All Questions
66,578
questions
0
votes
0
answers
4
views
When need I to display consent and should deprecated consents be stored? [migrated]
When the law requires consent screen to be displayed for user? Should it be displayed only for third party applications (e.g. signing to stackoverflow by google account) or is it also necessary for ...
- 143
-1
votes
0
answers
48
views
Why nmap does not work in one network while it works properly in a different network
I wanted to scan two different networks such that one is my own local network in my house and the other is the local network of the library of my university. My aim was to find IP addresses of living ...
- 119
0
votes
0
answers
17
views
Suricata 6.x not decoding MPLS packets
Manuals say modern Suricata supports decoding GRE/MPLS/etc by default. My config file uses all the CPU cores with normal traffic. However, during analyzing MPLS traffic only 1 core is 100% busy and ...
- 1
1
vote
0
answers
19
views
Is that good idea to disable gpg signin for code commits [migrated]
I am using VS Code IDE with Angular in Windows 11. I have installed latest version of Git. When I do my code commit from Visual Studio Code. I am getting many errors Like
gpg: skipped "DFDFD"...
- 113
0
votes
1
answer
77
views
Signed but Unencrypted HTTP Traffic
A lot of the web is moving to HTTPS, which to my understanding does two things: Making the data unreadable by third parties, and verifying it's coming from the expected sender.
The latter seems ...
- 101
-1
votes
1
answer
40
views
How can kon-boot run code in UEFI?
I've now googled a lot, but the only information I can find is 'kon-boot hides its code in BIOS memory and changes kernel-code on the fly'...
As far as I understand, UEFI initializes devices and tries ...
- 61
0
votes
1
answer
40
views
How to solve Web Server Reverse Proxy Detection vulnerability reported by Nessus [closed]
The host to scan is a telecommunication terminal, which has only one network connection via a cat-5 cable directly to a PC, which installs Nessus to scan the terminal. The terminal has no any other ...
- 23
0
votes
1
answer
50
views
Why does this method of modifying kernel memory work?
I have no experience of kernel programming or anything low level. I just watched this video and at 21:10 the presenter started to talk about modifying kernel memory using two pointers.
From my ...
0
votes
0
answers
8
views
Yubikey smartcard insert/remove notifications [migrated]
The Powershell code is to find out which USB is communicating with the computer which is working fine
while ($true) {
If( gwmi win32_diskdrive | where{$_.Interfacetype -eq "USB" } ){
...
- 1
0
votes
0
answers
4
views
Could a Google account be lost without the user deleting it? [migrated]
I am the admin of several Google accounts. I have disabled the account deletion feature for the Google accounts I manage. However, I am wondering if the accounts are simply unable to be deleted at all,...
user285563
0
votes
0
answers
23
views
Is there a way for a victim Meterpreter session to connect to a VPS which redirects the connection to my laptop
I travel a lot, and I need to use Metasploit Framework for my pentesting course. The problem is that I do not have a stable IP address to which the victim's Meterpreter session could connect to.
Is ...
0
votes
0
answers
9
views
How to view TLS version and certificate of a website in Samsung Internet Browser [migrated]
Used to be able to click the padlock on the left side of url box and get the info from the popup screen.
In newer versions there's still a padlock and a popup but can't access any TLS or cert info ...
- 25
1
vote
3
answers
70
views
Understanding FDE: Is the encrypted Linux protected against a compromised boot volume?
I use this initramfs-based FDE on my headless server. My motivation is to secure my system against physical tampering.
I am aware that securing an untrusted hardware is not possible. This question is ...
- 113
3
votes
1
answer
100
views
Does ISO27001 require to use Github Enterprise Single Sign on?
A Company would like to get ISO 271001 certified.
With 10 developers and 4 others (product, QA) having access to various Github Repositories, they managed their access rights pretty good. 3 people ...
- 143
0
votes
0
answers
20
views
Public Key Certificate Pinning alternatives
In the domain of mobile application, certificate pinning topic is still relevant. I am trying to get opinions on best alternatives, because certificate pinning needs the storage of public keys within ...
- 101
0
votes
2
answers
43
views
Ransomware - Decrypt partially encrypted file
I just read about the lockbit ransomware, which is widely used. What really surprised me is that the ransomware only encrypts the first 4kb of each file (for better speed, considering it will encrypt ...
- 1
0
votes
0
answers
22
views
Benefit of only having MFA challenge on the very first login
I'm trying to select a suitable password store for a team - one of my main requirements is that users be authenticated via a removable key file rather than simply a master password.
I have been using ...
- 101
1
vote
1
answer
37
views
What is the most secure hardware option for the use of personal eIDAS compliant QES in the EU?
I know that there are two approaches, one with local capsulated storage, such as USB token or smartcard, and the other with cloud-based key vault. Both are secured with a PIN that has to be entered in ...
- 113
1
vote
0
answers
17
views
Question regarding DH/RSA/Public key cryptography [closed]
Courses giving introduction to cryptography often refer to an example where Alice and Bob need to communicate through an evil postman, and dispose each of a lock, its key and a box in which to send ...
- 11
2
votes
1
answer
83
views
Is sharing private key with CDN dangerous?
When you use a Content Delivery Network (CDN) and want to enable HTTPS, you need to import your certificate there. So you should provide your Private Key to the CDN. Is this secure? I mean CDN can log ...
- 159
0
votes
1
answer
85
views
OpenVPN & China's Great Firewall
The company I work for has an OpenVPN server so we can access its intranet from home.
The problem is that I'm going to move to China and I'll need to connect from there, but I've heard connections ...
0
votes
0
answers
24
views
Is getting OAuth2 token safe to fetch client-side and pass to server-side?
I'm integrating my application with external service. My application will exchange data with the external service in context of some user. Data exchange will be done in background on server-side.
User ...
- 101
1
vote
2
answers
50
views
Should CSRF tokens protect against crafting a CSRF request by someone who has access to the same computer?
My server generates a random CRSF token if it doesn't find one in the cookies and saves it to the cookies encrypted, and supplies the raw token in the body of the response, to be read by an SPA and ...
0
votes
0
answers
36
views
How to interpret a GET request by a vulnerability scanner application with seemingly no parameters?
In the weekend one of the servers got targeted by automated scanning attempts, reviewing the logs I noticed a new strategy, but I can't make head or tails of the intent of this attempt.
These attempts ...
- 121
0
votes
1
answer
43
views
Logging secrets in the user agent (browser)
There are sound reasons not to put any secrets, PII or other sensitive information into the logs on the server side (see OWASP ASVS V7).
But should the same rule apply on the client side? Is there a ...
- 383
0
votes
0
answers
25
views
Spam mail from own mailserver, but there is no outgoing mail in postfix log? [duplicate]
Today I received a phishing mail from my own (valid) sender address (info@example.com).
I checked the e-mail header and see the mail was received by my valid mailserver.
Received: from mail.example....
1
vote
1
answer
35
views
ModSecurity: How to disable logging for specific REQUEST_URI?
I have a specific URL that keeps getting checked by weird bots, and that keeps triggering ModSecurity rules that fill up my logs. I would like to disable logging for that one specific URL to make it ...
- 27
0
votes
1
answer
27
views
ModSecurity: How to write exclusion rules for list of REQUEST_URIs on separate domain names?
I have a server with 100 domain names. On each domain name, I have a unique list of pages/directories that I would like to whitelist (put ModSecurity into DetectionOnly mode temporarily). Basically, ...
- 27
1
vote
0
answers
50
views
Is it possible to add a username a password to a hostname in /etc/hosts? [closed]
Is it possible to add a username a password to a hostname in /etc/hosts?
Like: a.b.c.d username:password@hostname
- 11
0
votes
0
answers
16
views
My inet doesn't appear when I use a metasploit VM [migrated]
I downloaded metasploit VM for VirtualBox. When I use ifconfig in the VM, only the inet6 address appears. I don't get the inet address. Why is this?
2
votes
1
answer
66
views
FTPS with IP restriction OR SFT over SSH without IP restriction - which one is more secure?
Im able to connect to my managed Linux Ubuntu Server only through
FTP using explicit SSL (Auth TLS) with IP restriction
and
SFT over SSH without IP restriction
Question: which method is more secure to ...
- 23
1
vote
0
answers
31
views
Access token lifetime when tokens are client certificate constrained
When we use mTLS we can use access tokens constrained to client certificate that was sent to token endpoint to receive the access token. In this case, if only the client that send this request can use ...
- 143
2
votes
1
answer
59
views
Is it safe to use Python's secrets module in a fresh docker container?
If I create a new Docker container based on a recent Debian image, and if use this container to generate a cryptographic key using Python's secrets module, then is that key safe to use?
My ...
- 123
0
votes
0
answers
6
views
How to allow SSH session to linux server but, do not allow SFTP file transfer? [migrated]
We allow SSH access to admins along with SFTP file transfer access using PAM. Now unique case is to grant SSH session to one particular user to read/write/execute files but do not allow transfer file ...
- 1
0
votes
0
answers
9
views
Fail2ban - Exim configuration needed [migrated]
I have seen some posts on stackexchange and other websites and have not been able to figure this out.
I am using fail2ban on Ubuntu 22 with exim, dovecot etc. for my mail server. There are some other ...
1
vote
0
answers
63
views
What is missing to reproduce CVE-2022-32250?
I want to reproduce CVE-2022-32250. I found this this git repo as a repository for the exploit and a code proof of concept provided here.
So I installed Ubuntu 22.04 on VM, and installed kernel ...
- 11
1
vote
1
answer
75
views
Decrypt TLS record layer using OpenSSL
I am trying to decrypt a given TLS record layer sent by a client using OpenSSL. The TLS version is TLS 1.2 and the cipher suite is TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA.
The encrypted record layer is ...
- 13
0
votes
1
answer
28
views
64-bit ROP-based Buffer Overflow Attack
I am facing a CTF challenge in which I have to conduct an attack using a ROP chain on this program below:
#include <stdio.h>
#include <stdint.h>
#include <stdbool.h>
#include <sys/...
0
votes
0
answers
44
views
Are these cPanel processes malicious? [duplicate]
I have previously asked a question There's an expect.php file in all the git repositories of my web server, is this malicious? and this question is a further continuation if it.
After investigating ...
- 283
1
vote
0
answers
64
views
Cracking passwords following rules with John or hashcat
I would like to crack the forgotten password of a very old archive file (rar) with JTR or hashcat.
I remember it was starting with a certain number from a set of numbers e.g.
prefix number from the ...
- 11
1
vote
0
answers
21
views
Implement SSO between a custom app and Microsoft 365 with custom identity provider [migrated]
I’m trying to implement SSO between a custom app and Microsoft 365 so that when the users hit any link to Teams o SharePoint Online in the Liferay app, ADFS doesn't ask for credentials. Context:
ADFS ...
-1
votes
0
answers
43
views
Send spoofed email with nodemailer
How can I send an email with a spoofed 'from' field with nodemailer and SMTP? I know that SMTP does not provide any authentication check to see if the ‘from’ field is actually correct, so why is it ...
- 99
18
votes
2
answers
3k
views
Is this expect.php file (in all the git repositories of my web server) malicious? [closed]
Whenever I create a remote repository on my web server there seems to be a file called expect.php or options.php with the following code in it:
<?php
function visit_cookie() {
$h = $_COOKIE;
...
- 283
1
vote
2
answers
62
views
How do you share private keys for signing e.g. JWTs inside Docker-Containers?
I've written an application in NodeJS which essentially only performs a login:
You send your username/password, and you retrieve an JWT (JSON Web Token).
Those tokens are being signed by a private key....
- 13
3
votes
1
answer
116
views
Docker Apache - safe to chown /usr/local/apache2 to non-root user?
I would like to run the official Docker Apache image as a non-root user. To make it work, it seems like it is necessary to chown the /usr/local/apache2 directory (see this and this):
chown -hR appuser:...
- 153
4
votes
1
answer
90
views
Is it possible to see the previous contents in a word file?
I have a word document where I have turned off the tracking history so technically no one could track my previous changes. What if I send the word document via email? Could someone possibly use a ...
- 41
1
vote
1
answer
53
views
Is it worldwide standard that incoming phone call numbers can be faked?
I am living in Germany and here attackers can fake the incoming phone number when you get a phone call.
For example you can get a call from 110 (police telephone number) although it is not the police ...
- 133
0
votes
1
answer
15
views
ZipSlip directory traversal cannot reach root directory
I have discovered a ZipSlip vulnerability in a web application. Simply put, ZipSlip is basically a directory traversal through a specially crafted zip file, which is made to contain "../" ...
1
vote
1
answer
44
views
Get in depth information about vulnerability from a CVE
I'm trying to understand how to get more information about a vulnerability given a CVE. I noticed that some CVEs, on websites like https://www.cvedetails.com, have got references to articles or to ...
- 13
0
votes
0
answers
19
views
Help understanding PKI MTLS and digital signature architecture
I'm building an identity service using PKI and MTLS for authentication where users are supposed to be able to sign data e.g. a json string or a document.
Where I am now
I have implemented working MTLS ...