All Questions

-4
votes
3answers
122 views

Is code obfuscation common in FOSS?

I am a learner of FOSS licensing, security and privacy. I ask this question because one of the arguments persuading users to use or switch to FOSS is the fact that since the code is open, an expert ...
1
vote
1answer
62 views

Simple buffer overflow trying to leak address of system()

Code: #include <string.h> void vuln(char *arg) { char buffer[10]; strcpy(buffer, arg); } int main( int argc, char** argv ) { vuln(argv[1]); return 0; } I've determined I ...
1
vote
2answers
91 views

How to locally monitor outgoing internet traffic?

I have a cable internet connection that goes to a ASA firewall and then into my local network where i have several machines including many VM's on a ESXI server. I am looking for a way to monitor ...
1
vote
1answer
73 views

Diffie–Hellman key exchange questions

at the moment I am working on a chat application, where more than two clients can communicate at the same time. I just got started with the encryption so please be bear with me. My goal is to ...
-2
votes
0answers
44 views

How to remove plumbytes [on hold]

I recently installed a fake anti malware called plumbytes, I hired someone to do a clean install and I am still nervous that the virus persist. Some of the files that the virus imported like shell32....
1
vote
2answers
72 views

Should Google User ID's be hashed when stored in the database

I'm currently developing an auth backend that allows for both Google and Email/Password as authentication methods. I'm basically treating the Google ID and Password as credentials here. I'm already ...
0
votes
0answers
39 views

How can I get Packet length from Suricata output?

In snort I can easely get packet length attribute (pkt_len) related to an alert. However in Suricata I don't see these information in JSON alerts (from eve.json). How can I get these information?
0
votes
1answer
64 views

How to use Username/Password in Signal Protocol

I am trying to create a communication app from scratch (more like an html parsed messaging app) using the Signal protocol. While I do have lot to of programming experience, I am a crypto novice and ...
2
votes
1answer
80 views

File upload security with PHP - Header to text/plain

I am using PHP to create a small script that uploads images to a server. While going through the PHP documentation, I found a contribution from user CertaiN that gives a very clear example of how ...
1
vote
0answers
32 views

Single vs. multiple synchronous keys to encrypt list for multiple users to decrypt

I've found a few questions which address a single document that needs decryption by multiple users, but I would like to encrypt a list of words stored on mySQL datbases using PhP in such a way that ...
3
votes
1answer
63 views

javascript eval() clarification

I've read this article about eval security issues. I need a clarification about this particular situations: For example, imagine we had a web app with a text field input that we were running eval()...
0
votes
0answers
21 views

“GET //libs/js/iframe.js HTTP/1.1” 200 2305 “-” "python-requests/2.6.0 is it a try to hack into my server [duplicate]

Just Received a request in my nginx log 77.247.110.141 - - [16/Jun/2019:14:03:58 +0000] "GET //libs/js/iframe.js HTTP/1.1" 200 2305 "-" "python-requests/2.6.0 CPython/2.7.5 Linux/3.10.0-957.12.2.el7....
0
votes
1answer
79 views

Why am I receiving this error message when browsing nvidia.com?

I'm receiving this randomly when I try to visit nvidia.com. I can either not reach the site at all with a 504 error, or I get this screen. What does it mean, and what is the cause?
0
votes
1answer
49 views

Can I intercept and impersonate a server over an HTTP wireless connection?

Let's assume I have a strong enough antenna at exactly the same frequency as the victim. If it sends a request over unprotected http to the router, could I then listen to that request and respond to ...
3
votes
2answers
150 views

“Family” apps use shared passwords for different usernames. How bad is it?

There exist several "family" apps available for mobile devices that allow family things to be shared: shopping lists, calendars, occasionally device locations, that kind of thing. At least two of ...
0
votes
0answers
36 views

nmap gives different results in two shells on the same computer

I'm running kali and metasploitable2 in Virtualbox, and have them connected via the host-only networking mode. I can ping and ssh from kali to metasploitable, and have assigned the following IP ...
61
votes
1answer
12k views

I found a password with hashcat, but it doesn't work

My assignment required me to find the password for a PowerPoint file (97 - 2003, v. 8.0 - v. 11.0). I used office2john.py to retrieve the hash, and I removed the file name. The hash is: $...
1
vote
0answers
77 views

Hacked iCloud account: how can I protect my iPhone security?

My iCloud account has been hacked. I access links sent by hackers that compromise my iCloud account. The hackers don't have physically access to my phone, the compromised links are sent by them ...
1
vote
0answers
29 views

Basic buffer overflow able to overwrite EIP but doesn't correctly overwrite when using memory address

I wrote a basic vulnerable app in C. #include void vuln(char *arg) { char buffer[10]; strcpy(buffer, arg); } int main( int argc, char** argv ) { vuln(argv[1]); return 0; } I ...
0
votes
0answers
37 views

Where/How are SNMP v3 passwords stored on the agent?

Security wise, SNMP v3 improves over v2 by using users for polling agents or agents sending trap data to the management system. But what if the agent is compromised? Will the attacker be able to get ...
0
votes
0answers
32 views

USB thumb drive firmware access [duplicate]

USB flash drives contain small microcontrollers that run firmware. I have heard that there is a way using USB to access that firmware and even to upload it. Is this indeed the case? When I look at the ...
1
vote
0answers
42 views

NMAP not showing all live hosts

I have a live host on 192.168.0.151 on my local network. I know it's live since I've set it up with a static IP and also if pinged, I get a reply. The weird thing is when I run nmap -sP 192.168.0....
0
votes
0answers
36 views

Advanced SQL Injection Test [closed]

As an assignment for my cybersecurity course, I've been tasked to execute a penetration test on a login form which is bound to be vulnerable to SQL Injection and if we can't penetrate it like that we ...
0
votes
2answers
95 views

I am getting “Your connection is not private” error and it disappears when I use a VPN

I use a Mac (running macOS Sierra). Yesterday I was watching a movie online from some not-so-trustworthy website and when I clicked the pause button, a tab appeared and suddenly disappeared. From ...
1
vote
1answer
57 views

What are the security implications of connecting to Tor through an SSH SOCKS proxy?

Suppose I have a user account on a remote server run by a friend. I create a SOCKS tunnel on my computer that forwards connections from a local port to the remote server: ssh -N -D 12345 john@10.1.1....
39
votes
8answers
10k views

How can I prevent a user from copying files to another hard drive?

I have a Linux machine that contains sensitive files. Users should be able to access (read) them when they are using the computer, but should not be able to copy them to another hard drive (USB stick ...
0
votes
0answers
47 views

Persistent OTP on Web Browser using cookie

Currently I'm planning to use OTP for my web app, I'm a bit confused about how to keep the users logged on the app. My plan is to use cookies, but I'm not sure whether this is correct or not. This is ...
1
vote
1answer
54 views

ChaCha20Poly1305 with empty AAD

Is it safe to use ChaCha20Poly1305 with empty AAD? I tried to implement E2E encryption between two clients in network.
0
votes
1answer
127 views

How do I investigate a suspicious link?

I made a RuneScape account about a week ago. I stupidly responded to a scam by clicking on a link provided to me in the game. I think I may have a keylogger, which would explain why my new account was ...
0
votes
0answers
79 views

I have millions of spam and threat emails hitting our network daily, who wants to buy this data? [closed]

we see over 10 million threat and spam emails on a daily basis and provide this data to a handful of vendors. Can anyone advise other partners who may also find this feed useful?
0
votes
0answers
6 views

SSL/TLS connections over VPN [duplicate]

When communicating with a server using SSL/TLS via a VPN, can the VPN or ISP intercept the communication and understand the data being sent?
2
votes
3answers
155 views

How to investigate an IP address that was involved a security breach?

I'm wondering what one can do if they have the IP addresses that were used by the attackers during a security breach? The specific situation is this - recently two of our servers were hacked into ...
1
vote
1answer
71 views

Centralized brute force login detection using netflow data

Is brute force login detection feasible with netflow data? With the netflow data one could check the number of incoming packets to a specific destination port (for each flow). If the number is below a ...
1
vote
3answers
90 views

How to provide two factor authentication code text messages, so that they are not shown on the lock screen?

It's a commonly discussed problem that when a service sends an authentication to the user's phone, the code is often displayed in the preview on the lock screen, which means it's visible to anyone who ...
0
votes
1answer
55 views

Intercept network traffic with a hub

If I plugged a hub inbetween a switch and firewall, that also had a device running wireshark or similar capture software connected, due to the way a hub operates, would I be able to read ALL of the ...
0
votes
1answer
43 views

SSH Timed out problem [closed]

I can't connect to my kali linux ssh server running in Virtualbox through puTTY. I didn't make any changes to /etc/ssh/sshd_config file, besides Port and PermitRootLogin That's how i booted up my ssh ...
0
votes
0answers
31 views

Line jump with openssl s_client -connect command when using CAfile

I am trying to connect with some HSM cloud service using a specific url:port provided by the service vendor. The connection works fine if CAfile is omited from the syntax of the s_client -connect ...
2
votes
3answers
172 views

Why is this not a buffer overflow?

I'm actually busy with learning more about buffer overflows. I read some interesting tutorials and just got the basic idea behind it. I tried to produce a vulnerable c++ file to test my knowledge ...
1
vote
2answers
64 views

IIS Application - service account permissions

My company is looking to install a 3rd party application on our infrastructure and this application will be installed on an IIS Server with a connection to a SQL server. They require an AD service ...
0
votes
0answers
62 views

RAR password (knowing some parts from pass) [closed]

I need your advice in my case: I have a RAR file protected with this password is: ( THE****AHMAD** ) The first word from the password is: THE The second word is contains 4 characters and its maybe ...
2
votes
1answer
100 views

Best practice for multi-factor re-authentication

We just introduced multi-factor authentication (MFA) to access a remote business network. This has a re-authentication option: to prompt the user to re-enter the password and MFA code periodically. ...
1
vote
1answer
114 views

Exploitability of allowed wildcard (*) CORS Origins with Bearer Token Authorization [duplicate]

I'm looking at the following setup. A web application uses a REST API to communicate with the server. All API responses include Origin: *. For authorization Authorization: Bearer <token> is used....
0
votes
2answers
69 views

Can wireshark capture the exact payload and end point of API used by my Mobile APP?

I was just wondering if someone having total control over his/her network, is running my mobile app. Also wireshark is capturing all requests made using the network. My app is calling API endpoint ...
1
vote
1answer
82 views

Can we define a single immutant state of a device (modern computers at least) to derive a key from?

Please be open and bear with me, I read a lot about encryption, but practiced very little. I want to write a simple application that uses common encryption algorithms, but based on a derived key ...
34
votes
1answer
6k views

I have found ports on my Samsung smart tv running a display service. What can I do with it? [on hold]

I have a Samsung Smart TV running Tizen OS, and out of curiosity I scanned it with Nmap. I found multiple open ports. One of those ports is running a "display" service. Does this mean it can cast its ...
0
votes
0answers
45 views

What is Recieved … For … in email header [closed]

When I investigated the header of a suspicious email, there was Received by .... for <Jaknar@justices.com>; But I couldn't find any information explaining this field. What does Jaknar@...
0
votes
0answers
24 views

How to back up by using import/export? [closed]

I want to do a trial run with import and export. There are procedures in the online Manual, but for me there's a possible bomb regarding the Import process that might wreck my passwords. Here's my ...
0
votes
1answer
100 views

How can vulnerability researchers find flaws in OSes / Embedded Systems?

Operating Systems and Embedded Systems usually don't come with source code or binaries that one can review. How can a vulnerability researcher look for flaws in a system (Architecture, Protocols, etc....
1
vote
1answer
81 views

Do I need to worry about vulnerabilities that require administrative privileges to exploit?

I am currently evaluating the impact that the recent NUC Firmware Advisory has on our machines. What confuses me is that fact that those vulerabilities are scored with a high risk score, but require(...
0
votes
1answer
134 views

PC turned on by itself and sending packages even when turned off

My father told to me that his PC has turned on by itself. I have no idea about what this can be, and this has never occurred before. After this, he turned off the PC and I checked my router, and seen ...

15 30 50 per page