All Questions

Filter by
Sorted by
Tagged with
2 votes
0 answers
32 views

Normative reference for a web application disclosing existing values of integration secrets to users

In a web-based SaaS product, one of the configuration pages allows users to set credentials for system-wide integrations with other products. These include usernames, passwords, and API secrets. The ...
user avatar
  • 121
0 votes
1 answer
33 views

Is key renegotiation necessary with a larger cipher in OpenVPN?

OpenVPN allows the use of their 'reneg-sec' option to renegotiate keys for the data channel at a specified interval. This helped protect against exploits like Sweet32 with 64 bit block ciphers a while ...
user avatar
  • 99
0 votes
0 answers
21 views

Any studies on the hardware costs of server-side password hashing? [closed]

I am researching the state of the art in password security on the web and the general consensus seems to be that server-side hashing with a slow hashing algorithm (Argon2id, bcrypt, scrypt etc) is the ...
user avatar
0 votes
1 answer
50 views

How to setup internet connection in a way vpn logs would think I'm logging from different country

I have a company laptop which uses a Cisco VPN to log in to the company network in order for me to work. How do I configure internet I'm using at home in a way where Cisco VPN logs, or another log ...
user avatar
  • 1
1 vote
2 answers
72 views

How to non-intrusively monitor my team's MacBooks secure configuration?

I'm managing a small remote team. We care about security and I want to be sure that our MacBooks comply with at least basic security standards, such as CIS benchmark. These are the ways I see I could ...
user avatar
2 votes
1 answer
51 views

Why does HIBP use k-anonymity when checking passwords? [duplicate]

Maybe I'm misunderstanding the purpose of k-anonymity, but I don't see the why HIBP uses it when checking user passwords. This website, which explains HIBP's implementation of it, says, "The ...
user avatar
0 votes
0 answers
15 views

OpenId Connect and proper usage of nonce

I understand that a nonce is used to prevent replay attacks. I have been going through documentations, specs, posts and blog posts and I am a little confused. Consider the following attack scenario. ...
user avatar
  • 43
0 votes
0 answers
16 views

Storing strings in a Database that are only visible to their owner who stored them when they were logged in

In my application, logged-in users create some strings, and those strings are stored in the Postgres database. But, because they are in plaintext, their values are visible to me, as I have access to ...
user avatar
1 vote
2 answers
45 views

When renewing a TLS certificate (no change to CSR nor private key), will the modulus remain the same?

Here is the scenario, just wanted confirmation that I am understanding it correctly. I have a TLS certificate that will expire soon; Upon renewal, I paid the CA, and they reissued me with a new public ...
user avatar
  • 307
2 votes
0 answers
115 views

Protection against JPEG compression bombs

There is a well-known threat named compression bombs. Such image formats as PNG and JPEG use compression methods, and therefore and in theory PNG/JPEG images might be a compression-bomb. I've found an ...
user avatar
1 vote
1 answer
75 views

Databases for compromised passwords that browsers use

I am looking into databases of compromised passwords in order to ensure that passwords on a system I am responsible for are not already compromised. To have complete peace of mind, I prefer to get ...
user avatar
  • 331
0 votes
0 answers
6 views

AES CBC: When to use new IV [migrated]

I am trying to figure out when to use a new IV for an AES-CBC communication and whether my approach is safe. Here is a quote from Thomas Pornin from a similar question: So, to sum up: you must choose ...
user avatar
  • 151
-1 votes
0 answers
9 views

Is it possible to enforce CSS1 in browsers? [migrated]

I was recently surprised to learn that CSS2+ is Turing complete, and hence it is potentially dangerous, from the information security standpoint, to open websites containing CSS. That being said, if a ...
user avatar
22 votes
9 answers
6k views

Redirect to login page if authorization required -- security flaw?

Suppose we have a site that has public and private areas. The private areas require login. For example "www.site.com/about" is publicly accessible. But "www.site.com/message_inbox"...
user avatar
1 vote
1 answer
78 views

What are the security concerns of embedding Base64-encoded images into an HTML document?

We are developing an MVC web-application in Django and having concerns about image uploading. First of all, here are our business requirements: Our users can upload images (like profile pictures, etc)...
user avatar
0 votes
0 answers
15 views

Is there a service for storing sensitive user identity documents? [closed]

A new client wants to conduct KYC checks on users on a basic level, meaning they will need to submit their ID card (Hong Kong) and proof of address. The client will simply check the documents manually ...
user avatar
  • 101
0 votes
0 answers
21 views

TLS Interception basics [closed]

I am trying to perform TLS interception in which I was given 2 containers: Host01 and Attacker with a br-intercept bridge. So every HTTP/HTTPS request from Host01 to the Internet passes through the ...
user avatar
0 votes
1 answer
31 views

Modifying request responses leading to unauthorized access?

I have been developing some applications lately where the content on the web app is rendered based on the request's response. For example, a user with a "free" plan has limited access, ...
user avatar
  • 105
0 votes
1 answer
68 views

I suspect someone entered my server via SSH after I created a pem file for the SSH access key. What I can learned about it?

I created an id_rsa key in my server with ssh-keygen -b 4096 without a passphrase. I added my id_rsa.pub into .ssh/authorized_keys and downloaded my private id_rsa key into local PC and changed it ...
user avatar
0 votes
2 answers
47 views

File Upload(what type of file)

While I was learning about file upload vulnerability one question come to my mind. What type of file do I use while hunting file upload vulnerability ? Do I need to detect which programming language ...
user avatar
0 votes
0 answers
15 views

XSS Onerror alt param [closed]

I'm doing bug bounty and have found a place where there may be some XSS but the IMG is always given an alt tag whenever I try (as a defense), any bypasses?
user avatar
0 votes
2 answers
42 views

Docker, running programs as Root and AWS

It is well known that running programs inside your docker container as root is bad practice. As far as I can tell, the reason for this is because root on the container is rather similar to root on the ...
user avatar
  • 101
0 votes
1 answer
51 views

Is this 36 character long string a hash [closed]

I found this string b2335332-d28f-449b-8d00-80a550b43046 Do you think it´s a hash? If yes any idea which one and if not any other ideas what it could be?
user avatar
0 votes
2 answers
59 views

Is a VPN effective when connected to WiFi network that requires authentication?

I pay monthly for a VPN. However, I browse online while connected to my university WiFi which requires authentication to use. The WiFi is open (no password directly) but when someone connects to it a ...
user avatar
1 vote
1 answer
26 views

To what attacks is using the value of the HOST header to craft self-referential URLs vulnerable?

From official ASP.NET Core docs, namely Routing in ASP.NET Core § URL generation concepts: Use GetUri* extension methods with caution in an app configuration that doesn't validate the Host header of ...
user avatar
  • 5,587
0 votes
0 answers
10 views

Chain apache web server acting like reverse proxys using proxychains

I've configure multiple apache web servers so they filter the request and if they have a specific request_uri the request would be redirect to a c2 server. I do that with the next line in the apache ...
user avatar
  • 5
0 votes
0 answers
15 views

ProxyPassMatch redirect to the same request uri

I am doing a reverse proxy with apache to redirect https traffic filtering by the uri request. Right now I have the next ProxyPassMatch "^/thisisthepath$" "https:192.168.1.40/...
user avatar
  • 5
0 votes
0 answers
29 views

Is SSL necessary when sending password to a API from a server?

I have bought a online service which allows me to send SMS messages by making a call to the provider's SOAP-API. This is the WSDL I need to send a message: <?xml version="1.0"?> <...
user avatar
  • 2,740
0 votes
1 answer
41 views

Mobile Application Security

Do we need to carry out separate pentest for apps that are written in language that supports multi platform compilation like fultter? How much value it will bring since backend and major chunk of code ...
user avatar
0 votes
0 answers
22 views

What are vulnerabilities of saving user input directly in wordpress plugin?

I have a WordPress plugin that helps create an organization chart/tree and then generates a URL where the chart is available to be viewed by the public. The plugin dashboard looks like this the plugin ...
user avatar
0 votes
1 answer
32 views

How to mitigate risk of exploiting open POST endpoints?

I'd like to ask for advice reg. protecting the state-altering HTTP API endpoints of the API that I'm owning (POST etc.). I'm owning a web application that exposes some HTTP endpoints to the world. ...
user avatar
0 votes
2 answers
55 views

What are the vulnerabilities of exposing url end point param?

I have a wordpress plugin that helps create an organization chart/tree and then generates a URL where the chart is available to be viewed by the public? Inside the plugin's view in WordPress dashboard....
user avatar
3 votes
1 answer
94 views

Possible to avoid device fingerprinting with imagemagick?

If I took a picture with my mobile phone and wanted to publish that photo without any artefacts connect to me, the first thing I would do is strip all of the image metadata with 'exiftool': exiftool -...
user avatar
1 vote
0 answers
28 views

Unlocking a Windows computer through the CMD prompt [closed]

Let's say I had an "NT AUTHORITY\SYSTEM" command shell on my locked Windows computer (at the login prompt) and I would like to get log in as user X (as if I logged in normally with their ...
user avatar
0 votes
0 answers
27 views

Image uploading in a web-application [closed]

We are developing an MVC web-application in Django and having concerns about image uploading. We've done some research on this topic and came up with a setup we want to share here for advices and ...
user avatar
0 votes
2 answers
134 views

How can I hide my internet usage? [closed]

This can be seen as a rather dubious question but let me explain. I'm a 22 year old still living with my father and his wife (my stepmother). I've been living here for over a year now and ever since ...
user avatar
0 votes
2 answers
81 views

How much does the strength of the password depend on the variety of characters?

For example, a password consisting only of lower-case characters [a-z], but a length of 10 (26^10), will always be better than all characters, but a length of 7 (95^7). That is, how much is it correct ...
user avatar
  • 25
0 votes
0 answers
3 views

Monitor keyboard access on the Windows lock screen [migrated]

I don't do this very often, but every time I lock the screen in Windows [Win+L], the keyboard (and sometimes the mouse) stops responding and it goes straight into the password field and it starts ...
user avatar
  • 3
1 vote
1 answer
126 views

What is a safe way to display malicious URLs in research PDFs?

Is there a convention or safeguard to show malicious URLs in a paper if they are relevant to the topic? Some PDF viewers parse the text for URLs, which makes removing the hyperlink alone insufficient. ...
user avatar
0 votes
0 answers
16 views

Meterpreter shell re-enter previous/next command

After a Meterpreter session has been established, you can start an interactive shell on the target host using the shell command. In the shell, I'm trying to switch between previously entered commands ...
user avatar
1 vote
1 answer
89 views

Military-grade encryption on Blu-ray discs?

Another thread addresses the question of what can count as "military-grade encryption." In this case, I see that CyberLink Power2Go software boasts "advanced military-grade 256-bit ...
user avatar
0 votes
1 answer
46 views

Would storing the users IP address in a session token be more secure?

In a web app, would storing a users IP address in a session be more secure then storing it without it? I think that if I store a JWT in their cookies that includes their IP address for session ...
user avatar
0 votes
2 answers
50 views

How does bitlocker work when unlocking a removable drive on another PC using a password?

Here's the scenario: I have an external harddrive encrypted with bitlocker. I disconnect that drive from the PC that encrypted it, and connect it to a different PC. Surprisingly, when I do this, all ...
user avatar
  • 113
-1 votes
1 answer
53 views

What are symmetric and asymmetric encryption and what would be a good example from daily life? [duplicate]

I understand that to "encrypt" something means to "code" it, to make it understandable for two parties, giver and receiver and generally only for them, but I don't know what it ...
user avatar
  • 5
2 votes
1 answer
135 views

Where to store the password: in RAM or another user's home folder (Linux)

There is user1 and user2. All work is done from under user1. user2 is only created to store important information. If important information is stored in RAM, but in the session of user1, which is ...
user avatar
  • 25
1 vote
1 answer
45 views

Good checksum algorithm for backup / cloud sync system

I am writing a cloud backup system, and want to use a checksum to know if a file has been modified, and accordingly sync it with the server. This question shows that xxHash is super fast, and this ...
user avatar
  • 113
0 votes
1 answer
67 views

P-384 vs. SHA384

Forgive my inexperience with encryption, I've been researching this for the better part of the morning and still cannot find a smoking gun answer. A vendor is requesting that we verify a website we ...
user avatar
  • 1
0 votes
0 answers
30 views

Spoofed iMessage? Apple account breach? What are the possible ways this happened?

See the screenshot below. A friend asked me about this. Person #1 had a group text thread with Person #2 and Person #3. At the top, Person #2 sent a photo and a message. Person #3 replied. Then there ...
user avatar
  • 119
1 vote
1 answer
75 views

Can I get viruses from compiling C# code?

I have found a tool that requires me to compile it with Visual Studio. I am not sure if I can do it without the risk of malicious software being installed during the compiling process. Is that ...
user avatar
  • 11
-1 votes
0 answers
35 views

Can a hacker resign an APK and keep the same certificate fingerprint

I'm a developer of a mobile Android app. In my app, I've implemented code that reports the SHA-1 certificate fingerprint (implemented in Java code, as described in this post), in this way we can tell ...
user avatar

15 30 50 per page