All Questions

Filter by
Sorted by
Tagged with
1
vote
1answer
22 views

Logging connections to hardcoded IP addresses

On a Windows system, I'm able to get a good idea of most outgoing traffic by enabling DNS query logging, but I am missing those connections that are made straight to hardcoded IP addresses. What would ...
1
vote
1answer
43 views

Webhook sending Purchase Details to handling Purchases from a Third Pary Service Secure?

I'm developing a mobile application for a client that sells digital courses on a service called Teachable that hosts their website and handles the purchase process for them. My client wants to keep ...
1
vote
0answers
11 views

Secure File Transfer with Individual Control

My main goal is to build Raspberry Pi cloud storage and I want to access it remotely. I can easily send commands via SSH. However, transferring files bugged me due to its slow connection speed, or ...
0
votes
0answers
16 views

Opening OpenVPN to the world

I built my own private network with OpenVPN. I bought a VPS at hosting provider A(closer to home) and another two at hosting provider B(cheaper). Using openvpn I connected the two to the OpenVPN ...
0
votes
1answer
57 views

jwt symmetric signature security risks (from client side)

I am currently implementing an iOS app, which integrates with a cloud hosted .net backend system in azure, which. The api login endpoint takes user/pass -> replies with an signed only HS256 jwt token....
1
vote
1answer
23 views

Suspicious calls to testgvbgjbhjb.com

On the last few days, one of our endpoints calls to testgvbgjbhjb.com I used TCPView to find suspicious connections and checked if there any unknown extension. The owner of the domain made it a 127....
15
votes
4answers
2k views

Looking for example of well-known app using unsalted hashes

Does anyone know of a well-known application that still uses unsalted hashes for password storage? I'm looking for an example for an upcoming lecture on Rainbow Tables, and I think it would add ...
0
votes
0answers
8 views

Loading seccomp rules from file

I'm trying to implement a simple container. I would like users to be able to specify whitelisted syscalls in a profile.json file. Example content of profile.json file: { "whitelisted_syscalls": ["...
7
votes
1answer
98 views
+50

Python's http.server library “basic security checks”

According to: https://docs.python.org/3/library/http.server.html Warning http.server is not recommended for production. It only implements basic security checks. It doesn't state what security ...
0
votes
1answer
72 views

DHCP Interception

When a new client is trying to get a new IP from the DHCP server, it broadcasts the discover message. And also DHCP broadcasts the offer. And they use the transaction ID to communicate without the IP ...
47
votes
8answers
9k views

Can you find out how big the changes are by comparing two hashes?

I realize that a hash function is a one way function, and that changes in the hash are suppose to tell us that the original data has changed (that the entire hash changes on even the slightest changes ...
0
votes
3answers
70 views

Is it possible to scan the whole IP range to find a domain behind the CDN?

I am very curious if it is possible to find the real IP address of a domain "protected" by a CDN service. For example, www.cnn.com uses Fastly service, and the domain name only resolves to a Fastly ...
2
votes
4answers
444 views

Testing malware or bad url's from a SIEM

What would be a good approach for testing malware or bad URL's from things picked up from my SIEM to validate them? I was told to set up a VM for these tests but don't want it to hit the internal ...
-1
votes
0answers
20 views

importing ip ranges list as a text file in angry ip scanner [closed]

I don't know how to correctly import IP ranges in a text file for angry ip scanner. I copied the IP ranges from some website and import them in a .txt file like 45.5.0.0-45.5.3.255 45.5.15.0-45.5.15....
0
votes
0answers
32 views

How to determine a site's expiration date as an outsider? [closed]

How to determine a site's expiration date as an outsider? What are the different options do this?
2
votes
1answer
32 views

Enforcing DMARC policy (reject) on an Office 365 tenant

The domain & tenant has SPF and DKIM properly configured and DMARC policy set to p=reject. Still, emails spoofed with the domain in the From header aren't rejected, but appear in the Junk Email ...
0
votes
0answers
23 views

Customize default Prompt options (camera to share) when I trigger camera in Firefox with code development

I am having 2 cameras in my PC. When I try to trigger camera in firefox it always opens a permission prompt box with a webcam options. But I don't want to show the camera options in the prompt box. So ...
1
vote
2answers
49 views

is iptable whitelisting secure enough in AWS

Suppose my app is hosted on multiple servers, within the same data center (say in AWS or DigitalOcean). To secure communication between these servers, I use iptable to whitelist each other's IP. ...
-1
votes
0answers
21 views

File That Sends Ping/Request On Server When Opened [closed]

I want to create a pdf/jpeg file that sends a ping or request to the server when opened by the user.
0
votes
0answers
7 views

libcurl: how to use TPM private key for mutual SSL authentication [migrated]

I use the C libcurl library. I need to do OCSP stapling combined with mutual authentication. For that, I'll take model on the below exemples. However, I need the private key of my client certificate ...
5
votes
0answers
44 views

Is there a standard for OTPs tied to transaction details (that has been implemented in apps/devices)?

There are standards for Time-based (TOTP) and Counter-based (HOTP) One Time Password schemes. Generated OTPs are independent of the transactions they are used for, such as authorizing a login or a ...
0
votes
1answer
56 views

Someone is using my email to create online accounts; what should I do?

I suspect it’s an attempt at getting into an existing account using a leaked email/password combo. I update my passwords regularly and do not reuse, so I don’t think the attack will be successful, but ...
2
votes
4answers
893 views

How to protect WordPress from brute-force attacks?

One of my WordPress sites is being constantly attacked with brute force. I have the WordFence and Clef plugins installed. The number of login attempts is limited to just one. The password is very ...
-1
votes
0answers
26 views

Scapy sniffing in python

I don`t seem to find how i can negate something in the filter parameter from the sniff function in scapy. For exemple, i want to scan the network for all the ports except 80 and 443(http/s). How i can ...
0
votes
3answers
2k views

Samsung EVO 970 SSD on laptop without TPM - secure erase, is the drive encrypted?

I have a Dell XPS 9550. This was shipped without a TPM. I have since installed a Samsung 970 EVO SSD which as I understand is a self-encrypting drive (SED) and, what I am not sure about is, it can be ...
3
votes
2answers
18k views

No HTTPS on credit card entry form - can it be safe?

I was going to make a purchase on a website, but the page containing the credit card entry form is served via HTTP and not HTTPS. Is it definitely unsafe? The website advertises the use of "RapidSSL"...
0
votes
1answer
49 views

Is it safe to whitelist my public ip to a server, even I am behind CGNAT?

I have a few VPS and Databases in GCP, I can access them by whitelisting my IP, but just few months ago my ISP rollout their CGNAT and I was affected. As far as I know CGNAT, allow multiple subscriber ...
-2
votes
0answers
27 views

Help with barcode creator software [closed]

I'm trying to find software for my business and I don't know what it's called that I'm even looking for. I'm trying to create barcodes quickly from a pad that I can send to a wireless printer, again, ...
0
votes
1answer
2k views

Bitdefender showing lot of Getting Suspicious Connection Blocked from Chrome extension Toby

I'm using GetToby Chrome extension to manage my tabs and save them for later. Lately, I've been getting lots of notifications from BitDefender about blocked suspicious attempt: chrome.exe attempted ...
2
votes
3answers
614 views

What's the benefit of JWT if user needs to send his credentials once anyway?

JWT tokens seem like a very good idea. You can send a request to some API without using your username/password secret pair. Still, I don't fully understand the benefits that it gives. I have two ...
0
votes
0answers
35 views

If the Lorenz cipher machine was so much more advanced than the Enigma, how was it broken without having a physical machine? [closed]

The Enigma was commercially available before the war, and even during the war, they got their hands on "live" such machines, heavily helping them in breaking the encryption used by the Germans. The ...
0
votes
0answers
93 views

Is attribute-based encryption safe for production use?

I'm very interested in attribute-based encryption (ABE). I see various working examples online, and I want to know, has it been verified as production-ready? What does it mean to have a security audit,...
-1
votes
0answers
36 views

Appropriate network coverage for Honeypots [closed]

We are trying to implement a system of honeypots at a relatively large organization. What we are having trouble with is how many sensors or VMs need to be deployed. For example, given a network of ...
-2
votes
1answer
55 views

How to embedded exe file into png file such that when png file open then exe file also open with png? [closed]

No code yet. I have used binary and base64 to embedded exe and png file into png. But none of these methods works for me. Because when I run png file exe is not run. I don't know why. I need help in ...
0
votes
0answers
30 views

Benefit of using OpenSSH FIDO/U2F support over GPG mode?

OpenSSH version 8.2 introduced support for FIDO/U2F hardware authenticators, via the new public key types "ecdsa-sk" and "ed25519-sk". I currently have SSH authentication set up in combination with ...
0
votes
0answers
37 views

One-time-use methods alternatives?

Luckily, I’ve never faced an issue like this, but it came to my mind. Let’s consider tokens or QR access tickets. Do I have any option rather than banning the ID on the server? If I have a one-time-...
2
votes
0answers
38 views

“Trusted memory” What does it mean?

It is often cited "to load from untrusted memory to a trusted system memory" when describing the secure boot process. I wonder, when can we consider a memory as "trusted"?
0
votes
1answer
45 views

Where do you get the DigiCert CRL distribution point?

If you look at a DigiCert certificate: https://baltimore-cybertrust-root.chain-demos.digicert.com/info/index.html, you can see that it has the following: Key: Size: 2048 bit RSA Key Usage: ...
-1
votes
1answer
82 views

Does this iptables entry indicate someone's trying to break in?

Two days ago I built a Debian 10 server in the United States for use as a file server for my web application. When I created the server, I installed the fail2ban package and configured a basic, ...
1
vote
1answer
46 views

Looking to take a hotspot that is shared and create my own hotspot that can be firewalled

What is the best way to take a wireless hotspot that is owned by someone else, create my own hotspot or VLAN to be able to Firewall / Not allow my devices to view the other individuals' devices? I ...
1
vote
2answers
63 views

Risk of web admin portal without extra authentication steps

more of a philosophical question, suppose there is one behavior which allows an attacker to do something with high impact but by itself cannot be used to cause that impact. For example, internet ...
-1
votes
0answers
37 views

Where there any exploits in tput or dircolors?

Are there any exploits, for: /usr/bin/tput /usr/bin/dircolors ?
1
vote
2answers
66 views

If I am using a VPN with allowed multiple connections can each user/device be able to view traffic of the other user?

If I am using one a VPN Service, but it allows up to lets say 8 devices to connect, are all the devices/users able to view traffic from other users/devices? Or is each VPN connection creating its own ...
0
votes
0answers
29 views

Spawned reverse shell will not run additional commands

I am new to this, so I applogise if this is a silly question! I have created a reverse shell on a Windows box using an exploit script and the following MSFVENOM to create a reverse shell. msfvenom -...
7
votes
4answers
3k views

Password list generation

I've found during a lot of recent pen-tests that companies will use passwords like c0mp4ny@b( for a company called "company abc" Is there any quick and easy way to generate a list of passwords ...
0
votes
0answers
6 views

Diffie-Hellman in Https: How are prime numbers picked? [migrated]

I am trying to understand https, as I understand https uses the Diffie–Hellman method for keys exchange and then AES for encryption. But Diffie–Hellman needs two prime numbers, where do these come ...
0
votes
0answers
10 views

Unauthorized backups, how to seize back data? [migrated]

It appears that someone at my company (likely using stolen admin credentials) had set up backups for the whole org on G Suite using Backupify and Spinbackup. We need to secure the data. ...
0
votes
0answers
22 views

I've been an emailed a password; how can I proceed as securely as possible? [duplicate]

I am going through the on-boarding process for a summer internship with a well-known tech/bank company. I've received mail from HR requesting me to fill out an I-9 form via the external service they ...
1
vote
1answer
79 views

What ports should be closed in windows 10?

How can I close ports in windows 10 and what ports are unnecessary to be open? How do I find these open ports to close? Also if I close a specific port on windows 10 do I have to close the outbound ...
0
votes
1answer
47 views

How does Burp update XSS/vulnerability scanning rules/payloads?

The first point, that it updates with new release. So if somebody discovered new payload for popular frameworks, it will be in burp only with new release. Does Burp app load payloads from Internet ...

15 30 50 per page
1 2 3 4 5 1136