All Questions

Filter by
Sorted by
Tagged with
-1 votes
0 answers
46 views

Encryption database on app that runs on client side

I'm having a discussion at work and I want to know the opinion of the community and know if I'm wrong or not. We have a product that runs on client computers (on-premises) and it uses a local database ...
user avatar
  • 1
29 votes
4 answers
7k views

Can I prove that I did not receive an email?

A company are saying they sent an email to me. I have gone through all of my inbox, junk, and deleted files and the email still doesn’t exist. They have asked me to prove the email never got to me by ...
user avatar
  • 291
0 votes
0 answers
18 views

GnuPG: How can I clean signatures from my encryption subkey?

Similar to Is it wise to remove redundant self-signatures from my PGP key? - I noticed that after a couple of years, and multiple key manipulation (I use keyoxide.org so my UIDs have multiple ...
user avatar
0 votes
0 answers
19 views

Can Proxy replace VPN? [duplicate]

I was reading about proxy vs VPN, to summaries that one could say that VPN is similar to proxy with the addition of encryption for better security. So I have a question, wouldn't it be better to use ...
user avatar
  • 1
1 vote
0 answers
19 views

Penetration testing framework for Windows Desktop applications

Is there a burpsuite-like framework for Windows Desktop applications? I.e. I'm looking for something that would allow me to intercept user-input data sent to my application for manipulation to test ...
user avatar
0 votes
1 answer
64 views

Crack JWT HA256 with hashcat

Is it possible to crack JWT with HA-256 algorithm with hashcat on a normal PC? hashcat password.txt -m 16500 -a3 How can I calculate how much time it will take? JWT first section for example ...
user avatar
0 votes
0 answers
8 views

PGP certify key redundancy

The whole issue is caused by my usage openpgp cards I have 3 cards where I am using one as a Master card with Certify key on it and the second one as a daily runner. The third card was meant to be ...
user avatar
  • 101
0 votes
1 answer
80 views

Who Leaked My Data? [closed]

I am trying play with _IntelligenceX and SNUSBase. So fun. I see documents that list me. But do not show who leaked or where did leak come from. Is such a source exist to look at my Twitter handle or ...
user avatar
-1 votes
0 answers
54 views

What is code review? [closed]

What is the official definition of code review or source code review? Does it only mean that another developer reads the code after changes done by another developer? or it can be done by an automated ...
user avatar
0 votes
2 answers
99 views

Are country IP address blocks officially standardised and can they be reliably used for access control?

I was setting up firewalld on an enterprise server and came across their concept of firewall zones. I figured I can easily use them and their source property to restrict access to SSH to only the ...
user avatar
0 votes
0 answers
22 views

Is lateral movement and horizontal privilege escalation the same thing?

Is lateral movement and horizontal privilege escalation the same thing, what would be the key difference to these two ?
user avatar
1 vote
1 answer
47 views

What are the security best practices to implement offline login of android apps?

My client has an android application requirement. The users of the application are workers who might have to work at places where internet connectivity is unavailable. So an offline login feature is ...
user avatar
2 votes
0 answers
29 views

Normative reference for a web application disclosing existing values of integration secrets to users

In a web-based SaaS product, one of the configuration pages allows users to set credentials for system-wide integrations with other products. These include usernames, passwords, and API secrets. The ...
user avatar
  • 121
0 votes
1 answer
30 views

Is key renegotiation necessary with a larger cipher in OpenVPN?

OpenVPN allows the use of their 'reneg-sec' option to renegotiate keys for the data channel at a specified interval. This helped protect against exploits like Sweet32 with 64 bit block ciphers a while ...
user avatar
  • 99
0 votes
0 answers
21 views

Any studies on the hardware costs of server-side password hashing? [closed]

I am researching the state of the art in password security on the web and the general consensus seems to be that server-side hashing with a slow hashing algorithm (Argon2id, bcrypt, scrypt etc) is the ...
user avatar
0 votes
1 answer
47 views

How to setup internet connection in a way vpn logs would think I'm logging from different country

I have a company laptop which uses a Cisco VPN to log in to the company network in order for me to work. How do I configure internet I'm using at home in a way where Cisco VPN logs, or another log ...
user avatar
  • 1
1 vote
2 answers
66 views

How to non-intrusively monitor my team's MacBooks secure configuration?

I'm managing a small remote team. We care about security and I want to be sure that our MacBooks comply with at least basic security standards, such as CIS benchmark. These are the ways I see I could ...
user avatar
2 votes
1 answer
46 views

Why does HIBP use k-anonymity when checking passwords? [duplicate]

Maybe I'm misunderstanding the purpose of k-anonymity, but I don't see the why HIBP uses it when checking user passwords. This website, which explains HIBP's implementation of it, says, "The ...
user avatar
  • 23
0 votes
0 answers
14 views

OpenId Connect and proper usage of nonce

I understand that a nonce is used to prevent replay attacks. I have been going through documentations, specs, posts and blog posts and I am a little confused. Consider the following attack scenario. ...
user avatar
  • 43
0 votes
0 answers
15 views

Storing strings in a Database that are only visible to their owner who stored them when they were logged in

In my application, logged-in users create some strings, and those strings are stored in the Postgres database. But, because they are in plaintext, their values are visible to me, as I have access to ...
user avatar
1 vote
2 answers
45 views

When renewing a TLS certificate (no change to CSR nor private key), will the modulus remain the same?

Here is the scenario, just wanted confirmation that I am understanding it correctly. I have a TLS certificate that will expire soon; Upon renewal, I paid the CA, and they reissued me with a new public ...
user avatar
  • 307
1 vote
0 answers
65 views

Protection against JPEG compression bombs

There is a well-known threat named compression bombs. Such image formats as PNG and JPEG use compression methods, and therefore and threory PNG/JPEG images might be a comperssion-bomb. I've found an ...
user avatar
1 vote
1 answer
73 views

Databases for compromised passwords that browsers use

I am looking into databases of compromised passwords in order to ensure that passwords on a system I am responsible for are not already compromised. To have complete peace of mind, I prefer to get ...
user avatar
  • 331
0 votes
0 answers
6 views

AES CBC: When to use new IV [migrated]

I am trying to figure out when to use a new IV for an AES-CBC communication and whether my approach is safe. Here is a quote from Thomas Pornin from a similar question: So, to sum up: you must choose ...
user avatar
  • 151
-1 votes
0 answers
9 views

Is it possible to enforce CSS1 in browsers? [migrated]

I was recently surprised to learn that CSS2+ is Turing complete, and hence it is potentially dangerous, from the information security standpoint, to open websites containing CSS. That being said, if a ...
user avatar
22 votes
9 answers
6k views

Redirect to login page if authorization required -- security flaw?

Suppose we have a site that has public and private areas. The private areas require login. For example "www.site.com/about" is publicly accessible. But "www.site.com/message_inbox"...
user avatar
1 vote
1 answer
69 views

What are the security concerns of embedding Base64-encoded images into an HTML document?

We are developing an MVC web-application in Django and having concerns about image uploading. First of all, here are our business requirements: Our users can upload images (like profile pictures, etc)...
user avatar
0 votes
0 answers
14 views

Is there a service for storing sensitive user identity documents? [closed]

A new client wants to conduct KYC checks on users on a basic level, meaning they will need to submit their ID card (Hong Kong) and proof of address. The client will simply check the documents manually ...
user avatar
  • 101
0 votes
0 answers
19 views

TLS Interception basics [closed]

I am trying to perform TLS interception in which I was given 2 containers: Host01 and Attacker with a br-intercept bridge. So every HTTP/HTTPS request from Host01 to the Internet passes through the ...
user avatar
0 votes
1 answer
30 views

Modifying request responses leading to unauthorized access?

I have been developing some applications lately where the content on the web app is rendered based on the request's response. For example, a user with a "free" plan has limited access, ...
user avatar
  • 105
0 votes
1 answer
65 views

I suspect someone entered my server via SSH after I created a pem file for the SSH access key. What I can learned about it?

I created an id_rsa key in my server with ssh-keygen -b 4096 without a passphrase. I added my id_rsa.pub into .ssh/authorized_keys and downloaded my private id_rsa key into local PC and changed it ...
user avatar
0 votes
2 answers
46 views

File Upload(what type of file)

While I was learning about file upload vulnerability one question come to my mind. What type of file do I use while hunting file upload vulnerability ? Do I need to detect which programming language ...
user avatar
0 votes
0 answers
14 views

XSS Onerror alt param [closed]

I'm doing bug bounty and have found a place where there may be some XSS but the IMG is always given an alt tag whenever I try (as a defense), any bypasses?
user avatar
0 votes
1 answer
26 views

Docker, running programs as Root and AWS

It is well known that running programs inside your docker container as root is bad practice. As far as I can tell, the reason for this is because root on the container is rather similar to root on the ...
user avatar
  • 101
0 votes
0 answers
14 views

Programmatically Scrape iPhone Messages For Spam With Python/Ruby [closed]

I would like to start an intelligence Data Base for the spam messages & calls that I receive on my iPhone with the primary goal of figuring out 1) What they want and 2) How they got my contact ...
user avatar
  • 225
0 votes
1 answer
48 views

Is this 36 character long string a hash [closed]

I found this string b2335332-d28f-449b-8d00-80a550b43046 Do you think it´s a hash? If yes any idea which one and if not any other ideas what it could be?
user avatar
0 votes
2 answers
57 views

Is a VPN effective when connected to WiFi network that requires authentication?

I pay monthly for a VPN. However, I browse online while connected to my university WiFi which requires authentication to use. The WiFi is open (no password directly) but when someone connects to it a ...
user avatar
1 vote
1 answer
26 views

To what attacks is using the value of the HOST header to craft self-referential URLs vulnerable?

From official ASP.NET Core docs, namely Routing in ASP.NET Core § URL generation concepts: Use GetUri* extension methods with caution in an app configuration that doesn't validate the Host header of ...
user avatar
  • 5,587
0 votes
0 answers
9 views

Chain apache web server acting like reverse proxys using proxychains

I've configure multiple apache web servers so they filter the request and if they have a specific request_uri the request would be redirect to a c2 server. I do that with the next line in the apache ...
user avatar
  • 5
0 votes
0 answers
12 views

ProxyPassMatch redirect to the same request uri

I am doing a reverse proxy with apache to redirect https traffic filtering by the uri request. Right now I have the next ProxyPassMatch "^/thisisthepath$" "https:192.168.1.40/...
user avatar
  • 5
0 votes
0 answers
29 views

Is SSL necessary when sending password to a API from a server?

I have bought a online service which allows me to send SMS messages by making a call to the provider's SOAP-API. This is the WSDL I need to send a message: <?xml version="1.0"?> <...
user avatar
  • 2,740
0 votes
1 answer
37 views

Mobile Application Security

Do we need to carry out separate pentest for apps that are written in language that supports multi platform compilation like fultter? How much value it will bring since backend and major chunk of code ...
user avatar
0 votes
0 answers
25 views

TCP Reset attack: unable to break the TCP connection [closed]

I am trying to create a TCP Reset Attack on 3 docker containers: Attacker, Host01, Host02. My goal is to attack the TCP connection between Host01 and Host02 and the end result would be the TCP ...
user avatar
0 votes
0 answers
21 views

What are vulnerabilities of saving user input directly in wordpress plugin?

I have a WordPress plugin that helps create an organization chart/tree and then generates a URL where the chart is available to be viewed by the public. The plugin dashboard looks like this the plugin ...
user avatar
0 votes
1 answer
31 views

How to mitigate risk of exploiting open POST endpoints?

I'd like to ask for advice reg. protecting the state-altering HTTP API endpoints of the API that I'm owning (POST etc.). I'm owning a web application that exposes some HTTP endpoints to the world. ...
user avatar
0 votes
2 answers
54 views

What are the vulnerabilities of exposing url end point param?

I have a wordpress plugin that helps create an organization chart/tree and then generates a URL where the chart is available to be viewed by the public? Inside the plugin's view in WordPress dashboard....
user avatar
3 votes
1 answer
92 views

Possible to avoid device fingerprinting with imagemagick?

If I took a picture with my mobile phone and wanted to publish that photo without any artefacts connect to me, the first thing I would do is strip all of the image metadata with 'exiftool': exiftool -...
user avatar
1 vote
0 answers
28 views

Unlocking a Windows computer through the CMD prompt [closed]

Let's say I had an "NT AUTHORITY\SYSTEM" command shell on my locked Windows computer (at the login prompt) and I would like to get log in as user X (as if I logged in normally with their ...
user avatar
0 votes
0 answers
26 views

Image uploading in a web-application [closed]

We are developing an MVC web-application in Django and having concerns about image uploading. We've done some research on this topic and came up with a setup we want to share here for advices and ...
user avatar
0 votes
2 answers
132 views

How can I hide my internet usage? [closed]

This can be seen as a rather dubious question but let me explain. I'm a 22 year old still living with my father and his wife (my stepmother). I've been living here for over a year now and ever since ...
user avatar

15 30 50 per page