All Questions

Filter by
Sorted by
Tagged with
0
votes
1answer
21 views

Is there really any safe way to store an encryption key?

I'm aware of multiple ways to store an encryption key, some very bad, such as in your codebase or elsewhere on the same server, and others much better such as where the encryption/decryption is done ...
1
vote
0answers
16 views

How to “unprotect” malicious workbook without knowing password

Right now I'm looking at a word document (most likely rtf based on it exploiting equation editor) that opens just fine when you double click it, but on further examination in a hex editor and in ...
0
votes
1answer
27 views

Is a firewall needed on a small office that simply needs internet access?

I'm planning on porting all of my office's software needs to cloud services that I can access via internet. It's a simple LAN that has a NAT gateway pointing to the open internet. Would a firewall ...
0
votes
1answer
18 views

Cryptographically signing content / download

Let's say that I have an executable running on a client machine, and, it requires to download some updates on a regular basis. The solution uses TLS to communicate with the download server. I would ...
0
votes
1answer
23 views

How to ensure that a router is fully reset to factory defaults

I have a router (TP Link Archer C2) that I would like to pass on to a friend or give to a thriftstore. However, I noticed some logs via the admin tools. The router apparently logged some requests and ...
0
votes
1answer
58 views

Suspicious email from someone i know (seemingly using the Real mail of that person)

TL;DR, i think this mail was sent by mail.okgroup.cz, Not sure tho, would like confirmation. I just got a mail from my sister with no subject and only a link. NOTE; That the email used in this mail ...
1
vote
1answer
22 views

If an application has an XSS vulnerabilty, can we bypass CSRF with referer header?

Let's say there is an XSS vulnerability in an application, and the application is not using any kind of CSRF token, just using the referer header to protect against CSRF. Referer header is validating ...
0
votes
0answers
34 views

Is there some way in which “normal people” can contact me (one-way) with messages in a secure, anonymous (for me) manner? [closed]

I'm trying to be able to receive incoming messages from "the general public", in a way which: Does not reveal my identity to the person contacting me, or to any company/entity. Does not cost money. ...
0
votes
0answers
34 views

How is eSIM profile cloning prevented?

(a) How are eSIM profiles tied to a particular device? That is, what prevents a bad actor from digitally copying an eSIM profile (or, why is the eUICC chip required; can't we have a 'soft' or '...
0
votes
0answers
22 views

Phone calls from unused simcard

How is it possible to receive a call from a number that is not inserted in a phone? My phone is a Samsung A20. It fell in the sea. The phone is dual sim and 2 sim cards were in the phone when it ...
0
votes
0answers
20 views

Correct CSP frame-src value for iframes with empty src value

We have below CSP derivatives defined in our site, script-src 'self' 'unsafe-inline' 'unsafe-eval' *.youtube.com; style-src 'self' 'unsafe-inline'; frame-src *.facebook.com www.youtube.com; As ...
1
vote
1answer
16 views

Why use any other password generation method when Diceware/EFF dictionary exists?

Recently I discovered method of generating passwords with Diceware/EFF dictionary. Look at my example: passphrase vs randomly generated password (1) rockstar reword gamma banker unwarlike (64,6 bits ...
0
votes
0answers
29 views

Disable vulnerable cipher suites

Pardon this question because I'm fairly new as a security analyst. As a part of my learning I installed OpenVAS into one of our Ubuntu test server and scan the said server. I have the results and I ...
0
votes
0answers
40 views

Barabasz.one backdoor virus? [closed]

I've found weird virus online, it was the first time I have ever seen that form. It was presented as 'shortcut': C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -ExecutionPolicy ...
1
vote
1answer
42 views

I am signing (HMAC) outgoing webhooks to allow users to verify their source, should I also sign outgoing responses?

To allow api users to verify the authenticity of outgoing webhooks, I am using a similar model to slack: Concatenate timestamp and body, HMAC with pre-shared key, add timestamp and HMAC digest to ...
0
votes
0answers
6 views

Recovering local chrome passwords from dead pc [migrated]

recently my PC died and will not power on. The motherboard had a complete failure. My HDD survived. I have it set up as an external to pull my photos and such. My question comes down to transferring ...
1
vote
1answer
51 views

Securing an API for 3rd party users

I'm having issues finding the right language to search for answers to my problem so hopefully I can explain it here. I am trying to create an API that will be accessed by a 3rd party. This 3rd party ...
-1
votes
0answers
49 views

Plain text file encryption

Context: I have a custom tool which connects to remote servers using ssh, installs and deploys services. That tool only accepts a erlang tuple in textfile as input for server names and ssh ...
0
votes
0answers
32 views

How to resolve the Format String Error alert in OWASP ZAP for a web application (ASP.NET C#)?

I have a web application with a log in page. In the log in page, I've set maxlength for the username input and the password input, which looks like the code below. @Html.TextBoxFor(m => m....
0
votes
0answers
64 views

illegal activities with someone else's ip [closed]

My mother received an SMS around 10 months to 1 year ago that she has a court case with whatever serial number. We thought it's a scam at first and ignored it since we didn't know you could be called ...
1
vote
1answer
33 views

Webhook sending Purchase Details to handling Purchases from a Third Pary Service Secure?

I'm developing a mobile application for a client that sells digital courses on a service called Teachable that hosts their website and handles the purchase process for them. My client wants to keep ...
0
votes
0answers
36 views

OAuth2: Where should I store my refresh token in a stateless application?

In my current architecture I have an authentication server which provides a JWT token via OpenID Connect to any web application that uses the code flow I implemented. I went to the hassle of ...
4
votes
1answer
56 views

Can someone explain the “Section 4.2.1.3. Key Usage” extension in RFC 5280 as it relates to TLS 1.2 RFC 5246

There are references in TLS 1.2 RFC 5246 about use of certificates (server and client). I am unclear about the "key usage" extension of a certificate as it relates to TLS 1.2 and that too for data ...
0
votes
0answers
13 views

BLAKE2: What is the difference between the salt and the personalization? [migrated]

Libsodium builds their KDF on top of BLAKE2b: BLAKE2B-subkeylen(key=key, message={}, salt=subkey_id || {0}, personal=ctx || {0}) Besides the key, the function has two additional arguments: The ...
0
votes
0answers
38 views

How do I find the private key in Android app OpenKeyChain?

I can generate a key easily enough within the app by clicking on "Create My Key" but notice it says "key" not keys. This is confusing in that I don't know whether I am trying to share my public key, ...
0
votes
1answer
60 views

DHCP Interception

When a new client is trying to get a new IP from the DHCP server, it broadcasts the discover message. And also DHCP broadcasts the offer. And they use the transaction ID to communicate without the IP ...
0
votes
2answers
55 views

How to safely connect a possibly infected computer to my home's internet? [duplicate]

There is a laptop - not mine, someone else's. That someone else, as far as I know them, are a bit lousy in their security best practices (do they even have AV installed? not to mention OS patches or ...
0
votes
1answer
87 views

Is it a possible vulnerability / GDPR violation if basic profile of users are enumerable through the URL?

If a website uses an auto-incrementing user-id in its url – /users/1, /users/2 to showcase public user profiles (just the name + photo / avatar) is it considered a possible vulnerability?
0
votes
0answers
6 views

Django, mozilla_django_oidc and admin interface [migrated]

i am trying to connect Okta with a custom Django (v.3.0.2) app i am coding, using the mozilla-django-oidc library. So far the initial user authentication and account creation (using Django's user ...
0
votes
1answer
48 views

jwt symmetric signature security risks (from client side)

I am currently implementing an iOS app, which integrates with a cloud hosted .net backend system in azure, which. The api login endpoint takes user/pass -> replies with an signed only HS256 jwt token....
0
votes
0answers
11 views

How to prevent people bypassing my server cache? [migrated]

I own a Shopify store that does flash sales. It uses cloudflare to manage the server caching of my products.json file. However, it seems like people are able to monitor my products.json and bypass the ...
1
vote
1answer
89 views

It this a safe way to filter input into an SQL query

Is this a safe way to filter strings into an SQL query in java or could this be bypassed? I understand that I should just parameterize everything but this is an ancient code base where it makes more ...
0
votes
0answers
24 views

Using IdentityServer to call API on behalf of a Client not User?

I am thinking of using IdentityServer4 for a new project. I am new to this and have done some reading and seen some of the demo clients in action. Most of the clients in the samples allow login as ...
2
votes
0answers
40 views

If the given key of a Vigenère Cipher has repeated letters, does it make it any easier to break?

I am studying the Vigenère Cipher that given a passphrase uses rotating Caeser Ciphers to encode the plaintext. The ‘classical’ attacks on Vigenère first deduce the length of the passphrase by ...
0
votes
2answers
98 views

Find Buffer Overflows at a target you want to gain access

I want to pass my OSCP exam and I am learning with the material I got. I watched the videos and read the pdf but I have a question about buffer overflows. In the example in the videos, the guy has ...
0
votes
1answer
55 views

Search for existence of sensitive substring without revealing substring in cleartext

I have a list of very sensitive strings and I want to ensure that these strings do not exist in a set of documents (potentially very large documents). However, these substrings are so sensitive that ...
1
vote
0answers
45 views

Why does Chrome not allow the modification of these headers by extensions?

The Chrome WebRequests API mentions that specific request headers are not available to the onBeforeSendHeaders event, meaning that extensions cannot read and/or modify these headers. Here is an ...
0
votes
0answers
25 views

Authenticode: Should UAC warn more dramatically for tampered file? [closed]

I have tried out what happens if a digitally signed executable is manipulated. The normal file has a blue UAC dialog: Now, say I change one byte in the file: When I now run this tampered file, the ...
0
votes
1answer
60 views

Secure error messages from public API

We are writing our first public API. Now I remember hearing in the past that you shouldn't give users useful error messages, that allows hackers to learn what your data is. so if the get is { ...
23
votes
7answers
4k views

Are all USB-based attacks dependent on being able to inject keystrokes?

From what I've seen, USB-based attacks such as RubberDucky need to be able to open a terminal and then execute commands from there, usually to download and then install malware or to open a reverse ...
2
votes
1answer
48 views

Does different clear text size mean different encrypted size in TLS?

Is an attacker able to intercept tls communication and get cleartext size information from the encrypted size of intercepted payloads? Or is there some kind of padding which would prevent messages ...
2
votes
1answer
49 views

XSS attack on websites that allows JS file upload?

Consider a website example.com that allows users to upload arbitrary JS files, that are then stored on the server and served to visitors with a JS content type. Could an attacker use this to perform ...
0
votes
1answer
34 views

What encryption method is used by the commander one program for zip? [closed]

I use Commander One on my Mac for file archive. There is an option to create a password secured archive, but without encryption setting. Is the encryption processed according to AES 256 or anything ...
0
votes
0answers
36 views

General use case Cybersecurity Mitigation actions

Disclaimer: I am still at a beginner level of cybersecurity knowledge but want to learn more so if my question does not even make sense I want you to somehow direct me to the right path to finding my ...
0
votes
0answers
8 views

Converting hashes to plain text [closed]

As far as i know, the password are stored as hashes and we cannot reverse the hash as the data is lost but when i connect to my router via wps then the password gets stored in my device as plain text ...
2
votes
0answers
42 views

How does the attestation mechanism of U2F guarantee the provenance of the key material?

I'm trying to understand Yubico's documentation of the U2F standard, and getting hung up on the PIV attestation piece. The security claim appears to be that the authoritatively-signed attestation ...
1
vote
0answers
34 views

Rebooted host machine from inside VM, should I report this issue and where to report?

Excuse my ignorance as I don't work in infosec. I ran reboot inside a linux virtual machine using VirtualBox on Mac and it rebooted my host machine. I am trying to reproduce the problem but haven't ...
-2
votes
0answers
37 views

Exploit that unlock disk [closed]

I use Debian 10 Buster with disk encryption. All is encrypted and only /boot is unencrypted. Something happen and I can't unlock my system. Is there any exploit that can help me unlock the disk ? I ...
0
votes
1answer
43 views

Is it safe to whitelist my public ip to a server, even I am behind CGNAT?

I have a few VPS and Databases in GCP, I can access them by whitelisting my IP, but just few months ago my ISP rollout their CGNAT and I was affected. As far as I know CGNAT, allow multiple subscriber ...
44
votes
5answers
10k views

Can Malicious Code Fit in 14 Bytes

I was reading this NYT article about the hack of Jeff Bezos's phone. The article states: The May 2018 message that contained the innocuous-seeming video file, with a tiny 14-byte chunk of malicious ...

15 30 50 per page