All Questions
65,563
questions
15
votes
13
answers
73k
views
How can I intercept and modify HTTP requests?
Are there any free tools available that let me intercept and modify HTTP requests for testing?
I am looking for tools which allow me to send custom HTTP headers.
- 1,853
33
votes
8
answers
6k
views
When a sysadmin leaves what extra precautions need to be taken?
If a user leaves an organisation who knew most of the top credentials are there any other precautions that need to be taken other than changing those credentials?
Obviously there is also the standard ...
- 709
21
votes
3
answers
875
views
Startup security
I'm running a lean start-up, and I can't afford to pay a dedicated security expert, what types of precautions can I take? These would need to be cheap, simple to implement, and require minimal time ...
AviD♦
- 72k
18
votes
6
answers
6k
views
Automated tools vs. Manual reviews
What are the advantages of using automated tools, as opposed to manual review? What are the disadvantages?
This applies both to external blackbox vulnerability scanning, and to static code analysis.
...
AviD♦
- 72k
22
votes
3
answers
6k
views
White-box vs. Black-box
What are the relative advantages and disadvantages of each form of testing?
I.e. What is the difference between static code analysis and runtime/dynamic penetration testing?
What are the pros and cons ...
AviD♦
- 72k
14
votes
4
answers
287
views
Is external vuln scanning sufficient?
Is running an automated application vulnerability scanner sufficient to certify our application is secure? Why isn't it?
From the original Area51 proposal.
AviD♦
- 72k
922
votes
11
answers
301k
views
How to securely hash passwords?
If I hash passwords before storing them in my database, is that sufficient to prevent them being recovered by anyone?
I should point out that this relates only to retrieval directly from the database,...
AviD♦
- 72k
10
votes
2
answers
2k
views
Online SQL Server database for a Business app. Security considerations
A business application works with a SQL Server database. A SQL Server 2008 is installed on one of the computers of the local network. Technically this app works OK if the server computer with the SQL ...
- 2,017
35
votes
11
answers
13k
views
Vulnerable OS's?
Which vulnerable OS's like for example DVL would you recommend for someone to use for the purpose of pentest/exploitation learning?
- 3,272
10
votes
5
answers
2k
views
Encrypting a disk that has stuff on it?
Ok, so a pretty big disk ~1-2TB (90% full, multiple partitions + 2 operating systems on it), needs to be encrypted and zeroed-out, and it's a bit too much data for backing it all up before encryption. ...
- 3,272
9
votes
7
answers
3k
views
If I suspect my server is compromised then should I disconnect it immediately or not? From Power or Network?
According to Mandiant, you should not:
Mistake #1: Immediately entering “remediaton mode” – also known as playing “Whack-A-Mole”
... as described here: http://blog.mandiant.com/archives/1525
...
- 13.7k
8
votes
5
answers
3k
views
Creating tunnel with most ports closed?
How can I create a proxy tunnel from a network that has all ports but port 80 closed? I guess I'd have to bind SSH on my server to port 80, but would that introduce problems to my home network since ...
- 3,272
50
votes
5
answers
10k
views
New XSS cheatsheet? [closed]
There is a great list of XSS vectors avaliable here: http://ha.ckers.org/xss.html, but It hasn't changed much lately (eg. latest FF version mentioned is 2.0).
Is there any other list as good as this, ...
- 1,095
12
votes
3
answers
2k
views
How do you defend specifically against attackers utilizing any or all of the commercial exploit kits?
There are several commercial exploit kits available containing 0day vulnerabilities:
White Phosphorus Exploit Pack http://www.immunityinc.com/products-whitephosphorus.shtml
Agora Exploit Pack http:...
- 13.7k
34
votes
5
answers
42k
views
What is the correct way to implement anti-CSRF form tokens?
I am fully aware of CSRF and have already implemented some safe forms, but I have never been happy with the results yet.
I've created tokens as a md5 of username, form info and a salt and stored it ...
- 1,095
19
votes
4
answers
4k
views
What type of content better not to transfer by email?
Email is one of the main tools of business communication. On the other hand, it is not a secure way of communication. But to what extent it is not secure?
I have always wondered how sensible it is ...
- 2,017
16
votes
6
answers
3k
views
What are a few good lists of threats to use to kick-off conversations with others about what worries them?
To effectively communicate with business owners or executives on security, specifically with how people may harm their business, it often helps to discuss what types of people worry them. What are ...
- 13.7k
23
votes
4
answers
2k
views
How does using OpenID affect webapp security?
Using OpenID for authenticating users grows in popularity and, in fact, makes a webapp easier to use.
But what are the security considerations one should bear in mind when deciding whether to ...
- 2,017
4
votes
2
answers
4k
views
Do you know any crawler/spider software, which is able to go through an ASP.NET site?
Do you know any crawler/spider software, which is able to go through ASP.NET application, not ASP.NET MVC, but the one full of __doPostBack JavaScript functions on every link/button/change event?
If ...
- 1,840
13
votes
5
answers
12k
views
What is the right way of storing database connection strings from the security point of view?
What are recommendations, best practices and have-to-dos regarding handling connection strings in web applications? What things one should never, ever do?
- 2,017
12
votes
4
answers
3k
views
What kinds of SSL certificates are usable for encryption?
I know that Verizon SSL certificates cost close to $600.
There are couple of cheap alternatives, but I never really understood why Verizon does not offer such certificates. Look for RapidSSL at ...
- 693
62
votes
12
answers
47k
views
How long should the maximum password length be?
The minimum password length recommended is about 8 characters, so is there any standard/recommended maximum length of the password?
- 1,404
29
votes
8
answers
18k
views
Do secure phone lines exist?
I could be out of context here about security, but , I would like to know if phone lines or phone calls over VOIP could be made secure .
I know that Skype and other VOIP service providers have to ...
- 693
29
votes
7
answers
9k
views
What are some good website security scanning solutions? [closed]
What are some good web-based website security scanning solutions? I'm not too concerned if they are web-based solutions, or software that can be run locally.
Generally, I'm looking for something we ...
- 481
11
votes
3
answers
2k
views
What free tools or techniques exist to discover anomalies in network flows?
I have been using FlowMatrix. What do others do on the cheap?
- 13.7k
14
votes
1
answer
2k
views
Is there a list of default, standard or third-party "users" for Oracle?
When installed, and depending on which options it is installed with, there are a bunch of standard users pre-created in Oracle. Additionally, third-party software often has its own set of schemas/...
- 884
10
votes
2
answers
4k
views
Is there a benefit in using Oracle's WRAP to obfuscate PL/SQL Code
Oracle stored program units (procedures, functions, packages and types) can be obfuscated using the WRAP functionality.
Apart from the generic arguments about 'security through obscurity' are there ...
- 884
25
votes
8
answers
31k
views
Can I detect web app attacks by viewing my Apache log file? [closed]
I occasionally get clients requesting I look at their access_log file to determine if any web attacks were successful. What tools are helpful to discern attacks?
- 13.7k
7
votes
3
answers
2k
views
How to determine whether site is secure from common user's point of view?
What should be done (or at least declared) so end-users, visitors will start trusting your website?
Some thoughts:
secured login (via https)
privacy policy (hidden email and other private ...
- 1,222
79
votes
5
answers
36k
views
What techniques do advanced firewalls use to protect againt DoS/DDoS?
It is hard to protect a server against Denial of Service attacks, DoS/DDoS. The two simple ways I can think of is to use a server with much resources (e.g. CPU and memory), and to build the server ...
- 5,053
14
votes
2
answers
2k
views
What is the best way to verify the SSL configuration of my web server?
How do I ensure I have my SSL configuration setup securely?
- 13.7k
11
votes
3
answers
2k
views
What are the pros/cons of using a threat detection system?
What are the pros/cons of using a threat detection system for a web app (like OWASP's AppSensor)?
What does a properly implemented threat detection system do and how does it behave when it detects ...
- 3,142
21
votes
1
answer
3k
views
Is it secure to connect to a remote Windows Server using Remote Desktop only?
I have a Windows Server that I login to from my home. I only use the pre-installed Remote Desktop. Is this a secure way to remote login or should I improve it in some way? If I should improve it, ...
- 5,053
51
votes
3
answers
107k
views
How can I check that my cookies are only sent over encrypted https and not http?
I read a blog post GitHub moves to SSL, but remains Firesheepable that claimed that cookies can be sent unencrypted over http even if the site is only using https. They write that a cookie should be ...
- 5,053
16
votes
8
answers
3k
views
Password management/synchronization?
Is there a good enough service I could run on my own home (Linux) server that I could use for storing/accessing/synchronizing passwords so they could be available for me from multiple computers/places?...
- 3,272
18
votes
5
answers
3k
views
Is Google Chrome a more secure browser?
I was amazed that IE 8, Safari, Firefox were hacked so fast at Pwn2Own 2010. Is Chrome really so good or was it not tested?
Has anyone other results of independent investigations about security of ...
- 1,222
29
votes
5
answers
6k
views
Professional certifications for IT Security [closed]
Which credentials of the sub-list of IT certifications (as per the Information Systems Security Association) would be considered MUST HAVE for a IT Security specialist?
CEH Certified Ethical Hacker
...
- 3,251
34
votes
6
answers
10k
views
Does it matter which Certificate Authority I source my SSL Certificate from?
To secure my web site with HTTPS, does it matter which company I source my SSL certificate from, or just that the browser recognizes it?
From the Area51 proposal.
AviD♦
- 72k
53
votes
9
answers
56k
views
Feeding /dev/random entropy pool?
Which way of additionally feeding /dev/random entropy pool would you suggest for producing random passwords? Or, is there maybe a better way to locally create fully random passwords?
- 3,272
26
votes
9
answers
23k
views
What cryptographic algorithms are not considered secure? [closed]
What cryptographic algorithms are not considered secure, but yet are still widely used and available in standard libraries? If applicable, mention a secure alternative.
- 5,039
105
votes
11
answers
31k
views
Best practices for Apache Server hardening?
What are some best practices, recommendations, required reading for securing an Apache Server?
- 3,251
22
votes
5
answers
4k
views
What are the best practices for mitigating zero day attacks?
What are best practices / recommendations / strategies for mitigating zero day threats/attacks from a software development perspective?
- 3,251
12
votes
7
answers
2k
views
Is an IP address blacklist good practice to prevent website attacks?
My website has a blacklist of IP addresses. The web application, in some way, detects all invalid, suspicious influences to it and remembers IP address and denies any requests from that IP address.
...
- 1,222
21
votes
4
answers
5k
views
How to keep a shared web hosting server secure?
What are the ways of keeping a shared LAMP server secure, assuming SSH access is available for every user?
Edit: I am mainly thinking of securing the server from the users themselves and between ...
- 5,039
78
votes
6
answers
15k
views
How to disclose a security vulnerability in an ethical fashion?
How to disclose a security vulnerability in an ethical way? I've heard there are various schools of thought on this topic. I'd like to know the pros/cons of each.
- 5,039
22
votes
5
answers
3k
views
What is the best option for setting up a several sites supporting SSL on the same IP?
If multiple hostnames are hosted on the same IP, it's not straight forward to allow them to support https. What are the best options in terms of browser support and/or web server support?
- 2,195
62
votes
6
answers
29k
views
How to Securely Implement a "Remember Me" Feature?
Assuming you already have a website that implements all of the standard login stuff, what is the correct and most secure way to allow users to automatically be logged in for a certain time period (let'...
- 833
22
votes
5
answers
3k
views
Good session practices
What are some good practices for ensuring logins, session IDs and session content are secure for a website?
- 1,853
45
votes
8
answers
6k
views
What methods are available for securing SSH? [closed]
What methods are available for securing SSH?
- 5,039
22
votes
7
answers
2k
views
Computer Forensics: what is in your toolbox?
What tools do you use for collecting evidence, making disk images, inspecting live memory and so on?
- 2,000