All Questions

Filter by
Sorted by
Tagged with
1 vote
1 answer
57 views

How do I encrypt and store user data?

I'm building a PHP website using MySQL as a database for an event managing system. I want to store user data so when they sign up for an event they can just verify information and submit, rather than ...
4 votes
3 answers
3k views

If my old device is infected, can my new device get viruses from my social media accounts?

Is it okay to log in my social media accounts (Facebook, Instagram, etc.) from my old phone that I believe is infected with viruses to my new phone? Can virus transfer because of that?
2 votes
2 answers
832 views

Local Burp Proxy not showing routed packets

I created a hotspot on wlp2s0 and connected an android device, whose IP is 10.42.0.62. I am trying to route my all packets from my wlp2s0 interface to burp proxy which is running on 8080. I also ...
2 votes
1 answer
134 views

Securing Transactional Email: User Input Escaping for a email subject

In our ongoing efforts to ensure secure transactional email delivery, we prioritize user input escaping. This practice mitigates potential vulnerabilities like cross-site scripting (XSS) attacks. We ...
0 votes
0 answers
113 views

What are the effective open-source methods for storing and managing encryption keys in a language-agnostic manner when an HSM is unavailable?

When HSMs are not accessible, we often need alternative methods for securely storing and managing encryption keys What open-source options exist for effectively managing encryption keys in a language-...
1 vote
1 answer
57 views

How to limit the Wireless CA can only use in wireless connection on Windows?

My school require me to install a CA to do connect to the school Wi-Fi network. In android, I can install it into Wireless CA list, and based on my understanding, that won't give the CA owner ...
3 votes
2 answers
153 views

How can there be incoming connections when using a VPN?

I've the following nftable configuration (/etc/nftables.conf) to enforce a "VPN kill switch". Except for ICMP and IGMP, connections are only allowed through tun0. This works well as a "...
6 votes
1 answer
2k views

Pivoting with Metasploit

I am trying to exploit a Windows VM on a different subnet behind a dual home Linux VM where I already have a shell. To keep it simple, I have a meterpreter reverse_tcp shell on the Linux VM (192.168....
1 vote
0 answers
12 views

Is there a Opensource way to compliance audit Microsoft 365 Apps [closed]

I am looking for ways to value add to existing Office 365 Security & Compliance center which is available by default. Adding HIPPA compliant check but I don't wanna pay for the templates available ...
1 vote
1 answer
179 views

What is the easiest way to implement a "passthrough" to let a device bypass the header requirement of an API which we both own?

For starters, I don't have any prior knowledge of implementing security/authentication on backends and frontends because of various reasons. So please forgive my ignorance. So I implemented JWT token ...
3 votes
1 answer
954 views

Tomcat 7 and ETags

I recently got updated by InfoSec that we need to be careful about ETags using Apache WebServer (HTTPD) as they reveal inode and can be exploited especially in NFS etc. But I am moving to Tomcat 7. ...
0 votes
0 answers
26 views

Leaking virtual card numbers - systemically [closed]

Someone know how is leaking virtual card numbers? I have few, but only leaking is for online payments. Not used is frozen. That is systematic. I have a lot extension in Firefox for protection [only ...
5 votes
2 answers
4k views

Can trusted timestamping be faked by altering some bytes within the document?

Consider the following scenario: I prepare a document with a "Lorem ipsum bla bla" content (Document_A) and get a trusted timestamp for this document (Timestamp_of_document_A). After some ...
1 vote
2 answers
28 views

Should an HTTP error 500 triggered by an XSS payload be reported as a potential vulnerability?

So, long story short, I was using an automated vulnerability scanner on a website (bounty hunting is allowed and encouraged,) and it works by injecting payloads in forms and URLs etc., to trigger ...
0 votes
1 answer
404 views

keys.openpgp.org keyserver fails to send confirmation mail to an Outlook-address

I uploaded my master key's public part to the keys.openpgp.org-keyserver. It has 4 UIDs set up (4 different e-mail addresses) and each of them are correct and valid e-mail addresses. The keyserver ...
1 vote
0 answers
32 views

How to scan and sanitize STL files?

Is there any tools to scan and/or sanitize .stl files? I maintain a security-critical GitHub repo. A contributor recently created a PR that includes changes to .md, .scad, and .stl files. The changes ...
1 vote
0 answers
77 views

Why can I cat a file I can't find?

I'm working on a TryHackMe problem (Task 15 here) to exploit a vulnerable component of a website to gain RCE and then read the contents of /opt/flag.txt. The targeted website uses an IP generated by ...
0 votes
1 answer
286 views

Spam investigation and email reputation check

We are investigating emails which were marked as spam by Cloudmark's service Cloudmark Authority Engine (CMAE). We want to find out if they are false positives. When an user ask to investigate why a ...
0 votes
0 answers
18 views

Verify Executables/Application before launching [duplicate]

Linux kernel has a feature to verify Linux kernel modules before loading them. This verification assures that modification made to Linux kernel is authentic. Does kernel have similar features to ...
0 votes
0 answers
19 views

Veracrypt password recovery [closed]

I really need some advice/help if anyone is able. Like a few others I see here, I have forgotten my Veracrypt password. Stupid I know. I am a total newbie in terms of this. I've been using hashcat and ...
0 votes
1 answer
516 views

Getting a couple of remote login and calls into Ubuntu server?

I have a ubuntu server (Ubuntu 22.10 x64) on Digital Ocean. And I am using fastapi, uvicorn, gunicorn and nginx as I used it for my backend api calls from my frontend and my frontend IP is dynamic. ...
1 vote
1 answer
171 views

Where to store tokens for analysis team members

As part of their day-to-day work, each member of our analysis team must handle a variety of sensitive information. For example: username and passwords for our internal databases, and tokens for ...
1 vote
1 answer
46 views

Authenticate web application generated data

I am currently developing a web application where I need to ensure that retrieved data (stored in database) have been generated by one or multiple (in the case of clustered applications) application. ...
1 vote
1 answer
248 views

Website fingerprinting based on packet traces

Given a set of traces coming from different websites, where each trace is a packet. Assume we only know the time of arrival, size and direction of each packet. How do we go about fingerprinting these ...
8 votes
1 answer
5k views

Are there any security benefits to enabling the PIN on an eSIM?

For physical SIMs, I'm aware of a number of security benefits to enabling the SIM PIN, because for an attacker with access to a lost or stolen SIM, a PIN prevents transferring the SIM to a different ...
17 votes
7 answers
6k views

ELI5: If SSL encrypts traffic, why does it expire?

SSL, nowadays TLS, encrypts traffic between the server and client. However, the certificate is only valid for a certain period of time until its expiration. What I don't understand is, why does TLS ...
1 vote
2 answers
750 views

How do I do asymmetric/hybrid encryption in practice?

Question I would like to asymmetrically encrypt messages with a public key that I have been given in advance. How can I go about doing that? Some example code in C# would be much appreciated. What do ...
3 votes
2 answers
3k views

Getting Certificate KeyContainerName to initialize CspParameters

How can I get the name of a Key Container that's in a smart card required for initialization of CspParameters? CspParameters^ cspa = gcnew CspParameters(ProviderType, ProviderName, keyContainerName, ...
17 votes
5 answers
84k views

Using the openssl command, how can I tell if it's using TLS 1.0?

Due to a security scan, I was told to not use TLS1.0. I found a link that gave me commands to use to check if a specific protocol is used/enabled. The command I ran (with output is) (Output from TLS1....
1 vote
1 answer
27 views

In TLS1.3 server hello can the legacy version field set to 0x0304

As part of TLS1.3 handshake client hello sent containing the TLS1.3 version support as part of suppored_versions extension, consider if as part of server hello supported_versions extension is not ...
3 votes
3 answers
5k views

Securely changing Veracrypt password

How can I change a Veracrypt (master) password efficiently and securely? Based on the answers here, it is not safe to use system --> change password due to various reasons. I cannot simply image ...
3 votes
0 answers
41 views

XSS with failing method in the injected DOM within onclick

If I have a DOM XSS such as <button type="button" data-dismiss="modal" onclick="Register.search('{INJECTION_PAYLOAD}');"> Search </button> Where I could ...
2 votes
1 answer
44 views

sshd HostKey hardcoding implementation

We are performing regular reinstallations of our systems which keeps on changing the servers sshd private keys due to regeneration at the end of the OS installation. Due to this our automated systems ...
3 votes
2 answers
601 views

Password for embedded devices in automatic deployment

We are working with commercial embedded devices, where we install our software. Then, they are deployed in different client sites. The embedded devices have an Ethernet port and a console port for ...
2 votes
1 answer
84 views

Site preventing Page-closing, CTRL+W, Window Button, etc

I was happily learning ReactJS when I accidentally clicked the URL for www.someurl.com. After all the redirects, the final page prevented me from leaving using CTRL+W, Windows key, Escape, Opening the ...
4 votes
1 answer
994 views

Injected malicious code in temporary files

It just came to my mind that few years ago many iOS applications where infected by XcodeGhost (notably WeChat). This made me think about few possible scenarios: Malicious code injected in object ...
1 vote
1 answer
24 views

Segmentation fault without rip even getting overwritten Buffer Overflow

I was trying to overflow the return pointer of a simple program. I have asrl disabled and I compiled like this gcc returnexp.c -o returnexp -fno-stack-protector. (I would disable noexecstack later on ...
2 votes
3 answers
968 views

Can I visit a malicious website by using Tor with settings set to safest or by using NoScript on an ordinary browser with settings set to untrusted?

Can I visit a malicious website by using Tor with settings set to safest or by using NoScript on an ordinary browser with settings set to untrusted? If not then is there any way to visit a malicious ...
10 votes
2 answers
11k views

Why does a deauth attack work on WPA2 despite encryption?

Given that WiFi packets should be encrypted if WPA2 is used, why is it that a deauth attack can be successful? Shouldn't the machine know that the message is illegitimate due to the fact that it would ...
1 vote
0 answers
20 views

using stunnel or openssl to verify a remote certificate

I am using stunnel as a wrapper for using TLS/SSL to a remote port in Windows 10. My understanding is that stunnel uses openssl for the heavy lifting. Everything seems to be working, but I cannot ...
3 votes
1 answer
700 views

Client Side Encryption (CSE) across multiple clients

Working on 2 layer security in the cloud (AWS). Have multiple clients pushing files to S3 document storage which are then retrieved by one EC2 instance. Multiple external customers each requiring ...
3 votes
2 answers
3k views

Intrusion detection in a small home network

The number of devices in my home network keeps growing: Apart from my gaming PC and our home office notebooks, we have the kids' tablets, all our smart phones, a smart TV stick, some WLAN peripherals, ...
3 votes
3 answers
3k views

Can I use Yubikey to encrypt a file without PGP?

I have a Yubikey 5 Series and would like to use it to encrypt a file, so that a physical presence of my Yubikey would be required to decrypt it. I know you can save a PGP key onto Yubikey and use it ...
3 votes
0 answers
37 views

How does a pentesting engagement change under HIPAA?

I am a intermediate pentester who will soon be conducting a engagement with a hospice. This is my first engagement with a network where HIPAA is involved, and I am researching how this may affect my ...
2 votes
2 answers
659 views

How Google protects and syncs the passwords?

I read this post but I want to know more details. I know that Google uses a Windows' function called CryptProtectData to encrypt user passwords on Windows and Google only stores the encrypted forms of ...
14 votes
3 answers
9k views

Account verification emails with links vs codes

I need to send verification emails for things like email verification password reset email change password change In the past most webapps would send an email with a clickable verification link ...
1 vote
1 answer
2k views

Beef+ bettercap injection failure?

I am trying to inject beef's hook.js in browser on another pc on my local network. After starting beef and login to the UI I started bettercap in terminal and executed the following command: sudo ...
3 votes
1 answer
217 views

OWASP CRS - Is "%00" in request form body is false positive?

We have a HTTP POST endpoint for a web form and when sending a request the request has Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryLOAPHJhA1BQSTatn set. When the payload contains ...
9 votes
3 answers
5k views

By using reCAPTCHA which information is Google collecting?

Wanting to avoid bots registering on a website, I might use reCAPTCHA by Google. Since the algorithm behind reCAPTCHA is not open source, I'm wondering what user information they actually collect ...
0 votes
1 answer
419 views

After creating an AWS user for S3 access with access key and secret key, how do I share these with the user?

I have a private S3 bucket. I want a user from an external organisation to have access. I have added a user in IAM. How does this external user get notified and how do I share credentials? The secret ...

15 30 50 per page
1
2 3 4 5
1384