All Questions

0
votes
0answers
2 views

PCI Compliance on scanned images of expired cards

What is the requirement on images of expired card numbers? The images are over ten years old. If the data is old do I still need to encrypt the data?
4
votes
2answers
73 views

Security Testing Methods for Enterprise Level

I have been asked to perform risk assessment for a company. The scope covers about 100 applications and in various business units. Major task is to assess currently implemented security controls and ...
-2
votes
1answer
13 views

Creating wordlist with some hints

I want create a wordlist with rules below, wordlist length 8 character, two letters and six numbers but i don't know permutation.
1
vote
1answer
26 views

Persistent Bootable USB with Write Protection?

I am developing a series of extraction scripts (currently python 2.7) for a university project - these tools will be provided on a bootable USB for use by first responders when encountering a suspect ...
0
votes
2answers
19 views

How long is Key lifetime of AES-GCM key?

As I know the AES-GCM used a nonce and if the two message has the same nonce then the secret key can be retrieved. If two computers use the AES-GCM to encrypt exchange messages, then what is the key's ...
2
votes
0answers
33 views

How is it possible that the Metasploit meterpreter can take pictures without “notifying” the user?

Im curious how the Meterpreter can take pictures from my webcam without turning on the webcam LED? Ive read that you have to write/change a driver, or a firmware, or you just change some DLLs, but ...
2
votes
1answer
47 views

Name of this cipher/encoding method?

I see a common method of encoding in PHP malware where there's some bytes of key, which gets used to decode that many bytes of encoded text. Decoded bytes get appended to the key on the fly. The ...
23
votes
7answers
3k views

How can I publish data from a private network without adding a bidirectional link to another network

I was just wondering how I could build a private network where it is physically impossible to gain access from outside but still have the option to publish data to some remote server. As an example: ...
2
votes
2answers
74 views

A (spoofed?) trusted device has logged in from an unrecognized location

Recently my google account was hacked. I have 2-factor authentication turned on. 2-factor authentication was not required for the hacker to gain access to my account, nor did the hacker trigger Google'...
0
votes
0answers
15 views

I've downloaded file through curl in mac OS but now i can't locate its location in my system [migrated]

command i've used -> curl link... | bash I've downloaded file from github through curl in mac OS but now i can't locate its location in my system though i can access it. I don't want it in my ...
1
vote
2answers
65 views

Is it good practice to delete old accounts?

Is it a good idea to delete all old accounts you no longer use? This was asked specifically about email here, but what about your Stack Exchange account? Or your social media accounts, old forum ...
7
votes
1answer
3k views

How robust is a VeraCrypt Container against disk errors (bit rot)?

I am planning to encrypt backup data using VeraCrypt. How safe are the generated containers? My worries is not so much the encryption, but potential data loss due to degrading harddisk media (bit rot) ...
3
votes
2answers
117 views

Remote Code Execution in apt/apt-get

Recently, a vulnerability has been found in apt that allows arbitrary code execution, see here. Is it reasonable just to update the system? Or we should be worried that this has been used and so ...
0
votes
0answers
23 views

How Windows 8 and Windows 10 hash account password?

I need some accurate information about how Windows 8 and Windows 10 perform hashing user account passwords. I know that they are stored in SAM file and NTLMv2 algorithm is used. But while using ...
48
votes
10answers
8k views

Has it been mathematically proven that antivirus can't detect all viruses?

What analysis was Bruce Schneier referencing when he wrote: Viruses have no “cure.” It’s been mathematically proven that it is always possible to write a virus that any existing antivirus program ...
1
vote
1answer
108 views

Ransomware - All computers infected but one

Let's say there is a particular network which has a "monthly" successful cryptolocker attack. Every time, every computer in that network is infected. The set up is like this: 1x Windows 2003 server (...
0
votes
0answers
20 views

In what important ways can a digital signature be invalid?

I am trying to write some code to verify that a digitally signed file came from my company. I was horrified to stumble across this deeply buried answer on Stack Overflow, an out-of-left-field ...
0
votes
0answers
6 views

Extra features required for TrustZone to provide main security features

The paper Trustworthy Execution on Mobile Devices: What Security Properties Can My Mobile Platform Give Me? describes 5 desired security features for mobile devices: Isolated Execution Secure Storage ...
1
vote
1answer
35 views

Blockchain + shared unused bandwidth as the proxy front = ddos mitigated?

Pentesting the new webapp that we have developed before having an external source have a go at it and give us a risk assessment. Now we have come to the portion right at the end; DDOS. For the most ...
0
votes
0answers
12 views

Worth taking CEH? [on hold]

I was thinking about taking the CEH certificate. At the moment I don't have any other certificates/education. Would it be worth it taking this exam?
33
votes
2answers
2k views

Does pressing a car remote many times offer denial of service attack for rolling codes?

My understanding of remote car key fobs, and similar security devices with rolling codes, is that the key device is a transmitter that, each time the button is pressed, sends the next secret in a ...
1
vote
1answer
228 views

How this Unique SQL injection works?

I found a challenge which was vulnerable to SQL injection and it was very very pretty hard to find So, How this unique SQL works? I found this on login form where when I send user=\&pass=||1# as ...
0
votes
0answers
30 views

Is this identity theft or something else? [on hold]

I got a phone call from an 8 digit number which was my birthdate. No one was there. Is this a new scam?
0
votes
1answer
23 views

PCI-DSS scoping when there is no CDE

We are a merchant who processes over 2m transactions a year. However, we have outsourced all the payment functions to compliant 3rd party providers. Understand that PCI is about people, process and ...
3
votes
2answers
4k views

Estimate the time to crack passwords using bcrypt

I am reading on the Ashley Madison password exposure case. Dean Pierce was able to output about 4000 cracked passwords within 5 days given his system. I'm assuming that he generated a table of hashes ...
0
votes
2answers
53 views

Malware Analysis

What would be a good approach for testing malware or bad url's from things picked up from my SIEM to validate them? I was told to setup a VM for these tests but don't want it to hit the internal ...
-3
votes
0answers
57 views

How can I implement a custom payload persistence script? [on hold]

This persistence script isn't working for the injected (final) application. The code is for the original payload (not injected). But after I inject it into an app the script doesn't work. Any idea ...
8
votes
2answers
2k views

Hashing email addresses for GDPR compliance

We'd like to keep users old account email addresses in a database for the sole purpose of allowing them to reconnect old accounts of their new accounts. This would benefit them and be a cool feature, ...
2
votes
1answer
336 views

Intel SGX - Remote attestation

I am currently reading up on Intel's SGX, especially the remote attestation part. I am having a questions regarding this topic. Let us consider the following protocol: Enclave A and B do remote ...
1
vote
0answers
29 views

Angular JS alternative xss payload?

Basically, I have a situation right now where the registration website allow to register via email address and then redirects me to another website (subdomain) of the original website. The subdomain ...
0
votes
1answer
233 views

“Go” subdomains with empty redirect url?

I've tested a lot of websites, and I've found that many sites have a "go.example.com" subdomain that returns the following error message: 404 Not Found The redirect url is empty This message makes ...
0
votes
1answer
54 views

hashcat specify number of characters

I am trying to figure out a macOS hash 10.8+ and I happen to know that it uses A-Z, a-z, 0-9, is 6-8 characters, and almost certainly random. Currently, it spits out an error regarding hash length ...
3
votes
3answers
3k views

Is there any mechanism available in Android platform for remote attestation?

I recently read about PC/Desktops which come with TPM chips which are used for remote attestation. So following are my questions: Does any Android smartphone come with a TPM chip? Is there any way ...
1
vote
1answer
43 views

Can an unprivileged program modify an HTTP request response on the local machine?

Imagine you have a simple GET request going to server 123.456.111.222. Your client executable creates a winsock on the server IP (TCP) and sends the HTTP request (unencrypted) to the server. If a ...
2
votes
3answers
146 views

Should I be worried about old viruses from a hard drive that hasn't been used in the last 13 years?

I recently built a new PC with windows 10 and I was recovering some pictures from an old hard drive that I had in one of my PCs from about 13 - 15 years ago. The hard drive has just been sitting in a ...
0
votes
1answer
29 views

Security for FTP connection within a server

In PHP, I am accessing another user's files using FTP on the same server. In this case, do I need to use secure FTP or is it ok to have normal FTP as both source and destination are on the same server?...
0
votes
1answer
21 views

Adding a static token to ZAP vulnerability scanner

I am currently trying to get the OWASP ZAP scanners working on a peculiar website. When authenticated on this website, each GET request needs a "token" (most likely a anti-CSRF token) as a parameter. ...
21
votes
2answers
125k views

OpenSSH default/preferred ciphers, hash, etc for SSH2

When using OpenSSH server (sshd) and client (ssh), what are all of the default / program preferred ciphers, hash, etc. (security related) and their default options (such as key length)? So, what are ...
1
vote
1answer
59 views

Does the key size have an effect of the size of the public key and signature

If I have a 2048-bit RSA and a 4096-bit RSA key is my signature and public key smaller when I use a 2048-bit key vs a 4096-bit one ? (In bytes)
0
votes
0answers
14 views

HIPAA : Writing Policies and Process For Workstation Surroundings

I am writing policies that the company will follow and I am going through the HIPAA compliance check list as a guide. I am trying to make sense of this item though. To me a lot of these seem vague and ...
0
votes
1answer
66 views

Server getting probed: why can I see successful GET requests to other sites?

I put up my site yesterday and this morning I saw a lot of requests in the logs. I have seen this before, and immediately could tell it was someone/something probing the server. Most of the requests ...
0
votes
0answers
25 views

Any good analysis tool for wireshark captures to find malicious activities? (forensics) [on hold]

If someone has a Wireshark capture file (pcapng), and this is given to a professional digital investigator, how does he/she proceed to analyze a capture that has more than 200k packets and a lot of ...
0
votes
1answer
39 views

What are MITM proxies used for in enterprises?

My company (like many others I assume), uses a "man in the middle" proxy with a personal root CA. Disclaimer : I'm not a security expert so perhaps I do not correctly understand what this network ...
0
votes
1answer
40 views

How DHCP client can determine that 802.1x Port based authentication has been completed and its time to trigger DHCP discover

I have a Supplicant running on 1 Linux box attached with a Free radius server on other linux box with cisco catalyst switch (with 802.1x Port based access) in between. Now I have been able to ...
0
votes
1answer
62 views

wpscan is not show the real version

When I scan WordPress site with wpscan I see in the results that I have version 2.10.3 in WP Rocket Title: WP Rocket <= 2.10.3 - Local File Inclusion (LFI) | Fixed in: 2.10.4 But I when I ...
0
votes
0answers
14 views

Storing files in database through encryption and Viewing them only on providing key for the file

I have this use case: User1 uploads his file into the database which should be encrypted. Any other users who request that file, user1 will be notified for approval, on approving other users should ...
0
votes
0answers
14 views

Would it be possible to exploit spectre vulnerability with typed lambda calculus?

In my understanding, to exploit the spectre vulnerability you need a language with an execution semantics close enough to the hardware to be able to introduce branches at will. Semantics of typed ...
3
votes
2answers
3k views

How to prevent sharing my Internet by Bluetooth tethering?

If my neighbor (whom I have allowed to connect to my router) is sharing my internet via Bluetooth tethering, is there a way to prevent anyone else from sharing my internet via his or my Bluetooth ...
0
votes
2answers
79 views

Is a password box with pseudo-random number of stars more secure?

I use a program that confused me while typing the password. It acts like this when I type the password ABC: I type: A Display: *** I type: B Display: ***** I type: C Display: ** I can think of the ...
1
vote
1answer
118 views

Steps to make website GDPR Compliant

I am working for a high traffic website developed in codeigniter. Can someone please help how to start working to make website GDPR compliant? Till now, I was able to identify the potential cookies ...

15 30 50 per page