All Questions
68,320
questions
23
votes
1
answer
4k
views
Did a Huawei modem just try to do a Man-In-The-Middle attack on me?
I have a replica of Huawei B535-333 LTE modem. While I was working from home on my computer I randomly got a security alert saying that certificate for connection with outlook.office365.com was issued ...
- 279
0
votes
1
answer
263
views
PGP "real" encryption with private key
When explaining the concept of signing a message, often it is presented as "encrypting with your private key", so that somebody who has the public key can "decrypt" the signature ...
CommunityBot
- 1
0
votes
1
answer
20
views
is it possible to checksum a set of R scripts to ensure code integrity?
This question was inspired to a degree by How secure is R and RStudio?
It had a very reasonable answer and looking at the possibilities I thought a small system of R scripts (about 10 scripts) would ...
- 22.7k
6
votes
5
answers
2k
views
Why is Kali released as a VM?
I have completed a few Bug Bounty tutorials. All of them use Kali Linux installed on VMs. Either VirtualBox or VMWare. Is there a reason why Web App Pen testing would be done from a VM? I'm just ...
- 3,129
0
votes
0
answers
9
views
Local development credential manager and best practices
I've long since been storing credentials to databases and services in local configuration files during development. Sometimes these need to be to production systems, which makes this a security issue.
...
- 139
0
votes
0
answers
19
views
How to retrieve TLS unique value from Apache?
TLS unique value is present in TLS 1.2 version.
In Golang, I can get the value of the TLS unique value from the http response through the field TLS.
I'd like know how I can get it from Apache.
Is ...
- 1
3
votes
1
answer
154
views
SVC service page on production
I am testing web service on production.
There is a standard SVC web page available like the example below (another randomly selected webpage, just for example). Is it ok to have this page available on ...
CommunityBot
- 1
-1
votes
0
answers
17
views
Command Injection Issues [closed]
I am auditing a site with blind injection of commands from the burp suite repeater, the problem is that only the following command responds to me in the following way
nslookup kgji2ohoyw.web-attacker....
- 128k
2
votes
1
answer
168
views
Is it dangerous to publicly surf the web while my browser is being run in an IDE?
While developing web software, I typically run a browser (chrome) from my IDE. Here's an example launch.json in VSCode:
{
// Use IntelliSense to learn about possible attributes.
// Hover to ...
CommunityBot
- 1
47
votes
5
answers
154k
views
how to import a private key in windows
Say I have an X.509 cert and a private key that corresponds to it. I can import X.509 certs easily enough into Windows but what about private keys?
Is the only way I can do that by converting both the ...
0
votes
0
answers
17
views
Ddos attack on the ISP [closed]
I need help in controlling my ISP from Ddos attacks it's happening for almost a month almost everyday bringing down the isp for 4 to 5 hours sometimes for the whole day anyone can help it guide what ...
- 11
1
vote
1
answer
28
views
Do Windows Credential Manager encrypt information stored in it?
Apologize if this is a newbie question. Say the PC hard drive with Windows installed is un-encrypted (no BitLocker, etc); and someone gets physical access to the hard drive but does not know the (...
- 1,476
5
votes
1
answer
1k
views
Is HTTP header Permissions-Policy worth using if no features are used?
From the spec at https://www.w3.org/TR/permissions-policy-1/ it seems there is no way to whitelist features with a default blacklist, and each feature must be individually disabled in every single ...
CommunityBot
- 1
-1
votes
0
answers
35
views
Implementing a anonymous encrypted peer-to-peer chat [closed]
I am planning on making a basic groupchat application only for me and my colleagues. It needs to be as secure and anonymous as possible without leaving any fingerprints. Already existing applications ...
- 1
22
votes
4
answers
4k
views
How long should 2 factor authentication codes be?
I've noticed that many services that offer 2 factor authentication have jumped from using four digits to six. However, it seems counterproductive to me because the digits are random, the digits (...
- 267
2
votes
2
answers
357
views
Web Application Using Identity Federation & OTP
We are running a web application using a client's identity federation to authenticate users. A new requirement is to use 2FA, we have decided to use an OTP algorithm using Java, similar to this one ...
CommunityBot
- 1
0
votes
0
answers
19
views
Create and bind to Metasploit reverse shell on Apple Sillicon system
I'm trying to create a persistence module for OSX systems but first I need to create a reverse shell that spawns and binds on the same computer over a LAN. I'm having trouble creating an executable ...
- 101
2
votes
1
answer
445
views
Opening password file with John The Ripper
I have an old Windows domain SMB sniffer file circa 1998 and just out of interest I want to see if I can crack it now with John The Ripper. I believe the file was generated using the L0phtCrack SMB ...
CommunityBot
- 1
14
votes
2
answers
4k
views
Are banking and finance apps safe on an Android phone with cracked apps?
I want to install a few banking apps for my bank accounts. I also have modded or cracked games/applications installed on my phone, but my phone is not rooted. Will adding a banking app increase the ...
- 895
0
votes
0
answers
38
views
Help me securely store and retrieve Social Security numbers [closed]
I am on the very last functionality to implement before launching my app. I have the same requirements someone like Fanduel or Draftkings does. When my users cross the $600 threshold for prizes in the ...
- 128k
1
vote
1
answer
1k
views
Linux/LUKS/Full Disk Encryption: How can I mitigate SSD/flash media security security risk caused by unreliable physical deletion?
Firstly, I do not think my question is answered by SSD full disk encryption as I am not looking for a binary "is FDE secure" - nothing is perfectly secure; rather I am looking for possible ...
CommunityBot
- 1
1
vote
1
answer
460
views
Mysql Information schema column_privileges empty
I can try some SQL-injection against a ad-hoc damn web application in my virtual enviroment for educational purpose.
In one of these I obtain the table column_privileges (of Mysql Information schema) ...
CommunityBot
- 1
1
vote
1
answer
42
views
Verify user credentials via SAML (E-Signature)
I have a requirement to extend a quality assurance process in the customers CRM system so that when the user enters some data he or she is prompted to a screen with username and password and the ...
- 1,476
0
votes
1
answer
27
views
VPN vs Authentication Proxy to restrict access to internal network/application
A popular new idea at the company I am working for is to remove worldwide access of web applications and restrict them to the internal network only, allowing remote users to work with them through VPN ...
- 198k
0
votes
1
answer
361
views
Encrypting PHI query params
In a bunch of APIs, there are several possible query parameters. Some of these may be PHI. So even if we are using HTTPS, they could go to a logfile or somewhere else and hence violate PHI.
Was ...
CommunityBot
- 1
0
votes
0
answers
45
views
Can a file contain a virus that an antivirus cannot detect? [duplicate]
Suppose that I have an external storage (such as a USB memory stick or an SD card) which contains some files (such as documents or images).
Suppose that I am running an antivirus which scans drives ...
- 128k
0
votes
1
answer
51
views
Is it secure to use session ID as authentication token received from an HTTP header?
I am writing a mobile application for an already existing web app.
In the backend, I implemented the usual cookie-based session ID authentication. with a CSRF token generated on login and sent with ...
- 46.4k
0
votes
1
answer
2k
views
Where to store JWT refresh tokens
Where to store JWT refresh tokens? My idea was to encrypt the refresh token with crypto-js AES and salt, keeping it in an environment variable (.env). Then, the refresh token would be stored in either ...
CommunityBot
- 1
2
votes
1
answer
118
views
What can forensic analysts extract from a fully encrypted phone? [closed]
I was very disappointed to hear that my friend, who had his Android phone seized not too long ago, has had his phone broken by police forensics.
As far as I know, it was a few years old, Samsung, and ...
- 6,761
-3
votes
0
answers
22
views
vpn配置:在电脑上要求输入internet地址 我不知道怎么输入。 [closed]
问题描述：
我正在配置VPN连接时，系统要求我输入Internet地址，但我不清楚应该输入什么。我希望获得关于VPN Internet地址的正确输入方式的帮助。
附加信息：
我正在使用的VPN类型是（例如，L2TP/IPSec）。
我已经尝试在配置中查找Internet地址，但没有找到相关信息。
我的问题是：
请问在VPN配置过程中，当系统要求输入Internet地址时，我应该输入什么？...
2
votes
2
answers
458
views
How secure are the GPG/PGP keyservers?
Importing a GPG key with a KeyID or fingerprint seems to rely on keyservers. Doesn't this invite man-in-the-middle attacks, in which someone would alter the keys to allow them to decrypt the data? ...
2
votes
1
answer
318
views
ADFS claims consolidation from different issuers
I hope I understand the claims concept in general now after reading related articles on ADFS, certificates used for claims token signing etc. But here is what strange for me:
Claims are so abstract ...
CommunityBot
- 1
6
votes
1
answer
681
views
MS08-067.c fails at WNetAddConnection2()
I'm working with some exploit code for the MS08-067 vulnerability from ExploitDB.
The section:
WNetAddConnection2(&nr, "", "", 0)* fails with an error of 67 (ERROR_BAD_NET_NAME), but I don't ...
CommunityBot
- 1
0
votes
0
answers
17
views
Encrypting/wrapping a private RSA key in PKCS8 using AES-GCM and openSSL 3.20 (library not command line tool)
I need to protect a private RSA key using a passphrase but using AES-GCM for the actual encryption.
This is normally done using various a combination of openSSL library calls. However, I now need to ...
- 198k
1
vote
1
answer
3k
views
Host Header Attack -> Password Reset Poisoning -> ASP.NET Web API 2 hosted as Azure App Services
I'm currently testing a site where the host header is used for creating a recovery email link. However, when I try to manipulate the host header in Burp I get an HTTP 400 message saying I'm using an ...
CommunityBot
- 1
-1
votes
0
answers
33
views
Can you be tracked while using a vpn? [duplicate]
Can you be tracked even with a vpn? If a sophisticated eithical hacker really wanted you will a vpn save you?
0
votes
2
answers
64
views
Offline Anti-Virus Scan for Server
I've got an application that isn't very robust and, as a result, is very sensitive to anti-virus scanning. I tried both the basic/free Windows Defender and a NextGenAV (i.e., SentinelOne). Both had ...
- 128k
43
votes
8
answers
16k
views
Why is HTTP data sent in clear text over password-protected Wifi?
In my home I have a router protected with WPA2-PSK (WPA2 Personal), using the passphrase.
When I try to log in to a page over the Internet (this page does not use HTTPS to log me in), all my data is ...
- 1,382
0
votes
1
answer
51
views
How to isolate VMs with internet exposed websites on my home network?
I want to host some websites served from an isolated VM which is on my home network through port forwarding.
Although I believe this is reasonably safe, I want to physically segment internet-exposed ...
63
votes
6
answers
80k
views
Can I require both private key and password authentication for SSH login?
It seems that they are mutually exclusive, as disabling one gives me the other, and vice versa. Two-factor auth for my SSH servers sounds really nice, so is there any way to accomplish this?
- 2,603
0
votes
1
answer
38
views
Does self-signed encryption certificate violate "no multi-use keys" principle?
Say that I have generated an RSA keypair, which I intend to publish only for use with RSA-KEM; I can see that this is provisioned for:
The intended application for the key MAY be indicated in the key ...
6
votes
3
answers
3k
views
How do people in China get past the Great Firewall in practice?
I know that China prevents access to many resources/content on the Internet via a "great firewall".
While there are multiple ways of getting past/through this firewall - some are more involved and ...
4
votes
1
answer
819
views
Is there a safe way to use external display with USB Type-C laptops?
Somewhat related to Is malware or screen capture possible with iMac as external display?, where we investigate the possibility of a DMA attack through DisplayPort, nowadays, many machines don't even ...
CommunityBot
- 1
0
votes
0
answers
25
views
How to reproduce Tomcat 9.0.0.M1 HTTP smuggling vulnerabilities?
I'm trying to reproduce some of the Tomcat 9.x.x vulnerabilities from this list, in particular the HTTP smuggling vulnerabilities. However, so far I haven't been able to reproduce any of them. ...
1
vote
0
answers
56
views
I clicked on a suspect link, whose base url was live (dot) tvstreaming4k (dot) com, during a live event. Is this a threat? [duplicate]
Edit: It has been observed that my question may already have an answer here How to check whether a link is safe or not? [closed] and here How do I safely inspect a potentially malicious website?. Even ...
- 111
0
votes
1
answer
48
views
Negligible amount of clients in Android/IOS devices getting SSL error [closed]
I've read these stuff:
We've tried mobile data and different ISPs and the problem seems to persist.
https://maulwuff.de/research/ssl-debugging.html
https://serverfault.com/questions/872424/why-are-...
- 128k
0
votes
0
answers
13
views
Why does FIDO2's spec not mention FIDO UAF as a related standard? [duplicate]
Why does FIDO2's spec not mention FIDO UAF as a related standard? I wonder if FIDO UAF is still relevant. Will FIDO UAF be deprecated eventually in favor of FIDO2? Why do they co-exist if they fulfil ...
- 128k
0
votes
0
answers
46
views
Should I redirect user to login screen after validating email and first password?
I'm working on authentication on the backend of an application and I want to know which of the following methods is the best.
After the user registers in the application an email is sent to the ...
- 128k
0
votes
1
answer
499
views
Risks of allowing users to upload PDF and XML files to be stored/retrieved from a DB (ASPNET MVC 5)
I'm modifying an ASPNET MVC 5 web site and a requirement is to allow users to upload an XML and PDF file.
The XML file will be used to layout text on the PDF based on variables coming from within the ...
CommunityBot
- 1
0
votes
2
answers
44
views
Do all sites offer something like recovery codes? [closed]
I've always given two-factor authentication a wide berth because of my experience with it; with Dropbox, for example, they want an e-mail confirmation when I log in, but eight minutes pass until I ...
- 26.5k