All Questions

Filter by
Sorted by
Tagged with
-1 votes
0 answers
35 views

What is this unknown 10-digit device address? Found on an iPhone [migrated]

I saw this unknown address under my personal hotspot summary on an iPhone: e:69:a5:97:7:17 Interestingly enough, it only has 10-digits so it cannot be a MAC address. What is it then? Should I be ...
user avatar
-1 votes
0 answers
34 views

How to stop/reduce constant DNS Spoof/Poisoning Attack from NGINX server if DNSSEC is not offered from provider?

Currently my domain is sitting without DNSSEC security because my domain provider didnt support it for my ccTLD domain, the feature will only be available once i renew my domain in about 2 months time....
user avatar
0 votes
1 answer
27 views

Keylogging virtual machine from host

Can a keylogger in a host machine capture keystrokes in virtual OS? I'd like to get into cryptocurrencies but I don't know if my machine (mac) is secure. So I thought I could create a VM for it but I ...
user avatar
0 votes
0 answers
25 views

I found this in my sent AOL/Verizon mail [closed]

I found this unsubscribe in my sent mail. I do not know what this is, or who sent an unsubscribe from my account. I never subscribed to it. unsub@parse.list-rs.com Does this mean my account is ...
user avatar
  • 1
0 votes
1 answer
35 views

Using -s with --increment

I have multiple computers which I am planning to use. They all run a custom-made client that starts hashcat with different args. I am able to submit the current progress, candidates etc (everything in ...
user avatar
  • 1
1 vote
1 answer
43 views

Onion Routing Encryption

I'm curious how, in onion routing, the relay nodes identify which node to forward the message to? From my understanding the message must travel a specific path based on the keys the user has. I don't ...
user avatar
  • 113
-2 votes
2 answers
154 views

Why do people claim Tails is more secure than Windows?

Why do some people say that using Tor within my normal operating system will not be safe? What differentiates Windows and Tails in this regard? I believe that running Windows together with a VM, VPN ...
user avatar
0 votes
1 answer
22 views

OAuth 2.0 POST to Authorization Endpoint

The OAuth 2.0 specification states: The authorization server MUST support the use of the HTTP "GET" method [RFC2616] for the authorization endpoint and MAY support the use of the "POST&...
user avatar
1 vote
1 answer
34 views

Is there any way to disable/not allow unquoted service paths in Windows?

Unquoted service paths might be used as a privilege escalation vector after an attacker gains access to a Windows host. Given Hector's answer in the following question: "Windows Unquoted Search&...
user avatar
  • 133
-1 votes
0 answers
46 views

How much more smartphone security am I getting by picking the Google Pixel 6 Pro vs others? [closed]

I am trying to decide between the Google Pixel 6 Pro vs the Samsung Galaxy S22 Ultra. Device security is very important to me, so much so that it could be the deciding factor for me with this choice. ...
user avatar
0 votes
1 answer
99 views

Why don’t routers request permission when attempting to connect to an unknown address? (Or why do they still assume every connection is trustworthy?)

I’m imagining a system similar to UAC on Windows but implemented at the router level for IP addresses instead. (Or AS numbers, BGP numbers, Port number, etc…) Naturally this makes router setup ...
user avatar
  • 101
1 vote
0 answers
87 views

How exactly does OpenVPN's tls-auth option apply HMAC to packet messages?

Update: I've been able to work out everything I was asking about packet structure when I was finally able to get Wireshark to work, but there is one last thing I'm confused on which I detail at the ...
user avatar
  • 99
0 votes
0 answers
16 views

ACL management (file access) & security

I'll start by saying I'm not sure which stack community I'd ask my question, but I'm looking into using ACLs to manage file access on our server because of specific IT security requirements. We mostly ...
user avatar
  • 1
0 votes
0 answers
33 views

Increment hearbeat request metasploit

I'm using metasploit to a university project and I have to try to make a botnet attack unnoticed and the if the blue team dettect it, I have t try to make as imposible as I can to attribute the attack....
user avatar
  • 5
0 votes
1 answer
47 views

Key derivation for password manager backup?

Backing up your password manager is a good idea in case your house burns down, but where do you store the password to the off-site backup? Remembering the master password is easy, but re-using the ...
user avatar
  • 175
0 votes
1 answer
43 views

What is the impact of OpenVPN SECLEVEL=0?

OpenVPN throws a "signature digest algorithm too weak" error when I try to connect to a specific VPN. A common suggestion for a workaround is using the following config: tls-cipher "...
user avatar
  • 29k
1 vote
1 answer
132 views

What's the point of password protecting your document in a 1st email, then writing the password in a 2nd email within 5 minutes?

What security is gained from this procedure? What does this procedure accomplish? Many professionals do this, like government officials and lawyers. First, they email me the attachment (e.g. PDF, Word ...
user avatar
  • 13
2 votes
2 answers
62 views

Create a cryptographically secure random string for auth cookie in javascript

I know there are multiple libraries for managing authentication, but I have a hobby project and wanted to create a very simple authentication system. It'd set a cookie in the client's browser with a ...
user avatar
  • 205
0 votes
1 answer
33 views

DNS Enumeration by IP Address

I know all baseline steps to do DNS enumeration over a domain. But my questions is: how can I enumerate a server when I do not know which domain it is managing and I only have its IP address? My ...
user avatar
1 vote
1 answer
86 views

Comparing smartphones' to PC security

Comparing common smartphones running updated versions of Android or iOS to common desktop/laptops running updated versions of Windows or Linux: Are smartphones inherently less secure? I get the ...
user avatar
  • 1,853
0 votes
0 answers
21 views

IIS Crypto 3.2 not getting rid of Diffie-Hellman algorithms of less than 2048-bits

I'm trying to stop a server using Diffie Hellman key exchanges of less than 2048 bits, but I'm getting confusing results. I've run Get-TlsCipherSuite | Format-Table Name, Exchange, Cipher, Hash, ...
user avatar
17 votes
4 answers
3k views

Is signing a file better than issuing a checksum, and does it render a separate checksum useless?

Alternatively, the question could be asked: Does issuing a checksum for a file we sign anyways just duplicate work? Use case: Firmware sent to an IoT device. We sign it, and form a separate checksum ...
user avatar
  • 181
1 vote
1 answer
22 views

Export ECDSA certificate from Windows Store

I am trying to export public and private key of an ECDSA certificate from Windows key store. PFXExportCertStoreEx fails when I try to export ECDSA certificate. GetLastError() returns 0x80090016. I am ...
user avatar
-1 votes
1 answer
78 views

Is there any way to make the Government not find out geolocation from the hoster?

The government can find servers very quickly by contacting the hoster that hosts your VPN server, and the service provider might give your IP address. But what if I use torsocks ssh -d? I don't know ...
user avatar
  • 111
30 votes
3 answers
5k views

Why is one-time pad informationally secure?

I am reading "Serious cryptography" and he wrote the following: Informational security is based not on how hard it is to break a cipher, but whether it’s conceivable to break it at all. A ...
user avatar
  • 403
0 votes
0 answers
21 views

Sending logs with bug reports: how to defend against easy exploits like malicious file enlargement?

When a crash occurs or when a user reports a bug, I'd like to send my application's logs to a cloud service (Firebase). But I've just realised that there are tons of kindergarten level exploits. For ...
user avatar
  • 123
0 votes
0 answers
13 views

Shared credentials logins between separate websites and trust issues

Brand A has multiple, separate websites - these websites reference each other as part of the brand family, but do not have a shared single sign on system. Instead, each website has their own login and ...
user avatar
  • 530
0 votes
1 answer
62 views

Detect port forwarding

If there are 3 machines A, B and C and A communicate directly with B (A -> B) but B is executing port fordwarding with the next command socat TCP4-LISTEN:443,fork TCP4:<ip machine C>:443 So ...
user avatar
  • 5
0 votes
1 answer
13 views

Arachni on VPS. ERR_CONNECTION_REFUSED on connect with WebUI

After starting arachni on VPS, I'm trying to connect with web UI. But browser cannot establish connection with ERR_CONNECTION_REFUSED. Some console output: arachni Puma starting in single mode... * ...
user avatar
2 votes
3 answers
3k views

Is this a secure approach to store a master password?

I have come up with the following approach to remember master passwords (to use in software like KeePass, etc): Since it is annoying to type the master password every time we power up the PC, we store ...
user avatar
  • 123
0 votes
0 answers
32 views

How to securely transfer the privatekey and pass it to wireguard in a memory safe manner?

Suppose I have a game server with only the wireguard port open, the client request wireguard configuration from a HTTPS server. And use the obtained configuration in a modified wireguard. The ...
user avatar
0 votes
1 answer
26 views

HTML Injection into custom sanitiser

I found a curious website that shows listings. It allows you to type a description, and also allows for you to use tags like <b> and <u> for formatting. But it doesn't let you do more ...
user avatar
  • 101
0 votes
0 answers
34 views

PDF security analysis tool for non-experts

I occasionally come across PDFs from shady sources. Is there a tool that a non-expert can use, which can check them for common vulnerabilities? I have seen this question: Malicious PDF Analysis but I'...
user avatar
0 votes
2 answers
51 views

Someone is trying to change my passwords to takeover my Gmail account and PayPal accounts

Someone is trying to change my passwords to take over my Gmail account and PayPal accounts. I have two factor log in, so I know this is happening daily. I know because I keep getting my passcode ...
user avatar
  • 1
1 vote
1 answer
51 views

Standard for "secure workstations" resisting screen grabs

In his talk "Keynote address: securing the individual" at authenticate2020 (around 23:44), Whit Diffie asks "ever wonder why an app can come on and grab your whole screen? There's a ...
user avatar
-2 votes
1 answer
54 views

What TLDs are safe to whitelist?

What top-level domains (TLD) are safe and would be safe for example to whitelist? I guess .gov and .mil are safe? While .com, .net and .org are not since anyone can register those. Is .int safe? And ...
user avatar
  • 97
0 votes
1 answer
35 views

Email TLS coverage for forwarded recipient email address

When an email recipient server (say server-A) is configured to forward to another email addresses (on say server-B), is TLS applied all the way up to server-B, or does it end at server-A, or something ...
user avatar
  • 103
1 vote
1 answer
79 views

Why does this SQL injection have an equals symbol?

I was reading into the basics of SQL injection attacks on w3schools here. In the second example, I was curious as to why the equal sign was used. I have quoted within the line below. " or "&...
user avatar
0 votes
0 answers
18 views

tcpdump in Kali Linux VM does not capture scp

I'm learning how to develop tests for a hardened server my company is developing for a client. The test configuration will consist of the test target (the server we're developing) and an external test ...
user avatar
12 votes
3 answers
4k views

How to vet third-party developer packages

Looking to create a form where developers can submit requests for packages to be installed. We want to create a list of questions that can help us determine whether or not a package is safe. What are ...
user avatar
0 votes
0 answers
13 views

Session Fixation PoC

I wonder what Session Fixation exploit possibilities still exist today in case the website does not change the Session-ID in a cookie after login other than the following: XSS MiTM open redirect vuln ...
user avatar
1 vote
1 answer
55 views

Defining scope of a software pen test

If I own a software and I want to conduct a pen test with pen testers, should I define the scope or do the pen testers assess the software first and they define the scope? How does scope definition ...
user avatar
0 votes
0 answers
40 views

How to stop Wordpress search abuse? [duplicate]

My Wordpress site is experiancing high load because of large numbers of GET request like: /?s=1ce83ab566d6797d400bd3d03bb45946 How to prevent this? 17.121.115.141 - [04/May/2022:10:14:35 +0200] &...
user avatar
  • 1
1 vote
1 answer
51 views

Why do I get a broken pipe when using pwntool with this C code

I am learning about Buffer Overflows (BOF) and came up with this piece of C code: #include <stdio.h> #include <stdlib.h> void win() { system("/bin/bash"); } int main() {...
user avatar
0 votes
0 answers
25 views

CVE-2021-4034 : __environ is init before the GCONV_PATH injection

I am a bit late to the party but I decided to look into the polkit vulnerability (CVE-2021-4034). I get that the code injection comes from iconv loading an arbitrary library file through the ...
user avatar
0 votes
0 answers
12 views

Threat Assessment Javascript User-controlled Variable Names on Window

I have a requirement to support some external integration to a 3rd party vendor on our site (which is a SaaS site with multiple tenant logins). The vendor requires a script and a global variable to be ...
user avatar
1 vote
0 answers
41 views

Re-populate form with JSON data

I re-populate form with JSON data via javascript (all data has the same origin server) 1 Wen the page load, make a request post ajax 2 The response Ajax is a: Object { primary_ns: {…}, secondary_ns: {…...
user avatar
0 votes
0 answers
31 views

Why do I have to store a refresh token in db

As far as I know, JWT tokens are used for implementing 'stateless server'. But as I try to apply Jwt to my website that uses sessions and cookies for authentication, I found that most people store ...
user avatar
  • 1
7 votes
3 answers
303 views

Is it possible for a website to detect the presence of a proxy?

I am attempting to scrape a site which is notoriously difficult to scrape. Access from datacentres is generally blocked. In the past I've used various proxies, but recently these have stopped ...
user avatar
0 votes
0 answers
48 views

Client Identification using Self Signed Certificates

Taking the concept from the Gemini protocol that allows clients to identify themselves using their own self-signed certificate - is this a valid concept that could be used in other protocols and what ...
user avatar

15 30 50 per page