All Questions

Filter by
Sorted by
Tagged with
8 votes
4 answers
3k views

How to receive large files guaranteeing authenticity, integrity and sending time

I need to receive some important documents from another person. It may be important to be able to prove (in justice) which files exactly I received from that person at a specific moment. My first ...
alex's user avatar
  • 181
8 votes
1 answer
2k views

What sort of security does Docusign provide?

In the last days I have seen two apparent "breaches" of Docusign's security. Neither are good evidence, but they illustrate the point: Wall Street Millennial's youtube review of Joonko's ...
User65535's user avatar
  • 289
0 votes
0 answers
31 views

Nmap can't scan ip outside my network [closed]

I am new to cyber security and networking and would like to ask, I installed on my virtual machine Kali Linux and in the settings enabled a bridged connection instead of NAT, but when a friend sent me ...
Snaks's user avatar
  • 1
1 vote
1 answer
28 views

Opening PowerShell (PS) session with STs

I am solving Tryhackme> Exploiting Active Directory > Task 3. At very last, how new powershell session is opening with the dumped Service Tickets (STs)? He typed this command... PS> New-...
Aryan's user avatar
  • 75
1 vote
1 answer
33 views

what should be the response of keyupdate if the initial KeyUpdateRequest is set to update_not_requested not update_requested

"The KeyUpdate handshake message is used to indicate that the sender is updating its sending cryptographic keys." "If the request_update field is set to "update_requested", ...
hjhjh's user avatar
  • 51
2 votes
0 answers
48 views

Getting reverse shell as another user

I'm performing Overpass the hash attack @ TryHackMe > CompTIA Pentest+ > Attacks and Exploits > Lateral Movement and Pivoting > Task 3 > Let's Get to Work! I dumped Key of my target ...
Aryan's user avatar
  • 75
1 vote
1 answer
62 views

ARP Spoof: Will it work on public wifi networks as compared to a home network?

I have recently successfully demonstrated a simple ARP spoofing attack on my home network. The setup in my home network, described to the best of my abilities is as follows: Optical network router (...
Jarrett GXZ's user avatar
0 votes
0 answers
17 views

Issue while building BusyBox for ARM (Cross Compilation) [closed]

I am following this guide (https://medium.com/@denisobrezkov/xen-on-arm-and-qemu-1654f24dea75) to run Xen on Qemu and Arm. Here is the command that I am using to build busybox: make O=$BUILD_DIR/...
Mishaal Ahmed's user avatar
1 vote
0 answers
93 views
+50

Would a domain registrar be considered a Service Provider for PCI compliance if it never touches its customer's card holder data?

Hypothetical: Company A accepts credit card payments and must be PCI compliant. Company B provides domain registration (but not DNS or web hosting) services to Company A. Some of these domains are ...
Jordan Rieger's user avatar
1 vote
0 answers
180 views

What's the origin of "A sequence has been discovered that could indicate a hacker attack. Your request can not be processed." error message? [migrated]

I'm working on a website for client that is setup on Joomla. While testing various forms, I noticed the following message on white background after submitting any of them with various data: A ...
Destroy666's user avatar
0 votes
1 answer
52 views

Is the ability to use Machine Owner Keys effectively a bypass of SecureBoot security?

SecureBoot uses a PKI path to verify particular signed bootloader binaries before it runs these binaries. This PKI, as far as I understand, is basically owned by Microsoft, meaning that only Microsoft ...
Jonathan Wilbur's user avatar
0 votes
0 answers
6 views

sshd won't start from xinetd in OpenSSH 9.8p1 [migrated]

We start sshd using xinetd on our gateway. Here is the xinetd config file: service ssh { instances = 10 socket_type = stream wait = no user = root ...
follie2000's user avatar
1 vote
0 answers
54 views

How to launch XSS code from an INPUT tag?

I have a website with the following code: <input class="Header--search--form-input" name="search" value="&quot; onfocus=&quot;alert(1)&quot; autofocus=&quot;...
Уканис Алексей's user avatar
4 votes
2 answers
224 views

How safe are my app's keys inside the TPM against other apps trying to impersonate mine?

This is a follow-up of these two questions about using the TPM to store application's keys. While both have great answers, there is a specific aspect I am missing: How safe are the keys inside the TPM ...
mist's user avatar
  • 113
3 votes
1 answer
71 views

PCI DSS SAQ A qualification - what counts as a 'found' vulnerability?

This Q pertains to PCI DSS v4.0 SAQ A - previous Q&A only touched on previous versions of PCI. Since 4.0, merchants that accept credit card payment, even if they only iframe or link to their ...
bukwyrm's user avatar
  • 131
4 votes
0 answers
77 views

Can someone with access to the infrastructure of the VPN provider access my or other devices in my local network?

The network of a customer/company/VPN provider is compromised while using VPN Clients, like for example Check Point Endpoint VPN or (Palo Alto Networks) Global Protect and so on. Would it be possible ...
mab's user avatar
  • 41
0 votes
0 answers
32 views

Bypassing strict network access control implemented at the ISP/country level [closed]

If some countries implement strict network access control, allowing access to the Internet (e.g. Google) only to IP addresses on an approved whitelist, is there any way to bypass such network ...
user24958594's user avatar
2 votes
0 answers
65 views

Searchable encryption for phone numbers

I have a table in Postgres that stores phone numbers. Since phone numbers are considered PII, I cannot store them as plaintext. For other PII fields, I use AES-256-CBC. However, the requirements are ...
Stefan van den Akker's user avatar
0 votes
0 answers
32 views

can non-rotatable secrets be stored in ciphertext form in a DB/file/etc.?

We have a service running on AWS. This service uses secrets such as API keys of third party services (in other words: secrets which do not rotate automatically). These secrets are stored in AWS ...
Itay Maman's user avatar
1 vote
0 answers
38 views

How can blockchain P2P network help in bypassing country-level whitelist network blocking? [closed]

I've seen people on the web discussing the issue of network blocking, and they were discussing that if one day a country wanted to whitelist mode (i.e. outbound traffic is blocked by default, and ...
user24958594's user avatar
1 vote
0 answers
11 views

Highly suspicious System.Map (5.14.21-150500.55.68) - Linux compromised? [migrated]

I'm running the 5.14.21-150500.55.68 x86_64 kernel on OpenSuSe Leap 15.5. I have over 20 years of experience with many different distros, but I always come back to OpenSuSe for several reasons. I have ...
new_sec_from_scratch's user avatar
-2 votes
0 answers
43 views

Old Routers are what compared to new ones besides the 6E upgrade [closed]

Why would I need to replace my gig bit router with a new one? What do I gain from the new one when the network has not changed? Mac Filtering is necessary.
AmazingMaz's user avatar
0 votes
1 answer
66 views

Root CA blocked by OS - would apps programmed to trust the root CA be affected?

The situation: Custom Root CA is created by some country. Not trusted by major browsers but trusted by some local ones. Also used by some local sites which direct users to install this root CA. some ...
Tauri's user avatar
  • 109
1 vote
0 answers
10 views

Forcing OpenVPN process to run with a specific group using nmcli [migrated]

I am struggling with this script of mine that should prepare a secure VPN connection with VPN kill switch and I need some help. What I am trying to do (in general): My goal is to set up a very strict ...
PleaseLetThisWork's user avatar
1 vote
0 answers
22 views

Are ECC CSR always different and if yes, why? [closed]

I've noted that SHA256 of CSRs for RSA keys, generated as openssl req -new -config leaf.conf -key rsa.key rsa.csr are always the same, given the same key and configuration. In the same time, every ...
simon's user avatar
  • 181
0 votes
1 answer
114 views

Can we catch signals from a cellphone using AI to interpret the encrypted data?

Would it be possible for someone to steal EM waves from our mobile devices to listen to our conversations or get our OTP? Whatever encryptions they have they are just EM waves. Based on the patterns ...
Newtron Malayalam's user avatar
2 votes
1 answer
68 views

How much should we generally trust security-only support of a legacy version of a software and what should we look out for? [closed]

Many software vendors maintain old versions by providing security-only fixes. Some examples include: Android on Google Pixel Phones. Python. Firefox ESR. My understanding is that people are most ...
xuhdev's user avatar
  • 123
5 votes
3 answers
1k views

What is the next layers of defence against cookie stealing if GET parameter is vulnerable to XSS and there is no HttpOnly flag in a website?

If a GET parameter in a website is vulnerable to XSS and the user input is reflected without any change or escaping or filtering and also HttpOnly is not set for session cookie, is stealing the cookie ...
fed's user avatar
  • 61
0 votes
0 answers
8 views

Kernel 6.8.11-amd64 Headers not being able to install [migrated]

I am not able to install the linux-headers-6.8.11-amd64 kernel even after repeated trying. I tried several methods - apt-get update, apt-get upgrade, apt-get dist-upgrade dkms --configure linux-...
vidyarthi's user avatar
  • 113
6 votes
2 answers
154 views

Use of TPM to encrypt data of my application in practice

I am not very familiar with TPMs, but from what I can tell their main benefit for the user is to make the system as a whole more secure, if you take the appropriate measures, e.g. by checking the boot ...
mist's user avatar
  • 113
1 vote
0 answers
44 views

Ubuntu upgrade changed my home directory permissions - malicious or mistake? [migrated]

My setup I have a private server (Ubuntu 22.04.4) that I use as a test server for my web development code. Every couple of weeks I update it (sudo apt update; sudo apt upgrade -y). I don't usually ...
Dr Phil's user avatar
  • 111
4 votes
0 answers
32 views

PCI-DSS Scope - How to determine client scope segmentation

We are a medium sized organization and use Payment Service Providers for all purchases, including credit card and non-credit card purchases. We get yearly audits and our internal payments platform is ...
jtkline's user avatar
  • 41
1 vote
0 answers
16 views

Windows 10 - Block File Transfer [migrated]

I would like to disable file transfer via Bluetooth while allowing other Bluetooth services to function normally such as mouse, keyboard, audio, etc. The devices are not on a domain and are not ...
Andam's user avatar
  • 111
0 votes
0 answers
7 views

Implementing end to end encryption (react js , laravel) [migrated]

I need to implement end to end encryption between front (reactjs) and back (laravel). What I try to do is encrypt data in front using package cryptojs, send it using axios to backend, in the backend I ...
user26307664's user avatar
1 vote
0 answers
45 views

TPM PCR values change after the first reboot

My setup consists of a QEMU image with u-boot 2024.01 and 6.6 Linux kernel. As a TPM I'm using swtpm. For some reason, if I reboot the device the PCR register values are different in the initial boot ...
Avaruusmuikku's user avatar
2 votes
2 answers
43 views

Is Kerberos Constrained Delegation (KCD) deprecated?

Referred to the official microsoft documentation on KCD where they are using the terms KCD & Resource Based Constrained Delegation (RBCD) almost interchangeably which got me confused. They have ...
Aryan's user avatar
  • 75
1 vote
0 answers
46 views

Where to store Refresh Token in custom Authentication

I am currently trying to build an authentication flow where the front end lives on one domain, say X.com and the backend lives on Y.com. I have implemented a refresh/access token system where when a ...
Kiran Manicka's user avatar
1 vote
0 answers
71 views

Pegasus spyware, computers, and spam [closed]

I just received an email in my spam folder saying I had been infected with Pegasus. After a few searches, it looks like Pegasus is a multi-million dollar toolkit used by Israelis and others to ...
floor cat's user avatar
  • 111
1 vote
2 answers
127 views

How did he find my full real name based on my Steam or FACEIT Profile? [closed]

Yesterday, I was playing a counterstrike game on FACEIT, when all of sudden one of my teammates started bullying me for my bad plays. It was standard trash-talking for a bit, but then all of a sudden, ...
Game Account's user avatar
0 votes
1 answer
66 views

Why are 2 IP addresses mapped to a single MAC address not an evidence of ARP spoofing? (confusion with slide eg)

I am going through the slides at: https://www.slideshare.net/slideshow/packet-sniffing-85873158/85873158 i.e. we have 3 machines: A’s ARP cache shows: B’s IP address is associated with Z’s MAC ...
user2994783's user avatar
1 vote
0 answers
46 views

CVSS Score for brute force attack [closed]

A website is given to pentester. It is observed that the website has a login page at https://example.com/admin. In this login page it is also possible to enumerate from error messages that the user &...
user26317030's user avatar
1 vote
0 answers
21 views

"PUF CRPs authentication requires trust in manufacturer since it's him who performs the storage of CRPs"....?

"PUF CRPs authentication requires trust in manufacturer since it's him who performs the storage of CRPs". So does it mean that we have to trust manufacturer, because he could replace the ...
allexj's user avatar
  • 129
1 vote
1 answer
147 views

Understanding how to correctly migitate CVE-2024-38095

I am trying to understand under which circumstances CVE-2024-38095 applies. When reading the advisory (https://github.com/dotnet/runtime/security/advisories/GHSA-447r-wph3-92pm), one finds the ...
Felix's user avatar
  • 273
1 vote
0 answers
41 views

Laser pulse/injection attacks, Xray inspection, Test-based(like JTAG scan chain) attacks, Microprobing attacks... are these invasive or non-invasive?

Laser pulse/injection attacks, Xray inspection, Test-based(like JTAG scan chain) attacks, Microprobing attacks... are these invasive or non-invasive? Just curiosity. I don't know how to categorize. My ...
allexj's user avatar
  • 129
10 votes
2 answers
4k views

A web site allows upload of pdf/svg files, can we say it is vulnerable to Stored XSS?

It is possible to have JavaScript code in pdf or svg files. I think JavaScript inside svg runs in almost all browsers and I think JavaScript inside pdf generally always runs in chrome. So during a ...
user26317030's user avatar
1 vote
1 answer
68 views

Is electronic signature a proper/sufficient mean for identification/authentication?

We have received an electronically signed GDPR data request from a person who has only provided his name and surname. We wanted to be sure that this person is who he claims he is, so we have asked to ...
ZygD's user avatar
  • 279
2 votes
1 answer
48 views

How can a timing/cache side-channel attack be performed? How can attack know the time of which certain instructions are performed by the victim?

About timing my question is: How can attack know the time of which certain instructions are performed by the victim? And about the cache, how can attacker know which cache line is being accessed by ...
allexj's user avatar
  • 129
1 vote
0 answers
291 views

Detecting “Harvest Now, Decrypt Later” Attacks Using AI/ML Models

I’m researching strategies to detect the “Harvest Now, Decrypt Later” attack, also known as “store now, decrypt later” or “retrospective decryption.” This surveillance approach involves acquiring and ...
Mallikarjunarao Kosuri's user avatar
1 vote
0 answers
28 views

Leveraging MS SSO for teams tab secure?

I have an app I want to embed as a tab in MS Teams. Users may already have an account outside of teams and I use magic login link to typically to log users in. I want to know if I can leverage teams ...
user25622659's user avatar
1 vote
0 answers
23 views

How to manage temporary AWS credentials for on-premises Kubernetes clusters?

We have several on-premises Kubernetes clusters that need to utilize AWS services. Currently, we use traditional IAM Users with static credentials, but we recognize this is a bad practice. We want to ...
Catriel Goodman's user avatar

15 30 50 per page