All Questions

Filter by
Sorted by
Tagged with
0 votes
3 answers
76 views

Security and data protection reviews of npm packages

Does npm ensure that the packages are not spying on your data, saving it somewhere or is it the responsibility of the developer to ensure it? Can I confidently use the moderately well-known packages ...
1 vote
0 answers
40 views

Use of nonce to prevent access token leakage in OIDC implicit flow?

Disclaimer: I know The OIDC implicit flow has been discouraged for a long time and I should use code flow on greenfields. Reasons include but are not limited to leakage of the authorization server ...
  • 111
12 votes
5 answers
5k views

Can the secret be derived from the checksum? Should the checksum be encrypted?

Assuming I have secret data that is encrypted (using sops for example) and a checksum of the secret data for change detection: Is it possible to derive secret information from the checksum or should ...
  • 223
0 votes
0 answers
7 views

Kleopatra won't open [migrated]

Out of the blue Kleopatha just refuses to open, I have dug through the internet and found nothing that works. I ran it as an admin and for some reason it shows in task manager that its there but ...
  • 1
0 votes
0 answers
47 views

Can WebASM provide JavaScript style interactivity without the same vulnerabilities?

JavaScript is useful for interactivity. However, it is often disabled by security conscious browsers, such as the Tor Browser Bundle, and blocked with plugins such as NoScript. I was wondering if it ...
0 votes
0 answers
42 views

Possible false positive in hybrid analysis sandbox, or am I screwed?

I saw a webpage hosted on sites.google.com and went into reading it without much second thought. It was essentially a personal blog with mostly text and little other elements. I then decided to send ...
2 votes
0 answers
49 views

Is there a safe way to follow a suspicious link? [duplicate]

When I get suspicious emails, I pretty much always just report it as spam, delete forever, and then be done with them. Low quality spam is pretty easy to identify, but sometimes they are on the ...
  • 1,337
0 votes
0 answers
9 views

lsof -i and nmap output different [migrated]

To test my PostgreSQL, I had to find its port number. I ran two different commands to see what it is: nmap localhost lsof -i | grep postgres I was confused when the two commands returned different ...
1 vote
0 answers
36 views

hashcat with md5 and Mask

I'm trying to connect to my meter by using some open-source software, all the meter supports the dlms-cosem standard. But the problem is the meter disconnected due to a failed security check. After ...
1 vote
0 answers
15 views

Check if a Maven dependency has CVEs without having to include it in my project

In our project, we are using OWASP dependency checks to check whether a dependency has vulnerabilities or not. How can we check if a given Maven package has a known vulnerability? I do not want to ...
  • 111
8 votes
1 answer
2k views

Does the attacker need to be on the same network to carry out a deauthentication attack?

I'm sort of confused due to contradicting information about it but I just want to know if it's important for an attacker to be on the same Wifi network if he wants to deauthenticate another user?
1 vote
0 answers
25 views

Client certificate validation [duplicate]

In a mutual TLS connection, both the client and server authenticate each other using digital certificates. However, when the client presents a certificate, the server only sees the client's IP address ...
  • 993
0 votes
2 answers
80 views

What are some symptoms of malware exfiltrating data in packet captures?

I am concerned that my Linux laptop has been compromised with malware that is remotely and regularly monitoring my activity. I ran Wireshark for a day to see if I could find any symptoms of data being ...
0 votes
0 answers
6 views

Wifi Adapter not listing any wifi networks [migrated]

I am a beginner in ethical hacking. I bought a qualcomm atheros ar9271 wifi adapter. When I connected it in Windows 10, it shows the below list of wifi networks. But when I go to kali linux, and put ...
0 votes
0 answers
37 views

In a web application, what would you consider the best way to store secret keys obtained via an SDK?

Currently I am working on an application that requires secret keys to encrypt and sign information generated by the client and transmited over the wire, these keys are granted per user. Currently when ...
  • 1
4 votes
0 answers
124 views

Detecting messages embedded in a jpg image with OutGuess

To begin, please someone correct me if I am wrong, but I believe OutGuess was definitively broken in the paper "Attacking the OutGuess" in 2002 and this attack was never patched. It seems ...
0 votes
2 answers
40 views

Can a WAF transform HTTP response

I have hit a conceptual roadblock here and, to be honest, do not really have a lot of experience with WAFs or firewalls in general. (I did go through this very nice explanation to get upto speed with ...
  • 1,512
0 votes
0 answers
11 views

Intent Redirection If The Activity Is Exported [migrated]

What are the security implications of an Android app that exports an activity and accepts a parcelable intent as an extra to start a service? Specifically, in the code sample provided below, how can ...
0 votes
2 answers
100 views

Is an API call to HTTPS endpoint encrypted?

If API client (Postman for example) makes a call to an exposed HTTPS API endpoint, is the communication between client and server encrypted?
1 vote
0 answers
62 views

Recovering Chrome Passwords from Login Data File, Without Local State File

I ran the ForensIT profile migration wizard which migrates an existing profile to a new environment (from domain to workgroup, or vice versa). Doing so deletes encryption keys from Chrome's "...
1 vote
0 answers
11 views

Installing a brew cask didn't require password, but uninstalling it does? [migrated]

I meant to install iStats but accidentally installed a different program that goes by a similar name. Naturally, I tried to uninstall program, but when I run brew uninstall --cask istat-menus ==> ...
  • 1,240
0 votes
1 answer
23 views

Reason ports are toggling between no-response and host unrechable for the SAME machine, why?

I'm trying to learn pentesting and one thing that triggers me for my workshop is : I have an ip address where all reason's ports are no-response, the status for all ports are filtered but when I re-do ...
  • 101
1 vote
2 answers
71 views

Can this scheme be circumvented?

I am currently developing software, in which players essentially make a "bet". While not exactly congruent to my situation, I will use the example of a randomly shuffled 52 card deck, in ...
1 vote
1 answer
53 views

Keeping customer secrets safe from sysadmins and devs in Kubernetes

I've spent a few weeks on GCP and GKE (Kubernetes) trying to figure out how to store customer secrets. The secrets are used by some application even when the user is not logged on so I want to ensure ...
0 votes
0 answers
19 views

How exactly are hidraw 'Billboard' devices interrogated?

I have some USBHub ( Ethernet + HDMI + USB + VGA). When it doesn't have anything connected it exposes to Linux operating system device: 'hiddev0, hidraw1' in opposite to HID mouse: which is visible as ...
  • 39
0 votes
2 answers
105 views

Protection against user session attacks (hijack, replay, tampering, CSRF, XSS...)

We develop a website in JAMStack, all URLs are static HTML page, and each interaction with the server are made by a fetch call on our REST API (micro-services). When a user sign in, we want to ...
  • 157
0 votes
1 answer
47 views

what does it mean if StackOverflow received OAUTH to access my github account through the github api?

I did not personally authorize StackOverflow to access my personal github account through github api, so what could this possibly mean?
0 votes
0 answers
14 views

Is it possible to detect from where data was copied to my USB? [duplicate]

Someone had copied someone's private data onto my USB. Is it possible to detect from where or which system copied data to my USB?
3 votes
1 answer
302 views

OIDC ID Token nonce as "poor mans digital signature"

In absence of better solutions, is the nonce is an OpenID Connect ID Token usable to serve as digital signature. The process would be as follows: A hash is created from the to-be-signed document/...
1 vote
0 answers
20 views

force XSS after bypassing Request.Form using URL Encoding

I am testing a cross-site scripting attack on a website, as we all know the Request.Form function validates the input so the user couldn't insert a <script> inside the input. My focus in this ...
  • 11
-2 votes
0 answers
22 views

Can you copy card numbers From online and clone them [duplicate]

Can you use online card numbers and clone them Onto cards
2 votes
3 answers
205 views

Accidently opened a phishing email .docx attachment on my iPhone, should I worry?

Two days ago, I received an email saying as object "March rent" in French. It says time to pay my rent for the month of March, and got the email March 1st... I thought this was my landlord ...
  • 181
2 votes
1 answer
61 views

ARP spoofing in Ubuntu does not work

I set up a home network using a switch and 3 computers, all having the newest Ubuntu. I want to perform an arpspoofing along with MITM such that the attacker can see messages sent between client and ...
0 votes
0 answers
27 views

How Can A Timestamp Be Redone Without Invalidating the Signature?

RFC 3161 - 4.3 states that: Thus, any token signed by the TSA SHOULD be time-stamped again (if authentic copies of old CRLs are available) or notarized (if they aren't) at a later date to renew the ...
  • 1
0 votes
0 answers
10 views

Deleting a binary from the bin folder that attempts to open at startup in Mac Ventura 13.2.1 [migrated]

There is a binary named 'Open' that resides in my usr/bin folder that I cannot delete. I have tried sudo rm open and even tried sudo su and then rm open and I cannot override the permissions. I have ...
14 votes
4 answers
6k views

Why do many companies reject expired SSL certificates as bugs in bug bounties?

I noticed that, while browsing through many bug bounty and vulnerability disclosure programs, they don't accept issues that are related to TLS/SSL, which includes expired security certificates. Why ...
0 votes
1 answer
49 views

security audit for gitlab instance

I recently joined a start up company that specializes in software development as a cybersecurity risk management for an internship of 6 months, my first task was to audit the company's gitlab page ...
0 votes
1 answer
38 views

How to handle private keys in a messenger app with asymmetric encryption?

I am trying to write a web application with chat system which stores chat messages in a mongoDB database on server side. I generate a private and public key on server side and encrypt the messages ...
0 votes
0 answers
24 views

OpenSSL get PKCS#8 encrypted rsa PBKDF2 iteration count

I have a PCKS#8 RSA Key encrypted with a passphrase and would like to retrieve the iteration count used for the PBKDF2 used to derive the AES Key used for encryption, in order to make sure that they ...
1 vote
0 answers
28 views

Monitoring QKD system with EDR Wazuh

I’m trying to do my thesis project about the possibility to prevent attacks against QKD devices, using an EDR like Wazuh. The problem is that most attacks are prevented through physical methods ...
4 votes
1 answer
184 views

How to find the process that is running PowerShell commands that appear in Windows Defender

On one of our Windows Datacenter 2016, there's an alert that a trojan is trying to install : The following PowerShell commands are trying to execute at seemingly random hours of the day (always ...
  • 139
1 vote
1 answer
37 views

nmap: no exact OS matches when adding the exact signature to nmap-os-db

I'm currently trying to learn Nmap -O (OS guess feature). I'm launching the following command: nmap -O 172.17.0.3 This command is generating the following fingerprint as output: No exact OS ...
  • 11
0 votes
2 answers
68 views

Is git sparse-checkout secure?

I'm a software developer and our entire code of the project is stored in a single git repository. A small part of this now needs to be made available to a customer. He does not need to push to the ...
  • 103
0 votes
1 answer
53 views

Does core isolation protect me against malware?

Does Windows 11 core isolation protect me against malware or does it have nothing to do with it? For example, an unsophisticated hacker with metasploit, nmap, msvenom or tools like that could create ...
0 votes
1 answer
43 views

Successful UEFI secure boot exploitation

Are there any real examples (malware, rootkits, etc.) of exploiting the UEFI secure boot mechanism vulnerabilities such as CVE-2022-21894?
0 votes
0 answers
36 views

FIDO2 security keys - what attack vectors/weaknesses exist for "bad" keys

What attack vectors exist for "bad" FIDO USB keys? What would the weaknesses of a "bad" key be? How could they be compromised? This came to mind as I was looking at "make ...
1 vote
2 answers
51 views

Valid SQL Injection Syntax where same vulnerable parameter used in both a SELECT and a UPDATE statement

I have a problem and I'm hoping someone could help with a POC. In a web application, attacker controlled parameter X is used is used unsanitized in two separate SQL queries within the same function. ...
0 votes
1 answer
56 views

How to Store Signed Source Code + Encrypted HASH +Code Signing Cert

I have been tasked with designing a solution for signing source code. I have not found much on whether or not there is a standard for storing the signed code and it's hash and code signing cert. As I ...
0 votes
3 answers
62 views

office 365 security

MS is forcing companies to their hosted office/exchange product. I really have not seen any deep discussion or article discussing why I should trust MS to keep my emails secure. I have zero doubt that ...
  • 431
0 votes
0 answers
9 views

Microsoft exchange server data breach relevance to IND-CPA, IND-CCA1, IND-CCA2

I was studying about the Microsoft exchange server data breach attack of 2021 as part of assignment case study. One of the tasks of the assignment it to find its relevance with IND-CPA, IND-CCA1, IND-...

15 30 50 per page
1
3 4
5
6 7
1345