spoof the internet time, or any HTTP or HTTPs response?

I want to create an application that self-destruct after a certain date ( say: 2022 January 1st). For this I will get the time from the internet, and then compare it with the given date, and if the ...
1
vote
1answer
55 views

Secure endpoint for root domain only, no subdomains

I have an existing endpoint, for example https://api.example.com/ ... I have an existing CORS policy enabled which only allows access from origin example.com. However, when I visit the endpoint URL ...
0
votes
0answers
27 views

Convert openssl private key to openssh private key [duplicate]

I have an openssl format private key that i need to use as a host key for openssh connection.How can i convert the openssl format private key to openssh formatted private key using ssh-keygen.I have ...
-1
votes
1answer
55 views

How to delete browser malware?

I've got some malware so now my browser is sending requests to strange sites: Also if I click on any html element in a browser It may redirect me to unwanted pages I've tried to fix this using ...
1
vote
2answers
156 views

Why does WhatsApp not encrypt Google Drive backups?

WhatsApp has end-to-end encryption, promising privacy to users. However, it becomes useless if backups to Google Drive are unencrypted. Our supposedly private data goes to the control of Google. No ...
0
votes
1answer
45 views

double-new attack? replace contact method twice so that the “new” and “old” one are both attacker-controlled

With some services, if an attacker changes the value of a user's contact information (email address, for example), when the user tries to recover their account, they can use either the new or the old ...
1
vote
4answers
173 views

Is it safe to plug my own USB drive into unknown pc?

Is it widely known that in the opposite way (an unknown USB to safe pc) it could be really dangerous. But I can't find any info if is it dangerous to put a drive to other pc. Case: I have my USB ...
0
votes
1answer
35 views

Remote Keyless Entry physical access to FOB

I know RKE's that can have their codes stolen. However, this requires some setup. I am curious of what is the risk of actually handing over ones fob to valets and car washes. From what I have learned ...
0
votes
0answers
32 views

SSH_login not prompting meterprepter?

So Basically I am trying to create a SSH session in metasploit. session opens successfully when I do sessions #, it prints [*] Starting interaction with 4... but when I do a dir, no result or no ...
1
vote
0answers
24 views

Analyzing binary by ZZUF and PEACH fuzzers

I have installed two different fuzzer ZZUF and PEACH fuzzers. Unfortunately, my lack of knowledge I could not test C++ binaries by both fuzzers. Testing binaries process is not given PEACH and ZZUF ...
0
votes
0answers
120 views

Is it safe to download pictures from websites like booru or imgur? [on hold]

Let's say someone has uploaded an Jpeg file with an exploit inside. Will booru (or imgur) re-encode it or not? And if not, will the user, who has downloaded this file and opened it be safe?
0
votes
0answers
51 views

How to Use the Carter-Wegman MAC

I have a block of ciphertext, only two hundred characters long, and I want to give it authentication and proof of data integrity. I have decided upon the Carter-Wegman MAC because I like its ...
1
vote
0answers
52 views

Fail2ban: Ban ip on all ports exept HTTP[S] (or group of ports)

My server currrently has very strict fail2ban rules, which permanently and persistently ban any ip that fails to login once on all ports. This might seem overkill, but most ports are "private" ports (...
1
vote
0answers
22 views

How to anonymise a numeric data attribute, whilst preserving indexability?

I would like to (1-way) anonymise some bounded, numeric data attributes (e.g. age, optimistically bounded by 0 and 200), whilst still retaining the ability to use the resulting data in an index for ...
0
votes
1answer
72 views

How to securely share only some information with a middle-man site

Scenario: you run an app OurApp which deals with users' sensitive data, some of which you are allowed to share with third parties (with the user's consent, of course) and some of which you are not ...
0
votes
0answers
58 views

Buffer overflow exploit with python3 : wrong return address written

I'm trying to exploit a simple buffer overflow with gdb and peda, I just want to rewrite the return address with the address of a function of the program. I can easily do it with python2 but it seems ...
0
votes
0answers
24 views

PEAP MS-CHAPv2 brute force attack

I have a 802.1x switch and a client authenticated using PEAP-MS-CHAPv2. I sniffed the traffic using a HUB between the client and the switch. How can I use the captured informations to perform a brute-...
0
votes
1answer
45 views

Are JWT's the way to go in my situation?

I am working on a personal project for learning reasons, and have come to the point of authenticating and authorizing users. I would like to keep the project as stateless as possible, to make sure it ...
0
votes
0answers
35 views

Mysql CIS benchmarks with Maria DB database [on hold]

I have a server with mariaDB DataBase installed, can I use the MYSQL CIS benchmarks to harden mariaDB DataBase ?
0
votes
0answers
11 views

Could IPSec flows be decrypted using PSK [duplicate]

I created an IPSec tunnel between two VMs using StrongSwan. It relies on a Pre-Shared Key. I wonder, if this key is leaked, what could an attacker perform? Would he/she be able to decrypt previous ...
-2
votes
0answers
35 views

Getting 403 forbidden error while using csrf with POST request [on hold]

I tried to consume an API from outside application which implemented CSRF. So I need to pass the CSRF token value to access their API. 1. 1st API - getting CSRF token. 2. 2nd API - POST request, ...
0
votes
0answers
94 views

Why does Firefox keep offering “unreputable” add-ons and add-ons that they don't even review?

When I install an add-on to Firefox, choosing it from the ones I find by using the Tools / Add-ons menu, sometimes after a few days Avast pops up a warning that the add-on is "unreputable" and ...
0
votes
0answers
52 views

How to verify a binary correctly even if my github account is hacked by someone

I have a binary file and saved it on github release page. https://github.com/zono/bolt8/releases To allow users to verify it, I saved sha256sum and signature(.asc). However I have a concern that if ...
0
votes
1answer
90 views

How effective is mobile phone verification in stopping fake user registration?

Or in other words, how much work and money does someone has to do/have to have many SIM cards with many numbers, each loaded in a mobile phone.
1
vote
1answer
56 views

Why is Address Space Layout Randomization not effective against the Open SSL Heartbleed Vulnerability?

My understanding is that ASLR randomly arranges the key data areas of a process, and so reading contiguously above a buffer as is done in heartbleed would not be enough to achieve the exploit.
0
votes
0answers
43 views

How to determine the encoding used when you have the data not the source code

The source code converts the data as below: 00000 - 62F0CBA67EA6A2C03D399A1B06D82787CB46480370FDA0C1CF5016E59A61F0A6 000000 - F657FC2120036C2EF29AF87E4194539B1728AB2F204676E413C6FFD5970453B9 ...
0
votes
0answers
16 views

DLL's loaded for Windows To Recompile Scripts

Malware can use droppers and can break code to execute into different parts. It can recompile parts of a base64 encoded script to make the whole command. How does Windows recompile powershell scripts ...
-1
votes
0answers
37 views

How can I execute my JS payload?

So basically, I am trying to get my JavaScript scripts to work but due to the server-side filters such as htmlspecialchars it keeps failing. Our input is placed between this block of code: <div ...
0
votes
0answers
22 views

Bully and reaver not finding anything in any network

I have been trying out reaver and bully on my network and friends network, multiple different routers, but none of them finds anything. The command for reaver that I run is: reaver -i wlan0mon -c ...
1
vote
1answer
58 views

What point in Authenticator App 2FA when SMS fallback is enabled

I would like to move away from SMS 2FA (because of Should 2FA over SMS be considered insecure in the wake of recent SS7 attacks? for example). But some services that provide Authenticator apps ...
-1
votes
0answers
124 views

Apple “pre-scans” all your files before them being uploaded to iCloud? [on hold]

I don’t know if this community has been aware of this latest development by Apple. Please read the news here: https://www.macobserver.com/analysis/apple-scans-uploaded-content/ So apparently, all ...
0
votes
2answers
106 views

Understanding AES Keys and Passphrases

I am trying to get my head around how AES works and in particular I have queries around the key generation and 'passphrases'. My understanding is that AES has a 128 bit block size but the key length ...
0
votes
1answer
104 views

Concept for (almost) untraceable networking setup

I have been working on an my digital footprint lately, trying to reduce it as much as possible, taking steps like fully encrypting my device with Veracrypt, installing 3 AVs, or spending hours trying ...
0
votes
0answers
23 views

Azure AD — How to only allow MFA configuration from a trusted network?

Hopefully someone as an idea... In Azure AD, how can we allow MFA setup by a user but only allow that configuration to occur on a trusted network? We have trusted networks defined but everything we ...
0
votes
1answer
82 views

Estimating Password Cracking Speed Based on GPU?

I was wondering if there was a calculator or formula I could use to find a rough estimation of the time it takes to crack hashes based on GPU. I am trying to assess how much performance I would lose/...
0
votes
0answers
22 views

How to check for file handle for files and which process is modifying the file in real time using python on Windows? [on hold]

Currently, we are working on a Malware detection project specifically Ransomware detection. We are monitoring specific files, and we want to identify file handles and which processes are opening the ...
1
vote
1answer
90 views

Why might malware make a DNS request for an epoch time converter?

I am analyzing malware and I see that two executables when run in a sandbox made DNS requests for www.epochconverter.com Why would an attacker risk detection by making a network request to ...
0
votes
0answers
41 views

Collision Security

Question concerning collision issue in CBC-mode: If we are using CBC mode with AES for 1 message, the birthday paradox indicates that we risk a collision after 2^(n/2) so 2^64 plaintext of 128 bits of ...
8
votes
1answer
593 views

How hard is it to distinguish between remote access to a virtual machine vs a piece of hardware?

Let's say I have full access to a remote machine (specifically, root on a Linux). What is the best method to check whether this is a real piece of hardware or a virtual machine? Most of the methods ...
1
vote
0answers
27 views

Best Antivirus for Android [on hold]

Please suggest best Antivirus, thanks
0
votes
0answers
34 views

What are security/privacy implications when using WeChat as OAuth provider?

Account information of the chinese WeChat service can be used to authenticate on other websites/services (like discussion forums) by the OAuth protocol. Since WeChat plays a major role in surveillance ...
3
votes
1answer
78 views

Storage of API authentication token in single-page-applications

I'm building a JSON API. For authentication I plan to use a random-token based approach, with the random token having 256 bits of entropy and generated using a CSRNG. A hash of the token will be ...
-4
votes
0answers
41 views

How to scan DMZ Zone? What is DMZ zone? [on hold]

How to scan Hosts in DMZ Zone? with Network Scanning Vulnerability tools?(Nessus or NMAP)
1
vote
1answer
90 views

Is the SSH last login message reliable or rather something easy to get tampered with?

My client's Linux server recently got compromised by unknown means (highly likely because of a weak password). When I first logged into the compromised server I discovered the following: The Log ...
1
vote
3answers
184 views

Is there a way around HTTPS being redirected to HTTP?

I have come across something of a curious situation that a website (Palestinian News Network) has a valid TLS certificate (see here) but that the website always forces loading of the site via http://. ...
1
vote
2answers
57 views

Does DKIM protect the whole body message?

From RFC6376 #page-29, it says: In hash step 1, the Signer/Verifier MUST hash the message body, canonicalized using the body canonicalization algorithm specified in the "c=" tag and then ...
0
votes
0answers
48 views

Certification CEH vs OSCP vs SANS - GPEN [on hold]

I'm looking to prepare for an ethical hacking certification but I'm unsure of which one to go for. I was hoping the community, could provide insight into these courses giving me the pros and cons ...
-4
votes
3answers
122 views

Is code obfuscation common in FOSS?

I am a learner of FOSS licensing, security and privacy. I ask this question because one of the arguments persuading users to use or switch to FOSS is the fact that since the code is open, an expert ...

15 30 50 per page