0
votes
0answers
5 views

nmap not running as root shows unknown open ports

On a server running Ubuntu 14.04.2 I was doing some basic security auditing when I ran the command nmap -p -d 1-65535 as a non-root user. Interestingly it reported a few (1-5 at a time, average, ...
1
vote
1answer
18 views

ssl+symmetric with my own encryption algorithm?

I am a final year student currently doing my project, the title is "Mitigating man in the middle attacks using ssl+symmetric key algorithm". I would like to create my own encryption algorithm. I need ...
0
votes
0answers
6 views

OWASP Orizon implementation

I am working on developing an efficient tool for source code security testing. I have looked into OWASP's Orizon project. It looked interesting, but I am not able to get proper example implementations ...
0
votes
1answer
22 views

Does recursive hashing weaken properties of a cryptographic hash algorithm?

Specific example of mine concerns the probability of collision, where I have two plain texts A and B that I want to hash using MD5. Given the cryptographic hash function H and the following: A' = ...
1
vote
0answers
8 views

What sort of attack can reset MySQL Privileges and unmount remote drives without root or shell?

ATTACK VECTOR Monthly hits via a globally DDoS attack. Resolved with Cloudflare. Attacker can now somehow unmount network drive links and reset MySQL user permissions for applications. Attack is ...
1
vote
1answer
65 views

What does this PHP injected-code do?

I've just found out that all of my websites on one of my server has been hacked. Some seemingly malicous code was injected into all index.php files: /*EngineWork*/ if(!defined("FDSJERIUI234FSDF")){ ...
1
vote
1answer
30 views

What are the biggest security risks/considerations for hosting your own private website?

I have a small personal website hosted through go-daddy. I also have an old machine sitting in my garage collecting dust. I know enough to make my old dumpy machine a Linux server for my tiny website ...
-2
votes
1answer
30 views

Is there a successor for PGP in progress? [on hold]

I heard there is such a tool in progress, but I cannot find it anymore. Maybe it was a crowdfunding or a big foundation like Mozilla that is working on this. What projects are working on a better ...
1
vote
0answers
18 views

What methods can be used to prevent the browser (IE11 specifically) from storing credentials / autocomplete

Going through Pen Test and it was asked of us to disable auto complete in our CC payment fields. We tried adding autocomplete=off and also tried false on the input filed. A ny suggestions to ...
4
votes
2answers
144 views

In light of the FREAK TLS vulnerability, why do so many servers still offer RSA-EXPORT keys?

Ars Technica is reporting on a new attack against HTTPS. Called FREAK, the devices reported as vulnerable include iPhones, Android devices, and Macs running OS X. The attack (as I understand it) is ...
0
votes
0answers
12 views

Why should I include a client_id in an OAUTHv2 password grant request?

Like little red riding hood, you don't know who is knocking on the door... Why even bother accepting a client_id in case of API <-> Javascript-website or API <-> Android App password grant ...
4
votes
1answer
36 views

Realistic: Exploiting a computer on BIOS/ hardware level in less than an hour? (Infinite preparation time)

I wonder how hard it it to infect a laptop or netbook in 60 minutes or less in a way the victim cannot easily clean their machine by wiping hard disk drives. Let's assume the following: The ...
1
vote
0answers
25 views

How can I view the Chrome padlock SSL certificate information in Chrome Mobile on Android? [migrated]

When I'm on my Desktop Chrome, I can click on the padlock icon in the address bar and see the information about my SSL connection, like the TLS version, the certificate strength, the authority that ...
0
votes
2answers
51 views

Can a school legally access an account that a student logged in to at school? [on hold]

Is this scenario legal, A school has a few public computers that can be used. The only browsers that are installed are chrome and internet explorer, and the entire network is man-in-the-middled. ...
1
vote
0answers
27 views

rootkits subverting the windows kernel source code [on hold]

I just purchased the book "rootkits: subverting the windows kernel" by Greg Hoglund and James Butler for a research project at work. However, this book constantly refers to the source code that can be ...
0
votes
0answers
8 views

Tomcat client certificate authentication, client certificate not sent [migrated]

I've add client certificate based authentication on our Tomcat servers. Both client and server are tomcat servers with internal CA issued certificates. Each tomcat has its own keystore (PKCS12) ...
0
votes
0answers
18 views

Decrypted True Crypt Hard drive And now it shows as RAW [on hold]

I have the recovery disk when I originally encrypted it. The volume no longer shows as encrypted but not sure if I should restore the original volume or try a data recovery software? Thank you.
2
votes
1answer
30 views

Ideas on how I can fragment captured network traffic?

I am trying to create a lab environment where I can analyze common IDS solutions (starting with Snort specifically) and their ability to reassemble fragmented IP trains. I have a collection of ...
1
vote
1answer
27 views

How to grade / judge / evaluate a steganography approach?

When it comes to evaluating a text steganographic approach, I think we have to consider these things: How unlikely it is for someone to guess that there is a hidden message in the message being ...
1
vote
0answers
18 views

List of cookie parameter names to identify load balancing mechanism [duplicate]

I need to create my own web application security assessment methodology. Within fingerprinting section I have one test case such as "Checking for load balancing". One part of that test case is to ...
4
votes
1answer
37 views

Securing client-side data from users

So my problem, in its general form, is encrypting test questions such that a client-side testing application can access the questions while students cannot. The naive approach, in my opinion, is to ...
4
votes
1answer
17 views

What security problems does copying .Xauthority to another user present?

If I want to use a GUI application with another user (example: webbrowser), I can copy the .Xauthority file to that given user's home then I can "su - user" and start the GUI app. Question: but what ...
0
votes
1answer
38 views

What are the repercussions of a DDoS attack on a website? [on hold]

First of all, I'd like to know what exactly a DDoS attack is- my understanding is that it's a collection of infected or "zombie" computers, all controlled by a central computer, with the intent of ...
0
votes
0answers
20 views

How do you all differentiate attack protocols (inclusive too layer 7s)? [on hold]

Say like dns or tcp. Or something less usual like essyn or ntp? Would you guys mind listing differences?
5
votes
1answer
1k views

Why is my debugger detected as a Trojan by anti-virus software?

I'm trying to use a deugger (namely OllyDbg) to analyze some exe files. However, all the versions I downloaded from the Internet are considered as Trojans by some anti-virus software. (I use ...
-3
votes
1answer
81 views

I'm getting thousands of JS button clicks per second on my site. What could be doing that and why? [on hold]

I just set up a front end event tracking system using Segment.com and I found out that there are thousands of button clicks from one IP with a ~2 millisecond difference. These are not HTTP requests, ...
0
votes
2answers
60 views

Is using an free and anonymous VPN service safe? [on hold]

There are VPN services that are totally free and high speed vpn which makes me think, how can they offer such a service for free without ads nor donations? Is using this VPN safe? Regarding my ...
1
vote
0answers
33 views

Random SYN_SENT connections to Amazon EC2?

I have looked around but couldn't find anyone else with this issue. On my console (standard asus i7 laptop) running Ubuntu 14.04 LTS - I noticed in tcptrack that there are a lot of connections being ...
0
votes
1answer
34 views

DDoS Detection devices available in the market? [on hold]

Wanted to know what DDoS detection devices are currently available in the market.My organisation has its dedicated firewalls and routers.But we wanted to know if there are any devices in the market ...
1
vote
0answers
18 views

Unrestricted file upload on a cloud based platform [on hold]

We have an unsecured file upload for the user to upload any file they want, our application is Azure based so they are stored as blobs not as a traditional "file on disk". Could malicious code still ...
1
vote
0answers
20 views

application/json Content-Type character set

According to the OWASP Application Security Verification Standard: V11.3 Verify that every HTTP response contains a content type header specifying a safe character set (e.g., UTF-8). According ...
16
votes
4answers
2k views

How does Android L achieve strong encryption with a low entropy passphrase?

After upgrading to Android L on my Nexus 5, I was pleased to find that I can enable encryption using a pattern as the passphrase. However, it soon got me thinking. I'm guessing the encryption key is ...
0
votes
0answers
3 views

Jradius Client : Invalid or unexpected EAP payload received [migrated]

I am trying to integrate with jradius client to communicate with Cisco ISE server for EAP-TLS authentication. I ran a sample test and below is the issue I am seeing in ISE logs: "TLS packet parsing ...
2
votes
2answers
41 views

One Time Password via Text Message: Possible exploits?

Is there a credible scenario in which the OTP (One Time Password) for online credit card transactions ( specifically for Verified by Visa) can be bypassed? Context: A guy I know was cheated via the ...
0
votes
1answer
14 views

AES CCMP SECURITY ENGINE [on hold]

256 bit AES encryption with HMAC/SHA-256 does this do only encryption or decryption also and whether aes-ccmp protocol is more advantageous than this or not ?? which is more prefered in security ...
-2
votes
0answers
16 views

Detecting kernel process? [on hold]

How to detect the process running in the kernel of windows ? is any API is there to see the process. i don't have any idea to check.this is to check weather any illegal process is running inside the ...
0
votes
0answers
5 views

Mobile Monitoring [on hold]

Concerning monitoring the mobile device regardless to the reason behind this monitoring. What are the methods of Mobile monitoring including all installed application such as WhatsApp, Hangouts etc? ...
0
votes
0answers
18 views

KeePassX and Dropbox [duplicate]

I am currently using KeePassX on Linux to allow me to have a different strong password for each website. With this program there comes two major inconveniences: I lose access to everything in the case ...
2
votes
3answers
96 views

Sending an encrypted PGP email to someone who doesn't yet have my public key

Suppose I have the public key of a recipient I'd like to send an email to, and I've never sent this person an email before. Does it make sense to encrypt my first email to this recipient and also ...
2
votes
3answers
40 views

Clarifying self-signed certificates vs root certificate authority

I hope someone can help me understand some fundamentals on SSL certificates that I've had trouble picking up from docs, Wikipedia, and just about everywhere else on the internet. I'm working on an ...
0
votes
0answers
2 views

Prevent children of process protected by seccomp from having same seccomp protections? [migrated]

I'm writing an application which is protected by seccomp. This application uses fork() and then execvp() to run certain programs. It seems as though any child process of my program will be constrained ...
0
votes
3answers
68 views

How to make undetectable malware [on hold]

Fred Cohen in 1986 has proved in his Ph.D. thesis the undecidability of viral detection (no perfect virus checker can ever exist). My question is : Is it possible for a malware to stay very long time ...
2
votes
1answer
42 views

Does a browser have to make multiple requests to verify an SSL certificate chain?

I've learned that SSL certificates can be chained, and the browser will use the issuer's public key to verify the issuer's signature. I have read this article, which has a very helpful diagram, but it ...
0
votes
3answers
39 views

Do all non-CA certs have to be End Entity certs?

Still learning the differences between certs. Can someone explain? The internet has so far been surprising not lucid in describing certificates. *EDIT to clarify EE
0
votes
1answer
29 views

Infection through Virtual machine in NAT mode

I have a VM box configured using NAT to my host OS. It seems I can ping to the machines in my LAN. If my VM box got infected somehow my malware while surfing, would the malware be able to infect ...
1
vote
0answers
36 views

Disable webcam in Firefox [migrated]

Firefox has introduced a new "feature" called Hello, which accesses your webcam and microphone to allow you to start "conversations" with friends. For obvious reasons, I find it quite disconcerting ...
0
votes
2answers
36 views

Does preventing buffer overflow attacks prevent ROP attacks?

Would preventing buffer overflow attacks prevent Return Oriented Programming (ROP) attacks?
1
vote
0answers
17 views

CCM instead of key wrap

Is there any instance of NIST or other encryption standards using AES-CCM to encrypt/authenticate key data? I would like to use CCM over a keywrap function, but cannot find any precedent for this in ...
-3
votes
0answers
23 views

using a php hash function [duplicate]

I am a student majoring in IES specialization. Currently I have a project where I want to encrypt important information using php and I want the best hash function for storing passwords.
6
votes
0answers
24 views

I want trusted SMIME certificates for 3rd parties. Is this a reasonable configuration?

I want to send out SMIME certificates with my emails, and want to deploy the following PKI Root01 (All EKU, All Constrants, No Restrictions) PolicyInt01 (Internal applications, not trusted by 3rd ...

15 30 50 per page