-1
votes
0answers
8 views

THC Hydra command line : what am i doing wrong?

I successfully compiled THC Hydra with CygWin and also Burp on Windows 7. I have read quite a few tutorials but i cant seem to get hydra do its thing. Below is the info i got from Burp (i replaced ...
-2
votes
0answers
7 views

SQL injection when the password has a MD5 hash

Whenever i put username = ') or ('a'='a' password = any string It shows the . MD5 is converting my sql string into some hexadecimals. so is there any way we can bypass it? Also why can't we see ...
0
votes
1answer
18 views

What do think about this multi-factor authentication system made by me? How can I improve it?

I designed an authentication system as a project for a cyber security class. I want you to critique it please. Here is a quick explanation: Note: Sorry no images but I'll provide links to videos for ...
0
votes
1answer
15 views

Potential consequences of signing software that's not mine

I want to teach my son to not click unsigned software. Unfortunately there some software that's highly useful (e.g. Search Everything, but it could be any other software) that's not digitally signed. ...
0
votes
0answers
23 views

Browser Autopwn2 Unable to exploit Firefox 47.0.1

Virtual Appliance: VMWare Workstation 12 Player Local VM: Kali Linux 2 Remote (Victim) VM: Windows XP Browsers on Remote VM: Firefox 47.0.1, IE 6 This article explains Browser Autopwn2 exploit. I ...
0
votes
1answer
9 views

Firewall Packet Filter Query

I was reading about firewalls and I have this query. Is each firewall a packet filter? Why or why not? I know that the first generation of firewall's were essentially packet filters, but how does ...
0
votes
0answers
10 views

Is using passfifo secure if I don't want my passphrase to be captured?

This article indicates how to decrypt remotely a LUKS partition using passfifo. Quote: ssh -o "UserKnownHostsFile=~/.ssh/known_hosts.initramfs" \ -i "~/.ssh/id_rsa.initramfs" root@remote.server \ "...
0
votes
1answer
25 views

Command and Control Infrastructure

This is an academic question, I Googled a lot but couldn't find suitable answers for the question. What are the di fferent Command & Control infrastructures (Botnets) & what are the ...
0
votes
0answers
10 views

Bypassing SafeSEH in application without unprotected modules

I'm trying to write an exploit for a vulnerable Win32 application, which has DEP, SafeSEH and stack cookies enabled. I can write anything to the stack, as there is buffer overflow vulnerability in an ...
1
vote
1answer
32 views

Is wget'ing a single HTML file basically free of risk?

There is a lot of potentially malicious stuff on the web. In fact, there are so many things that can happen that browsing to a location you know nothing about can be dangerous, like http://www.example....
0
votes
1answer
21 views

EBP bypass problem

I am kinda new to exploit development using buffer overflows. I've come across a sample code in one book I refer to, and the sample code doesn't execute properly. Here is my code... #pragma ...
0
votes
0answers
16 views

Cleartext credentials proxy logs [on hold]

I am wondering if anyone thought about this. Obviously, checking HTTP GET and POST method calls is the starting point. Is there anything else other than username:password format that should be ...
0
votes
2answers
27 views

How does software developer protect their code against binary patching?

Supposing we have a software that checks on a remote server online if the input entered by a user (a license key) is valid. The server sends in a socket to the client True or False if the license is ...
0
votes
1answer
14 views

Session id remain same after and before logging in asp.net application

Before logging in to the asp.net application, i checked the headers and there was already a session id in cookie header cookie: ASP.NET_SessionId=3de0es3brpfbcmvkzhkidsmt And when i logged in to the ...
1
vote
1answer
40 views

How safe is to leave a open port on router without anything listening to it?

I'm using plex remote, and I have a double-NAT on my local network, so I need to open ports on the two routers. As far I know, I have made secure connections to be required. And I don't plan to ...
4
votes
1answer
506 views

How can I determine (as a layman) if an E-mail was set to self destruct?

I tried to access an old E-mail to print for a court case only to find there is no content. I checked on all my devices and outlook account. The E-mail in question is from a gmail user and I have ...
0
votes
2answers
60 views

How TLS certificate chain is verified

Assume the verification of a TLS certificate chain. Suppose the chain has certificates A-B-C-D where D is the root certificate and A is signed by B, B by C, C by D. Suppose the intermediate ...
0
votes
0answers
4 views

Iterate through and decode Dot11Elt layers — Scapy

OBJECTIVE I want to iterate through the Dot11Elt layers of a beacon frame that I captured with Scapy. I also want to decode the .info of each ID layer. def packet_handler(packet) : if packet....
-2
votes
1answer
31 views

Not sure if I have got a virus

About an hour ago a friend of mine sent me a suspicious link on Skype. It was a 'Goo.gl' link with my username in the url. I accidentally clicked on it and think I've gotten a virus. However I'm not ...
0
votes
1answer
44 views

How to Edit Malicious Webpage in BindTCP

I'm studying Ethical Hacking, using BindTCP on Metasploit, Kali Linux. This video shows the steps, and I successfully exploited an unpatched Windows XP running a vulnerable IE 6 (on my personal ...
-1
votes
0answers
31 views

Malware from TPB(piratebay) infected my pc. I need to transfer my data into external hdd before wiping my hard drive [migrated]

OS: Windows (Primary), Ubuntu (secondary). Few days back I was using TPB(piratebay) obviously for educational purposes,even though I have ad-blocker at the time of browsing some advertisement did pop-...
0
votes
0answers
22 views

Client side encryption over SSL

I need to handle hyper secure data collected from webforms on a site. I was thinking of using whole site SSL encryption with client side encryption of the forms data. Due to a higher than usual risk ...
0
votes
1answer
35 views

understanding where tor interferes (screenshot)

with just goal to better understand where tor interferes and where it hides my browsing from ISP, please look at this picture which just explains how to computers communicate. You can check on step ...
0
votes
1answer
14 views

Can 802.1X, EAP and RADIUS work together?

So this is an academic question I came up with while researching the topic. Can 802.1X, EAP and RADIUS work together to provide a secure authentication? If yes, how? Thanks!
0
votes
0answers
18 views

Iphone 6s/ Ipad mini won't connect to proxies? [on hold]

I've tried charles proxy and fiddler. I'm not really tech-savy, and the tutorial mentioned something like using an app that uses connections for charles/fiddler to detect for confirmation, but before ...
0
votes
1answer
8 views

Can software keyboard add security to decrypting FDE'd Drive

Having a LUKS Full Disk Encrypted Linux installation means that I need to input my decryption password before the Operating System can even start. This will require me to use a hardware keyboard on ...
-4
votes
4answers
96 views

Keeping passphrase away from telepathic interception

Assuming that someone is able to telepathically intercept thoughts and words in my mind, what mechanism will allow me to authenticate securely? A solution that does not yield to physical search or ...
-2
votes
0answers
11 views

What is the use of TCPoptimizer? [on hold]

So,I have Windows 10. I switched off update option,so my bandwidth will not used by Microsoft by default. Then I made some changes and used TCP optimizer. SO which is more effective? switching off ...
-1
votes
0answers
7 views

Knowledge base solution access [on hold]

Presently working on a knowledge-based solution platform which I want to be accessed both online /offline via data and sms by searching keywords.... Please I need help with regards to the offline(sms) ...
0
votes
0answers
4 views

Who and where X-Forwarded-For header in user's request is added? [migrated]

X-Forwarded-For is a HTTP header which is used to identify the IP Address of originating user. I was wondering "where" this header is added in the request and "who" actually adds it? Is it your ...
0
votes
1answer
18 views

how to debug for DNS changing Maleware on (linux/android)?

So by opening an application/browser on my Android device, I found that it pops open a set of ads. I channeled a proxy through my laptop trying to track the first web site it connects to. Later I ...
-3
votes
0answers
30 views

Dictionary File Generator for download [on hold]

I have seen in many different sites people searching by a good dictionary file or a good generator, I myself did that last week and didn't find good alternatives, so decided to code my own generator ...
-2
votes
0answers
25 views

Am I being spied on?

[chrome.exe] TCP 192.168.0.2:53959 ord30s21-in-f2:http TIME_WAIT TCP 192.168.0.2:53960 ord30s21-in-f2:http TIME_WAIT TCP 192.168.0.2:53962 www:http ...
0
votes
0answers
27 views

Why is it so hard to make longer hashes?

I was reading this answer about why there is no such thing as a SHA-1024 hash: SHA-2 was built with state and word sizes to meet the security requirements on commodity computers (x86 and Alpha), ...
0
votes
0answers
12 views

Can a third party passively read transmissions if WEP / WPA / WPA2 key is known?

If I connect to a WiFi network sporting either WEP, WPA or WPA2 encryption, can someone other decipher my communication he passively received if he knows the network's passphrase?
0
votes
0answers
19 views

Error based injection in Insert query

I'm trying to test a challenge website using ModSecurity as a WAF. When I put ' in the user agent I got an error from MySQL. You have an error in your SQL syntax; check the manual that corresponds to ...
0
votes
0answers
7 views

How to create alerts for Watchgurd firewall in SIEM

I'm working in a SOC (Security Operation Center) where we use a WatchGuard firewall in our customer's environment. We currently create alerts for other devices (SonicWall,Cisco ASA) based on event ...
0
votes
1answer
25 views

Metasploit INFILENAME

I am learning *MSF on Kali but I ran into a problem. I am trying a simple adobe_pdf_embedded_exe and when I set INFILENAME to something simple such as nutrition.pdf it cannot find the file, so ...
0
votes
0answers
6 views

Why is my 3rd gen X1 Carbon not showing the “ThinkPad” logo when Secure Boot is disabled?

When I disabled Secure Boot, it still showed the "Lenovo" logo, not the "ThinkPad" one (the one it normally boots up in out of the box) Could BIOS malware have caused this?
2
votes
0answers
24 views

How does a website know my location? Checked with ipleaks and VPN seems to work correctly

Recently I have been using a VPN to watch a free web series available only in the US -- on a website called https://go90.com. Until a few days ago everything was running smoothly with just Hola VPN. ...
1
vote
0answers
18 views

Which clients support only TLSv1.1 but not TLSv1.2? [on hold]

I phrased the question originally as Is there any point in supporting TLSv1.1 on the server side? The recommended current setup if you don't have full control over your clients is to support TLSv1.0, ...
1
vote
1answer
6 views

Why doesn't the number of bytes required by GnuPG generating the key decrease?

I ran a gpg --gen-key on a remote machine connected with SSH and left it to do its job. It finished successfully, however during the execution time it asked to perform random actions to collect more ...
0
votes
3answers
88 views

How a professional hacker would penetrate a computer in a network?

Which kinds of vulnerabilities or security holes a hacker would use to penetrate and take over a computer in a network, like a normal PC in a default network (Wireless-LAN). I often hear that the ...
1
vote
1answer
17 views

How secure is it to use ODBC Driver with SSL

When Connecting from clients (such as Windows) to remote databases such as (MS-SQL Server), it is usually advised that this connection be via a service that runs on the database server. It is ...
18
votes
4answers
2k views

How can html5 geolocalisation bypass my vpn?

About two month ago I've decided to use a vpn all the time (it's launched at startup) for various reasons, privacy being the first one. But recently I realized that if you agree to share your location ...
-2
votes
0answers
27 views

Suspicious addresses from netstat -b under chrome.exe [on hold]

[chrome.exe] TCP 192.168.0.2:54827 69.172.216.55:https TIME_WAIT TCP 192.168.0.2:54828 69.172.216.55:https TIME_WAIT TCP 192.168.0.2:54829 69.172.216.55:https ...
0
votes
1answer
70 views

Is a rootkit not an exploit?

I once referred to the bluepill rootkit from 2006 as an exploit. I was corrected and told that rootkits aren't exploits. Is this true? I thought an exploit included any software that was used to ...
0
votes
1answer
30 views

How To Stop A Mobile Verification Attack

I am thinking of using mobile phone number verification for the sign up step in my web application but how do I prevent a hacker or a malicious user from sending mobile verification requests to an ...
0
votes
1answer
53 views

Do I have the private keys to CAs installed on my browser?

Could someone please help explain the following comment from Why was the private key of the Superfish certificate so easily extractable? The main issue with private key extraction is the use of ...
3
votes
2answers
56 views

How to trust root CA

When I download a browser such as Mozilla, it comes bundled with several root Certificates. How do I trust that these certificates are legitimate? How do I know that my download does not contain ...

15 30 50 per page