All Questions

2
votes
1answer
68 views

InfoSec consultancy - infrastructure vs development

I work for a company that has done in house application development (for our internal systems) since its inception decades ago. Recently, however, the rise of APIs and real-time data transfer has ...
0
votes
0answers
25 views

install implants from pivot network in a silent way / stealth [closed]

I have access to another client. It can be Windows or *nix from a compromised web server. Then I created a ssh tunnel to my local network. It works perfectly, but I would like to know if this ...
0
votes
0answers
9 views

What is an external authoritative name server and its effect in DNS cache Poisoning [closed]

There are several obstacles an attacker like Eve must overcome to issue a fake DNS response that will be accepted. First, an attacker must issue a response to her own DNS query before the ...
4
votes
6answers
420 views

How likely is a collision using MD5 compared to SHA256 (for checking file integrity)?

Many sites these days offer MD5 and SHA256 hashes to check the integrity of downloaded files or archives. I wonder how much safer is the use of the SHA256 hashes for integrity checks? Note: Consider ...
1
vote
1answer
34 views

Does CSP block javascript in <a href> tags?

I recently discovered that its possible to run javascript from an <a> tag like this <a href="javascript:alert('test')"> and this gets run on the current page when clicked. It also seems ...
0
votes
0answers
72 views

Is my server under some kind of reconnaisance/attack?

Recently, I started up nginx on an Amazon EC2 instance. After a day, I started seeing these messages in my log. Some client keeps trying to call /add and /health.html on my server. I don't have those ...
0
votes
2answers
69 views

How shodan takes screenshots?

How Shodan takes screenshots from some webcam even if this webcam (IP adress) requires login? And how can I protect this? I can't have some thing on LAN network, because I need to join to it from far ...
2
votes
1answer
67 views

Concerning The OWASP Security Guidelines As They Apply To Site Registration / Could honeypotting work?

I'm tossing an idea around in my mind. I want to bounce it off the community to see if this holds any water. First - the OWASP guidelines never specify any method of action when you're dealing with ...
1
vote
0answers
34 views

How to display the SHA256 hash while signing or in signature

I realize (using --clearsign) that GnuPG is using SHA256 as the hashing algorithm for signing, but I would like to be able to see the actual SHA256 hash in the signature somewhere. Is there a way ...
-7
votes
0answers
86 views

I don't understand the type of text encryption… Anyone can help me to discover it? [closed]

Premise: I have found an old encyclopedia bought in 1992, consisting of 1 boot floppy, 1 Program floppy and other 100 floppies containing the database and the encyclopaedia photos. The disk with the ...
0
votes
1answer
83 views

Iterated SHA1 hashing and the effect on rainbow table computation

Scenario: 1000 distinct keys are each prefixed with the same salt, and SHA1 hashed. The hash output is then iteratively SHA1 hashed x times. Let's start with x is 100. The specification of the keys ...
0
votes
0answers
25 views

ARP requests from router to phone, captured on laptop network interface [closed]

I was using Wireshark to capture network traffic on my laptop's wireless network adapter. I suddenly noticed that my router is sending ARP requests to my phone. I am wondering why this would be ...
9
votes
2answers
1k views

Is there a loss of entropy by hashing an N-bit random key to produce an N-bit hash?

I read the following piece of code: dd if=/dev/urandom bs=16 count=1 2>/dev/null | md5sum Apparently, this code was used as a trick to produce a hex string key from a 128-bit binary pseudo-random ...
1
vote
1answer
63 views

Why does Cain and Abel downgrade SSH version 2 to v 1.51?

I am developing a lab exercise with Cain and Abel and want to know why it is necessary to downgrade SSH before attacking. Identification phase The server sends to the client an identification ...
0
votes
0answers
72 views

Is this script vulnerable to xss? If yes, how can i get an alert box?

I think this code may be vulnerable to dom based xss but i wasn't able to get an alert box. I am able to control the userTitle field, i tried using </script> but it get changed to u003c/...
-1
votes
1answer
34 views

Meterpreter download result return blank

I am performing the exploit,unix/webapp/wp_admin_shell_upload on wordshell website. Here is the screenshot of the exploit options. I managed to run the exploit. However when I want to download ...
0
votes
0answers
21 views

JS window.confirm cross domain security?

I have wrote an assignment for a course I am studying regarding social plugins like what you get with Facebook/Twitter, etc. With these platforms the user is directed to a seperate tab/window to ...
0
votes
0answers
31 views

How to check if installed Trusted CAs are not dangerous? [duplicate]

I've checked my Windows 7 installed Trusted Certificate Authorities using MMC tool as below: Questions are: How can I be sure that they are genuine and are installed by Microsoft and not by a third-...
0
votes
0answers
11 views

Tool for checking credentials across entire network of Windows hosts? [closed]

I'm looking for a tool to check a set of credentials against a network of Windows hosts, preferably using CIDR notation (/XX). I know of CrackMapExec, but I would prefer another tool. I've been ...
0
votes
0answers
34 views

Protecting/Crypting an external storage

We have an camera with sd card in which it records. AFAIK its software, recording parts etc., cannot be stepped in. We wish a mechanism/methodology that whenever it is plugged into usb socket of a ...
-2
votes
0answers
35 views

NoScript(Firefox plugin) in terms of security?

Encode them before executing the page on the user’s web browser (i.e. NoScript - Firefox plugin) I'm reading about XSS defenses, the slide describes the quote as "proxy-based XSS defense". How can ...
0
votes
1answer
24 views

TLS 1.0 and TLS 1.2 enable simultaneously

We have a web front end server with TLS 1.0 enabled for web application in IIS. This WFE communicates internally with external workflow manager server through fqdn and TLS 1.0 If we enable TLS 1.2 ...
-2
votes
0answers
22 views

Where to access healthcare network data sets, such as UEB? [closed]

As a data science student with a infosec concentration, I'd like to create a project that involves analyzing a hospital's network traffic for threats. New to the discipline, I am thinking about ...
0
votes
1answer
37 views

how can I check if crackmapexec is noisy? [on hold]

I would like if someone could give me a hand with this tool called crackmapexec. I want to know in those cases of red teaming when we only have one opportunity to pwn all the comapny at the moment to ...
1
vote
1answer
57 views

AES, RSA, ECC Key size

It is generally said that 2048-bit RSA keys are roughly equivalent to 128-bit symmetric keys and 2048-bit RSA keys are "sufficient for commercial use until around the year 2030" (https://security....
-7
votes
1answer
188 views

How to disable obsolete/insecure TLS_RSA ciphers to harden Chrome? [closed]

Multiple vulnerabilities have basically obsoleted TLS_RSA, CBC and QUIC implementations. February 9, 2019: "Seven researchers from all over the world found --yet again-- another way to break RSA ...
0
votes
0answers
20 views

What is the proper procedure for a ATM security disclosure? [duplicate]

I've discovered a possible security vulnerability in a line of ATMs. What is the ethical notification protocol? How long does one wait after notifying the company before making a public disclosure?
9
votes
1answer
524 views

New TLS encryption-busting attack also impacts the newer TLS 1.3, is ECDHE_RSA also affected?

February 9, 2019: Source: New TLS encryption-busting attack also impacts the newer TLS 1.3 "Seven researchers from all over the world found --yet again-- another way to break RSA PKCS#1 v1.5, the ...
1
vote
1answer
76 views

How to combine symmetric and asymmetric encryption to encrypt large files?

I understand that it is possible to combine symmetric and asymmetric encryption in a way that makes use of the performance of symmetric encryption, and also getting the benefits of being able to ...
-3
votes
1answer
46 views

Finding encryption type of hash [closed]

Is it possible to find encryption type of a hash with a salt? I have my other password in same encryption type, with the hash from that and the password, if that helps. $2y$10$...
0
votes
0answers
21 views

Generate symmetric key programmatically using openssl EVP

Am learning OpenSSL EVP API and trying to understand the ways to generate a symmetric key using OpenSSL EVP in C++ program. I have two questions in this regard: 1) To understand what the command ...
-2
votes
0answers
21 views

io.fabric.ApiKey what is it? [closed]

While doing recon on my target for bug bounty I found: io.fabric.ApiKey in AndroidManifest.xml What is it and whats the impact?
1
vote
1answer
51 views

How to verify website owner behind CloudFlare SSL?

I went to Bittrex today and noticed the SSL certificate is issued to CloudFlare, not Bittrex, as seen in the screenshot below. I'm used to seeing information on this screen which can be recognized as ...
0
votes
0answers
9 views

Is there any way in which i can configure Windows IPSEC policy to use just AH mode and not ESP

I have done windows machine authentication with Linux running free swan server. With default configuration i could see ping encrypted with ESP. But i want to test it with AH also. Is there any way in ...
0
votes
1answer
76 views

How to analyze and track what data a software sends?

How can i track which program sends data over my network and can i see the contents of it? If we have a AV software installed in a VM , can we see what it's sending from your pc when doing a scan?
0
votes
0answers
29 views

mysql login failture [migrated]

I have the problem that someone / something is trying to connect to my database without a user / password. Port forwarding on 3306 is not active. My SQL error log: 2019-02-06T15:32:32.888533+01:00 ...
1
vote
1answer
35 views

SSL/TLS and PKCS#1-1.5 Encoding - Why?

I read about SSL (version 3.0) and that the PreMasterSecret (pms) is encoded with PKCS#1-1.5 before the client encrypts it with the given public RSA key and sends the encryption to the server. So the ...
0
votes
1answer
38 views

Volatile memory only computer

I was wondering, Is it possible to create a fully volatile computer, with no memory at all (not even in the BIOS! all volatile!), that will be loaded on each boot from a read only live CD. Such that ...
0
votes
1answer
21 views

DNS query with netcat (convert DNS queries into hex ASCII)? [closed]

This article is interesting. He created this string using the tshark DNS query: "\x13\x37\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x13google-public-dns-a\x06google\x03com\x00\x00\x01\x00\x01" But I ...
1
vote
0answers
44 views

How is someone accessing my google account? [closed]

Two weeks ago I got a notice from Amazon that there was a suspicious charge on my account. My Amazon password is randomly generated, and not used anywhere else so my assumption was my Google Account ...
-1
votes
1answer
60 views

TCP Scans vs SYN Scans in port scanning

What is the difference between TCP Scans and SYN Scans?
1
vote
1answer
90 views

How do I validate a certificate by hand?

I have a website, which has a signed certificate file (website.crt) from a certificate authority (CA). How do I make sure exactly, that this certificate is valid? I know, that browsers do it ...
0
votes
0answers
21 views

Crypto Miners injected into Non-SSL JS files [closed]

A number of months ago, I had the urge to clean up a few of my old servers. One of them had a particular number of domains with expired SSL certs. Since I don't maintain those sites, I never bothered ...
-1
votes
1answer
31 views

IP suite packet integrity [closed]

Finally, while the IP header contains a noncryptographic checksum for verifying the integrity of the header, there is no attempt to do the same for the payload. Source(Introduction to Computer ...
0
votes
0answers
16 views

Is Oauth2 Implicit grant two-legged or three-legged?

In implicit grant, the resource owner has to provide consent to allow the application to access the resources on user's behalf. Doesn't this make Implicit grant a 3-legged flow? This video states ...
0
votes
0answers
24 views

How to reach SSL file? [closed]

We have a standard domain with cloud based hosting account with free Lets Encrypt open source service. To use some services in our hosting securely, we need to install certificate file to those ...
-2
votes
0answers
16 views

{“message”:“no route and no API found with those values”}..can anymore can explain what does it mean? [closed]

!I'mgetting this massagewhile I'm searching for subdomain "apac.foodpanda.in"........can anyone explainit what does it mean.
2
votes
1answer
48 views

What information can antivirus software collect?

If you take Dr web for example, it lists personal data and statistics, what do those mean? https://free.drweb.com/cureit/send_statistics/
2
votes
4answers
132 views

What is the difference between an SYN-Flood attack and an SYN-ACK-Flood attack?

What is the difference between an SYN-Flood attack and an SYN-ACK-Flood (SYN Reflection) attack?
2
votes
0answers
62 views

Storing credentials in cookies? [closed]

Is there any use case where you would store hashed credentials in a cookie? EDIT I was discussing this problem with a colleague if it's advisable to do this. Since then, I found an example where a ...

15 30 50 per page