All Questions

1
vote
1answer
65 views

Big insurance website exposing StackTrace of Java JSON Parser

Recently I coincidentally have discovered that an api endpoint of an insurance company is sending a StackTrace of a JSON parser as response to a http POST message with bad formatted JSON in the ...
2
votes
2answers
58 views

Are there use cases where a mutually authenticated TLS is preferred?

I am trying to see if there are use cases where a mutually authenticated TLS is preferred over a one way authentication. Usually the authentication of the client/user is done over the TLS tunnel. ...
0
votes
1answer
44 views

Obtaining plain-text passwords from a Domain Controller

Is there anyway to log the plaintext passwords of accounts that authenticate against a domain controller? I know most of the Mimikatz attacks and they all recover credentials from memory, but they're ...
0
votes
1answer
43 views

How to prevent replay attacks without exposing stored password security?

A common way to prevent replay attacks when logging in is for the server to present a challenge (chall) and request a response in the form hash(chall+secret) where the secret is already known by the ...
0
votes
0answers
26 views

Block/spam an email that doesn't match a rule

Is there anything we can put in place such to verify that if the sender's name = "John Doe" and the domain is not company.org (or legitimate verified SPF sender), then the message is marked as spam or ...
1
vote
0answers
58 views

Collection #1: Do we know the source of the leaks? [on hold]

With Collection #1 yet another large data set of email addresses and passwords was found out there. I happens that one of my frequently used email addresses shows up as 'pwned' when checked against ...
0
votes
0answers
15 views

macchanger conflicting with network-manager [on hold]

I used macchanger with these commands: sudo ifconfig eth0 down sudo macchanger -r eth0 sudo ifconfig eth0 up I am using it with virtualbox on a local network, I've never had issue with that before, ...
0
votes
0answers
13 views

NMAP: Action section is not executing [on hold]

I'm trying to get response from some live links running Nessus server. nmap --script nessus-detection.nse -p8834,8890 <target> Starting Nmap 7.70 ( https://nmap.org ) at 2019-01-22 06:45 PST ...
0
votes
1answer
27 views

Can I adjust the X509v3 Name Constraints on my internal CA after I have issued certificates? [duplicate]

We have generated an internal root Certificate Authority for our organization and added X509v3 Name Constraints for our domain (example.com) We issued a number of certificates for servers under that ...
0
votes
0answers
5 views

It is possible to remove previous layers in M3UA pcap file? [on hold]

I ask this question in reverse engineering site of SE but they suggested me to ask in this site. I have a MTP3 pcap file that when I open in Wireshark shows Frame1 Ethernet IPV4 MTP2 MTP3 SCCP TCAP ...
0
votes
0answers
27 views

How to Secure API Calls [on hold]

What are the basic ways of ensuring that API calls (retrieving data) are secure? I have searched around and all I can find are ways to secure REST API itself.How do I ensure the data being retrieved ...
-1
votes
1answer
38 views

Does making a pdf searchable make it more vulnerable? [on hold]

I would like to know if making a pdf 'searchable' somehow make it less secure?
0
votes
1answer
77 views

Is a temporary local hotspot on an Android device secure enough for my purposes?

I intend to deploy some embedded software on Raspberry Pi devices. All will have WiFi capability, but not all will have internet access. I want to occasionally be able to update the firmware in all, ...
1
vote
1answer
18 views

sp initiated saml sso authentication

I am working on SP initiated saml sso and it is completely new to me. I have gone through lots of articles and videos(wikipedia, centrify chalktalk, medium posts) but i am not able to understand some ...
0
votes
1answer
52 views

dm-crypt/LUKS: one-time password

I've setup arch using dm-crypt / luks, with a passphrase and a key, lost one of them will fail to login. But I feel I need more secure of passphrase, how to setup dm-crypt / luks that has one-time ...
0
votes
1answer
31 views

Convert ivs file to hccapx?

I have a ivs and a hccap file. Is there any way to get a hccapx file from them? It can include 2 steps e.g. ivs to cap file and then cap to hccapx. Unfortunately hashcat is not accepting hccap file ...
1
vote
1answer
59 views

Is it possible to intercept HTTPS payload with a trusted CA but send it the wrong server?

I have a CA generate a cert and private key for my server. My server, however, does not have a domain name and its IP is dynamic and never static therefore validation of the host name must be ignored ...
0
votes
0answers
37 views

How to calculate AES Key from Hex ( UE4 )

I have recently been interested in data mining and I stumbled apon a forum that provides information on extraction of data using the AES Key to decrypt .pak files for Unreal Engine games. My ...
0
votes
1answer
36 views

What would be the best way to evaulate the database management systems? [on hold]

I am an Information security analyst, looking for creative, non traditional, and unapproved ways to query/evaluate DBMS applications that includes SQL Server and PostgreSQL. Goal here is to protect ...
0
votes
0answers
40 views

Real time chat - is it possible to see messages from it again

I have a theoretical question. If you went on a website which provides real time chat service, and only login information it requires is a username of your choice, and the website adress was https, ...
0
votes
1answer
55 views

hashcat specify number of characters

I am trying to figure out a macOS hash 10.8+ and I happen to know that it uses A-Z, a-z, 0-9, is 6-8 characters, and almost certainly random. Currently, it spits out an error regarding hash length ...
0
votes
0answers
14 views

Securing internal API credentials on a public chrome extension

I've developed a Chrome extension that I plan to publish to the Chrome Web Store. On the server side, I've implemented OAuth 2 (using access tokens and refresh tokens) with support for generation of ...
0
votes
0answers
14 views

What are some accredited security product testing and validation firms? [on hold]

I'm looking for someone like NSSLabs, Synack, Tevora, but obviously not these companies.
-1
votes
0answers
40 views

Why and how its happened! [on hold]

I was loading my embedded resources into an Application variable but I received this error! I changed my strategy and put them in a class level variable but I have this error again! I changed my ...
0
votes
0answers
35 views

What is the meaning of payload for this? [on hold]

I have zipdetails to get the info of a zip file and I found out payload there.Can u guyz tell me what is this payload ??
1
vote
2answers
65 views

Is stand-alone one-time password less secure than OTP + traditional password auth?

I have a client that would like to use one-time passwords (via SMS or Email) for their app, and their requirements spec does not include traditional password-based authentication. I haven't seen this ...
-1
votes
0answers
23 views

How to calculate WPA2 handshake offline? [on hold]

How to calculate WPA2 handshake offline if I have the Mac address and the password thanks
0
votes
1answer
67 views

How do these attackers find my IP? [duplicate]

Recently, I have been reading a lot of my ubuntu log files (in /var/log/auth.log), and I can see that some IP addresses are actually trying to 'brute-force' their ways into my VM using SSH by testing ...
0
votes
1answer
105 views

What is a “security bod”?

This is a term I ran across in a blog post by Troy Hunt (which was linked from an answer on this site): I heard a perfect example of this just the other day when speaking to a security bod in a ...
0
votes
0answers
13 views

Two-factor authentication on Galaxy Watch - should secrets be encrypted, and is this SQLite example secure?

I recently got a Galaxy Watch and to get acquainted with developing apps for it I'm writing a simple two factor authenticator to generate TOTP codes from entered secrets using the Google Authenticator ...
0
votes
0answers
26 views

How to make --os-shell command work on UBUNTU 16.04 ( Digital Ocean )?

I have made a vulnerable SQLi website ( to teach students ). I am able to dump the database but I am not able to run os commands or upload os-shell. I want to show them how to use --os-shell option ...
0
votes
1answer
21 views

Adding a static token to ZAP vulnerability scanner

I am currently trying to get the OWASP ZAP scanners working on a peculiar website. When authenticated on this website, each GET request needs a "token" (most likely a anti-CSRF token) as a parameter. ...
2
votes
1answer
52 views

DNS entry defined only in HOSTS file - will browsers mark the SSL cert as valid?

I have a webserver hosting an application that is accessible to the Internet but only has DNS records on my corporate DNS server. We have a few contractors accessing this site from outside the ...
1
vote
0answers
15 views

Where to store encryption based tokens in Encryption based Token Pattern?

Reading OWASP encrypted tokens pattern they describe the flow as follow: After successful authentication, the server generates a unique token comprised of the user's ID, a timestamp value and a ...
1
vote
2answers
49 views

CSRF and defence mechanisms

I was reading some material about the defense mechanisms used to protect against CSRF attacks. I think I've a question about the one based on a secure token. As far as I know, a web application ...
1
vote
1answer
24 views

Active Directory Certificate authentication trust

When setting up Smart card authentication you publish that Intermediate/Sub CA to the NTAuthCertificates object in Active Directory and certificates from that CA will now be OK for certificate ...
0
votes
0answers
13 views

Re-establish trust while minimizing persistent tokens

I'm trying to solve what appears to be a chicken-and-egg problem. When a machine appears on my network, how do I know that it is whom it asserts to be? Suppose, for instance, the host has an ...
0
votes
0answers
21 views

Proxying an Android application with Burp Suite

I'd like to proxy an Android application with Burp Suite. The application uses certificate pinning via OkHttp3. I solved this by modifying the source code, now the application accepts the certificates ...
0
votes
1answer
38 views

CSP - Unsafe-inline or unsafe-eval for specific domain is allowed or not

Following is a CSP policy, for example derived sample response headers. The implementation below allows white-listed domains only in "script-src" directive but the 'unsafe-inline' and 'unsafe-eval' ...
1
vote
1answer
75 views

Are Password Strength/Entropy test web sites safe?

Are web sites that do Password Strength/Entropy tests like for example http://rumkin.com/tools/password/passchk.php http://www.passwordmeter.com/ https://howsecureismypassword.net/ http://www....
0
votes
2answers
75 views

How to check Google SSL certificate?

I encountered this error on Google Chrome on my Windows 10. I solved it by installing the certificate and now it is working fine. I wonder, how do I know the certificate I have is legit? That is, ...
2
votes
1answer
23 views

Sub-domains TLS certificates and wildcard certificate [duplicate]

1) Is it a good security practice to have a separate TLS certificate for each sub-domain? 2) Is wildcard certificate (i.e. one certificate for many/every sub-domains) a bad practice?
-1
votes
0answers
35 views

Develop my own SCA/DCA tools for Android testing [on hold]

I want to develop my final year project on automation tool in Python for Android testing both SCA & DCA. But don't know where or how to start. Can someone help? CLI application will work for me. ...
1
vote
1answer
75 views

What is the entropy of a call to java.lang.Math.random()?

Math.random() produces a double value (IEEE 754 binary64) in the range [0.0, 1.0). How many digits (or bits) of entropy does the return value of random() contain? If it simplifies things, I'm okay ...
0
votes
1answer
134 views

What can schools see on school issued Mac? [on hold]

My school gave everyone Macs that were sealed in the box and everything. From what I’ve seen so far, the root certificate hasn’t been tampered with. Can they see my https web history? Can laptops have ...
-2
votes
3answers
142 views

Why do services that use 2-factor authentication still ask you to provide a password?

The idea of 2 factor authentication is that if you can prove that you have both a password and a device, you are trusted to be who you say you are. My question is, why does the service still ask you ...
1
vote
2answers
92 views

Why is it unsafe to use a password that exists online?

I recently saw a post asking why something that appeared to be a random string of characters was a bad password. One of the answers was that it already exists on a website so you can Google it by just ...
1
vote
0answers
18 views

When is OAuth1 preferred over OAuth2

Scenario: I need to build a new API for a third party company who are building a tool to capture information of new users wishing to create accounts on our enterprise platform. -x- My preferred ...
0
votes
2answers
68 views

Can my computer get hacked if I use a local server for development only? For example WAMP?

If I use software like WAMP to test and develop my PHP websites, can someone access my computer and steal data or view my in-development websites, or even hack my computer?
0
votes
0answers
17 views

Aireplay-ng causes connection issues

I recently got myself a router to experiment with wireless security. I'm using the aircrack-ng suite to collect IVs with the goal of cracking the key. As part of the process, I'm use the following to ...

15 30 50 per page