All Questions

0
votes
0answers
29 views

What is recommended size for Suricata Ruleset (i.e., Signatures)? [closed]

What is the recommended size for Suricata ruleset(i.e., Signatures)? Kindly answer with some references, reason.
0
votes
0answers
56 views

Can former employer access laptop [closed]

I have an old laptop from my prior job. Can my employer access my activity if the computer is turned off? What triggers them knowing I have the laptop- turning on the computer, going on the internet?...
0
votes
0answers
31 views

Cracking signing and HOTP blackboxes

If there are these blackboxes, both are using algorithms which are considered secure yet: Blackbox will sign any message, no limit for messages to be signed. Blackbox will generate 8‐digit HOTP code ...
1
vote
1answer
53 views

Will SIM‐like PIN on website as second password increase security

On SIM cards, which are used in mobile telephony, PIN (and PUK) is used. Unlike a password, they are locked after some incorrect attempts to prevent brute force attack. If wrong PIN is entered 3 times,...
0
votes
0answers
45 views

What kind of routers do a security operation centers use? [closed]

I’m doing a project where I have to design a SOC from the ground up and I cannot find information about what routers a SOC uses.
-1
votes
0answers
198 views

File named DTAG randomly downloaded on computer

I was on Linkedin, and suddenly, a file named 'DTAG' downloaded onto my computer (I saw it pop up on Google Chrome). My computer said that the file was empty (Zero Bytes), but I was curious about what ...
1
vote
1answer
57 views

Exact difference CSRF vs. DNS Rebinding attacks

I am currently studying CSRF and DNS Rebinding attacks and I am wondering what the exact difference is. As far as I understand, DNS rebinding is way to bypass CORS and thus get information from a ...
0
votes
1answer
69 views

Advice to detect suspicious activities on network

A private network (about 150 PCs) is connected to the internet through an edge router. According to the net admin, his network is scanned from the outside, at the edge router. I don’t have any more ...
0
votes
0answers
55 views

JSON(blob?) to POST/GET request [on hold]

First i want to say that i'm not sure if its called JSON blob, I found API endpoint on private program which i can convert from JSON to normal GET/POST request with parameters however i have found ...
0
votes
0answers
35 views

Mac OS X - trashcan won't empty [closed]

what does this mean? The operation can’t be completed because an unexpected error occurred (error code -50).
0
votes
1answer
46 views

Scanning multiple hosts with Nmap's Default Accounts NSE script not producing the expected result

I'm utilizing Nmap's default account credential scanner. I've built a couple of my own fingerprints and I've tested that the fingerprints work when scanning one host at a time. Example command line ...
3
votes
2answers
142 views

Feasibility of cracking a SHA256 of a UUIDv4

Given the UUIDv4 08ab4280-0043-4630-b4c7-a5393083546c which hashes to 27fd3a1ea8a58bd06cced89927fadffbb2f4815203723e5cd4ab18acbe37b659. How feasible is it to crack a SHA256 of an unsalted UUIDv4? The ...
-1
votes
1answer
122 views

Is there a risk in remote access for the person that is remoting in?

It is obvious that the machine that is receiving a connection is exposed to malicious actions, but is there a risk for the machine that is remoting in, as a virus or worm spread through this ...
1
vote
0answers
51 views

Is Dell SupportAssist insecure?

On an OEM Windows install on a Dell XPS 13, when I navigate to the Dell support website, it offers to download and install updates (even firmware updates!) on the spot, in the browser, flaunting all ...
1
vote
2answers
57 views

Is it imporant that a cookie should have secure flag set if the website is running on HTTP?

I am working on a website and I want to know if a cookie needs to have a secure flag set or not if the website is running on HTTP. Also, httponly flag is set on cookie but there is no secure flag.
0
votes
1answer
241 views

Is there something fishy on Kaspersky Internet Security or I am missing something?

Whenever I turn on my computer, a notification pops up - You need to restart you PC (I have added screenshot). I did, but it keeps coming. So went to notification center and saw which application is ...
0
votes
1answer
65 views

Safe to switch from PBKDF2 to SHA-1 for token verification?

Whenever I need to generate a token (email account confirmation, password reset, remember me cookie, view email in browser etc) I generate a string of random bytes (typically 32 using the Fortuna PRNG)...
1
vote
1answer
65 views

Subdomain Scan protection

I have seen that all our subdomains can be eaisly be scanned with help of websites like dnsdumpster. What is the best way to protect subdomains of any website from getting scanned or revealed via ...
-1
votes
1answer
58 views

For what this special header is used? [closed]

While pentesting I found this special header, header's value contains all the parameter's name which are being sent in the post body request. for example if in post post name, email and password are ...
0
votes
1answer
104 views

What's the safest way to make home server available from outside the network?

I have an old laptop that I decided to use as a server, with some samba shares and whatnot (making available some dvd rips and the like), and I'd like to be able to access the files in it from not ...
1
vote
2answers
150 views

If I am able to generate the same public key as someone else, do I also get the same private key?

I have a very basic understanding of the asymetric encryption. I have a couple of simple questions. I know I can generate a key pair, of public and private keys. If by co-incidence my public key ...
1
vote
1answer
50 views

OpenSource API Security Testing Automation?

I had been tasked with automating application api security testing for proof of concept project which requires me to propose a tool. Now this tool has to provide data results as json/xml or otherwise ...
0
votes
2answers
91 views

How can we trust a CA?

During the SSL/TLS handshake we are checking the authentication of the client and the server. During this process certificate chain also comes into the picture to trust/complete the certificate chain....
-1
votes
0answers
48 views

Chain of security by booting Linux

I am curious if there is any solution that ensures that the actual OS I start is safe. I have SecureBoot on my microserver, and that way I can ensure, that GRUB is safe. But what about the drive ...
1
vote
1answer
55 views

MFA for multiple accounts?

We are thinking about enabling 2FA with Google Authenficator for all our services. But the only concern for me now is that users will have to have a dedicated Authenticator's account for every ...
0
votes
1answer
45 views

Security concerns around sharing secret on a website

I need to share credentials with users. These credentials are created when the user wants them, but cannot be chosen by the user specifically (AAD credentials). I want to share the same with the user ...
70
votes
12answers
17k views

Why do people hide their license plates in the EU?

I often recognise that people blur their license plates on pictures on the internet in Germany. I can't figure out what's the fuss. The information is public nevertheless (I mean it's on your vehicle),...
-1
votes
1answer
42 views

How to block website with the particular ip address using host file

I have blocked websites for a user in Lan environment through changing host file on his pc. like this- 127.0.0.1 youtube.com (Succeded). But i want that if user use other ip address (mobile hotspot or ...
0
votes
0answers
46 views

help eradicate malware [closed]

n00b there infected with a bootkit, i never seen something like before ill do some stupid questions then... i already learned some topics about firmware infection, mbr infection and uefi infection, ...
0
votes
0answers
24 views

Assistance with an interview assignment for my Techincal Writing Class [closed]

I have an assignment to interview someone who works in the field I'm studying for my major. I'm planning on a BAS in IT Security so if anyone here doesn't mind answering 10 quick questions i would ...
0
votes
1answer
64 views

PHP HTTP Reverse Shell?

Is there a PHP HTTP reverse shell? I haven't been able to find one, only ones that transmit using TCP packets (not HTTP). Note, I mean actually using HTTP packets as the C2, not just transmitting TCP ...
0
votes
1answer
58 views

ClamAV detects virus in Modsec Audit logs

I have a Xen VM running Debian Stretch with Apache2 to play around with. I have installed ClamAV and Modsecurity (not doing anything just logging at the moment). I keep getting emails from ClamAV ...
1
vote
1answer
241 views

What is this PowerShell script sending Discord info to random server?

Upon turning on my personal Windows 10 computer tonight, I was greeted with ConEmu telling me that two PowerShell commands were run at startup. Both commands were the same thing: powershell -...
1
vote
1answer
37 views

Tracking script creates vulnerability

I am using a third party service that provided a tracking script which when embedded in the page seems to create some kind of vulnerability as occasionally people are redirected to a phising link ...
1
vote
1answer
38 views

Running jobs as local administrator vs domain administrator and their risks

I know for best practices we should always give an account least privilege and use that account to run jobs etc. However our windows jobs often require elevated privileges in order to perform the ...
0
votes
0answers
22 views

Linux Kernel exploitation via MSFconsole

I am running a server with the service linux kernel to practice pentesting with metasploit. I am trying to use CVE-2019-10124 to take it down, however I don't really know how to. I am aware that ...
0
votes
1answer
64 views

What MySQL information should be kept secret?

I'm writing an open-source program interfacing with a protected MySQL server. I'd like to keep the development environment as close to the production environment as possible. Variables that must be ...
0
votes
0answers
13 views

Is there any identification for common encoding/encryption? [duplicate]

While pentesting (web application) I come across lots of tokens which might be simply encoded and not random, but I don't know any way to identity if they are encoded or random, how to find is there ...
0
votes
1answer
53 views

How can Ettercap act as a client instead of a gateway?

I am trying to execute an attack that requires a full-duplex MiTM position. This is the reason why I choose to use Ettercap. I have picked DHCP spoofing as the attack of choice. The problem that I ...
1
vote
0answers
51 views

WAF is set to Alert, not block. We are seeing thousands of XSS and SQL Injection attacks. How can I tell if any were actually successful?

I'm pretty inexperienced with WAFs and the events/alerts it generates. I'm wondering how I can tell if any of those were successful? For example, in the last 24 hours we saw over 50K alerts/events ...
0
votes
0answers
27 views

Does an OAuth1.0a HTTP GET endpoint in my API present a security vulnerability?

I'm building a hobby application, and I'd prefer it not end up on a cyber-security expert's list of insecure sites. My application can post to Twitter on behalf of a user. This required implementing ...
6
votes
1answer
84 views

Is it bad practice to remove a resolved report from Open Bug Bounty archive? [on hold]

An XSS vulnerability report was made via Open Bug Bounty, which was fixed, confirmed and a reward was made. The reporter has marked the issue was resolved. They have further offered to remove the ...
0
votes
0answers
52 views

How can I derive an ed25519 key pair from a secp256k1 key pair? [migrated]

Alice has a secp256k1 key pair that she used some time ago when she communicated with Bob. Bob can no longer user secp256k1 but he only uses ed25519 instead. Alice and Bob cannot exchange any messages....
1
vote
0answers
58 views

Should I use the same OpenPGP keys in certificates used to provision the YubiKey PIV slots?

I know PIV and OpenPGP are separate standards and independent applications in the YubiKey, but for newcomers like me they look very similar with their signing, encryption and authentication keys, use ...
1
vote
1answer
65 views

CVV info for over the phone or by mail transactions

I am a newspaper circulation manager and a subscriber just informed us that we aren't allowed to ask for the CVV over the phone or by mail subscriptions. What is the correct procedure?
1
vote
0answers
44 views

Sending payload and additional commands via Python

I'm trying to exploit ropasaurusrex binary. Basically It has buffer overflow vulnerability. Binary reads data from stdin and fills it to buffer. My goal for payload is to overwrite EIP with address ...
-2
votes
1answer
53 views

Session key is the same throughout the session, can this behavior be exploited?

This application uses session key instead of CSRF token but this session key is the same throughout the session, it's not changing. It only changes if I logout and then login again to the application. ...
0
votes
2answers
66 views

Metasploit Starts attacking multiple targets, results in “address is already in use”

I am attempting to pentest multiple Weblogic servers, however, when I "run" or "exploit" or even "exploit -J", metasploit begins to attack multiple targets at once, which results in "address is ...
0
votes
0answers
16 views

What are some secure methods to share pre-created password? [duplicate]

I am working on something that requires me to create and share AAD(Azure Active Directory) credentials with clients. To give some context, Azure automatically creates a secret and then that secret has ...
1
vote
0answers
37 views

Is Mobile ID secure? Certificates on SIM card (Mobile identity management)

In Switzerland Mobile ID is popular. It looks like it's international known as Mobile identity management. Mobile identity is a development of online authentication and digital signatures, where ...

15 30 50 per page