All Questions

Filter by
Sorted by
Tagged with
3 votes
3 answers
285 views

How can I stop fraudulent credit card submissions on a donation site?

We are a small nonprofit that accepts donations online. Our site is being hammered by hundreds of fraudulent credit card submissions per day, coming from multiple IP's all over the world (a ...
-1 votes
0 answers
20 views

During a phone call, my phone started calling another person. How is this possible?

I was on a phone call with my father and, while we were on the phone, my phone started calling another person. I never called anyone while we were on the phone and he never called anyone else while we’...
2 votes
1 answer
1k views

Tutorial for SecurityCritical SecurityTransparent and new .NET 4 feature: Level 2

I need a primer for both the legacy (Level 1) .NET 2.0 security attributes and the new .NET 4 (Level 2) ones. I'm not familiar with the implications of controlling LinkDemand, stack walks, ...
32 votes
2 answers
64k views

How is PowerShell's RemoteSigned execution policy different from AllSigned?

I'm still pretty new to PowerShell, and recently read this in a blog posting about creating and using PowerShell scripts. To prevent the execution of malicious scripts, PowerShell enforces an ...
76 votes
19 answers
6k views

What security resources should a white-hat *developer* follow these days? [closed]

What sites, twitter accounts, FOSS software should a white-hat code 'hacker' follow these days? Do Include: Late breaking information on new security issues (RSS, Twitter, etc) A website that tracks ...
0 votes
1 answer
697 views

Are these snort alerts false positives or attacks?

Can anyone describe this alert please? I am confused if an attack is run against my network or not. I run snort IDS/IPS through a pfsense firewall.
0 votes
1 answer
31 views

Does this PNG image contain malware?

A Github user filed an issue with my code providing a PNG file as an example. I scanned the file with VirusTotal, of which 1 service signaled it as malware. Is it a false positive, or malware indeed? ...
3 votes
1 answer
4k views

How do I stabilize a reverse shell in when the attack box is using powershell?

So I've managed to get a version of netcat onto my windows machine and I can run the standard: nc -lvnp 1234 and this properly connects to the victim's machine, but it's a very fragile connection. ...
0 votes
0 answers
17 views

Information exposure during a credit card / NFC transaction

When you swipe/insert your card at a payment terminal, what information does the vendor receive? For example: Card number CCV Expiration First and last name Any individual identifiers? Does Apple ...
1 vote
2 answers
284 views

OAuth authorization code grant with exposed client secret

Let's assume that a client has the client secret exposed somewhere. What are the risks that the client and its users are exposed to? Are those the same as having implemented the implicit flow from ...
0 votes
1 answer
61 views

SQLi with error messages but no output

With the authorization of the owner, I was testing a website and when I put in some sql query and has some syntax error, it shows me, but when I test it with a parameter like p.php?id=66+/*!...
0 votes
1 answer
20 views

How message authentication code (MAC) works?

Let's suppose I'm uploading some website to website example.com, and I'm signing every single file with MAC which is shared by users of my website to verify that me (the admin) uploaded that file. It'...
1 vote
1 answer
178 views

Public Digital Signature Validation with JWE

After reading JSON Web Encryption (JWE) and making a Node JS JWE POC demonstrating key mode using Key Encryption. I'm a bit confused as to how to validate that the sender of the message was in fact, ...
1 vote
1 answer
60 views

Bots learn about a new web site as soon as I open it in Chrome. How do I look for leaks?

I am a customer of a cloud hosting provider (Cloudways). I create a new web site which gets a new automatically generated subdomain (like https://phpstack-xxxx-yyyy.cloudwaysapps.com/). I use Chrome ...
0 votes
0 answers
13 views

how can identify this encryption type? [duplicate]

I found a ciphers that I could not know its type, I want to decipher it but I could not, any advice? VI8cb5Pu0pO3c1gp5x6gU2TK6JiIPFRT8SB5D1Gj/SAEJNN9eEbC+aoDHJgxGyBl6wwKBXDIpQqHEYF9hA4Elrk3Z37D/...
0 votes
1 answer
241 views

Mixing VPN Protocols

Is there any benefit to mixing vpn protocols as far as obfuscating your traffic. Would a multiple hop setup like (openvpn(server1) + wireguard(server2)) be better or is (openvpn(server1) + openvpn(...
3 votes
4 answers
55k views

Can my employer monitor personal device use on my home network?

I occasionally work from home. I have a work laptop that I bring home and connect to my company's network using my home WiFi (I assume it has its own direct connection). I also have my personal ...
106 votes
8 answers
144k views

Certificate based authentication vs Username and Password authentication

What are the advantages and drawbacks of the certificate based authentication over username and password authentication? I know some, but I would appreciate a structured and detailed answer. UPDATE ...
0 votes
0 answers
14 views

| LFI filtration | is this really a way how to filter? (php 8.1)

I'm not sure if this is a valid way how to filter LFI, because if you bypass in_array function you can include any file, for example /etc/passwd. Is it possible to bypass in_array function? <?php $...
0 votes
2 answers
637 views

Save private key in a database to share between multiple accounts

I don't know if my concept would be secure so I ask here. The main purpose is to log in with password x and also use that password to encrypt an RSA private key with AES to store that in the main ...
0 votes
0 answers
14 views

Quantum proofing blockchain with KERI? [closed]

When quantum computing breaks through and is able to solve Shor's algorithm in something more reasonable than 320,000 years, blockchain is in serious trouble. For identities, would something like Key ...
0 votes
2 answers
71 views

Is TLS version related to the server in a Java thick client application?

In a recent pentest (Java thick client), it was discovered by the pentesters that TLS version 1.3 is not supported. I'm investigating why it is not supported, so I was looking in the Java code for ...
0 votes
0 answers
17 views

How to turn a relative path script (js) import to an absolue one with a url for XSS ? (more details below)

I have a parameter whose value is injected in the HTML as the following <script src="/dir1/dir2/dir3/dir4/INJECT_HERE"> </script> I was able to traverse back to just / but when ...
3 votes
0 answers
34 views

Best practice for storing security tokens in source code [duplicate]

I have a PHP system and I need to store some tokens for operations like: Database username and password API token Keys for encryption It turns out that for a long time only I manage the source code, ...
0 votes
0 answers
10 views

Input Sanitation injection reflects local cookie information inside the Input textbox. How can this be leveraged to a xss attack? [closed]

The injection is inside an <input> element for an email address. The injection payload is ";"@site.com. Once submitted, local cookie information appears inside the actual input textbox....
2 votes
1 answer
343 views

Is it possible to use systemd seccomp filtering for running applications from command line?

Example systemd unit file, what I mean by "seccomp". ProtectSystem=full ProtectHome=true ProtectKernelTunables=true ProtectKernelModules=true ProtectControlGroups=true PrivateTmp=true PrivateMounts=...
0 votes
0 answers
31 views

Discovering Devices Behind NAT?

What are the techniques to discover devices behind a NAT? I would like to be able to gather as much information as needed regarding those devices, including IP address/ MAC address/ OS ... All that I ...
16 votes
7 answers
2k views

Online Government Elections System - Is it possible?

I am from Bulgaria and currently some groups here are promoting the idea of referendum among the people, about the possibility for establishing a system for ONLINE GOVERNMENT ELECTIONS. The idea is ...
1 vote
3 answers
1k views

Are all fields of the PE certificate directory hashed during authenticode signing?

In a Windows portable executable (PE) file the certificate directory points to an offset to a WIN_CERTIFICATE structure. My understanding is that while the field is named bCertificate, it actually ...
0 votes
0 answers
18 views

How to distinguish the two meanings of OTP? [closed]

There is a risk of confusion with the abbreviation OTP. OTP == One-Time Pad OTP == One Time Password
-4 votes
1 answer
266 views

Secure Traffic model for Web application Protection

Web Application Firewalls relies on negative and positive security traffic rules to protect web application from being exploit. My question is that is their any other web traffic modelling technique ...
2 votes
3 answers
317 views

How much of the system is secure boot going to cover?

Background: We're developing for a Debian 9.8 system on an x86, but most of us here are more used to dealing with embedded devices. according to wikipedia, secure boot can "secure the boot process ...
0 votes
1 answer
48 views

Another browser opens URL without logging in

I was required to log in and pay an invoice but for some reason the website did not work with Safari due to a cookie issue as suggested by the alert banner and asked me to use a different browser. I ...
0 votes
0 answers
25 views

Is different X-Forwarded-For values per site an indicator for something malicious?

I am using a mobile ISP to access the internet. I noticed something really weird: most sites (e.g. www.whatismyip.com, https://www.iplocation.net/http-browser-header) report my IP as let's say IP A: ...
0 votes
0 answers
17 views

How to Use Database Connections Credentials? [closed]

I am doing a pentest, and I got a shell on the server. I got the DataBase connections from phpconfig. dbname, dbhostname, user, password. How can I access such a database and retrieve its data?
0 votes
0 answers
24 views

Why has the Yubikey Bio so much less features than the Yubikey 5? [closed]

Is it all just marketing. To sell a few years later a Yubikey Bio 2 with more features. or Is it a physical limitation because of space inside the key? Source: https://www.yubico.com/produkte-...
1 vote
1 answer
785 views

buffer overflow in MIPS - jump to address 0x0040xxxx

I'm trying to exploit a buffer overflow vulnerability in MIPS architecture. ASLR is enable, but the binary compiled without PIE (hence loaded always to 0x00400000). However, the vulnerable code uses ...
0 votes
1 answer
33 views

Does Google Authenticator share device information to website?

I wonder about Google Authenticator privacy. I wonder if the app shares any information to the website owner about devices that we use to add a new key. I mean information like IP address and device ...
6 votes
2 answers
2k views

Do It Yourself Credit Card Storage (PCI - DSS Compliant)

I'm a software developer, considering writing a custom system for credit card number storage. Our intent is to be fully Payment Card Industry (PCI) compliant. I'm working with a small business owner ...
0 votes
2 answers
331 views

Consequence of BadUSB and laptops?

Are internal components vulnerable to BadUSB? Say you have a laptop. Even if you don't use any USB devices (like mice and keyboard), if the laptop has internal components that connect through USB (...
1 vote
1 answer
7k views

How to run OWASP ZAP automatically using command line operations (i.e. Jenkins) [closed]

I am trying to run OWASP ZAP automatically using command line. I have tried using the API as described here, but I am getting these errors. I have also tried with zapr, but it's also showing error as ...
0 votes
0 answers
16 views

Nmap -sV command not working [closed]

I ran a port scan nmap x.x.x.x -sV I got the following result Host is up (0.040s latency). Not shown: 996 filtered tcp ports (no-response) PORT STATE SERVICE VERSION 80/tcp open http? 443/...
0 votes
0 answers
45 views

Obliviously.exe window [closed]

i get this mysterious windows 10 error and i can't figure out how to remove it. Some advice? Which refers to an Obliviously.exe file that is launched but I can't find the file and I don't understand ...
0 votes
1 answer
111 views

What should I worry about when attaching a token to a request manually?

I'm developing a platform that has 2 parts: An API written using Laravel, that integrates with the database and provided data in a restful state. Multiple fronts that connect to the API and perform ...
1 vote
1 answer
48 views

Why can't I use my phone for Google's Advanced Protection?

I am checking out Google's Advanced Protection program. I have registered in my Google account two security keys: my phone (a Realme 6) and a yubi key. The advanced protection enrollment, asks me to ...
0 votes
0 answers
13 views

How to get notified every time a USB Token is plugged in [migrated]

I want to monitor in real time if a USB Token is plugged in. My plan is to install a local application (that I'll try to develop) on my organization's PCs (Windows), this application will monitor in ...
0 votes
1 answer
179 views

Store provided external user data encrypted in the database

I hope this is the Right Place I have implemented a full user encrypted data storage solution. This works well and I can sleep well in the knowledge that neither I nor anyone else except the user can ...
0 votes
0 answers
20 views

Modelling authorization on the basis of authentication method

At work we are starting to consider a replacement for an old system. The new system will use the Spring framework. The security model is pretty simple: it is open to the general public. Each one of ...
0 votes
1 answer
52 views

Does recalculating per-user salt every time a user changes password make any difference?

I have set it up so that when my users change their password, the salt is recomputed. Besides hiding the fact that they may change their password to the same thing (I am checking that by first hashing ...
1 vote
2 answers
5k views

How to use Nmap as a port knocking client?

I want to use Nmap for port knocking on CTF machines, so I've read the manual for configuring it properly: nmap <ip> -p <port1>,<port2>,... -r --max-retries 0 --max-parallelism 1 ...

15 30 50 per page
1
2 3 4 5
1309