All Questions

I developed my product, which is exposed via API+web+mobile app. How can I prevent a 3rd party from developing its own front end and plug it on my backend? I'm not talking about a simple phishing ...

On a training website where instructors can create Q&A exams for their students, an instructor put a question about XSS. Part of the question was http://abcd.com/options#<img src=1 onerror=...

I've been fumbling through the world of Information Security by going through the HTB challenges, and I've come across an issue I just can't seem to find an answer for. During one of the challenges I'...

I have old cell phones with problems that make them useless (non-responsive touch screen, black-on-black display, will not power up). I also have a bunch of solid-state USB memory devices that don't ...

I'm playing around with e2ee a little. Would it be possible to verify the security numbers in the signal protocol by using already verified e2ee channels within the app securely? Let E be a ...

When I try to exploit Symfonos with a command injection using Metasploit, no sessions are created in the process. Is there any reason as to why this happens?

Let's say you use a reliable VPN like ProtonVPN to browse the Internet. In theory, can a compromized browser betray you? Does it has access to your ISP's IP? As a bigger picture, if you want to upload ...

A Trojan has been reported by Kaspersky antivirus that removed our exe file without executing it , its name was"Trojan.Win32.Swizzor.c". How to remove trojan from an exe file?

Assume that: Router connect to FA0/1 port on the switch. This port is configured to be trunk port. I also configure Router on Stick on the Router. And the router connect to modem Port FA0/2-3 and FA0/...

I am about to use OWASP CRS rules with mod_security on my WHM/cPanel enabled CentOS server (with apache). But I fear that accidentally Googlebot may be blocked by one rule or the other. After enabling ...

How Bitcoin restricts the mining time? We know cryptocurrency systems restrict the mining time of a block to a certain limit for security reasons. For example, mining time for Bitcoin is ~10 minutes. ...

Recently wordpress site on centos 7 server is hacked and WSO shell was uploaded. Ive checked other sites and nothing was changed, Im using centos web panel and the root password also was not changed. ...

I am running simple port scans on my system and I don't know if I am confused or not. After running lsof -i and my results are: COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME firefox-e ...

I study computer security and I read articles about the potential usage of sequential pattern mining in IDPS products: Database intrusion detection using role and user behavior based risk assessment ...

I am now learning about RFI attacks and I am practising with some pieces of codes trying to perfrom RFI in order to understand better the situation. Now I am stuck at this one: if (!isset($language)) {...

As some in here might know, there is/was a ransomware attack going on worldwide that used 7z to encrypt all files <20MB for a ton of users world wide. Each user has a unique 32 char password (Upper ...

I recently saw a CTF challenge application (elf x86_64) on Linux environment, vulnerable to several attacks including format string, because the complexity of the full exploit, I don't want to say too ...

When I run Snort on a pcap file (that contains malicious traffic), it does not detect anything. I uncommented the rules path in Step #7 at snort.conf. Nothing is changed. How to let Snort detect ...

We are building a packet based anomaly detection system and I'm trying to find labeled packets. Such dataset doesn't exist based on my search, but I can find labeled flows. Can we say that every ...

How do we protect digital data (whether in critical online/offline data centre or personal disk) from man-made EMPs, such as nuclear EMPs, non-nuclear EMPs weapons, etc. Is E1 EMP indefensible?

Let's say an online system uses mostly endpoint storage for storing all kinds of private or sensitive data for each of the client/user, this way the server at the least has some post-data-leakage ...

Policies are the high-level statement from Senior Management. It's a philosophy for the management to be guided by, and management has the direction to plan, build, run and monitor the activities to ...

Been trying to wrap my head around SSL stripping. An explanation here writes: Keep in mind, however, that when you install SSL, you’re essentially creating a duplicate of your website with HTTPS URLs....

I have noticed that Gmail is not encrypting the mails send from an id to the same id (When From address and To/Cc address are same). Is encryption really required in the above scenario? Necessity of ...

I have an https website and I want to let other websites embed one of the pages on my website that lets users of my service log in and submit a form, similar to Paypal's payment iframe or Plaid's Link....

While a hard drive is decrypted on boot up, can the original phrase be intercepted at some comparison calculation step by a specially built CPU or is there some higher math involved? This would be ...

I have this cmd prompt about 4 times a day. I think it accesses consent.exe since that program seems to be the last one used by it. I used ExecutedProgramsList to get that info. I think it might be ...

When I am at home taking an online exam through my school website (they use Blackbaud which allows teachers to set up assessments through a website), on my personal laptop, can that school website see ...

You've discovered an SSH private key and have learned it is used for GitHub authentication. Is it possible to obtain any private repository information? I think to clone a GitHub repository you would ...

Security-conscious users don't want a history of anything on their systems. If you right-click the Chrome icon in the Windows taskbar, you will see local files that you may have recently used ...

Mailed-by: gaia.bounces.google.com Sign.google.com Security: Standard encryption (TLC). So this is a legitimate email from Google. Will this email immediately be sent if someone (who isn’t supposed ...

Say we have multiple instances of application X deployed on site1.com, site2.com, site3.com, etc. And we have a centralized server at example.com serving all of these. All the instances of X are ...

I've just received a scam SMS with that invite me to click on a link to check a delivery. Since I was curious about where it could lead, I opened a VM and set up a VPN, then clicked on the link. After ...

After having captured multiple packets with repeated IVs you can perform cipher1 XOR cipher2 which is the same as having cleartext1 XOR cleartext2, and performing cipher1 XOR cleartext1 gives you the ...

From this answer I understand that seccomp-bpf filters the list of syscalls a process can call. Similarly, the capabilites mechanism will cause a syscall to fail if the caller does not have the ...

When I use my ISP's DNS servers and I am connected via OpenVPN the DNS trafic will not bounce through the VPN tunnel. When I use others' DNS servers will my DNS traffic bounce through the VPN ...

I would like to build my own mail honeypot for malware and phishing campaign analysis. The most common techniques (or at least known to me) consist of: Disseminate e-mail addresses Create fake web ...

If I use MD5 but not for cryptography purposes, and not for any authentication or authorization mechanism, Am I in violation of FedRamp Moderate? BR

If SPF is verifying against a set of IP records if the incoming email from a domain was sent from an authorized host piggybacking on the DNS and DKIM does touch the signature of the email and ...

I have these two LFI filters and i want to bypass them $bad = str_replace('../','',$_GET['bad']); while( substr_count($bad, '../', 0)) { $bad = str_replace('../', '', $bad);...

I am trying to use something called Moonlight, which streams desktop to tv through Nvidia Shield (for playing pc games on Shield). However, it requires certain ports to be open for access (TCP 47984, ...

I am successfully using airodump-ng with this command line: # airodump-ng wlan1mon --manufacturer There are a few issues with this output that I hope are addressable with the correct switches or ...

I am practicing some XSS on a vulnerable apache2 web application and having some issues getting the user's cookie information. I am following the instructions in this Lab for the XSS Attack. We are ...

I just installed Firefox browser, while I have previously used Google Chrome as my main browser. I am using Windows 10. During the installation and setup process for Firefox, I was given the option to ...

Am I correct in assuming that setting the 'access-control-allow-credentials True' header, even if you are not including the 'access-control-allow-origin' header is potentially dangerous for a website? ...

I want to increase the time it would take to brute force my full disc encryption. I’m on Ubuntu and encrypted with Luks on installation. I have read that I would use the following command to make it ...

(This is a duplicate of my question here). I want to know if this hypothetical setup is reasonably secure to the point where it can't be conventionally hacked remotely over Tor, from which it is ...

Here it is. "V0UgV0FOVCBUSEUgQkVTVCwgTk9UIFRIRSBGT0xMT1dFUlM"

I used Windows and Kali Linux together for some time. Yesterday I changed my Windows, but after reinstalling Windows, grub was gone and the laptop was directly booting to Windows. (Both Kali and ...

I´m trying to brute force attack a WPA2 Network with Hashcat and a wpa2.hccpax file, but when I do it says that it can take 45years to brute force it. So I had the idea that probably the network I´m ...