All Questions

Filter by
Sorted by
Tagged with
1
vote
2answers
53 views

Deleted files still detectable with Wondershare RecoverIt

Basically I have a few files / folders that I want permanently deleted. I deleted them securely with hardwipe, but when I try to search into the folder where they were located with Wondershare ...
7
votes
2answers
565 views

Should a server set a cipher order?

I've seen conflicting opinions on whether or not setting a cipher order is recommended. testssl.sh prints a red warning when no cipher order is encountered, implying that a lack of cipher order is ...
1
vote
1answer
41 views

Hybrid Encryption: What is the format for storing the encrypted key and the cipher text together?

In the scenario of a hybrid encryption for which I use RSA (asymmetric) to encrypt the encryption key used with AES (symmetric) to encrypt my message, I need to store the encrypted key with (together) ...
1
vote
0answers
30 views

Bluetooth module and an Android app [closed]

I have few sensors, a microcontroller with a bluetooth module and an android app to visualize the data. how can I make sure my system only connects to phones that activated bluetooth through the app? ...
1
vote
1answer
47 views

TLS cipher key settings

After the inspection of the security of my site, I saw that the TLS 1.2 protocol supports weak cipher suite like: TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA ...
1
vote
0answers
37 views

Implications of Python fmtstr injection without secrets passed to the formatter

There are two ways I can think of to format strings in Python where user input may make its way into the format string input: >>> a = input() >>> print(a % ()) >>> a = ...
1
vote
2answers
81 views

How are passwords stored in the database of a decentralized peer to peer system?

I want to use username and password instead of public key cryptography for a decentralized peer-to-peer application, but since the passwords are stored on users' computers, there is a possibility of ...
1
vote
1answer
41 views

Is it possible to get an sql injection after importing a sql dump?

Is it possible that after I dump a SQL Database created with prepared statements as an ".sql" file, and then I import it again, that the import may be vulnerable to SQL Injections?
2
votes
0answers
33 views

Is the RSA Private Key non-exportable option protected from key extraction?

I would like to know if the non-exportable private key option, virtualized based security, selected when importing an RSA certificate guaranteed although the user will never be able to see the RSA ...
1
vote
0answers
26 views

What is Confinement and Bounds in programming?

I don't understand deference between confinement and bound in programming? I always understand these two as same definition.. Could you please explain me someone, what is bound and confinement? What ...
5
votes
1answer
158 views
+100

Is this Windows local code execution bug also a security vulnerability?

I stumbled on a Windows bug leading to code execution. I believe it should be categorized as a vulnerability but Microsoft does not recognize it as such. Functionality The bug affects the context menu ...
2
votes
0answers
95 views

Long-term symmetric key storage

I have some sensitive data that I need to encrypt and retain long-term (i.e., 5+ years at least). I'd ideally like to secure it using multiple hardware devices via a Shamir share. Something like: ...
2
votes
0answers
44 views

Are there any TLS Extensions that a server can *require* the client send?

This question is a bit of a follow on to this Q&A: TLS 1.2 Handshake: Does the server have to take all extensions sent by the Client? If the client sends an Extension that the server does not ...
0
votes
1answer
47 views

What is claimed here about a vulnerability in the target of a “really common shell”?

in https://twitter.com/nnwakelam/status/1363761612423786496, its tweeted: fucking yikes.. ran every bitcoin exchange for a really common shell and found.... Uname: Linux cloudimage 4.4.0-166-generic ...
1
vote
1answer
49 views

What is the best way to go about generating a “token” for user authentication

Let's say I have a MySQL database with thousands of user accounts in it. These accounts contain lots of data, but for verification purposes, they each contain a username and a (hashed and salted) ...
2
votes
1answer
31 views

Timeless timing attacks and response jitter

I've been researching timeless timing attacks, ie: timing attacks using concurancy rather than round trip time. Here is an article by portswigger with links to the origional article by Van Goethem. ...
0
votes
0answers
33 views

How to change payloads? [closed]

I discovered a known vulnerability, where the PoC code was like this: '{https://example.com" | ls -la"}' But that had to be modified, where | was replaced with the ; character. My question ...
4
votes
2answers
73 views

Why not use PKCE for backend apps, too?

So for SPA/frontend apps, you should be using PKCE these days for OAuth flow. But the backend apps have this additional complexity of having to have a secret key and use that key to talk to the token ...
1
vote
0answers
59 views

How can this “Jim Browning” YouTuber have access to all these scammers' PCs? [closed]

I've been watching these videos on YouTube about some British-sounding male (with millions of views) busting Indian scammers. It is never explained how exactly he is able to do this, with him ...
0
votes
0answers
28 views

How To Generate a custom worldlist [closed]

I want to generate a wordlist. It's a bit hard to explain what I want so look at this example character set: 4, 3, 2, 1, 0 I want every string to start with 4 and a bigger number does not succeed a ...
1
vote
1answer
47 views

CLI application running user defined command periodically [closed]

For a toy CLI application I'm writing, I'd like to store a string with an user defined command that will be executed periodically (like shell -c <command_string>). I have seen other applications ...
0
votes
0answers
25 views

Blocking specific ports [closed]

Can countries block some specific network ports (like 8080, etc.) for incoming and outgoing payloads? Thanks a lot!
1
vote
1answer
52 views

Can I use my HTTP/SSL certificate for mysql?

I would like to know if I can use my SSL certificates that I use on my website (based on nodejs and express) for access to mysql database remotely, or if it is better to create new certificate. My ...
0
votes
1answer
23 views

Skip date check in Server certificate in Chrome

We have a web application on https port with server certificate valid from 01/01/2021 and valid to 31/12/2021. Due to some constraints the clients which are going to use web application are behind ...
0
votes
0answers
37 views

OT & IoT security related standards/metrics

To analyze OT & IoT security, I want to make an inventory about standards and metrics that are used in this field. Searching the web, I found standards like: Good practices for IoT and Smart ...
2
votes
0answers
36 views

Assuming secure code practices are adhered to, is a thousand-tier/n-tier microservices application or a monolithic application more secure? [closed]

Assuming secure code practices are all adhered to for both applications, is a thousand-tier/n-tier microservices application or a monolithic application more secure? From a monitoring, visibility ...
3
votes
1answer
343 views

Does it make sense to have the application block users by IP as well as the firewalls?

I am planning to create a system, but I still have some questions about security. I would like to know if it makes sense to block unauthorized users from accessing the system, through the ip, using a ...
0
votes
0answers
39 views

How to reach the port 80 from a pivot machine

I have this lab setup: kali (192.168.1.81) => Windows 10 (10.10.10.130) => Metasploitable (10.10.10.149) I hacked Windows 10 first, then I make a pivot via SSF tools: ssf.exe -g -F 22222 -L 10....
2
votes
0answers
34 views

Best resource to verify weak cipher suites [closed]

Many tools enable to list accepted ciphers but not all of them verify if these ciphers are secure. For example, Nmap with script ssl-enum-ciphers ranks some ciphers as secure even though actually this ...
0
votes
0answers
21 views

Public key RSA vs SHA [duplicate]

If a person had four choices : store unencrypted passwords . Use SHA-1 on the password and store . Use SHA and salt then store that . Use public key encryption and throw away private key . Which is ...
0
votes
0answers
11 views

is RPMB Fuse Set a factory state? [migrated]

I bought a Galaxy Tab S6 and I'm going to verify if it is really brand-new. I personally haven't alter the device and the above picture is from this device's Download mode screen immediately after my ...
1
vote
0answers
51 views

How Can I Backup App Data In Android/iOS Devices?

After my other post I'm looking over some other possibilities to do what I'm trying to do. How To Recover End-To-End Encrypted Data After Losing Private Key? If I save user data in server, in order to ...
1
vote
0answers
23 views

Supplying registrar with dnssec related records

I have a domain name under .money, which supports DNSSEC. However, my registrar hasn't done DNSSEC with this TLD before and is asking me to supply the Key Tag, Algorithm Type, Digest Type and Digest --...
1
vote
1answer
46 views

Can an error page (like 404) served without X-Frame-Options be exploited?

I'm checking some HTTP headers in the server response. I get a 404 error page. Could in some scenario an attacker leverage a missing X-Frame-Options header in a 404 page?
12
votes
4answers
7k views

How To Recover End-To-End Encrypted Data After Losing Private Key?

I'm creating a mobile app which has chat feature in it. Since I wanted to make it secure, I'll do some encryption to messages and the data. I'm thinking of using End-To-End encryption for it but I've ...
1
vote
0answers
42 views

Can I buy a standard SSL certificate to protect a website i.e. certificates.xxxxxx.com? [closed]

I don't have much experience in buying and installing ssl certificates. I have one website like certificates.xxxxx.com. So, my question is that can I buy a standard ssl certificate from GoDaddy to ...
2
votes
0answers
210 views

How plausible is this article on how SciHub acquires its papers? [closed]

Sci-Hub is a piracy website that provides free access to usually-paywalled academic papers & books. Sci-Hub's owner Alexandra Elbakyan says that many people with legitimate access to the papers/...
2
votes
1answer
45 views

What happens if multiple Strict-Transport-Security headers are set in the HTTP response?

If multiple Strict-Transport-Security headers are set with different settings (e.g. different max-age values), how will the browser behave? Does the browser just follow one of them, or simply error ...
1
vote
1answer
41 views

Use of SoftHSM2 in commercial products

I came across SoftHSM2 from OpenDNSSec(BSD license) which is a drop-in replacement for HSM except that SoftHSM2 only lacks physical security. Also, being the fact that PKCS#11 is the standard ...
1
vote
0answers
35 views

How susceptible are JWTs to being used for denial of service?

Consider an API that requires a JWT for authorisation. For each JWT presented, it has to validate the signature, including base64 decoding, hashing and asymmetric encryption, which is stated noted as ...
-1
votes
0answers
59 views

BurpSuite error: Invalid client request received: Dropped request looping back to same Proxy listener [closed]

I have WebGoat running locally on port 9300 (so accessible via localhost:9300): When I configure a BurpSuite proxy listener to listen on port 9300, and then configure FireFox to point to a proxy also ...
0
votes
0answers
25 views

Specifying wordsets in variables within hashcat masks/rules? [closed]

Hashcat documentation shows the following variables that we can use inside masks: ?l = abcdefghijklmnopqrstuvwxyz ?u = ABCDEFGHIJKLMNOPQRSTUVWXYZ ?d = 0123456789 ?h = 0123456789abcdef ?H = ...
0
votes
1answer
28 views

How to sign multiple data sets with a single signature, so that it can be validated for single data set without requiring the rest of the data?

Let's say Alice has three secrets: SecretA, SecretB, SecretC Alice shows these three secrets to Bob and gets a single signature from him that signs all three secrets together. Something like Signature ...
0
votes
4answers
122 views

Why can't you use the same password for every site, if they are hashed on the site?

I've often heard people talking about not using the same password on every website. What's the deal if servers store passwords in a SHA hash instead of plain text? The most they can do is spam you ...
0
votes
0answers
41 views

Data recovery from phone without password [closed]

I found my old android phone from ~2010 but I don't remember the password. How can I recover the photos from it?
0
votes
1answer
60 views

What is the ISO standard for deletion? [closed]

What does the ISO standard for deletion require when deleting personal data ? Hereisanexample : A database SQL stores email as key , password with salt and an encryption key leading to more data in ...
6
votes
3answers
224 views

Why would password managers provide support for OTP codes?

Can anyone explain me what's this trend of providing passwords and OTP codes on the same service? What benefit or value are they trying to bring to the table? We, as security professionals, have been ...
0
votes
1answer
37 views

How to use Gutmann method SQL?

Is it possible to use Gutmannr method for single SQL cell ? https://en.wikipedia.org/wiki/Gutmann_method
0
votes
1answer
52 views

Is there a type of login security that is keylog and screen capture proof that doesnt require a 2nd device?

I am looking for a login security measure where it is keylog and screen capture proof. Is there some type of login security like a 2FA without the need of a second device, but remembering a pattern or ...
0
votes
0answers
7 views

Is there a way to prevent my website to be viewed over the webView of mobile apps? [migrated]

I have noticed that some mobile app utilizes webview to display and process information. For instance, this mobile app asks username/password as part of its registration process, then creates a user ...

15 30 50 per page