All Questions

Filter by
Sorted by
Tagged with
-1
votes
2answers
102 views

How can I prevent a “rogue” front end?

I developed my product, which is exposed via API+web+mobile app. How can I prevent a 3rd party from developing its own front end and plug it on my backend? I'm not talking about a simple phishing ...
1
vote
1answer
76 views

How to confirm if it's a case of XSS

On a training website where instructors can create Q&A exams for their students, an instructor put a question about XSS. Part of the question was http://abcd.com/options#<img src=1 onerror=...
1
vote
0answers
59 views

JTR finishing very quickly with rockyou.txt and not cracking the hash

I've been fumbling through the world of Information Security by going through the HTB challenges, and I've come across an issue I just can't seem to find an answer for. During one of the challenges I'...
0
votes
1answer
62 views

How can I obliterate information on a defunct device, and should I?

I have old cell phones with problems that make them useless (non-responsive touch screen, black-on-black display, will not power up). I also have a bunch of solid-state USB memory devices that don't ...
0
votes
0answers
48 views

E2EE verification without meeting in person (in Signal)

I'm playing around with e2ee a little. Would it be possible to verify the security numbers in the signal protocol by using already verified e2ee channels within the app securely? Let E be a ...
0
votes
0answers
20 views

Symfonos 2 - meterpreter session of the user LibreNMS

When I try to exploit Symfonos with a command injection using Metasploit, no sessions are created in the process. Is there any reason as to why this happens?
0
votes
3answers
88 views

Can a compromized browser know your ISP's IP even if using a VPN?

Let's say you use a reliable VPN like ProtonVPN to browse the Internet. In theory, can a compromized browser betray you? Does it has access to your ISP's IP? As a bigger picture, if you want to upload ...
-1
votes
0answers
95 views

how to remove trojan from infected C++ program

A Trojan has been reported by Kaspersky antivirus that removed our exe file without executing it , its name was"Trojan.Win32.Swizzor.c". How to remove trojan from an exe file?
0
votes
0answers
7 views

Sharing Internet between vlan(s) [migrated]

Assume that: Router connect to FA0/1 port on the switch. This port is configured to be trunk port. I also configure Router on Stick on the Router. And the router connect to modem Port FA0/2-3 and FA0/...
0
votes
0answers
44 views

mod_security with OWASP CRS: Custom rule for whitelisting googlebot

I am about to use OWASP CRS rules with mod_security on my WHM/cPanel enabled CentOS server (with apache). But I fear that accidentally Googlebot may be blocked by one rule or the other. After enabling ...
0
votes
0answers
8 views

How Bitcoin restricts the mining time? [migrated]

How Bitcoin restricts the mining time? We know cryptocurrency systems restrict the mining time of a block to a certain limit for security reasons. For example, mining time for Bitcoin is ~10 minutes. ...
0
votes
0answers
16 views

How to recover a hacked site with WSO Shell [duplicate]

Recently wordpress site on centos 7 server is hacked and WSO shell was uploaded. Ive checked other sites and nothing was changed, Im using centos web panel and the root password also was not changed. ...
0
votes
0answers
12 views

Where is the port number listed in this command result? [migrated]

I am running simple port scans on my system and I don't know if I am confused or not. After running lsof -i and my results are: COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME firefox-e ...
0
votes
1answer
67 views

Are sequential patterns used in practice?

I study computer security and I read articles about the potential usage of sequential pattern mining in IDPS products: Database intrusion detection using role and user behavior based risk assessment ...
0
votes
0answers
48 views

How to perform RFI attacks?

I am now learning about RFI attacks and I am practising with some pieces of codes trying to perfrom RFI in order to understand better the situation. Now I am stuck at this one: if (!isset($language)) {...
0
votes
1answer
250 views

7z “Copy 7zAES” algo brute force with 32 char password for when original file is available (QNAP QLocker ransomware) [duplicate]

As some in here might know, there is/was a ransomware attack going on worldwide that used 7z to encrypt all files <20MB for a ton of users world wide. Each user has a unique 32 char password (Upper ...
1
vote
0answers
58 views

How to use %n formatter in format string [closed]

I recently saw a CTF challenge application (elf x86_64) on Linux environment, vulnerable to several attacks including format string, because the complexity of the full exploit, I don't want to say too ...
0
votes
0answers
31 views

Snort does not detect attacks when running in offline mode

When I run Snort on a pcap file (that contains malicious traffic), it does not detect anything. I uncommented the rules path in Step #7 at snort.conf. Nothing is changed. How to let Snort detect ...
0
votes
0answers
37 views

Is every packet of a hostile network flow hostile?

We are building a packet based anomaly detection system and I'm trying to find labeled packets. Such dataset doesn't exist based on my search, but I can find labeled flows. Can we say that every ...
0
votes
0answers
28 views

How do we protect digital data (whether in critical online/offline data centre or personal disk) from man-made EMPs? [duplicate]

How do we protect digital data (whether in critical online/offline data centre or personal disk) from man-made EMPs, such as nuclear EMPs, non-nuclear EMPs weapons, etc. Is E1 EMP indefensible?
0
votes
0answers
35 views

How to prevent endpoint data from being modified and endpoint client application from being modified

Let's say an online system uses mostly endpoint storage for storing all kinds of private or sensitive data for each of the client/user, this way the server at the least has some post-data-leakage ...
0
votes
1answer
40 views

Do the organisational policies need to have ownership to ensure accountability?

Policies are the high-level statement from Senior Management. It's a philosophy for the management to be guided by, and management has the direction to plan, build, run and monitor the activities to ...
0
votes
0answers
37 views

SSL stripping - how is it possible to send back the HTTP page? [duplicate]

Been trying to wrap my head around SSL stripping. An explanation here writes: Keep in mind, however, that when you install SSL, you’re essentially creating a duplicate of your website with HTTPS URLs....
0
votes
1answer
35 views

Does the e-mail send from an id to the same id requires encryption and other security checks?

I have noticed that Gmail is not encrypting the mails send from an id to the same id (When From address and To/Cc address are same). Is encryption really required in the above scenario? Necessity of ...
4
votes
1answer
483 views

How to create a secure embeddable HTML form?

I have an https website and I want to let other websites embed one of the pages on my website that lets users of my service log in and submit a form, similar to Paypal's payment iframe or Plaid's Link....
0
votes
1answer
58 views

Can a custom built CPU break hard drive encryption?

While a hard drive is decrypted on boot up, can the original phrase be intercepted at some comparison calculation step by a specially built CPU or is there some higher math involved? This would be ...
2
votes
0answers
46 views

How can I prevent any cmd prompt from closing until I do so manually? [migrated]

I have this cmd prompt about 4 times a day. I think it accesses consent.exe since that program seems to be the last one used by it. I used ExecutedProgramsList to get that info. I think it might be ...
1
vote
0answers
47 views

Can my school website see my other tabs and/or applications on my desktop?

When I am at home taking an online exam through my school website (they use Blackbaud which allows teachers to set up assessments through a website), on my personal laptop, can that school website see ...
0
votes
0answers
32 views

GitHub Exposure from Private Key without context

You've discovered an SSH private key and have learned it is used for GitHub authentication. Is it possible to obtain any private repository information? I think to clone a GitHub repository you would ...
0
votes
0answers
13 views

How to clear Google Chrome recent files list [migrated]

Security-conscious users don't want a history of anything on their systems. If you right-click the Chrome icon in the Windows taskbar, you will see local files that you may have recently used ...
0
votes
0answers
54 views

Critical security alert: someone knows your password [duplicate]

Mailed-by: gaia.bounces.google.com Sign.google.com Security: Standard encryption (TLC). So this is a legitimate email from Google. Will this email immediately be sent if someone (who isn’t supposed ...
1
vote
0answers
36 views

Is it bad practice to use only one token for a SPA (no applications, only user)?

Say we have multiple instances of application X deployed on site1.com, site2.com, site3.com, etc. And we have a centralized server at example.com serving all of these. All the instances of X are ...
0
votes
2answers
105 views

Scamming explanation

I've just received a scam SMS with that invite me to click on a link to check a delivery. Since I was curious about where it could lead, I opened a VM and set up a VPN, then clicked on the link. After ...
0
votes
1answer
33 views

WEP keystream extraction

After having captured multiple packets with repeated IVs you can perform cipher1 XOR cipher2 which is the same as having cleartext1 XOR cleartext2, and performing cipher1 XOR cleartext1 gives you the ...
2
votes
1answer
58 views

What additional protection does seccomp provide when compared to capabilites?

From this answer I understand that seccomp-bpf filters the list of syscalls a process can call. Similarly, the capabilites mechanism will cause a syscall to fail if the caller does not have the ...
0
votes
1answer
56 views

Are my DNS requests encrypted when I use VPN and DNS of Google or others?

When I use my ISP's DNS servers and I am connected via OpenVPN the DNS trafic will not bounce through the VPN tunnel. When I use others' DNS servers will my DNS traffic bounce through the VPN ...
0
votes
0answers
41 views

Disseminate emails for receiving spam

I would like to build my own mail honeypot for malware and phishing campaign analysis. The most common techniques (or at least known to me) consist of: Disseminate e-mail addresses Create fake web ...
0
votes
0answers
29 views

FedRamp Moderate question about hashing MD5

If I use MD5 but not for cryptography purposes, and not for any authentication or authorization mechanism, Am I in violation of FedRamp Moderate? BR
0
votes
0answers
16 views

Why do I need DMARC on top of SPF and DKIM? [duplicate]

If SPF is verifying against a set of IP records if the incoming email from a domain was sent from an authorized host piggybacking on the DNS and DKIM does touch the signature of the email and ...
0
votes
1answer
42 views

Bypass Local File Inclusion(LFI) prevention filters

I have these two LFI filters and i want to bypass them $bad = str_replace('../','',$_GET['bad']); while( substr_count($bad, '../', 0)) { $bad = str_replace('../', '', $bad);...
0
votes
0answers
37 views

Is it more secure to enable upnp or to forward specific ports you need open?

I am trying to use something called Moonlight, which streams desktop to tv through Nvidia Shield (for playing pc games on Shield). However, it requires certain ports to be open for access (TCP 47984, ...
0
votes
0answers
33 views

aircrack-ng / airodump-ng - some problems with interactive display [closed]

I am successfully using airodump-ng with this command line: # airodump-ng wlan1mon --manufacturer There are a few issues with this output that I hope are addressable with the correct switches or ...
0
votes
0answers
41 views

XSS with Java to get User Cookies

I am practicing some XSS on a vulnerable apache2 web application and having some issues getting the user's cookie information. I am following the instructions in this Lab for the XSS Attack. We are ...
5
votes
1answer
446 views

How did Firefox get my passwords?

I just installed Firefox browser, while I have previously used Google Chrome as my main browser. I am using Windows 10. During the installation and setup process for Firefox, I was given the option to ...
0
votes
1answer
38 views

CORS with access-control-allow-credentials

Am I correct in assuming that setting the 'access-control-allow-credentials True' header, even if you are not including the 'access-control-allow-origin' header is potentially dangerous for a website? ...
0
votes
0answers
2 views

Increase Time to Brute Force Luks Full Disk Encryption [migrated]

I want to increase the time it would take to brute force my full disc encryption. I’m on Ubuntu and encrypted with Luks on installation. I have read that I would use the following command to make it ...
0
votes
0answers
73 views

Would this HTTP server setup be reasonably secure? [closed]

(This is a duplicate of my question here). I want to know if this hypothetical setup is reasonably secure to the point where it can't be conventionally hacked remotely over Tor, from which it is ...
-1
votes
0answers
29 views

Need to decrypt text without knowing algorithm or key [duplicate]

Here it is. "V0UgV0FOVCBUSEUgQkVTVCwgTk9UIFRIRSBGT0xMT1dFUlM"
0
votes
0answers
6 views

Empty Grub after installing windows over kali [migrated]

I used Windows and Kali Linux together for some time. Yesterday I changed my Windows, but after reinstalling Windows, grub was gone and the laptop was directly booting to Windows. (Both Kali and ...
0
votes
0answers
56 views

How can I add some probable Keywords to hashcat, so I can Brute-Force attack a WPA2 Network faster

I´m trying to brute force attack a WPA2 Network with Hashcat and a wpa2.hccpax file, but when I do it says that it can take 45years to brute force it. So I had the idea that probably the network I´m ...

15 30 50 per page
1
3 4
5
6 7
1248