All Questions

My MAC address has been spoofed by a neighbor to access my WiFi, positively. I know it's futile changing the WPA key or not broadcasting the SSID. What are my options at this point ?

sudo is sometimes used to give untrusted or "semi-trusted" users the ability to perform certain tasks as root, while not giving them unlimited root access. This is usually done via an entry into /etc/...

I want to set up a MITM-scenario as an exercise for myself. My setup looks like this: Internet <--------> Laptop <----------> Client At this stage I just want to route the traffic from my AP ...

I need to forensically image a Samsung phone that is not rooted or running a custom recovery mode. I have not been able to pull an image using ADB, as the default Samsung recovery mode only allows ADB ...

My router has been hacked and all devices have had some sort of spyware installed (Don't ask me how I know this, just please take my word for it). Since they can see everything I do on my devices, ...

I have an input field in a web that is being saved. This field can be shown in other systems that I do not have control over and that's why I would like to limit what is allowed in this field, ...

I have a headless device that is connected to a router with a VPN connection. Not al the devices connected to the router go through the VPN connection, since I have set rules on the router to tell it ...

Let's say i have a scenario when the user salt is required in client side before login, the user obtains the salt by this url http://my-api.example/get-salt/userid that url should return a salt for ...

I have this application that has an input box where the data is going to be sent in a JSON format. The JSON payload might look like this {“message”: “hello\nmy name is andi”} But the problem is the ...

Is there a way to decrypt passwords from Chrome Login Data file? My goal is learning about the backend process of this decryption, so I don't want to use any pre-built applications.

I wanted to know if there was any other way to detect the OS of a network (other than nmap) since nmap doesn't detect most versions of Windows 10 at all and identifies them as a different OS ...

I'm trying to understand LCM and how David Hopwood's discovery is a noteworthy example of it. This site contains two important things. First, it identifies Hopwood's interface attack (1996) as an ...

The business is located in the US. But: Has European customers who put a transaction via a custom-built shopping cart Sells via tradeshow in Europe or Asia in person Could Customers send credit cards ...

I'm a developer working on a POC for an internal web app (Python\SQL) which will handle sensitive employee information within our company. In going over the application with our security department to ...

I personally trust Google in terms of security but I'm not sure whether man-in-the-middle (MITM) attacks against Google services AS OF TODAY possible or not. As far as I know, Google uses some ...

Today, I got a phishing email impersonating a large bank. To my surprise, the link in the email pointed at a rather sophisticated phishing website which could potentially result in many victims. The ...

I am posting this question after checking this question Where can I find all SSL CA certificates I need to verify couple of CA authorities.(below) CloudFlare NameCheap AWS commodo Where can in ...

How does authentication in gmail work? Is the password sent in plain text format and gmail server checks against the password stored on its server? I believe http protocol is stateless, so this means ...

Since buffer overflows always let an evil hacker write outside the buffer and overwrite the return pointer to a shellcode the evil hacker can place, does it mean that successful exploitation of a ...

I have a content site https://www.mysite.com I'm asking a client to configure a reverse proxy server connection in their server so everything inside the subdirectory 'external-content' gets pulled ...

I have used user groups heavily while designing access control policies. I find user groups very convenient as it's very easy to implement with PAM. Another reason I have organized the users with ...

Some site I am testing that retrieves data from some url, I could backconnect using ldaps://ip:port/ I tried wrappers like ldap://, dict:// but only ldaps seem to work. Also expect:// seem disabled, ...

How can I generate a DES3 key encoded in base64 using openssl tool?

I often see DDoS attacks compared by network traffic, for example: The biggest DDoS attack to date took place in February of 2018. This attack targeted GitHub, a popular online code management ...

For the last two weeks we have been receiving a form of spam through our website contact form that I haven't seen before. It looks like this: Name: iYvNgmpTLwxqaCj Company: lqidQuVNMhIJsz E-...

My answer here, resulted in this comment: This could be subject to a TOCTOU1 attack and needs to be developed to be correct. The answer is in Rust, but here's some equivalent bash: p=/home/roger/...

So my place of work, if you can tell by the title is either Gov or Mil, and we recently had a tech refresh where all of our workstations were replaced with VM's. We are running version VMWare Version ...

I am trying to configure ZAP on an Android device using a hotspot connection opened on another Android device. I followed the setup instructions available here: https://security.secure.force.com/...

I'm currently migrating the encryption functionality used in a PHP project from mcrypt (which was deprecated in PHP 7.1.x and no longer works from PHP 7.2 onward) to openssl, using the defuse/php-...

A DNS query for this domain (messager.xicp.net) was classified and detected as "Trojan.Generic.DNS" by the FireEye NX in our network. So, I used both VirusTotal and abuseibdb sites to check this ...

Short of flashing BIOS, there seems to be no way to disable the Intel ME. So, is there a reliable way to block access to Intel ME, such using HW firewall (Firewall in front of the machine, not ...

How can I find out, if given CPU is affected by the Meltdown and Spectre bugs ? My CPU is relatively older, and it is a SOC chip: AMD GX-412TC SOC I was not able to find, whether these chips also ...

The idea was to allow users to enter a URL inside the application that would send a request to my backend, fetch the data, and load it into a local cache (Apollo/GraphQL). The only sensitive data sent ...

I am trying to explain what happened and asking what could be done after being infected Yesterday a client called and told me something strange happened to his server and most of the file types are ...

I work in the IT Security function of my company as a team lead. We periodically send out phishing emails to all users on company network as a form of continuous education of users on how to spot ...

For my app I use redis as a session store. Is it safe to store the session id without using a hash function? If I should use a hash function, the client would receive the cookie with the raw or the ...

I have minimal experience exploiting deserialization vulnerabilities and I am working on and I have identified the following URL endpoint. This is it URL Decoded: /Account/Register?Count=0&Keys=...

Somewhat related to Is malware or screen capture possible with iMac as external display?, where we investigate the possibility of a DMA attack through DisplayPort, nowadays, many machines don't even ...

Currently, the access token expires in 15 minutes and the only info stored in the payload is the user id. Each user has a balance which he can use inside the app. Should I query the database on each ...

According to this answer, I think that this fact that at the beginning of communication, record protocol just uses a null cipher will make some issues. For detecting any issue, I need to know in which ...

I am having multiple wordpress sites with multiple users working on those. Therefore I would like to centeralize the user management, by having one authentication server, storing the username, ...

What are the security concerns if a session token is sent via url over https? After authentication a rest api sends a unique session token that is used to validate subsequent requests. It is ...

After the secret symmetric key is exchanged, how does it look like? What length (in a production use) is it and what can influence it? How the key is used to encrypt / decrypt a piece of data? I ...

I have a question about accessing buckets on AWS S3. Let's suppose we have a bucket that has to have public read access by everyone and only my API has to be able to PUT and DELETE items from bucket. ...

My phone got stolen, and sent back to where it was stolen a day after. At the moment of stealing, the phone was locked. When I received it back, there was no money left in my bank account. The ...

This question is similar to Hashing cookie-values & preventing cookie-stealing however, it is significantly different as I am interested in preventing (internal) subscription fraud, rather than an ...

relatively new to stack exchange and I was about 1 year in my career as a Network Security Engineer before I am needed now by the same company as a Special Projects Engineer to help a department set-...

In the OAuth2 protocol, two kind of tokens are used: access_token: Granted by authorization server, used by resources servers to decide whether access should be granted for the resource ...

I just got a warning on a file locally: Weird, as I have this program for like 2 o 3 years, Just before got cleaned, I upload to virus total, totally clean on cloud. https://www.virustotal.com/gui/...

I recently stumbled upon this article which recommends using two tokens for authentication. Once the user is logged-in (or registered), the client receives an access token and a refresh token, ...