All Questions

1
vote
1answer
57 views

Why does WhatsApp not encrypt Google Drive backups?

WhatsApp has end-to-end encryption, promising privacy to users. However, it becomes useless if backups to Google Drive are unencrypted. Our supposedly private data goes to the control of Google. No ...
0
votes
1answer
111 views

How fill up a gig interface bandwidth with hping3?

I've been trying to test our software against DOS attacks. So, I used 'HPing3' but it just fills up 10-11M of my interface's bandwidth! I ran the tool 40 times, I mean 40 hping3 processes, ...
1
vote
4answers
106 views

Is it safe to plug my own USB drive into unknown pc?

Is it widely known that in the opposite way (an unknown USB to safe pc) it could be really dangerous. But I can't find any info if is it dangerous to put a drive to other pc. Case: I have my USB ...
0
votes
0answers
8 views

Under which conditions can dllhost.exe spawn child process? | MITRE ATT&CK T1191

I was looking for conditions/circumstances under which Dllhost.exe can spawn a child process. I examined a huge quantity of event logs from various Windows system and didn't come across any event in ...
0
votes
2answers
36 views

Is it ok to allow a web application to write its own executable files?

Usually I setup my Ubuntu server to have at least 2 users: A user behalf which the web server (Apache or Nginx) runs, e.g. www-data in group www-data A user that updates and maintains the web ...
0
votes
1answer
16 views

Need help in understanding following terms while creating a .PFX file for SSL Installation on Windows IIS Server

Please refer to my previous question Here Having a general-level knowledge in SSL installation, I need to understand following, especially regarding the wild guesses: The error "unable to load ...
1
vote
1answer
78 views

Unusual mail headers, evidence of an attempted attack. Have I been pwned?

Today I found an extremely unusual email in my catchall inbox, without subject sender or content. In fear that someone had confirmed to have guessed my robust password, I looked at both email itself ...
0
votes
0answers
15 views

WebRTC.Local.IP.Addresses.Disclosure

We have Fortigate perimeter firewall and today i detected this event. What should I do to improve protection? How can someone take local IP address' through a Firewall? The following intrusion was ...
0
votes
1answer
39 views

Is it possible for a hacker to spoof the internet time, or any HTTP or HTTPs response?

I want to create an application that self-destruct after a certain date ( say: 2022 January 1st). For this I will get the time from the internet, and then compare it with the given date, and if the ...
0
votes
0answers
33 views

How to Use the Carter-Wegman MAC

I have a block of ciphertext, only two hundred characters long, and I want to give it authentication and proof of data integrity. I have decided upon the Carter-Wegman MAC because I like its ...
-4
votes
0answers
15 views

bluetooth hacking

using my android phone paired with my bluetooth speaker I was playing music when unknown songs started to play. I'm assuming it was hacked by one of my many apt. neighbors. how do I stop this from ...
1
vote
0answers
12 views

What would happen to the connection when certificate expires? [duplicate]

We are using X509 certificate to connect between on-premise devices to the cloud services (Device provisioning service from Azure) The expiry date of the certificate is 3 years from now. Once the ...
2
votes
0answers
115 views

Minimum set of ACS features to secure remote PCIe devices

According to a Google blog post from 2017, Google has been experimenting with providing raw access to PCIe devices in a remote environment. They set out to discover what Access Control Service ...
13
votes
4answers
2k views

Is it a good idea to use non-Latin Unicode characters in a password?

I've heard many suggestions as to what makes a good password (hard to guess, not a dictionary word or permutation thereof, at least a certain length, etc.) so that it cannot be cracked in a realistic ...
2
votes
1answer
343 views

How did Instagram know the content of my WhatsApp conversation and Google searches?

My friend forwarded me some information about a business via WhatsApp (on mobile). I did some Google searching on that business on a desktop. I've deactivated my Facebook account for almost a year ...
0
votes
0answers
22 views

Convert openssl private key to openssh format [duplicate]

I have an openssl format private key that i need to use as a host key for openssh connection.How can i convert the openssl format private key to openssh identified format?
2
votes
4answers
12k views

VeraCrypt - Windows boots Automated Repair on UEFI/GPT

OK. So I used VeraCrypt to encrypt the system partition and now Windows boots its automated repair only. After the repair in what I think is Windows Recovery Environment I can choose to boot off USB ...
1
vote
0answers
21 views

Secure endpoint for root domain only, no subdomains

I have an existing endpoint, for example https://api.example.com/ ... I have an existing CORS policy enabled which only allows access from origin example.com. However, when I visit the endpoint URL ...
-1
votes
1answer
39 views

How to delete browser malware?

I've got some malware so now my browser is sending requests to strange sites: Also if I click on any html element in a browser It may redirect me to unwanted pages I've tried to fix this using ...
0
votes
1answer
61 views

How to securely share only some information with a middle-man site

Scenario: you run an app OurApp which deals with users' sensitive data, some of which you are allowed to share with third parties (with the user's consent, of course) and some of which you are not ...
1
vote
1answer
100 views

How to exploit this buffer overflow. Where is the return address?

I'm practicing doing buffer overflows and, weirdly, I can do some but not others and it is not clear to me why. Here is the example code: Code that I need help with:: #include <stdio.h> int ...
0
votes
2answers
755 views

2FA using Kerberos and SSO within CDE

I was wondering if anyone is using Kerberos for their 2FA solution into their CDE for PCI DSS compliance. Also what does PCI DSS say about SSO once 2FA has occured through Raduis Server. Thanks for ...
12
votes
3answers
10k views

Content-Security-Policy hash of script

<?php header("Content-Security-Policy: default-src 'sha256-".base64_encode(hash('sha256', 'console.log("Hello world");', true))."'"); ?> <script>console.log("Hello world");</script> ...
0
votes
1answer
38 views

double-new attack? replace contact method twice so that the “new” and “old” one are both attacker-controlled

With some services, if an attacker changes the value of a user's contact information (email address, for example), when the user tries to recover their account, they can use either the new or the old ...
55
votes
1answer
11k views

I found a password with hashcat, but it doesn't work

My assignment required me to find the password for a PowerPoint file (97 - 2003, v. 8.0 - v. 11.0). I used office2john.py to retrieve the hash, and I removed the file name. The hash is: $...
0
votes
1answer
30 views

Remote Keyless Entry physical access to FOB

I know RKE's that can have their codes stolen. However, this requires some setup. I am curious of what is the risk of actually handing over ones fob to valets and car washes. From what I have learned ...
-1
votes
0answers
118 views

Apple “pre-scans” all your files before them being uploaded to iCloud? [on hold]

I don’t know if this community has been aware of this latest development by Apple. Please read the news here: https://www.macobserver.com/analysis/apple-scans-uploaded-content/ So apparently, all ...
0
votes
0answers
24 views

SSH_login not prompting meterprepter?

So Basically I am trying to create a SSH session in metasploit. session opens successfully when I do sessions #, it prints [*] Starting interaction with 4... but when I do a dir, no result or no ...
0
votes
1answer
99 views

Concept for (almost) untraceable networking setup

I have been working on an my digital footprint lately, trying to reduce it as much as possible, taking steps like fully encrypting my device with Veracrypt, installing 3 AVs, or spending hours trying ...
26
votes
2answers
20k views

How does JTI prevent a JWT from being replayed?

According the JWT RFC a JWT token can optionally have a jti which I interpret to be an a unique ID for a JWT Token. Seems like a UUID is a good value for a jti. The RFC claims that the jti can be used ...
0
votes
2answers
94 views

Understanding AES Keys and Passphrases

I am trying to get my head around how AES works and in particular I have queries around the key generation and 'passphrases'. My understanding is that AES has a 128 bit block size but the key length ...
1
vote
1answer
58 views

Why is there a redirect to the native app in PKCE?

Why even have a redirect or even use the browser? Wouldn't just a normal TLS/HTTPS request/response in the app protect the requests and token? The one argument I have heard against solely relying on ...
1
vote
0answers
17 views

Analyzing binary by ZZUF and PEACH fuzzers

I am a beginner in software testing area. I installed two different fuzzer ZZUF and PEACH fuzzers. Unfortunately, my lack of knowledge I could not test C++ binaries by both fuzzers. Testing binaries ...
2
votes
2answers
444 views

Can a compromised car stereo spread vulnerability to a connected phone via bluetooth

I have an older cheapo JVC car stereo with bluetooth. I used an app to check for Blueborne vulnerability ("Blueborne Vulnerability Scanner," no longer available) which said the stereo was high risk. ...
0
votes
0answers
81 views

Is it safe to download pictures from websites like booru or imgur? [on hold]

Let's say, someone has uploaded an .jpeg file with exploit inside. Will booru (or imgur) websites re-encode it or not? And if not, will the user, who has downloaded this file and opened it be safe?
6
votes
1answer
21k views

Difference between SSL connection and SSL session

What is the difference between SSL connection and SSL session? This is what my lecture notes have to say which makes no sense to me (I am new to SSL): SSL Connection: A transient peer-to-...
3
votes
1answer
2k views

HTTPS is not green and there is no padlock icon, is it safe for a debit card payment?

I was about to pay online with my debit card, but now I'm not sure, is it safe ?
14
votes
1answer
7k views

Do burned DVDs contain trackable information?

I'd like to know if it's possible to burn a video DVD (not just a regular CDFS DVD with video files in it; I mean a DVD that you can play the video of using regular DVD players), without the ...
1
vote
0answers
42 views

Fail2ban: Ban ip on all ports exept HTTP[S] (or group of ports)

My server currrently has very strict fail2ban rules, which permanently and persistently ban any ip that fails to login once on all ports. This might seem overkill, but most ports are "private" ports (...
1
vote
0answers
19 views

How to anonymise a numeric data attribute, whilst preserving indexability?

I would like to (1-way) anonymise some bounded, numeric data attributes (e.g. age, optimistically bounded by 0 and 200), whilst still retaining the ability to use the resulting data in an index for ...
2
votes
2answers
10k views

What's the best practice when using a VPN and a VM

I am currently on a virtual machine connected to the network via NAT. I wondered what's the best practice when I want to connect to a VPN. Should I connect to the VPN from my host OS or from my ...
5
votes
4answers
4k views

Hardware token to authenticate web application

My company is developing a web application, and I was asked to research how to do hardware-based token authentication to login into our web application. Let me repeat: basically there will be a web ...
0
votes
0answers
44 views

Buffer overflow exploit with python3 : wrong return adress writen

I'm trying to exploit a simple buffer overflow with gdb and peda, I just want to rewrite the return adress with the adress of a function of the program, I can easily do it with python2 but it seems to ...
0
votes
0answers
23 views

PEAP MS-CHAPv2 brute force attack

I have a 802.1x switch and a client authenticated using PEAP-MS-CHAPv2. I sniffed the traffic using a HUB between the client and the switch. How can I use the captured informations to perform a brute-...
0
votes
0answers
32 views

Mysql CIS benchmarks with Maria DB database

I have a server with mariaDB DataBase installed, can I use the MYSQL CIS benchmarks to harden mariaDB DataBase ?
7
votes
4answers
904 views

Is a wireless receiver a security weak point?

I have bought the Logitech Wireless Presenter R400, and it includes a Wireless receiver that it should be plugged in to the computer in order for the remote send signals to the computer. I would like ...
0
votes
1answer
43 views

Are JWT's the way to go in my situation?

I am working on a personal project for learning reasons, and have come to the point of authenticating and authorizing users. I would like to keep the project as stateless as possible, to make sure it ...
0
votes
0answers
11 views

Could IPSec flows be decrypted using PSK [duplicate]

I created an IPSec tunnel between two VMs using StrongSwan. It relies on a Pre-Shared Key. I wonder, if this key is leaked, what could an attacker perform? Would he/she be able to decrypt previous ...
0
votes
1answer
40 views

Implicit Service for Firebase

I'm starting android bug hunting and I've seen a service with implicit intent, and I saw in Android documentation that : Using an implicit intent to start a service is a security hazard because ...
38
votes
8answers
10k views

How can I prevent a user from copying files to another hard drive?

I have a Linux machine that contains sensitive files. Users should be able to access (read) them when they are using the computer, but should not be able to copy them to another hard drive (USB stick ...

15 30 50 per page