All Questions

0
votes
0answers
43 views

DNS Spoof Adware

Someone recently boasted about adware which can inject ads from most networks, and using DNS spoofing would make the providers think that the ads were on a website owned by me (i.e. www.myscamsite.com)...
0
votes
0answers
26 views

Migrate into different process each time a shell spawns

I'm trying to migrate into a new process whenever I get a session. I did this by using set autorunscript migrate -f and also set prependmigrate true but the problem is whenever I get 2+ shells on the ...
0
votes
0answers
19 views

oAuth2 and LDAP integration

I have set of APIs which are written based on oauth 2.0. in my system currently all the user accounts are saved in MySQL DB. Now I want to integrate LDAP with this system to verify users through LDAP ...
-2
votes
0answers
33 views

Help with my Gmail [on hold]

I am receiving emails from an Outlook account. The text sent comes in fine. Any attachments are coming as smime.p7m and also as winmail.dat. Other people in my group have a gmail account(free gmail) ...
0
votes
0answers
25 views

What would be the solution of last line, error LSB script cannot be found? [on hold]

nothing is to be found for the present case this information i get from net and books are not so enough for that cause can you help to find me the exact answer of this error so that it run without ...
0
votes
0answers
42 views

OHS 11g ECDHE_RSA

I'm pretty new with SSL, but despite this I have a task for that. I'm running Oracle Http Server v 11.1.1.9 and I would like to use the ECDHE_RSA cipherSuites to deal with https connections. In my ...
-4
votes
0answers
39 views

My hosting was hacked a few months ago [duplicate]

My hosting was hacked a few months ago , I clean infected files but my email still spoofed . I keep digging for files and i found this script <?php @chmod(".htaccess",0755); @chmod("index.php",...
0
votes
0answers
46 views

Obfuscation through regex [on hold]

I'm working on an internal audit and I'm currently trying to break this proxy apache regex to redirect on the localhost with an other port than 1234. ProxyPassMatch "^/something/([A-Za-z0-9\._-]+)/(.*...
0
votes
1answer
41 views

Virtualized or Container (Remote) Based Browser Isolation is more secure?

There obvious costs differences between them but I am not sure from a security perspective which of them considered to be more secure.
0
votes
0answers
39 views

Open port exploitation via macOS [on hold]

I am hosting a web server for penetration testing, and I have opened a bunch of ports on it to make it more vulnerable. However, I am a bit stuck on what to do next. I don't want to just do a Dos ...
0
votes
0answers
18 views

Is password + laptop a multiple factor authentication? [duplicate]

The definition according to Wikipedia: Multi-factor authentication (MFA) is an authentication method in which a computer user is granted access only after successfully presenting two or more ...
0
votes
1answer
38 views

Which party stores the link between user and device in WebAuthn?

Looking at the online resources regarding WebAuthn, I still haven't been able to figure out which of the involved components (or parties) that store the link between the user and his/her authenticator ...
3
votes
1answer
71 views

How to request CVE if CNA didn't provide an answer

A couple of weeks ago I have found a vulnerability in a product. I have contacted them reporting it a week ago and also to get the CVE. I didn't receive any answer from the mailing list and I would ...
-2
votes
1answer
61 views

how to decode this request [on hold]

I need help for this. I got a request but I don't know what can I do: GET http://localhost/xor.php?plaintext=cipher=%00%00%1D%10%1A,%06%05%16%16%0D%12%0B%3A9%5DRT%06YVD HTTP/1.1 Full request : https:...
2
votes
1answer
85 views

How does TLS work (RSA, Diffie-Hellman, PFS)?

I know "How TLS works" has been discussed numerous times here and crypto, but I am still somewhat confused and would like to summarize what I know so far 1 in this giant blob of text with the hope ...
1
vote
1answer
86 views

Is it possible to prevent WiFi password brute-forcing?

Are there any measures I can set, except using a better password, to prevent someone brute-forcing a WiFi password?
0
votes
0answers
28 views

OAuth2 refresh token flow with mobile app

I'm having some issue with an access token not being refreshed in my mobile application. I'm trying to figure out what would be the best approach to fix it. This is the scenario faced by some mobile ...
0
votes
0answers
42 views

SSLStrip demonstration with bettercap 2.x

I'm trying to get bettercap 2.x working for an sslstrip proof of concept demonstration. I'm running it against a site that I know doesn't properly implement HSTS, found from several blogs. The site ...
0
votes
0answers
37 views

What is the difference between Kill Chain and STRIDE threat modeling? [on hold]

Adam Shostack mentioned on his last talk that he sees recently more people using Kill Chain threat modeling but how does it differ from STRIDE threat modeling? https://youtu.be/ZoxHIpzaZ6U?t=2577
2
votes
0answers
49 views

Create self-signed ssl certificate that can't sign other certificates

I have a LAN HTTPS server that I want to give an SSL certificate to. Since it's local-only, a self-signed certificate is sufficient for me. I have previously given it a self-signed root certificate, ...
-1
votes
0answers
104 views

What to write in a notice about tracking method in links? [on hold]

I think many people will be insulted if they notice Google Analytics tracking code in the link you send to them, but I think if you announce it upfront then it would be fine. What is left is how to ...
2
votes
2answers
76 views

How to provide personal User Page after User already signed up without Password?

I created a small website where participants can sign up with some data (name, email, birthdate, ...) but they don't have to set username and password. After a while it would be useful to provide ...
0
votes
1answer
62 views

Will browser isolation solution protect our enterprise from Flash and JavaScript exploits and fileless malware?

Since we didn't see any pentest done to bypass on such solution, we don't really know if it worth purchasing such type of solution. Will this really protect us from Flash and JavaScript exploits, ...
0
votes
0answers
26 views

Is there any mature Rust TPM 2.0 library? [on hold]

I am currently implementing an application in Rust and would like to leverage TPM 2.0 capabilities and was wondering whether there is any mature library out there?
0
votes
0answers
34 views

Is it ok to forward a JWT between two custom services?

I'm using Azure AD Implicit Flow for authentication between a SPA and a WebApi. I want to know if it would be ok/save to redirect from the SPA to a intermediary service of my own as well with the ...
1
vote
1answer
85 views

What attack vector is prevented by using the 'coupling code'?

In The Netherlands, one can access government services using a login platform called DigID. Some services require a two factor authentication, for which one can use a mobile app. This requires the ...
-1
votes
0answers
53 views

Using Hashcash to stop spam bots [on hold]

I have heard about hashcash, but a lot of information about using this in email registration. The idea is that the client registering must calculate a hash, and this wastes resources and time for ...
0
votes
0answers
4 views

Where is Windows 10 PIN stored? [migrated]

I know that Windows 10 stores passwords in NTLM hash in SAM file. Where is windows 10 pin hash stored?
0
votes
1answer
76 views

Difference between a behaviour-based security and traditional firewall?

Difference between a behaviour-based security and traditional firewall? As I have searched the web and honestly cannot find anything about it.
0
votes
1answer
73 views

Google Password Manager or Dedicated Password Manager [on hold]

Is it better to use Google Password Manager to store all my passwords or a dedicated Password Manager such as Bitwarden? I have been using the former for years and am wondering if I should make the ...
0
votes
1answer
76 views

Is amazon.com allowing authentication based on browser cookies only?

So I found out a couple of days ago that amazon.com has changed its behavior when trying to make a purchase. For years and up until recently, I could open a browser, log into amazon, close the browser....
1
vote
0answers
36 views

Who is responsible for Cipher selection and SSL handshake - Akamai, Load balancer, Publisher dispatcher, publisher

We have a AEM (Adobe experience manager) 6.2 application. I recently been advised to exclude/remove the weak ciphers for strict security policies. But I am not sure where shall I do the configuration ...
0
votes
1answer
59 views

RSA 4096 vs. ECC Curve 25519

I want to use GPG to encrypt files before storing them as backup in the cloud. I don't care about interoperability or performance/resource consumption during encryption/decription. I only care about ...
1
vote
2answers
129 views

What kind of vulnerability is this considered?

I am reverse engineering a binary that is supposed to run as root and performs simple checks on users passwords by reading /etc/shadow. I am able to leak some shadow file entries due to public r/w ...
1
vote
0answers
31 views

How to harden container hosts?

https://github.com/docker/docker-bench-security git clone https://github.com/docker/docker-bench-security.git cd docker-bench-security docker build --no-cache -t docker-bench-security . docker run -...
0
votes
0answers
18 views

How does access delegation work - Access Token work?

I'm trying to understand how do access tokens work. What is the mechanism used to generate access tokens similar to AWS Secure Token Service or OAuth Tokens. I am assuming the algorithm is as follows:...
0
votes
1answer
97 views

Ransomware on Mycloud NAS

I own a Mycloud NAS and it was affected by ransomware. In the NAS there are several folders, most of them are password protected. There is also the "Public" folder which can be seen by all users and ...
0
votes
0answers
36 views

Crashing a computer connected to a server [on hold]

Back in 2015, I had a spare desktop computer that I used to solely run a Minecraft server. It was directly wired to the router and was properly port forwarded. Unfortunately, one day someone came ...
0
votes
1answer
76 views

Does Apple supply hardware keyloggers? [on hold]

I received a brand new Mac laptop for work that is basically ours and doesn’t have to be returned, even after quitting. It was inside the box and sealed. I was wondering if Apple supplies and installs ...
1
vote
0answers
25 views

Can Zeek (formerly Bro) be installed as in-line IPS?

I'm starting a comparison paper about inline Network IPS. I was looking for an opensource anomaly-based detection engine with IPS capabilities. The easiest choice seemed Zeek(formerly Bro) but from ...
0
votes
1answer
79 views

Is this redirect on my website dangerous?

I have this URL that I sometimes use to redirect my users. It looks like: https://mywebsite.com/?redirectTo= However, I'm checking if the domain part of the parameter ends with: google.com ...
0
votes
0answers
38 views

Which encryption algorithm for cloud backup?

I want to backup my data to the cloud. Before that, I want to encrypt it using GPG (gpg (GnuPG) 2.2.11 and libgcrypt 1.8.4). The backup is just for me, so I don't care about interoperability I only ...
3
votes
1answer
55 views

PCI DSS minimum password strength equivalent in passphrase

The PCI DSS requirement 8.2.3 says: Passwords/passphrases must meet the following: Require a minimum length of at least seven characters. Contain both numeric and alphabetic characters. ...
-1
votes
1answer
164 views

I entered my password in a possible scam website. What should I do?

A while ago, I found a website that said that it will pay up to 100$ an hour just to watch ads. So, I thought what's the harm, and I created an account using a fake Facebook account (with my real ...
1
vote
2answers
183 views

Best way to know the algorithm used for a password encryption

I have the following password captured using sqlmap- $2a$08$9eaKUtKdFV8fuOAx0sfr4emrG1aHzGeNsn/rVdW243nw6Ktt.Uc0O Now, I don't know how to decrypt this password because I don't know which ...
1
vote
2answers
60 views

WPA2 Enterprise: no risks for preconfigured clients when it comes to Rogue APs?

We are using, as default, PEAP and MS-CHAPv2 as inner authentication. I was concerned with security risks when it comes to rogue APs but a colleague told me that there are no risks for preconfigured ...
1
vote
0answers
27 views

CA signature Algorithm: sha256WithRSAEncryption or ecdsa-with-SHA256

I need to update a CA that is about to expire, currently is using Signature Algorithm 256WithRSAEncryption and I am thinking in using ecdsa-with-SHA256 with something like: openssl req -x509 -nodes -...
0
votes
0answers
24 views

VPN Kill switch doesn't work with Tor Traffic [migrated]

Always, when I try to run kill switch for VPN my Tor Browser stops working and I am not sure why it happened. I am not good in firewalls and port forwarding but I would like to learn. I have ...
-2
votes
1answer
86 views

how does DNS cache snooping work?

I've seen there are programs for pentesting, such as FOCA, that provide tools for DNS snooping. The part I don't understand is how can we know the DNS server an organization is using. Also, from what ...
1
vote
1answer
60 views

“Malformed URL” string when trying to inject SQL

I'm trying to check if a particular form of a web app belonging to a bug bounty project is vulnerable to SQL injection. After inserting a malformed URL, I get this message on my browser: "Malformed ...

15 30 50 per page