All Questions
67,224
questions
0
votes
3
answers
76
views
Security and data protection reviews of npm packages
Does npm ensure that the packages are not spying on your data, saving it somewhere or is it the responsibility of the developer to ensure it? Can I confidently use the moderately well-known packages ...
1
vote
0
answers
40
views
Use of nonce to prevent access token leakage in OIDC implicit flow?
Disclaimer: I know The OIDC implicit flow has been discouraged for a long time and I should use code flow on greenfields. Reasons include but are not limited to leakage of the authorization server ...
- 111
12
votes
5
answers
5k
views
Can the secret be derived from the checksum? Should the checksum be encrypted?
Assuming I have secret data that is encrypted (using sops for example) and a checksum of the secret data for change detection: Is it possible to derive secret information from the checksum or should ...
- 223
0
votes
0
answers
7
views
Kleopatra won't open [migrated]
Out of the blue Kleopatha just refuses to open, I have dug through the internet and found nothing that works. I ran it as an admin and for some reason it shows in task manager that its there but ...
- 1
0
votes
0
answers
47
views
Can WebASM provide JavaScript style interactivity without the same vulnerabilities?
JavaScript is useful for interactivity. However, it is often disabled by security conscious browsers, such as the Tor Browser Bundle, and blocked with plugins such as NoScript.
I was wondering if it ...
- 705
0
votes
0
answers
42
views
Possible false positive in hybrid analysis sandbox, or am I screwed?
I saw a webpage hosted on sites.google.com and went into reading it without much second thought. It was essentially a personal blog with mostly text and little other elements.
I then decided to send ...
- 1
2
votes
0
answers
49
views
Is there a safe way to follow a suspicious link? [duplicate]
When I get suspicious emails, I pretty much always just report it as spam, delete forever, and then be done with them. Low quality spam is pretty easy to identify, but sometimes they are on the ...
- 1,337
0
votes
0
answers
9
views
lsof -i and nmap output different [migrated]
To test my PostgreSQL, I had to find its port number.
I ran two different commands to see what it is:
nmap localhost
lsof -i | grep postgres
I was confused when the two commands returned different ...
- 21
1
vote
0
answers
36
views
hashcat with md5 and Mask
I'm trying to connect to my meter by using some open-source software, all the meter supports the dlms-cosem standard. But the problem is the meter disconnected due to a failed security check.
After ...
- 11
1
vote
0
answers
15
views
Check if a Maven dependency has CVEs without having to include it in my project
In our project, we are using OWASP dependency checks to check whether a dependency has vulnerabilities or not.
How can we check if a given Maven package has a known vulnerability?
I do not want to ...
- 111
8
votes
1
answer
2k
views
Does the attacker need to be on the same network to carry out a deauthentication attack?
I'm sort of confused due to contradicting information about it but I just want to know if it's important for an attacker to be on the same Wifi network if he wants to deauthenticate another user?
- 83
1
vote
0
answers
25
views
Client certificate validation [duplicate]
In a mutual TLS connection, both the client and server authenticate each other using digital certificates.
However, when the client presents a certificate, the server only sees the client's IP address ...
- 993
0
votes
2
answers
80
views
What are some symptoms of malware exfiltrating data in packet captures?
I am concerned that my Linux laptop has been compromised with malware that is remotely and regularly monitoring my activity. I ran Wireshark for a day to see if I could find any symptoms of data being ...
- 1
0
votes
0
answers
6
views
Wifi Adapter not listing any wifi networks [migrated]
I am a beginner in ethical hacking. I bought a qualcomm atheros ar9271 wifi adapter. When I connected it in Windows 10, it shows the below list of wifi networks.
But when I go to kali linux, and put ...
0
votes
0
answers
37
views
In a web application, what would you consider the best way to store secret keys obtained via an SDK?
Currently I am working on an application that requires secret keys to encrypt and sign information generated by the client and transmited over the wire, these keys are granted per user.
Currently when ...
- 1
4
votes
0
answers
124
views
Detecting messages embedded in a jpg image with OutGuess
To begin, please someone correct me if I am wrong, but I believe OutGuess was definitively broken in the paper "Attacking the OutGuess" in 2002 and this attack was never patched. It seems ...
- 41
0
votes
2
answers
40
views
Can a WAF transform HTTP response
I have hit a conceptual roadblock here and, to be honest, do not really have a lot of experience with WAFs or firewalls in general. (I did go through this very nice explanation to get upto speed with ...
- 1,512
0
votes
0
answers
11
views
Intent Redirection If The Activity Is Exported [migrated]
What are the security implications of an Android app that exports an activity and accepts a parcelable intent as an extra to start a service? Specifically, in the code sample provided below, how can ...
- 1
0
votes
2
answers
100
views
Is an API call to HTTPS endpoint encrypted?
If API client (Postman for example) makes a call to an exposed HTTPS API endpoint, is the communication between client and server encrypted?
- 1
1
vote
0
answers
62
views
Recovering Chrome Passwords from Login Data File, Without Local State File
I ran the ForensIT profile migration wizard which migrates an existing profile to a new environment (from domain to workgroup, or vice versa). Doing so deletes encryption keys from Chrome's "...
- 11
1
vote
0
answers
11
views
Installing a brew cask didn't require password, but uninstalling it does? [migrated]
I meant to install iStats but accidentally installed a different program that goes by a similar name.
Naturally, I tried to uninstall program, but when I run
brew uninstall --cask istat-menus
==> ...
- 1,240
0
votes
1
answer
23
views
Reason ports are toggling between no-response and host unrechable for the SAME machine, why?
I'm trying to learn pentesting and one thing that triggers me for my workshop is :
I have an ip address where all reason's ports are no-response, the status for all ports are filtered but when I re-do ...
- 101
1
vote
2
answers
71
views
Can this scheme be circumvented?
I am currently developing software, in which players essentially make a "bet".
While not exactly congruent to my situation, I will use the example of a randomly shuffled 52 card deck, in ...
- 604
1
vote
1
answer
53
views
Keeping customer secrets safe from sysadmins and devs in Kubernetes
I've spent a few weeks on GCP and GKE (Kubernetes) trying to figure out how to store customer secrets. The secrets are used by some application even when the user is not logged on so I want to ensure ...
0
votes
0
answers
19
views
How exactly are hidraw 'Billboard' devices interrogated?
I have some USBHub ( Ethernet + HDMI + USB + VGA). When it doesn't have anything connected it exposes to Linux operating system device:
'hiddev0, hidraw1'
in opposite to HID mouse:
which is visible as ...
- 39
0
votes
2
answers
105
views
Protection against user session attacks (hijack, replay, tampering, CSRF, XSS...)
We develop a website in JAMStack, all URLs are static HTML page, and each interaction with the server are made by a fetch call on our REST API (micro-services).
When a user sign in, we want to ...
- 157
0
votes
1
answer
47
views
what does it mean if StackOverflow received OAUTH to access my github account through the github api?
I did not personally authorize StackOverflow to access my personal github account through github api, so what could this possibly mean?
0
votes
0
answers
14
views
Is it possible to detect from where data was copied to my USB? [duplicate]
Someone had copied someone's private data onto my USB.
Is it possible to detect from where or which system copied data to my USB?
- 1
3
votes
1
answer
302
views
OIDC ID Token nonce as "poor mans digital signature"
In absence of better solutions, is the nonce is an OpenID Connect ID Token usable to serve as digital signature. The process would be as follows:
A hash is created from the to-be-signed document/...
1
vote
0
answers
20
views
force XSS after bypassing Request.Form using URL Encoding
I am testing a cross-site scripting attack on a website, as we all know the Request.Form function validates the input so the user couldn't insert a <script> inside the input.
My focus in this ...
- 11
-2
votes
0
answers
22
views
Can you copy card numbers From online and clone them [duplicate]
Can you use online card numbers and clone them Onto cards
2
votes
3
answers
205
views
Accidently opened a phishing email .docx attachment on my iPhone, should I worry?
Two days ago, I received an email saying as object "March rent" in French. It says time to pay my rent for the month of March, and got the email March 1st... I thought this was my landlord ...
- 181
2
votes
1
answer
61
views
ARP spoofing in Ubuntu does not work
I set up a home network using a switch and 3 computers, all having the newest Ubuntu.
I want to perform an arpspoofing along with MITM such that the attacker can see messages sent between client and ...
- 231
0
votes
0
answers
27
views
How Can A Timestamp Be Redone Without Invalidating the Signature?
RFC 3161 - 4.3 states that:
Thus, any token signed by the TSA SHOULD be time-stamped again (if authentic copies of old CRLs are available) or notarized (if they aren't) at a later date to renew the ...
- 1
0
votes
0
answers
10
views
Deleting a binary from the bin folder that attempts to open at startup in Mac Ventura 13.2.1 [migrated]
There is a binary named 'Open' that resides in my usr/bin folder that I cannot delete. I have tried sudo rm open and even tried sudo su and then rm open and I cannot override the permissions.
I have ...
14
votes
4
answers
6k
views
Why do many companies reject expired SSL certificates as bugs in bug bounties?
I noticed that, while browsing through many bug bounty and vulnerability disclosure programs, they don't accept issues that are related to TLS/SSL, which includes expired security certificates.
Why ...
- 261
0
votes
1
answer
49
views
security audit for gitlab instance
I recently joined a start up company that specializes in software development as a cybersecurity risk management for an internship of 6 months, my first task was to audit the company's gitlab page ...
0
votes
1
answer
38
views
How to handle private keys in a messenger app with asymmetric encryption?
I am trying to write a web application with chat system which stores chat messages in a mongoDB database on server side.
I generate a private and public key on server side and encrypt the messages ...
0
votes
0
answers
24
views
OpenSSL get PKCS#8 encrypted rsa PBKDF2 iteration count
I have a PCKS#8 RSA Key encrypted with a passphrase and would like to retrieve the iteration count used for the PBKDF2 used to derive the AES Key used for encryption, in order to make sure that they ...
- 133
1
vote
0
answers
28
views
Monitoring QKD system with EDR Wazuh
I’m trying to do my thesis project about the possibility to prevent attacks against QKD devices, using an EDR like Wazuh. The problem is that most attacks are prevented through physical methods ...
- 15
4
votes
1
answer
184
views
How to find the process that is running PowerShell commands that appear in Windows Defender
On one of our Windows Datacenter 2016, there's an alert that a trojan is trying to install :
The following PowerShell commands are trying to execute at seemingly random hours of the day (always ...
- 139
1
vote
1
answer
37
views
nmap: no exact OS matches when adding the exact signature to nmap-os-db
I'm currently trying to learn Nmap -O (OS guess feature).
I'm launching the following command: nmap -O 172.17.0.3
This command is generating the following fingerprint as output:
No exact OS ...
- 11
0
votes
2
answers
68
views
Is git sparse-checkout secure?
I'm a software developer and our entire code of the project is stored in a single git repository. A small part of this now needs to be made available to a customer. He does not need to push to the ...
- 103
0
votes
1
answer
53
views
Does core isolation protect me against malware?
Does Windows 11 core isolation protect me against malware or does it have nothing to do with it? For example, an unsophisticated hacker with metasploit, nmap, msvenom or tools like that could create ...
0
votes
1
answer
43
views
Successful UEFI secure boot exploitation
Are there any real examples (malware, rootkits, etc.) of exploiting the UEFI secure boot mechanism vulnerabilities such as CVE-2022-21894?
- 2,322
0
votes
0
answers
36
views
FIDO2 security keys - what attack vectors/weaknesses exist for "bad" keys
What attack vectors exist for "bad" FIDO USB keys? What would the weaknesses of a "bad" key be? How could they be compromised?
This came to mind as I was looking at "make ...
- 1
1
vote
2
answers
51
views
Valid SQL Injection Syntax where same vulnerable parameter used in both a SELECT and a UPDATE statement
I have a problem and I'm hoping someone could help with a POC.
In a web application, attacker controlled parameter X is used is used unsanitized in two separate SQL queries within the same function.
...
- 11
0
votes
1
answer
56
views
How to Store Signed Source Code + Encrypted HASH +Code Signing Cert
I have been tasked with designing a solution for signing source code. I have not found much on whether or not there is a standard for storing the signed code and it's hash and code signing cert.
As I ...
0
votes
3
answers
62
views
office 365 security
MS is forcing companies to their hosted office/exchange product. I really have not seen any deep discussion or article discussing why I should trust MS to keep my emails secure. I have zero doubt that ...
- 431
0
votes
0
answers
9
views
Microsoft exchange server data breach relevance to IND-CPA, IND-CCA1, IND-CCA2
I was studying about the Microsoft exchange server data breach attack of 2021 as part of assignment case study. One of the tasks of the assignment it to find its relevance with IND-CPA, IND-CCA1, IND-...
