All Questions

Filter by
Sorted by
Tagged with
0
votes
1answer
35 views

can you have reflective xss through a POST parameter?

While testing a dummy app, I noticed that the XSS done through POST parameters was getting stored in the form (the alert('XSS') would show every time I loaded the page where I had injected the payload)...
0
votes
1answer
63 views

Recover corrupted password protected Zip

Good evening. I have a password protected zip archive (Zip 2.0 CryptoZip) with a .txt file with sensitive info inside. The problem is that I can't extract it. 7Zip:"Data error : Wrong password?" ...
1
vote
2answers
135 views

Does Facebook scan the photos I upload?

I uploaded a photo of mine with my friend and tagged some random Facebook users of my friend list. After some time when I opened that post, Facebook is suggesting me to tag my friend who is in that ...
-1
votes
0answers
65 views

I think my server has been compromised [duplicate]

I have a server and it is generating a significant outgoing traffic to specific destinations. I checked data traffic with vnstats. The output is: $ vnstat --days eth0 / daily day ...
0
votes
1answer
30 views

How to block all inbound traffic from a specific Internet address or subnet using TomatoUSB router software (LINUX based)

I'm not trained in Linux, but I think I found the solution to my problem documented, but it is not working as expected. I am NOT an iptables guru, I'm learning as I go. A Russian IP is trying to ...
2
votes
1answer
140 views

What does this Bruce Schneier fact mean?

I came across a website called Bruce Schneier Facts, a parody along the lines of Chuck Norris facts, and saw the following fact: Schneier knows if Reiser did it. What does it mean?
2
votes
3answers
73 views

Doesn't Authentication logically imply Non-repudiation? [duplicate]

If it is confirmed that Alice is the source of a message (authentication), then shouldn't she be unable to deny that the message is from her (non-repudiation)? Is there an example where ...
1
vote
1answer
71 views

Is there a service that checks PYPI packages?

Knowing that some pypi packages have a history of being malicious, like libpeshnx, libpesh, and libari. Is there some website/service that labels packages as secure or not? for example: node's npm ...
6
votes
1answer
126 views

How do RF remote clones manage to clone rolling codes?

I wanted to clone my garage door remote to learn more about IoT security in particular so I read a lot about rolling codes, and the more I read the more I am convinced there is no way to actually ...
1
vote
1answer
116 views

What kind of attack?

I was able to find the Teardrop Attack. However, there is another one but I couldn't explain it. It keeps getting the warning: Source MAC must not be a group address. Is this some sort of ARP spoofing ...
-1
votes
0answers
42 views

Shellcode is jumped to and executed but runs into error

I am really at a loss trying to understand why a Metasploit Windows payload is indeed reached (see snapshot from Immunity below), executed (at least partially), but doesn't pop a calc.exe at all. The ...
0
votes
0answers
54 views

Is it possible to differentiate generic and targeted infection?

Details: my USB stick got infected and probably my computer too. I suspect that the person I asked to transfer the file did it intentionally. But the problem is I don't know what is their intention. ...
0
votes
0answers
25 views

Are HAIFA-construction based hash functions (e.g. Argon2) resistant to length-extension attacks? [migrated]

Would a HAIFA-construction based hash function like Argon2 be vulnerable to length-extension attacks? (I say that Argon2 is HAIFA-based because BLAKE is, and Argon2 is based off of BLAKE)
5
votes
1answer
68 views

Is it possible to get XSS through uploading an image via the filename?

I just wanted to know if its possible... If i have an image i.e abc.jpeg and i rename it to an XSS vector such as <img src=x onerror=alert(1)>.jpeg will it successfully produce the XSS or is ...
1
vote
1answer
36 views

Is there a key exchange protocol that requires only one message?

Say I want to exchange a secret with someone, but I only get to send one message to the other person, and then we encrypt with that secret. Diffie-Hellman and ECDH require multiple messages to be sent ...
0
votes
1answer
60 views

How should we apply the salt to the password?

According to Wikipedia: A rainbow table is ineffective against one-way hashes that include large salts. For example, consider a password hash that is generated using the following function (where "|...
0
votes
0answers
32 views

Windows shellcode not working in C

I have been trying to run a raw piece of shellcode collected on the net within a C wrapper to try it but it never works... I know the shellcode below is all right because it does work in the context ...
-1
votes
2answers
213 views

How do I sell critical vulnerability info to private company? [on hold]

Here is the story. There is a private company, that has some software product that is used by thousands of its customers. After spending few sleepless nights on reverse engineering that product, I ...
2
votes
1answer
42 views

Why we should not allow our pages to be loaded through Iframe by unknown hosts?

One of OWASP recomendations is to set the header X-Frame-Options to allow our pages to be loaded in Iframes only by sameorigin. One reason is because of phishing attacks, ok I understand. But if I ...
1
vote
2answers
138 views

Is this Bash code vulnerable to code injection?

I'm writing a libre program named "silently" for enhancing error handling in Bash, emulating the behavior of a jidoka. My question is if that eval would be vulnerable to code injection if the ...
0
votes
2answers
103 views

Websites that test what IPv6 DNS server I'm using? [on hold]

I am concerned with DNS hijacking when connected to a DNS server with an IPv6 address. Is there a website that tests what IPv6 DNS server I'm using? By "IPv6 DNS server" I do not mean IPv4 DNS ...
1
vote
1answer
45 views

Is an index, nonce and HMAC good enough for session management?

The scope is server-side session management with session payloads being sent to the client in a cookie. I'm researching session management for web applications. I've been looking at a couple places, ...
3
votes
1answer
55 views

Is there a secure way to host private PGP keys (is keybase's method secure?)

Keybase's decryption page says "you must host your private key in Keybase's encrypted key store." This really rubs me the wrong way. I was under the impression that your private key should not leave ...
0
votes
1answer
70 views

External hard drive

It's possible the external hard drives have been compromised in the company I work for. It would be a huge waste of money to replace them all without detection and if the current ones are compromised, ...
-2
votes
0answers
45 views

Using VOIP encryption when all endpoints are compromised

Yo listen up here's the story about a little guy who's internet uplink is mostly compromised, same with the rest of the family including smarthpones, routers ... And all day and all night he is ...
0
votes
1answer
36 views

Account Security Cardholder data

Ok, so we do not store any cardholder data so I get confused by these questions. "Is all access to any database containing cardholder data (including access by applications, administrators, and all ...
0
votes
0answers
45 views

Sony Access Log (Playstation Network) does not exists

Yesterday my wife receive some emails from Sony confirming her purchases on Playstation Network. The only problem is: she was with my side watching Netflix on the smart Tv. The purchased items is a ...
0
votes
2answers
128 views

is no system really safe? [closed]

It may seem like a very general question but I couldn't find any detailed debates over it. This is a purely theoretical question as of 2019. Suppose we are to create our own product and safety design ...
0
votes
1answer
176 views

Can someone hack my Facebook if i give them my browser for a while?

As anyone can see network data using browser developer tool, can someone get access to my cookies or API keys by just turning on the developer tool in Chrome or Firefox? For example, imagine a ...
0
votes
0answers
28 views

encrypt/decrypt arbitrary data provided in custom attribute by IdP in SSO scenario

I am considering the following design for application with client-side encryption Let' say we have web application that manages/stores sensitive business data of users, and we do not want to know ...
0
votes
0answers
2 views

Force Android to emit a UID over NFC [migrated]

I would like to emit a custom UID over the NFC chip of my (rooted) Android phone. How can I achieve this ?
0
votes
0answers
53 views

Which NFC standard prevents NFC tags from unauthorized copying?

I want to protect my NFC tag against unauthorized copying. I understand that EMV is using asymetric cryptography. My focus is on understanding of other standards (NTAG413, MIFARE DESFire) or anything ...
-1
votes
0answers
46 views

How do I recover old emails from a GoDaddy email server? [on hold]

I have hosting with a secure email service provided by GoDaddy. Recently, I changed the email hosting to AWS, but there are a few emails on the old server. Is there any possibility to get them back?
0
votes
0answers
44 views

Hydra - Brute force command is stalling

Very new to application testing here. I am working through the hacker101 CTF (petshop) examples and I am having problems with brute forcing a username form with Hydra. The error message looks like it ...
0
votes
1answer
41 views

Quantify security strength from entropy and lifetime

Entropy or randomness is a quantitative measure of security strength for various types of passcodes, but in current times with digital technology, breaches, and cracking tools it seems that lifetime ...
3
votes
1answer
107 views

How can we embed an exe containing a payload into a pdf file [on hold]

I have created an exe with a payload which gives me a meterpreter session. But I need to embed this exe into a pdf. Upon opening the pdf the exe ideally should get executed. Is there any way to do ...
0
votes
0answers
35 views

What is a fast and solid way to configure V2Ray in order to bypass China's GFW?

I do realize that the question can open a gate for discussion, but I am really looking after something concrete that would be working within the V2Ray toolkit, based on peoples experiences. I would ...
0
votes
2answers
71 views

Can I trust that the Java CVE's contain only the affected versions?

When looking at the Oracle Java JRE vulnerability list on cvedetails, they list the affected versions in the text, and usually also in a table below the description. However, I'm not confident that ...
4
votes
1answer
90 views

How well do current browsers handle certificate revocation?

I am a Firefox user and recently stumbled upon the Liu, Yabing, et al. "An end-to-end measurement of certificate revocation in the web's PKI." Proceedings of the 2015 Internet Measurement Conference. ...
2
votes
1answer
89 views

Are GUIDs safe for long lived access tokens?

There is a peice of software i am using at work that has several components to it, lets call them the server and agents. the server runs an api over https that the agents use to communicate with it. ...
-1
votes
0answers
38 views

Penetration testing Padding oracle vs POODLE

I am doing pen-test according to https://www.owasp.org/images/1/19/OTGv4.pdf. I would like to ask you about Padding oracle attack. Is attack "POODLE" the same as Padding oracle in this document? On ...
0
votes
0answers
23 views

Sysmon fails to use config file in Windows 7

Sysmon fails to use EventFiltering properties written in config file. I am trying to use,for example, this kind of config to detect network activity from powershell process: <Sysmon schemaversion="...
0
votes
1answer
40 views

When using VPN on a WiFi network, can the traffic of other non-VPN computers on the WiFi be monitored?

Let's say I am using a WiFi connection and am connected through VPN to a private network. Would the computer using VPN be able to monitor the traffic of other computers connected to the same WiFi, ...
0
votes
0answers
45 views

Side jobs for IT security experts? [closed]

I've been working in IT security since more than 15 years, I'm involved in all related technologies/topics (Firewall, VPN, Proxy, AV, email, Windows/Linux clients, etc.). I've worked with these for ...
0
votes
0answers
19 views

What is the best practice to run Openvas on Azure?

I have created a Kali VM on Azure to use for my pentesting engagement. I was able to access Openvas GM from my desktop, however I could not log in the GM even though I reset my GM password again and ...
0
votes
1answer
31 views

Is OpenID Connect implicit flow safe to use?

In researching OAuth 2.0, I see that implicit grant is no longer recommended:- In order to avoid these issues, clients SHOULD NOT use the implicit grant (response type "token") or any other ...
0
votes
0answers
15 views

Why isn't the checksum length increased on macOS to mitigate generic heap exploitation?

I've been studying heap exploitation on Linux/macOS for learning purposes. Many of the generic exploits on macOS rely on brute-forcing the 4-bit checksum derived from the rack's cookie value. This ...
0
votes
1answer
63 views

nmap: Same IP, different domain names, different results?

I'm scanning a network (whose name will not be stated). It has >1 IP addresses. When I tried scanning its subdomains, there are several subdomains that are translated to the same IP address but return ...
0
votes
0answers
21 views

Is there any way at all for a site to see your IP if you are on a VPN? [duplicate]

This probably has an answer somewhere, but I can't think of how to phrase it to find it. Is there any way at all for a site to determine my original IP, when I am on a VPN? "Browser verification" ...
0
votes
0answers
37 views

Cheapest way to securely connect to close networks

The location of this scenario is a two-floor appartment in a house with more appartments that all share the same cellar. In the cellar, there is a room with a box where all the LAN cables for all the ...

15 30 50 per page