All Questions

Filter by
Sorted by
Tagged with
0
votes
0answers
10 views

Remotely exploit Linux kernel with CVE-2017-18017?

I have set up a server running Linux Kernel 4.4. How can I exploit this, preferably not a DoS attack? I have opened port 80(https), however I would rather do it in an elegant fashion so I can actually ...
0
votes
0answers
7 views

In a content security policy header: Should the url's be quoted or not, and is there any security implication to this decision?

So in a CSP like the below: content-security-policy: upgrade-insecure-requests; frame-ancestors 'self' https://stackexchange.com Should the url part be quoted like this (example from mozilla ...
0
votes
0answers
8 views

Active Directory LDAPS not working

I have a test domain with one domain controller. On it I have imported the root and issuing CA certificates to the appropriate certificate stores for the entire computer and have done that for every ...
0
votes
0answers
7 views

Is SmartCard-HSM 4K good enough for WebTrust level Certificate Authority ROOT KEY storage?

Is SmartCard-HSM 4K USB token good enough for a WebTrust category CA's ROOT KEY storage or is a FIPS 140-2 level 3 certified device required? Are there any FIPS 140-2 level 3 certified USB token with ...
0
votes
0answers
9 views

How unwise is it to exclude WSL from Windows Defender?

Windows Defender often takes up a significant amount of CPU time due to I/O operations in WSL. For example, if I'm working on web development and using tools like npm or yarn, downloading packages ...
3
votes
1answer
63 views

PUTTY - Most insecure SSH client?

I have been astonished first, when I've found that Putty just stores cleartext credentials in Windows Regedit: HKEY_CURRENT_USER\Software\SimonTatham\PuTTY\Sessions\ How or why is Putty so much ...
1
vote
0answers
14 views

How to grant to an openldap user only a specific privilege?

I would like to create an user apart from Admin user, who should have access to update password as well as create another user in openldap. I tried configuring the user with the following ldif file. ...
0
votes
1answer
39 views

ssh session hijacking

I've created a simple scenario with ssh session hijacking. There is single session open from host A to host B and I can create another connection inside of established connection. I'm wondering how to ...
0
votes
2answers
28 views

multiple call of gcry_md_write function

May be it 's not a question for information security stack exchange and if it's true excuse me for my mistake. I want to understand how this code works: char *s = "1"; char *s_2 = "2"; unsigned ...
0
votes
0answers
23 views

Evolved Packet Core elements

I know that the EPC consists of Mobile management entity which is the control plane element allowing user plane traffic to bypass over a direct tunnel I searched online but couldn't understand....
1
vote
1answer
496 views

How do social media apps notify you when someone else takes a screenshot of your profile?

Social media apps like snapchat, instagram, viber.. Etc notify you if you someone takes a screenshot of your profile, chat, conversation, story.. Etc. How can the app findout that you are taking a ...
-1
votes
0answers
12 views

Are android version updates signed with google's private key or other signing techniques? [migrated]

I noticed that android pops automatically for new updates and patches; are these updates signed so that the device knows it's from the official publisher and not from some server spoofer?
-1
votes
0answers
21 views

How does exactly work SSL handshake [duplicate]

I have difficulties to find the precise flow of SSL handshake and how are the certificates used. Here is my understanding of the thing (it includes a bit of guess part from my cryptography knowledge): ...
0
votes
0answers
38 views

HTTP Basic Authentication vs. obscure filename

I'm setting up a service which allows a single 3rd party to access a file over HTTPS. The only security mechanism the 3rd party supports is Basic Authentication. To reduce complexity, I was going to ...
1
vote
1answer
44 views

Does a searchable public database exist of (hostname; ip) mappings?

This question is not about the trivial usage of the forward/reverse DNS. Getting the IP of a hostname is trivial (DNS), and using reverse DNS, also we can get (typically) a single hostname of an IP. ...
9
votes
1answer
632 views

Protecting yourself against OSINT?

I recently watched a video about OSINT and learnt it can be quite a powerful agent. I've been on the internet for years, and at this point I'm not sure what I've posted and where. Given this is now ...
-3
votes
0answers
32 views

How can I trace the origin of the email sent to my gmail account? [on hold]

Delivered to:_____ Received: by 2002:a92:3f14:0:0:0:0:0 with SMTP id m20csp1827738ila; Wed, 9 Oct 2019 23:35:30 -0700 (PDT) X-Received: by 2002:a05:6602:21d2:: with SMTP id c18mr1639776ioc.255....
0
votes
1answer
25 views

can you have reflective xss through a POST parameter?

While testing a dummy app, I noticed that the XSS done through POST parameters was getting stored in the form (the alert('XSS') would show every time I loaded the page where I had injected the payload)...
0
votes
1answer
45 views

Recover corrupted password protected Zip

Good evening. I have a password protected zip archive (Zip 2.0 CryptoZip) with a .txt file with sensitive info inside. The problem is that I can't extract it. 7Zip:"Data error : Wrong password?" ...
1
vote
1answer
67 views

Does Facebook Scans The Photos Which i have uploaded

Today i have uploaded a photo of mine with my friend and tag some random Facebook users of my friend list and after some time when i again open that post Facebook is suggesting me to tag my friend who ...
-1
votes
0answers
53 views

I think my server has been compromised

I have a server and it is generating a significant outgoing traffic to specific destinations. I checked data traffic with vnstats. The output is: $ vnstat --days eth0 / daily day ...
0
votes
1answer
26 views

How to block all inbound traffic from a specific Internet address or subnet using TomatoUSB router software (LINUX based)

I'm not trained in Linux, but I think I found the solution to my problem documented, but it is not working as expected. I am NOT an iptables guru, I'm learning as I go. A Russian IP is trying to ...
2
votes
1answer
96 views

What does this Bruce Schneier fact mean?

I came across a website called Bruce Schneier Facts, a parody along the lines of Chuck Norris facts, and saw the following fact: Schneier knows if Reiser did it. What does it mean?
2
votes
3answers
58 views

Doesn't Authentication logically imply Non-repudiation?

If it is confirmed that Alice is the source of a message (authentication), then shouldn't she be unable to deny that the message is from her (non-repudiation)? Is there an example where ...
1
vote
1answer
56 views

Is there a service that checks PYPI packages?

Knowing that some pypi packages have a history of being malicious, like libpeshnx, libpesh, and libari. Is there some website/service that labels packages as secure or not? for example: node's npm ...
5
votes
0answers
64 views

How do RF remote clones manage to clone rolling codes?

I wanted to clone my garage door remote to learn more about IoT security in particular so I read a lot about rolling codes, and the more I read the more I am convinced there is no way to actually ...
1
vote
1answer
69 views

What kind of attack?

I was able to find the Teardrop Attack. However, there is another one but I couldn't explain it. It keeps getting the warning: Source MAC must not be a group address. Is this some sort of ARP spoofing ...
-1
votes
0answers
39 views

Shellcode is jumped to and executed but runs into error

I am really at a loss trying to understand why a Metasploit Windows payload is indeed reached (see snapshot from Immunity below), executed (at least partially), but doesn't pop a calc.exe at all. The ...
0
votes
0answers
43 views

Looking for a PGP security problem to study in a research project

I am searching for the most security problem that affects PGP(Pretty Good Privacy) to analysis it as a research project in IT security subject, and I want some help to know which is that problem and ...
0
votes
0answers
51 views

Is it possible to differentiate generic and targeted infection?

Details: my USB stick got infected and probably my computer too. I suspect that the person I asked to transfer the file did it intentionally. But the problem is I don't know what is their intention. ...
0
votes
0answers
25 views

Are HAIFA-construction based hash functions (e.g. Argon2) resistant to length-extension attacks?

Would a HAIFA-construction based hash function like Argon2 be vulnerable to length-extension attacks? (I say that Argon2 is HAIFA-based because BLAKE is, and Argon2 is based off of BLAKE)
4
votes
1answer
39 views

Is it possible to get XSS through uploading an image via the filename?

I just wanted to know if its possible... If i have an image i.e abc.jpeg and i rename it to an XSS vector such as <img src=x onerror=alert(1)>.jpeg will it successfully produce the XSS or is ...
0
votes
1answer
32 views

Is there a key exchange protocol that requires only one message?

Say I want to exchange a secret with someone, but I only get to send one message to the other person, and then we encrypt with that secret. Diffie-Hellman and ECDH require multiple messages to be sent ...
0
votes
1answer
43 views

How should we apply the salt to the password?

According to Wikipedia: A rainbow table is ineffective against one-way hashes that include large salts. For example, consider a password hash that is generated using the following function (where "|...
0
votes
0answers
31 views

Windows shellcode not working in C

I have been trying to run a raw piece of shellcode collected on the net within a C wrapper to try it but it never works... I know the shellcode below is all right because it does work in the context ...
0
votes
2answers
121 views

How do I sell critical vulnerability info to private company?

Here is the story. There is a private company, that has some software product that is used by thousands of its customers. After spending few sleepless nights on reverse engineering that product, I ...
2
votes
1answer
39 views

Why we should not allow our pages to be loaded through Iframe by unknown hosts?

One of OWASP recomendations is to set the header X-Frame-Options to allow our pages to be loaded in Iframes only by sameorigin. One reason is because of phishing attacks, ok I understand. But if I ...
0
votes
2answers
59 views

Is this Bash code vulnerable to code injection?

I'm writing a libre program named "silently" for enhancing error handling in Bash, emulating the behavior of a jidoka. My question is if that eval would be vulnerable to code injection if the ...
0
votes
2answers
97 views

Websites that test what IPv6 DNS server I'm using? [on hold]

I am concerned with DNS hijacking when connected to a DNS server with an IPv6 address. Is there a website that tests what IPv6 DNS server I'm using? By "IPv6 DNS server" I do not mean IPv4 DNS ...
1
vote
1answer
41 views

Is an index, nonce and HMAC good enough for session management?

The scope is server-side session management with session payloads being sent to the client in a cookie. I'm researching session management for web applications. I've been looking at a couple places, ...
3
votes
1answer
49 views

Is there a secure way to host private PGP keys (is keybase's method secure?)

Keybase's decryption page says "you must host your private key in Keybase's encrypted key store." This really rubs me the wrong way. I was under the impression that your private key should not leave ...
0
votes
1answer
65 views

External hard drive

It's possible the external hard drives have been compromised in the company I work for. It would be a huge waste of money to replace them all without detection and if the current ones are compromised, ...
-2
votes
0answers
39 views

Using VOIP encryption when all endpoints are compromised

Yo listen up here's the story about a little guy who's internet uplink is mostly compromised, same with the rest of the family including smarthpones, routers ... And all day and all night he is ...
0
votes
1answer
34 views

Account Security Cardholder data

Ok, so we do not store any cardholder data so I get confused by these questions. "Is all access to any database containing cardholder data (including access by applications, administrators, and all ...
0
votes
0answers
42 views

Sony Access Log (Playstation Network) does not exists

Yesterday my wife receive some emails from Sony confirming her purchases on Playstation Network. The only problem is: she was with my side watching Netflix on the smart Tv. The purchased items is a ...
0
votes
2answers
116 views

is no system really safe? [on hold]

It may seem like a very general question but I couldn't find any detailed debates over it. This is a purely theoretical question as of 2019. Suppose we are to create our own product and safety design ...
0
votes
1answer
105 views

Can someone can hack my Facebook if i give someone my browser for a while?

As anyone can see network data using browser developer tool, can someone get access to my cookies or API keys by just turning on the developer tool in Chrome or Firefox? For example, imagine a ...
0
votes
0answers
27 views

encrypt/decrypt arbitrary data provided in custom attribute by IdP in SSO scenario

I am considering the following design for application with client-side encryption Let' say we have web application that manages/stores sensitive business data of users, and we do not want to know ...
0
votes
0answers
2 views

Force Android to emit a UID over NFC [migrated]

I would like to emit a custom UID over the NFC chip of my (rooted) Android phone. How can I achieve this ?
0
votes
0answers
49 views

Which NFC standard prevents NFC tags from unauthorized copying?

I want to protect my NFC tag against unauthorized copying. I understand that EMV is using asymetric cryptography. My focus is on understanding of other standards (NTAG413, MIFARE DESFire) or anything ...

15 30 50 per page