All Questions

Filter by
Sorted by
Tagged with
1 vote
0 answers
51 views

how to apply authentication/authorization on CLI tools

I am doing a security audit on a command line tool. The tool is java based and it runs on the server side, it collects some info and generate a report at the end of the run. This tool can run ...
anonymous's user avatar
1 vote
0 answers
64 views

How do popups that block your computer work?

These popups basically lock your computer, display an error, and post a phone number. I have yet to find how they work. I have seen anecdotal stuff claiming it is a modal, full screen popup. Is that ...
John Glen's user avatar
  • 111
6 votes
1 answer
76 views

Is there a method of session revocation for SAML/Single Sign-on applications?

While running a red teaming exercise, we had taken over an account inside an organization's Identity Provider via social engineering attack (specifics of which aren't relevant to this question). Their ...
Al Longley's user avatar
0 votes
0 answers
60 views

Why does my uploaded shell as .php gets downloaded rather than executed when I hit the URL?

I have uploaded a php shell using a file upload vulnerability. But when I hit the .php url after uploading it. It gets downloaded rather than executed. Why is that. And how can I execute my shell code?...
NobinPegasus's user avatar
1 vote
1 answer
89 views

John the Ripper doesn't identify hash

I have a ZIP file of my gallery that contains images and videos which is over 5GB in size. I forgot the password for that ZIP file now I'm trying to crack it to extract files from there. I tried using ...
Batuhan Öztürk's user avatar
4 votes
2 answers
879 views

How to tell if RegreSSHion was exploited (CVE-2024-6387)

I have a VM with a Cloud Provider that I am able to SSH into. I've recently read about RegreSSHion (the reappearance of CVE-2006-5051, as CVE-2024-6387), and I'm wanting to make sure that I wasn't ...
user3517452's user avatar
1 vote
2 answers
185 views

Bank scammer and banking app

There are plenty of scammers trying to get access to my bank account. Usually they call me claiming they are from my bank’s fraud department, and try to convince my that there is a problem with my ...
gnasher729's user avatar
  • 2,489
1 vote
0 answers
58 views

GPU Firmware Infections through AUTOMATIC1111 (StableDiffuision)?

I would like to ask a question about a strange incident that occurred as a result of using the StableDiffusion tool AUTOMATIC1111 (https://github.com/AUTOMATIC1111/). Here's what happened: I used the ...
Dennis Muend's user avatar
0 votes
0 answers
15 views

SSH command variants [migrated]

Difference between ssh [email protected] ssh za\\[email protected] ? Both login methods are giving me SSH access but some files/folders are accessible via the latter while not via ...
Aryan's user avatar
  • 61
1 vote
0 answers
26 views

Can puzzle-based data exchange enhance decentralized network security? [closed]

I'm a student and during one of my classes I came up with an idea about sharing data online. I'll say right away that I'm not an expert, but rather an amateur who wants to share my thoughts and get ...
Lesha's user avatar
  • 11
0 votes
1 answer
74 views

Pentesters: Is it common for bruteforce/ dictionary attacks, e.g. for SSH username enumeration, to be successful in the real-world pentests? [closed]

I am learning and practicing on vulnerable-by-design machines (vulnhub, metasploitable etc.). I found that this machine is running OpenSSH 7.5, and I tried a few exploits of Username enumeration from ...
Shy's user avatar
  • 139
-1 votes
1 answer
79 views

How do we secure our network traffic from packet sniffing tools [beyond TLS/SSL] [duplicate]

From following link: Decrypting TLS with Netsh/WireShark I found its pretty easy to segregate the keys file from tcp requests and later decrypt with WireShark. Are there any reliable/bullet-proof ...
Shyam R's user avatar
  • 107
0 votes
1 answer
80 views

Salvageable computer parts after being hacked [duplicate]

(edited) My question main is much pretty where can malware hide after it's infected your computer and what parts should I keep and throw away to make sure the infection no longer spreads. Does factory ...
Weissman's user avatar
5 votes
1 answer
2k views

What is the term for when a hyperlink maliciously opens different URL from URL displayed when hovered over?

Is there a term for when an anchor tag opens a different URL than its href or performs some action such as showing a pop-up instead of opening expected URL? Excluding non-malicious cases such as a ...
user43117's user avatar
1 vote
2 answers
455 views

Can my IP be found on Telegram by malicious people?

I have been threatened on a private group chat on Telegram. I want to know if it's possible for malicious people associated to who threatened me (hackers or experts) can get my IP address from ...
Gabriele's user avatar
1 vote
1 answer
57 views

Can a buyer recover data from a smartphone which was factory reset? [duplicate]

I sold my old smartphone to another person. I factory reset it wiped data and then sold it. I was wondering if it is still possible to recover some data from the phone by using recovery softwares?
Tea is life's user avatar
2 votes
1 answer
306 views

Why Owasp-crs does not allow Content-Type: application/x-www-form-urlencoded

I try to craft a http post using this curl : curl -v -X POST "http://example.com/submit.php" -H "Content-Type: application/x-www-form-urlencoded;" --data "email=test@example....
navotera's user avatar
  • 149
-1 votes
0 answers
15 views

Startup file works when submitted manually but not when the system starts [migrated]

I have a file called startup.cmd in my Windows 10 startup directory called C:\Users\myuserid\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup. The contents of the file are: @echo off ...
fireblood's user avatar
1 vote
2 answers
75 views

PHP embedded within PNG is not executing rather randering in IIS but executes in Apache

I am pentesting a site with all permissions. I have been able to upload a PHP shell embedded within a png image. I have also been able to change the extension of the file like something.php. So my ...
NobinPegasus's user avatar
0 votes
0 answers
8 views

Getting the ipv4 address of my VM [migrated]

I just installed metasploit2 on VMware and changed its network to a Bridge Adapter. Now I want to get my Metasploit2 IPv4 but when I run ifconfig it shows only IPv6 for eth0. I need IPv4. What should ...
Cyber Practice's user avatar
1 vote
1 answer
62 views

Does this Wireshark traffic dump show that there was a successful login?

After bruteforce (many POST requests to "wp-login.php" from host 10.0.1.85) there were a couple of requests to admin-ajax.php followed by a response from the server (10.0.1.88). Further ...
ICE-foxes's user avatar
0 votes
1 answer
47 views

Cannot allow 920600 in crs

I have these rules : SecRule REQUEST_URI "@rx ^/(.*)$" \ "id:94000001,phase:1,t:none,nolog,pass,\ ctl:ruleRemoveById=933120,\ ctl:ruleRemoveById=933150,\ ctl:...
navotera's user avatar
  • 149
1 vote
0 answers
30 views

RedHat get list of CVE afecting specific software [closed]

I need to build a tool to get list of CVE impacting specific software of a given RedHat system. I am aware that there is online RedHat API but i does not want to go there because : My systems do not ...
philippe's user avatar
  • 213
0 votes
0 answers
14 views

Help Needed with Chosen Plaintext Attack on AES-CTR [migrated]

I'm working on a cryptanalysis project for my professor, and I need some guidance. The assignment involves implementing one of the following types of attacks on a ciphertext encrypted with a symmetric ...
deomanu01's user avatar
0 votes
1 answer
36 views

Assure Deterministic Hashing/Encryption Process can be Replicated if Rebuilt

May I have some guidance for a project I am working on? These are the requirements: A Dataset needs to be submitted in a .csv format, delimited by '|' The Dataset needs to be submitted periodically (...
Clifford Piehl's user avatar
1 vote
0 answers
68 views

How to get Avast to stop quarantining my program?

I need to use a .NET shellcode inside a c++ unmanaged process. Let me be clear the shellcode is not malicious by any means, I just need it to load .NET code in an unmanaged process. Antivirus won't ...
Hasakiss Haselioss's user avatar
2 votes
2 answers
128 views

Can modern AI tools provide any information about the true purpose of potentially malicious code?

A recent question of mine was closed, as I effectively requested code analysis. A comment said: If you want an analysis, you could pop it into something like chatgpt Is there any analysis (or ...
User65535's user avatar
  • 289
0 votes
1 answer
474 views

Is polyfill.io still an immediate threat?

Polyfill.io is malicious: https://dev.to/snyk/polyfill-supply-chain-attack-embeds-malware-in-javascript-cdn-assets-55d6 https://www.sonatype.com/blog/polyfill.io-supply-chain-attack-hits-100000-...
telion's user avatar
  • 111
1 vote
0 answers
50 views

Is this code attempting to identify individual computers? [closed]

The bbc news home page is directing some users to download and run some javascript from a data collection company. This collects many hardware and device identifiers, as their privacy policy ...
User65535's user avatar
  • 289
4 votes
1 answer
87 views

Cannot consistently demonstrate ARP Spoof and DNS Spoof?

I am trying to use arpspoof and dnsspoof to practice a man-in-the-middle attack between a couple of computers at home. Despite repeatedly following the same exact steps below, I can not get ...
learningtech's user avatar
6 votes
1 answer
115 views

How do payment facilitators like Stripe handle the PCI DSS requirement to periodically inspect POI devices?

Payment facilitators like Stripe provide card payment terminals to their customers. These devices must be periodically inspected, per requirement 9.5.1.2. How does the payment facilitator handle this, ...
aantia's user avatar
  • 161
0 votes
0 answers
11 views

Is it possible to repair a corrupted partition table of a Bitlocker encrypted disk? [migrated]

Assuming a disk was full-disk encrypted using Bitlocker and the partition table is corrupted or entirely missing. Is it possible in any way to recover from this, given that the original Bitlocker ...
Bob Ortiz's user avatar
  • 6,715
0 votes
0 answers
9 views

How to properly determine if an Bitlocker encrypted disk has a corrupted partition table? [migrated]

Background: A Bitlocker encrypted hard disk (5TB WD Elements HDD USB) was accidentally wiped partially using the wiping tool Eraser Classic Portable (using the US DoD 7 passes method). The wiping ...
Bob Ortiz's user avatar
  • 6,715
0 votes
0 answers
9 views

How to identify a GUID of a corrupted Bitlocker disk in order to find the corresponding Bitlocker recovery key? [migrated]

I have a situation where I have access to a huge list of Bitlocker recovery keys but only the combination of the identifier (GUID) and recovery key are available. However the disk in question is ...
Bob Ortiz's user avatar
  • 6,715
0 votes
1 answer
51 views

Passing password through terminal when using pass + gpg

I'm planning to use the pass to store passwords for a web service. My service will need to store passwords for many database servers. So my idea is store these passwords with the Linux pass command. I ...
cstff's user avatar
  • 3
0 votes
1 answer
27 views

Practical advise on completing PCI DSS SAQ [closed]

I have established that my business needs to complete a PCI DSS SAQ-D form for attesting PCI compliance... twice - once as a merchant and once as a service provider! Even completing it once is a ...
John Rix's user avatar
  • 133
0 votes
1 answer
57 views

BankID and QR codes attacked by man-in-the-middle?

There is a general national login ID system used in the Nordics called BankID. Very often a user will go to a website that employs the BankID login and click "login with QR". Having done so ...
Attack68's user avatar
  • 103
1 vote
1 answer
193 views

Is there a Poc for Yoast SEO < 22.6 - Reflected Cross-Site Scripting (CVE-2024-4041)

I recently reported a Reflected Cross-Site Scripting (XSS) on a wordpress site which was running Yoast CEO 22.4 which is vulnerable to Reflected XSS. see CVE-2024-4041 However The company is demanding ...
Dang Max's user avatar
0 votes
2 answers
106 views

Multiple Layers of Hashing when storing passwords [duplicate]

A common principle in InfoSec is Defence-In-Depth. When encrypting sensitive data, it might make sense to have the data encrypted a few times. Veracrypt does this for example with the AES-Twofish-...
dfsg76's user avatar
  • 693
14 votes
2 answers
4k views

Should mail addresses for logins be stored hashed to minimize impact of data loss?

I'm currently designing a user authentication system for a web application, and I am considering best practices for storing user login information. While it's common to hash and salt passwords (with ...
dfsg76's user avatar
  • 693
0 votes
1 answer
65 views

Is a Three-Layer Post-Quantum Safe VPN Hidden Within Regular IPsec Effective Against Eavesdroppers?

I'm working on designing a VPN that is post-quantum safe while avoiding detection that it uses post-quantum cryptography. The goal is to make the use of post-quantum cryptography indistinguishable to ...
dfsg76's user avatar
  • 693
2 votes
1 answer
693 views

Benefit of splitting and routing/encrypting file packets separately?

I have something of a theoretical question - how much of a cyber benefit would there be to taking data, breaking it up and encrypting it, then sending it to the destination via multiple disparate ...
sscirrus's user avatar
  • 211
0 votes
3 answers
183 views

How dangerous is it to Google my password? [duplicate]

I have heard numerous, numerous times that Googling your password to anything (like is Pass124 a good password), is a very bad idea- and surprisingly there is no question (that I could find) on this ...
security_paranoid's user avatar
0 votes
1 answer
52 views

How to bypass htmlentities($_POST['username'],ENT_QUOTES) SQL injection

What is the sample payload to bypass this protection for SQL injection in PHP code? . . . htmlentities($_POST['username'],ENT_QUOTES) . . . $myquery = mysql_query(sprintf("SELECT * FROM `users` ...
fed's user avatar
  • 61
0 votes
1 answer
56 views

What the reasoning behind block specific ports like 10080 on internet browsers

Context: For security reasons I am running k3s kubernetes in rootless mode. That requires me to use ports over 10000 so I have choose the port 10080 to listen as web-server. To my surprise, my browser ...
ton's user avatar
  • 101
1 vote
2 answers
38 views

Should IP behind Azure Traffic Manager be treated as private?

I was wondering should IP behind Traffic Manager treated like IP behind WAF (e.g Cloudflare). Is it okay if one were able to access that real IP directly?
maximillian1's user avatar
1 vote
1 answer
99 views

How can I ensure that sensitive data on a Windows computer is not transmitted externally by any software?

How can I securely handle sensitive information on my computer given the pervasive threat of malicious software and cyber-attacks? I am concerned that my computer, connected to the internet, is ...
Zurechtweiser's user avatar
1 vote
1 answer
38 views

Automate ASVS with ZAP

I am new to this role. So I am trying to understand a few things. My organisation wants to evaluate the existing application according to ASVS https://github.com/OWASP/ASVS/blob/master/4.0/docs_en/...
NutsAndBolts's user avatar
2 votes
1 answer
435 views

server negotiating TLS1.3 but sent TLS1.2 ciphersuite

I sent a client hello indicating TLS1.3 support, and it contains a list of all ciphersuites that support TLS1.3, TLS1.2 and TLS1.1 And consider server negotiated TLS1.3 indicating serverHello....
hjhjh's user avatar
  • 41
1 vote
1 answer
101 views

Is there any reliable information on how many places make the mistake of storing passwords in plaintext?

I think the risk of passwords being stored in plain text (or easily reversible encryption) is well known. I'm curious though how frequently does it actually happen? Has there been any study or ...
dsollen's user avatar
  • 115

15 30 50 per page