All Questions

I have set up a server running Linux Kernel 4.4. How can I exploit this, preferably not a DoS attack? I have opened port 80(https), however I would rather do it in an elegant fashion so I can actually ...

So in a CSP like the below: content-security-policy: upgrade-insecure-requests; frame-ancestors 'self' https://stackexchange.com Should the url part be quoted like this (example from mozilla ...

I have a test domain with one domain controller. On it I have imported the root and issuing CA certificates to the appropriate certificate stores for the entire computer and have done that for every ...

Is SmartCard-HSM 4K USB token good enough for a WebTrust category CA's ROOT KEY storage or is a FIPS 140-2 level 3 certified device required? Are there any FIPS 140-2 level 3 certified USB token with ...

Windows Defender often takes up a significant amount of CPU time due to I/O operations in WSL. For example, if I'm working on web development and using tools like npm or yarn, downloading packages ...

I have been astonished first, when I've found that Putty just stores cleartext credentials in Windows Regedit: HKEY_CURRENT_USER\Software\SimonTatham\PuTTY\Sessions\ How or why is Putty so much ...

I would like to create an user apart from Admin user, who should have access to update password as well as create another user in openldap. I tried configuring the user with the following ldif file. ...

I've created a simple scenario with ssh session hijacking. There is single session open from host A to host B and I can create another connection inside of established connection. I'm wondering how to ...

May be it 's not a question for information security stack exchange and if it's true excuse me for my mistake. I want to understand how this code works: char *s = "1"; char *s_2 = "2"; unsigned ...

I know that the EPC consists of Mobile management entity which is the control plane element allowing user plane traffic to bypass over a direct tunnel I searched online but couldn't understand....

Social media apps like snapchat, instagram, viber.. Etc notify you if you someone takes a screenshot of your profile, chat, conversation, story.. Etc. How can the app findout that you are taking a ...

I noticed that android pops automatically for new updates and patches; are these updates signed so that the device knows it's from the official publisher and not from some server spoofer?

I have difficulties to find the precise flow of SSL handshake and how are the certificates used. Here is my understanding of the thing (it includes a bit of guess part from my cryptography knowledge): ...

I'm setting up a service which allows a single 3rd party to access a file over HTTPS. The only security mechanism the 3rd party supports is Basic Authentication. To reduce complexity, I was going to ...

This question is not about the trivial usage of the forward/reverse DNS. Getting the IP of a hostname is trivial (DNS), and using reverse DNS, also we can get (typically) a single hostname of an IP. ...

I recently watched a video about OSINT and learnt it can be quite a powerful agent. I've been on the internet for years, and at this point I'm not sure what I've posted and where. Given this is now ...

Delivered to:_____ Received: by 2002:a92:3f14:0:0:0:0:0 with SMTP id m20csp1827738ila; Wed, 9 Oct 2019 23:35:30 -0700 (PDT) X-Received: by 2002:a05:6602:21d2:: with SMTP id c18mr1639776ioc.255....

While testing a dummy app, I noticed that the XSS done through POST parameters was getting stored in the form (the alert('XSS') would show every time I loaded the page where I had injected the payload)...

Good evening. I have a password protected zip archive (Zip 2.0 CryptoZip) with a .txt file with sensitive info inside. The problem is that I can't extract it. 7Zip:"Data error : Wrong password?" ...

Today i have uploaded a photo of mine with my friend and tag some random Facebook users of my friend list and after some time when i again open that post Facebook is suggesting me to tag my friend who ...

I have a server and it is generating a significant outgoing traffic to specific destinations. I checked data traffic with vnstats. The output is: $ vnstat --days eth0 / daily day ...

I'm not trained in Linux, but I think I found the solution to my problem documented, but it is not working as expected. I am NOT an iptables guru, I'm learning as I go. A Russian IP is trying to ...

I came across a website called Bruce Schneier Facts, a parody along the lines of Chuck Norris facts, and saw the following fact: Schneier knows if Reiser did it. What does it mean?

If it is confirmed that Alice is the source of a message (authentication), then shouldn't she be unable to deny that the message is from her (non-repudiation)? Is there an example where ...

Knowing that some pypi packages have a history of being malicious, like libpeshnx, libpesh, and libari. Is there some website/service that labels packages as secure or not? for example: node's npm ...

I wanted to clone my garage door remote to learn more about IoT security in particular so I read a lot about rolling codes, and the more I read the more I am convinced there is no way to actually ...

I was able to find the Teardrop Attack. However, there is another one but I couldn't explain it. It keeps getting the warning: Source MAC must not be a group address. Is this some sort of ARP spoofing ...

I am really at a loss trying to understand why a Metasploit Windows payload is indeed reached (see snapshot from Immunity below), executed (at least partially), but doesn't pop a calc.exe at all. The ...

I am searching for the most security problem that affects PGP(Pretty Good Privacy) to analysis it as a research project in IT security subject, and I want some help to know which is that problem and ...

Details: my USB stick got infected and probably my computer too. I suspect that the person I asked to transfer the file did it intentionally. But the problem is I don't know what is their intention. ...

Would a HAIFA-construction based hash function like Argon2 be vulnerable to length-extension attacks? (I say that Argon2 is HAIFA-based because BLAKE is, and Argon2 is based off of BLAKE)

I just wanted to know if its possible... If i have an image i.e abc.jpeg and i rename it to an XSS vector such as <img src=x onerror=alert(1)>.jpeg will it successfully produce the XSS or is ...

Say I want to exchange a secret with someone, but I only get to send one message to the other person, and then we encrypt with that secret. Diffie-Hellman and ECDH require multiple messages to be sent ...

According to Wikipedia: A rainbow table is ineffective against one-way hashes that include large salts. For example, consider a password hash that is generated using the following function (where "|...

I have been trying to run a raw piece of shellcode collected on the net within a C wrapper to try it but it never works... I know the shellcode below is all right because it does work in the context ...

Here is the story. There is a private company, that has some software product that is used by thousands of its customers. After spending few sleepless nights on reverse engineering that product, I ...

One of OWASP recomendations is to set the header X-Frame-Options to allow our pages to be loaded in Iframes only by sameorigin. One reason is because of phishing attacks, ok I understand. But if I ...

I'm writing a libre program named "silently" for enhancing error handling in Bash, emulating the behavior of a jidoka. My question is if that eval would be vulnerable to code injection if the ...

I am concerned with DNS hijacking when connected to a DNS server with an IPv6 address. Is there a website that tests what IPv6 DNS server I'm using? By "IPv6 DNS server" I do not mean IPv4 DNS ...

The scope is server-side session management with session payloads being sent to the client in a cookie. I'm researching session management for web applications. I've been looking at a couple places, ...

Keybase's decryption page says "you must host your private key in Keybase's encrypted key store." This really rubs me the wrong way. I was under the impression that your private key should not leave ...

It's possible the external hard drives have been compromised in the company I work for. It would be a huge waste of money to replace them all without detection and if the current ones are compromised, ...

Yo listen up here's the story about a little guy who's internet uplink is mostly compromised, same with the rest of the family including smarthpones, routers ... And all day and all night he is ...

Ok, so we do not store any cardholder data so I get confused by these questions. "Is all access to any database containing cardholder data (including access by applications, administrators, and all ...

Yesterday my wife receive some emails from Sony confirming her purchases on Playstation Network. The only problem is: she was with my side watching Netflix on the smart Tv. The purchased items is a ...

It may seem like a very general question but I couldn't find any detailed debates over it. This is a purely theoretical question as of 2019. Suppose we are to create our own product and safety design ...

As anyone can see network data using browser developer tool, can someone get access to my cookies or API keys by just turning on the developer tool in Chrome or Firefox? For example, imagine a ...

I am considering the following design for application with client-side encryption Let' say we have web application that manages/stores sensitive business data of users, and we do not want to know ...

I would like to emit a custom UID over the NFC chip of my (rooted) Android phone. How can I achieve this ?

I want to protect my NFC tag against unauthorized copying. I understand that EMV is using asymetric cryptography. My focus is on understanding of other standards (NTAG413, MIFARE DESFire) or anything ...