All Questions

1
vote
0answers
48 views

What if I alter my MAC address to my gateway's MAC address?

Can I listen anyone in the same network? I've tried, but it doesn't work(if I've done it right).I can't see something valuable in wireshark on my laptop.
0
votes
1answer
39 views

How does using an auth server for mobile app and not storing API keys on client add security?

I've been reading about how unsafe and bad and terrible it is to store your API keys inside your mobile app (whatever solution you have for that) and that you should use a separate server for ...
0
votes
1answer
33 views

Why in LD_PRELOAD exploit we call unsetenv(LD_PRELOAD)?

Why to exploit LD_PRELOAD like is shown here https://touhidshaikh.com/blog/?p=827 in the .c file the first instruction is unsetenv(LD_PRELOAD)? Is it a routine action which all shared libraries do? Or ...
0
votes
0answers
54 views

Static website CSRF alternative [on hold]

We have a static website hosted on s3 behind a cloudfront, currently we store a user's sessionId in localStorage, then add this to the request body. We would like to migrate this solution to ...
0
votes
1answer
41 views

Are those animated video thumbnails generate the same DNS from actual videos?

I have a very technical question about the latest feature shown on those video platforms, like YouTube and other. There’s been a trend lately that the classic still image thumbnails have been ...
0
votes
0answers
35 views

Scan a device behind firewall [on hold]

How to scan for a vulnerability of a device that is protected by latest firewall? I tried to do a Qualys scan of the device but it was showing offline. Are they really offline or are packets not ...
1
vote
0answers
25 views

Why `system` is not hide by these obfuscator of PHP [migrated]

I am recently trying to pick an obfuscator, I tried these I googled: https://www.gaijin.at/en/tools/php-obfuscator http://www.pipsomania.com/best_php_obfuscator.do https://www.tools4nerds.com/online-...
1
vote
3answers
70 views

Flow of a host header injection attack?

I am new to this field and would like to know how the flow happens in a host header injection attacks. I believe it's as below: Client generates the request. Attacker manipulates the request and ...
0
votes
0answers
15 views

firejail with links

I have a small SSD 32GB with ubuntu operating system and a small home folder. Thunderbird and dropbox folders are on a disk with links to them in the home folder. They work without firejail but not ...
-1
votes
0answers
56 views

Does fail2ban take in consideration search engine bots?

I installed fail2ban on my VPS and there is a lot of activity (a lot of bans). I'm worried about search engine bots as my server contains websites. I am about to apply some custom scripts to not ...
-1
votes
0answers
26 views

can intel sgx be used for privacy preservation verifiable ad exchange [on hold]

Can intel sgx be used for privacy preservation of bidder and bid values. Along with it is it possible to ensure that auction carried out by ad exchange is verifiable. There are other techniques that ...
0
votes
0answers
41 views

Payment Handlers In Google Chrome

Are there any privacy/security risks associated with using payment handlers in Google Chrome? Somehow, the idea of having my financial information stored in a browser makes me feel uncomfortable. I ...
0
votes
2answers
51 views

Open ports on my NetGear router

I ran an nmap scan on my home router and I am seeing a ton of open ports. Is this normal? How do I go about closing them? $ nmap 192.168.1.1 Starting Nmap 7.70 ( https://nmap.org ) at 2019-03-16 20:...
0
votes
0answers
37 views

WiFi Takeover? Can someone know what im doing online at any given time? [on hold]

If someone has access to your wifi network, whether through being hacked or otherwise, can they see what you're doing online at any given time? I know this person is actively trying ruin my life and ...
4
votes
2answers
176 views

Encrypting then Base64 Encoding

I notice online encryption tools encrypt the plaintext and output the ciphertext in base64 format. Why is ciphertext outputted in base64 format? Can the ciphertext be outputted in binary format?
1
vote
0answers
57 views

Problem with Reverse Engineering GVM light, possibly encoding issue

So I bought this GVM-560AS LED photography light on Amazon. It is a really good light for the job; but to control it remotely you have to download a really dodgy APK from the GVM website, a package ...
0
votes
1answer
58 views

Aren't VPN servers exposed to the same threats as public Wi-Fi?

Besides trust of the VPN provider, are VPN servers safe? Other people connect to it and it can be compromised, right? Is it the same threat as being connected to a public Wi-Fi where someone could ...
0
votes
1answer
50 views

Exploit Development on windows environments

I have seen on many Poc exploits this line , but I wonder how people do this using immunity debugger,or do we need to reverse itself the windows? is there a way to do this using mona or some easy way ?...
1
vote
0answers
39 views

Verify PKCS#7 (CMS) detached signature with timestamp with OpenSSL

I have a PKCS#7 (i.e., CMS) detached signature of a file that is signed by my signing certificate and then timestamp signed by a TSA that is all generated by an application we wrote. I would like to ...
1
vote
1answer
58 views
+50

Invalidate API tokens when LDAP user is invalid

I'm using oauth2 and LDAP for authorization and authentication of an API. Authentication flow is given below. User sends LDAP username and password (with password grand type) to the server. Server ...
1
vote
1answer
31 views

List additional cart items in ecommerce website

I am using an ecommerce website. When I log in, I would expect my cart to be empty. But it shows the cart items selected by another user who previously used the same machine and logged out. Is this a ...
54
votes
8answers
15k views

How are passwords stolen from companies if they only store hashes?

Everywhere I look it says servers store passwords in hashed form, but then you have those breaking news about hackers stealing passwords from large companies. What am I missing?
0
votes
1answer
28 views

CSRF protection for an email subscription website - are there any risks of having it turned off?

I have a main website with an email subscription form. And my other websites where I have an email capture form. A user enters their email on those website and via POST he's redirected to the main ...
-2
votes
1answer
40 views

Is Using A Firewall with LibreOffice Enough If Not, Any Recommendations?

I recently learned a little about LibreOffice and OpenOffice. I am considering using LibreOffice on my laptop but am concerned about security. What I've read online (the terminology) is over my head. ...
0
votes
1answer
32 views

Wordlist generator for a specific pattern

I know my Windows machine password is Passw0rd!. I want to generate it using crunch so that I'd know how it works. I tried crunch 9 9 -t Passw@@@@ But here @ refers to lowercase character. I want it ...
-2
votes
0answers
42 views

How can I order from Amazon without entering my CVV? [duplicate]

I ordered something on Amazon through my new master card but they did not ask me cvv nor the secret pin code. But they displayed "your order is successful". How is this possible?
0
votes
0answers
15 views

How to use Network Service Discovery in Android Studio

I am trying to create an android app that discovers devices on a network and lists these to the user. From what I understand, the best way of doing this is by using NSD. So, I have attempted to run ...
1
vote
0answers
25 views

Can attackers intercept my credentials on an insecure site if I log in through a 3rd party service?

I recently visited a forum using non-secure protocol (HTTP) - Chrome flagged a warning at the top saying I shouldn't enter any passwords or personal information onto the site, as they could be ...
0
votes
1answer
40 views

Is there a security risk in using the same profile picture on different sites?

Well, the title basically says it. I'd suppose that using the same profile picture on unrelated sites would allow anyone to do a quick Google image search and therefore associate the profiles with ...
0
votes
0answers
30 views

My partition table is GPT, so why am I getting this error? [closed]

I'd like to create a volume on my 4TB external hdd with 50GB of outer volume and the rest hidden. However, during the set up process I get the following error message: I found someone having had ...
0
votes
2answers
97 views

Using a decoy traffic while using the internet

Since the ISP knows what sites I visit and they can assume or predict that I'm using Tor if they are monitoring my traffic, how can I distract them by making them see that I visit some particular site ...
0
votes
0answers
32 views

Gain access to files with higher privileges [on hold]

I have this vulnerable linux distribution. There are some files that only users within a specific group can access, which is not my group. And I want to access these files. I tried to use symlinks, ...
1
vote
1answer
26 views

Automatically erase data from SD card

Is it possible to automatically format the SD card when someone put it in another PC? SD card is used in camera. And if someone wants to open that with another PC. It should be automatically ...
2
votes
1answer
55 views

How did my exact name + birthday end up in PwnedPassword lists? [closed]

I find my exact name + birthday in the form of FirstnameMiddlenameSurnameDayMonthYear, e.g. JamesWilliamMiller31052000 in the PwnedPasswords List. But I have a very uncommon Surname (<100 people) ...
0
votes
1answer
35 views

Does it exist any gadget that catches and copies all the digital information?

When I was watching Prison Break there was a device that was catching all the digital data and copying it. Do similar info-gathering devices really exist? The device must be within several feet of ...
1
vote
0answers
29 views

Can an attacker spoof content provider, backup manager or wallpaper manager in Android?

We need a backup of SMSes, apps, device settings, wallpapers and contacts of the device through our designed app. So, is it possible for an attacker to spoof, tamper, impersonate source data (SMSes, ...
1
vote
0answers
17 views

Tor Browser 8.0.6 always turns on webgl.min_capability_mode [migrated]

I want to enable webgl in the Tor Browser 8.0.6. In about:config, all settings are saved except webgl.min_capability_mode, which is always set to true. Whatever I do, this value is always set true. ...
0
votes
1answer
46 views

What is this service? [closed]

Fairly new to infosec and am going through a course on nmap. While scanning I found this and it looked interesting and was wondering if you all had any information on this? This is the port,state and ...
0
votes
0answers
37 views

CORS Anywhere to bypass CSRF protection

CORS Anywhere helps with accessing data from other websites that is normally forbidden by the Same origin policy of Web browsers. Can CORS Anywhere able to bypass CSRF protections? Reason to ask ...
0
votes
0answers
23 views

mitmproxy on Raspberry Pi [migrated]

I'm trying to run mitmproxy on Raspberry Pi to run some tests however although Python3 is installed and python2 is uninstalled, I keep getting an error when trying to run mitmproxy - mitmproxy ...
0
votes
3answers
103 views

Finding a future-proof password manager

Currently, I am a Windows 10 user who uses Chrome's default password manager and let it autofill in passwords for me. Apparently, if I were to accidentally execute malware or give someone momentary ...
34
votes
3answers
5k views

Is it insecure to send a password in a `curl` command?

Here’s an example request we can make to the GitHub API: curl 'https://api.github.com/authorizations' --user "USERNAME" This will prompt for the account password, to continue: Enter host password ...
0
votes
0answers
14 views

Using adb to list certificates in Android devices [migrated]

I want to use adb to list all certificates installed by USER. How can I do that?
0
votes
0answers
17 views

Stack overwriting/overflow protection using memory page flags

In a stack overflow/overwriting attack(which primarily either executes code written to stack or changes flow of program by changing return address), the defenses seem to be marking stack code as "data"...
-1
votes
0answers
37 views

How to make a TV recording box that prevents fast forwarding? [closed]

I have a receiver to record television. On some channels, even if you've recorded the whole thing, you can't fast forward your recording when you watch it afterwards (offline). So my question is if ...
0
votes
0answers
30 views

Is Metasploit payload stored locally or residing in memory temporarily on a victim's device?

A simple question on where the payload is when being exploited. Tried some testing on metasploit and got a message saying the payload's been uploaded successfully under /tmp in a linux target machine ...
0
votes
0answers
67 views

Alternative OAuth 2 flow?

I have an implementation of the OAuth 2.0 authorization code flow, but I'm wondering if I can securely introduce a new flow. I'd like a flow that doesn't require the resource owner to ever need to ...
5
votes
1answer
139 views

How can I find a web application's document root using a path traversal vulnerability?

I am performing a penetration testing on an application hosted on an Ubuntu environment. So using a path traversal vulnerability, I can download any file. The API web application runs as root (...
3
votes
2answers
221 views

Does someone need to be connected to my network to sniff HTTP requests?

TL;DR Would a potential attacker need to have my Wi-Fi password and be connected to my network in order to read HTTP requests? Over the past year or so, I have made a few DIY home automation projects....
2
votes
1answer
31 views

OAuth2 - Obtaining Refresh Tokens

Given a valid access token alone (you don't know username+password), should you be able to get a refresh token?

15 30 50 per page