All Questions

-1
votes
0answers
28 views

Snort IDS Testing Attacks

I have been learning how snort works for a school project I am working on. I am hoping to launch specific types of network attacks against snort like port scanning, DoS, Sql injection, etc. I am sadly ...
1
vote
0answers
56 views

An advanced adversary is targeting you - now what? - so what? [on hold]

Consider the following: An advanced adversary is targeting you. He has the ability to watch most if not all of your network connections and the ones in the neighbourhood. He is sitting on numerous ...
0
votes
0answers
18 views

Server Side Template Injection for EJS template in NodeJS

I'd like to create a Web-App with Server-Side Template Injection vulnerability in NodeJS. The template used in the Application is EJS with Express-Framework. Below are the code bits: index.js (...
0
votes
0answers
80 views

Server under attack

I'm currently being DDOSED. How do I resolve this in a Varnish, Nginx, Apache setup? I tried renaming the downloader folder to _downloader, but no effect.... Ip's are all random and seem to come from ...
0
votes
0answers
17 views

Airodump-ng stops working after deauthentication attack

I'm using aircrack-ng on a pi to deauth a client that's connected to my wireless network. I run aireplay-ng and the attack succeeds but now airodump-ng wlan0mon stops returning any bssid, beacons... ...
-1
votes
1answer
80 views

Email not considered a secure form of communicate for legal / government purposes - why?

Ive seen the below statement on lots of legal and government documents over the years. Im based in the UK, but presume similar statements are made elsewhere. [In relation to communicating with ...
0
votes
1answer
42 views

Using BITMAIN AntMiner L3+ for cracking password

I want to use a BITMAIN AntMiner L3+ miner to crack passwords. How can I do that? Can I install hashcat agent to L3+ ?
3
votes
2answers
593 views

Diffie-Hellman with non-prime modulus

When using the Diffie-Hellman key-exchange, it is said to be important to use a safe prime. However, if a non-prime modulus with sufficient bit-length is generated, is there an attack that can be used ...
0
votes
1answer
48 views

Microsoft Bitlocker Decryption interrupted. Cannot decrypt again

I've locked on of my USB drive with BitLocker. When I was decrypting(removing BitLocker), my PC went off due to power cut in the halfway of decryption. Now, when I'm trying again to decrypt using ...
0
votes
0answers
55 views

Browser passwords used on multiple domains?

I have 100 domains with authentication backed by the same LDAP database. There is a single-sign on, but it's not implemented with OAuth. That is to say, per user, each domain accepts the same user/...
0
votes
1answer
69 views

Wireshark - How to see the domain of HTTPS websites visited

How can I see the domain name of https websites that are visited on my network? I know I'm not able to see the full url, just the websites ip or domain. I think it my be possible with a reverse dns ...
2
votes
1answer
123 views

Hacking demonstration

We are thinking about giving an awareness live demonstration in the company I work for. The general idea is to show the users how can they be hacked while connected to a public wifi spot such as a ...
0
votes
1answer
44 views

Does Google generate device fingerprints?

Does Google use a device fingerprint? https://en.wikipedia.org/wiki/Device_fingerprint Will Google websites ask Chrome produce a fingerprint? Will Chrome produce a fingerprint for any and all ...
-1
votes
0answers
24 views

How do I perform a Passive Scan with OpenVas [on hold]

Can someone help me on how to use OpenVas as a purely Passive Vulnerability Scanning tool?
-1
votes
0answers
37 views

Help with testing snort

I have been learning how snort works for a school project I am working on. I am hoping to launch specific types of network attacks against snort like port scanning, DoS, Sql injection, etc. I am ...
0
votes
1answer
69 views

How to disclose an open S3 bucket?

What is the most responsible way of disclosing an open AWS S3 bucket? Let's say there are sensitive documents inside, such as contracts with the company logo, that lead you to believe that it ...
1
vote
0answers
54 views

What is a gain from storing jws token in database

Recently someone mentioned he is using JWS token for authorisation, but JWS tokens received via API calls are validated against active ones stored in database. (EDIT he also checks signature). In my ...
-1
votes
0answers
40 views

Using Burp Proxy on Tails OS

I'm trying to run burp proxy on Tails OS to take a look at some HTTP headers traffic going on between localhost and destination host. Since I can't configure this with Tor browser, because I suspect ...
0
votes
1answer
44 views

Security issues with using JWT + cookies for session authentication?

Trying to get my head around not using traditional $_SESSIONS to keep user logged-in across pages. Are there security issues with storing JWT in cookies to authenticate a user session? Here's a bare ...
-1
votes
0answers
55 views

Creating a backdoor in linux [on hold]

How can i create a persistent backdoor on a linux system that i have root access to without being detected? I have looked into two options: To include a script that binds a shell in the /etc/init.d ...
-6
votes
0answers
48 views

I need help cracking NTLM hashes [on hold]

need help cracking these NTLM hashes 853889953055D66CF11F6BE1F261E50A 8E507986CFC0085BB1D7B8A7C34A54AC mixalpha-numeric
0
votes
0answers
41 views

Uploading of backdoor results in the server removing file extensions. Any workaround? [on hold]

I am totally new within the scene of information security, but find it extremely interesting and thus taking a course at my university, where we have to break into a website/webserver. The website is ...
0
votes
0answers
24 views

Client/Server Socket programing with SMTP [on hold]

Is it possible when doing Client/Server socket programming to use SMTP as a way for the C2 sever to broadcast commands to the client? Ive seen it done in Python, is it possible to do it in C ? To ...
0
votes
0answers
29 views

What is possible fix of vulnerability “cpu_meltdown spectre_v1 spectre_v2 spec_store_bypass l1tf” [on hold]

I have recently acknowledged a bug in a system of friend when I checked his system info. ["cpu_meltdown spectre_v1 spectre_v2 spec_store_bypass l1tf"] What is possible patch/fix of it?
0
votes
0answers
3 views

How do I use the security features (encryption) of the Intel 660p SSD? [migrated]

I've placed an Intel 660p drive in a Lenovo T480s. I can't figure out whether encryption is already in place, or if it's not, whether and how I can enable it. Lenovo's FDE (full disk encryption) FAQ ...
0
votes
0answers
42 views

How is our IP is transmitted to a web app? [on hold]

How does a web app know what my IP is? I check requests that go from client to server through an intercepting proxy but it obliviously didn't have that. Then I researched about this, and I found it ...
-2
votes
0answers
40 views

What kind of authentication should I use for my API?

I'm building a SaaS-type REST API (B2B) and naturally I need to use some kind of authentication. The requirements/background are as follows: Needs to support both browser and mobile clients. Some ...
2
votes
0answers
50 views

Is “active defense” against attackers a real thing, or an invention of movies? [on hold]

In movies hacking is depicted as a weird sort of game. When you detect someone attacking your server, you face them head on. To me, it sounds like your best bet would be to just shut down the server ...
0
votes
0answers
21 views

What use-cases can be determined, for anomaly-based intrusion detection, for a web and mobile network traffic? [on hold]

I have to apply machine learning algorithms to detect anomalies in network traffic. My network architecture is composed of a web server (linux), reverse proxy (F5), firewalls (CISCO ASA, Fortigate), ...
0
votes
0answers
56 views

Is my school really insecure? [on hold]

In my school, ethernet ports are everywhere in the computer labs, and though I haven't tested it, I'm sure you could just bring a laptop and use the internet without having the password. This, to me, ...
-1
votes
1answer
51 views

How to find out which application runs behind port 31337?

I found an open port on a "Kartina Quattro" (https://www.kartina.tv/article/247-kartina-quattro). It's a device for watching russian TV channels. The port number is 31337 and the Service is called ...
0
votes
0answers
15 views

how to find SSID channel using python scapy? [on hold]

i am trying to automate deathuntication packets like airodump, aireplay using scapy . i do not know how to find AP channel from scapy . to reset wireless card to the correct channel. i know my bssid ...
0
votes
0answers
31 views

I have access to router , now what? [on hold]

like the title said I get access to the router, I want to pivot to windows 10 machine and there is no port open? ii tried to use DNS to redirect to my site but the target can't download any file, I ...
-1
votes
0answers
43 views

Has the WPS brute-force cracking issue been fixed by now?

There is not a lot of information regarding the effectiveness of this attack with 2019 technology on the Internet. So being a beginner, in the field of cyber security, I was wondering whether this is ...
20
votes
1answer
4k views

false 'Security alert' from Google - every login generates mails from 'no-reply@accounts.google.com'

Every time I login to Google with the same MacBook I get this email: New device signed in to example@gmail.com Your Google Account was just signed in to from a new Mac device. You're getting this ...
0
votes
2answers
53 views

Does HTTP:// to HTTPS:// redirection means strict HTTPS from server

when I try to connect to some websites using http:// (notice the absence of s) , my client end up with https://. I use python requests for this purpose, which simulate a client behavior. It performs ...
0
votes
1answer
41 views

Security element that relate to breaking protocol

I am working on evaluating an unsecure protocol. I am trying to categorize the vulnerabilites according to some commonly accepted security elements like the ones specified in the CIA triad or the ...
5
votes
1answer
699 views

Asymmetric or symmetric - which makes sense in this scenario?

I am creating a system in which there will be oe client and one server. The client is periodically (every 5 or 10 secs) going to send a small amount of data to the server (with UDP). I am able to ...
0
votes
0answers
37 views

How to prohibit overwriting of Files

I have applied NTFS permissions to help protect a few files from accidental deletion. All the features do prevent users from accidentally/purposefully delete files. However, I am unable to find a ...
0
votes
0answers
18 views

What's a good fuzzing framework for fuzzing a local standalone GUI / network application / Browser? [on hold]

I am not newbie at exploit development , but I would like to have a solid useful fuzzing framework instead of picking every fuzzing to see if it's work.. I Have a list of fuzzing framework which I ...
1
vote
1answer
64 views

linux kernel exploit shellcode causes segfault

I'm learning how to write kernel exploits and my shellcode keeps seg faulting. I'm getting the memory address for commit_creds(prepare_kernel_cred(0)); #grep commit_creds /proc/kallsyms c907eea0 T ...
0
votes
0answers
24 views

Looking for training courses on Advance phishing and social engineering [on hold]

I am looking for a training that goes in depth on creating effective phishing exercises and social engineering stuffs. Displaying an effective way to get into a the network through a phishing email or ...
0
votes
0answers
29 views

cyber security vs software engineer vs network engineering [on hold]

I like to develop web based systems, software and robotics. Now I'm planning to do my degree, but I'm confused when choosing a degree. I am looking at 3 degrees: software engineering network ...
0
votes
1answer
57 views

How to implement an active Man-In-The-Middle attack that changes the request URL address

For training purposes, I need some pointers on the tools and tips to implement an active Man-In-The-Middle attack. The attack scenario that I want to do is a toy example (which has countermeasures ...
1
vote
0answers
53 views

are there any nfc message injection?

are there any ndef message smuggling attacks (like http smuggling attack )? when I say it, I mean that I have a full control on the nfc packet. Is it possible to inject another packet into a nfc ...
0
votes
4answers
106 views

Why it bothers if someone can de-anonymize anonymous network (like Tor)?

So we all know that NSA has the ability to track down Tor, I2P and all those anonymous networks. I know it's a piece of old news, but the question always shows up in my mind. Which is why bother it? I ...
-7
votes
0answers
47 views

help me to solution this these questions [on hold]

Can you help me find a solution to these questions please? QA, can you check correct or wrong and I need to solution Q/b: Q/A: Provide two (2) current issues either information confidentiality, ...
-2
votes
0answers
28 views

kaspersky in windows [on hold]

If I have kaspersky Internet Security installed on Windows and activate the code which is a valid code I purchased from the original company, then I changed the windows and there was 3 months ...
0
votes
1answer
35 views

Network diagram based on Cisco ACL and other firewall rules [on hold]

Are there any tools for automated building network diagram from ACL rules or any other firewall rules?
0
votes
1answer
55 views

Is there a replay cache in Kerberos 4?

Does Kerberos version 4 support replay cache like in V5 - a cache that prevents replay attacks which occur within the clock skew, so the TGS knows a duplicate packet has arrived ?

15 30 50 per page