All Questions
68,018
questions
0
votes
1
answer
25
views
Connection my app windows desktop to my external server by VPN or Wireguard
I have an desktop application with JavaFX and I need to connect it to the server in a safer way. I've thought to connect it by VPN, but the clients have the application installed in their personal ...
- 1
0
votes
0
answers
4
views
Qualcomm / others NAND partition table layout [migrated]
for new android board,
who defines the partition table layout ?
Is it SOC vendor or customer of the board?
Which tools is used to make the partition in QC board? Is it QPST?
in AOSP code, is there ...
0
votes
0
answers
24
views
Progressive profiling with auth0: Security when communicating with auth0 actions
I currently try to implement progressive profiling with auth0 according to: https://auth0.com/blog/using-redirect-with-actions-to-gather-user-info-and-increase-conversions/ to gather first name and ...
- 101
0
votes
0
answers
27
views
Advice on more in depth web app info gathering phase
I am a junior pentester currently working for a secure messaging app that includes a webclient. Only the subdomain is in scope and other subdomains are off-limits. Social engineering is also off ...
- 1
0
votes
0
answers
27
views
How much does manually entering a key at process start help?
I have an application that encodes data when writing it to a database, and unencodes it when reading from the database. The encoding is done with a symmetric algorithm using a fixed secret key.
I'm ...
- 213
0
votes
2
answers
46
views
How much security do DigitalOcean managed databases provide?
DigitalOcean offers managed databases. From what I can understand, the advantages are:
You don't have to worry about management tasks such as set-up, updates (including security updates), and backups....
- 213
0
votes
1
answer
46
views
Can UUID v7 be treated as a unguessable, opaque identifier?
RFC4122bis specifies UUID v7, a version which contains 74 bits of randomness.
Assuming I use a CSPRNG to generate the random bits: Are these UUIDs considered to be unguessable and are enough to ...
- 103
0
votes
2
answers
114
views
Gmail encryption
Is sending emails between Gmail accounts encrypted, can ISP read gmail content in transit??
0
votes
0
answers
16
views
What information is contained in the local SAM in an Active Directory network
I'm curious in an enterprise network running Windows, what information is available in the SAM of a standard user's endpoint machine?
I understand (and correct me if I'm wrong) that when logging in to ...
- 13
0
votes
0
answers
28
views
What are certificate vulnerabilities? [closed]
I just discovered certificates, and I was wondering what the potential vulnerabilities are that could result from (mis)using certificates, or obtaining the certificate of somebody else
- 1
0
votes
1
answer
25
views
Does using Apache/nginx actually improve security of a webapp?
Let's say there is a webapp where users can upload files with sensitive data and view analytics generated by the backend. Does using a reverse proxy like nginx or Apache actually help with the ...
- 101
0
votes
0
answers
14
views
Testing an antivirus feature on an app [closed]
I am trying to test something on a web app and i need a malware code. I tried eicar test file but i cannot rename it, the app always show the name as "test" but i need to change the name ...
- 1
0
votes
1
answer
57
views
OAuth2 implicit flow - is it still possible to hijack the token with HTTPS?
The video from Okta says that it's possible to hijack the access token when on public wifi. But if HTTPS is used, the headers are encrypted. And therefore the Location returned by the Auth Server won'...
0
votes
0
answers
35
views
If someone found the factorization of RSA in polynomial time, what would be the procedure for releasing the algorithm? [closed]
If someone found the factorization of RSA in polynomial time, without knowing how to implement it, what would be the procedure for releasing the algorithm?
0
votes
0
answers
36
views
how to have privileges escalation in Windows 2019 Server? [closed]
I tried to elevate privileges in Windows 2019 Server 17763.1821 for tryhackme: évasion shellcode" and I can't. Why? I tried all UAC modules.
0
votes
0
answers
30
views
Is partial compliance still "compliant"?
I recently started work with an IT Vendor and we are STIG compliant.
Just last week a customer requested proof of compliance & my company sent them an excel sheet of RHEL STIG V1R2 with ~300 ...
- 1
1
vote
0
answers
13
views
Restricting ubuntu signing keys?
I started reading on apt and the security changes to always use GPG signing keys,
but further saw that it by default uses all configured GPG signing keys,
this seems like a small but unecessary ...
- 11
0
votes
1
answer
49
views
Is using two cookies one Lax and one Strict a way to improve usability without compromising security?
My understanding is that
Strict is the best as, admitting you have a recent browser, it completely replaces the need for CSRF Token.
Strcit is however a big hit on usability as things like SSO or ...
- 101
0
votes
2
answers
34
views
Website returns different certificate on my home network to mobile hotspot
This is a "should I be worried" question. I access a website on my laptop via my home network/router. My Edge browser gives me a "Your connection isn't private" warning page and ...
- 101
0
votes
0
answers
11
views
Symantec endpoint protection blocking server backups [closed]
We are running a Windows server - SSD Cloud 6. It seems some configuration settings of 'Symantec Endpoint Protection' conflict with the cloud backup. We tried creating an exception. This didn't work. ...
- 1
0
votes
0
answers
49
views
IP Address 47.128.16.39 has been going through our site for more than 4 days
This IP address has been going through everything - every image, every page. How can we know who this is and whether they are doing any harm? Is this abuse? Should we report this? If yes, to whom ...
- 1
1
vote
0
answers
25
views
Prevention of access to user data running on the cloud
I am building a web-based software as a service (SaaS) platform for engineering simulations that run on the cloud, and wish to prevent my access to user data by design. The user designs a 3D geometry (...
- 129
2
votes
2
answers
105
views
What are the risks of typing a password in a terminal, just to see before pasting it?
Yes, I do use a password manager. Yes, I do use complicated long passwords, a la XKCD.
However, sometimes I fail repeatedly when entering the master password to my password manager. Which has no &...
0
votes
0
answers
30
views
Do `Signature` headers have real benefits? [duplicate]
I'm working with an HTTPS API that requires me to include a Signature header, the signature is calculated as codeBase64(hmacWithSha384(key, body)). I'm wondering if it provides any real-life benefits ...
- 1
1
vote
1
answer
41
views
Is it worth it to force UAC to ask for a password?
I've tried to harden my Windows 10 by using an unprivileged account, which I know reduces the attack surface a lot. I'm running Ableton (a music program) which is running after UAC has given admin ...
- 35
0
votes
0
answers
28
views
What is the best way to encrypt asymmetric metadata?
As a hobby project I'm thinking about how to write a secure chat where even all metadata are encrypted so that it is impossible to leak any (meta) information by design.
My basic idea is right now:
...
- 133
0
votes
1
answer
38
views
Is there any benefit to use different salt for different encryption algorithms for same user
There is two different passwords for a single user.
I'm hashing both for future validation. I'm currently using a single unique salt for the user, but each is hashed with a different algorithms (...
- 101
0
votes
1
answer
48
views
Measures to safeguard against ZeroFont phishing attack
What measures can be taken to safeguard against ZeroFont phishing attacks (setting font size to zero), and how can email security settings assist in the detection of ZeroFont elements and the ...
0
votes
0
answers
53
views
What does it mean to store secret keys as an "environment variable" as opposed to hardcoded in the source code?
I see why it is obviously bad to store a secret key and client ID in the source code for a web application. However, how do you go about the alternative? Surely, that information has to be stored ...
- 101
0
votes
0
answers
22
views
PGP keys as a hashing method
The context is described in another of my question, and is as follow : i've got to securely store identifiers, called TIP. We need (1) a method to derive always the same UID from a TIP, so that no ...
- 133
0
votes
0
answers
69
views
What to do if i have no salt?
Here is my situation : we've got ID, named TIP, from remote and large databases. We want to store all the data, but laws prevents us to store the TIP directly, but rather anonymize them, for security ...
- 133
0
votes
0
answers
20
views
alternatives for OAuth, SAML, OpenID Connect, and WebAuthn [closed]
What alternatives for authentication and authorization technologies besides OAuth, SAML, OpenID Connect, and WebAuthn can be used for cloud apps?
I am currently writing my thesis and would like to ...
- 1
0
votes
0
answers
16
views
WhatsApp channel [closed]
I need help. Can we create WhatsApp channel or WhatsApp group chat?
1
vote
1
answer
34
views
Why is TLS communication within a VPC important? [duplicate]
In this sense, I understand the encryption needed between say client and server and all communications that are external.
But for a scenario where for all VMs are in the same VPC and not exposed to ...
- 113
1
vote
1
answer
82
views
Why don't bank verification services use OAuth
I'm going off of this answer, but asking a new question since that's quite old.
It seems to be becoming more common for banks or other "legitimate" institutions to want your banking username ...
- 111
0
votes
0
answers
13
views
Nmap Scan 3 different private IP 1 target [closed]
If I scan a target from 3 private IPs on the same network having the same gateway, will the target computer see the traffic coming from 1 IP (the public IP of the gateway)?
0
votes
0
answers
28
views
What is the point of required user verification in WebAuthn?
User verification in WebAuthn can either be required, preferred, or discouraged. The last two are a hint to the authenticator that may be ignored. I see how they could be used to prevent client-side ...
- 153
0
votes
0
answers
24
views
How to abuse the onerror method to get XSS?
In the book Javascript for hackers, Gareth Heyes overwrites the window.onerror method with eval, used to execute a function.
From my understanding, the following snippet run in a browser console ...
- 133
0
votes
0
answers
18
views
Does Telegram allow you to see shared contacts of people you are connected to? [closed]
Few years back, I made an account on Telegram & then used it to chat to some people anonymously because I had read that Telegram doesn't share your number or name with people who you chat with. ...
- 2,012
1
vote
1
answer
64
views
Using public WPA2 Enterprise credentials for public Wi-Fi
In South Korea, I've seen a couple of public Wi-Fi networks advertise a "secure" option. Stickers on public buses in Seoul and the captive portal login page for unencrypted Wi-Fi instruct ...
- 111
0
votes
0
answers
24
views
Best way to ensure wireguard VPNs aren't blocked? [closed]
I used self-hosted wireguard (on GL-INET) to work remotely for 1.5 years without any issues on Bell Canada, but yesterday, suddenly it was blocked (on 51820) as with few others I know.
However, a good ...
- 101
0
votes
0
answers
21
views
How do I create a site with secure user data upload on AWS? [closed]
I want to have users upload data, but need to ensure it stays secure and cannot be mixed up with or touch other users' data. How do I do this with AWS?
- 101
0
votes
1
answer
52
views
base64 encoding inflight credentials
I did not like how my password and other credentials could be viewed in the browser developer console when passed from a form to my api authentication service. So I'm now base64 encoding using atob() ...
- 101
1
vote
1
answer
39
views
Since yt-dlp simulates a browser, can it be fingerprinted in the same ways (e.g. canvas and audiocontext)?
I know that wget and curl can mitigate fingerprinting (aside from http header and user agent), but will yt-dlp give away more data?
- 11
0
votes
0
answers
30
views
nmap scanning a slow host
Is there way how to enforce nmap waiting for replies longer (10 seconds)? I want to scan an embedded device which utilizes some sleep modes and it process packets from wi-fi module with very high ...
- 101
0
votes
0
answers
24
views
How can I check for malware embedded in an MP4 video? [duplicate]
How can I check for malware embedded in an MP4 video? It was sent over WhatsApp and I have played the video on my Android phone.
Norton scan came back clean.
0
votes
0
answers
19
views
Is hashdeep deprecated?
The other day corporate or the vendor used their cloud deployment tool to replace some of our DLLs, and it got me wondering; does anyone still use hashdeep when they initially roll out a server or ...
- 1,387
-2
votes
0
answers
41
views
Is sql injection possible here ? or I can consider this as safe? [closed]
This is my code in phpm I was wondering if there is a way to bypass sql protection, because everything is already blocked.
Is this secure?
$max = 10;
if (isset($_GET['max']) && !is_array($...
- 1
0
votes
2
answers
53
views
Secure Boot: Can Firmware verify every component?
As far as I've seen, the Secure Boot process is described like so: A firmware stored in read-only memory and therefore considered secure starts. It verifies the next software component (e.g. a ...
0
votes
0
answers
27
views
Can't connect to internet via ethernet cable but as soon as I use VPN internet starts to work [closed]
I am using ethernet cable to connect to internet on my laptop. However, sometimes it doesn't work I can't open any website or doing any online activity. When I use VPN, only then laptop connects to ...
user298333