All Questions
65,342
questions
0
votes
0
answers
3
views
Why does HIBP use k-anonymity when checking passwords?
Maybe I'm misunderstanding the purpose of k-anonymity, but I don't see the why HIBP uses it when checking user passwords.
This website, which explains HIBP's implementation of it, says, "The ...
- 1
0
votes
0
answers
3
views
OpenId Connect and proper usage of nonce
I understand that a nonce is used to prevent replay attacks. I have been going through documentations, specs, posts and blog posts and I am a little confused.
Consider the following attack scenario.
...
- 43
0
votes
0
answers
5
views
Storing strings in a Database that are only visible to their owner who stored them when they were logged in
In my application, logged-in users create some strings, and those strings are stored in the Postgres database.
But, because they are in plaintext, their values are visible to me, as I have access to ...
- 101
0
votes
2
answers
15
views
When renewing a TLS certificate (no change to CSR nor private key), will the modulus remain the same?
Here is the scenario, just wanted confirmation that I am understanding it correctly.
I have a TLS certificate that will expire soon;
Upon renewal, I paid the CA, and they reissued me with a new public ...
- 295
1
vote
0
answers
20
views
Protection against JPEG compression bombs
There is a well-known threat named compression bombs. Such image formats as PNG and JPEG use compression methods, and therefore and threory PNG/JPEG images might be a comperssion-bomb.
I've found an ...
- 23
1
vote
1
answer
42
views
Databases for compromised passwords that browsers use
I am looking into databases of compromised passwords in order to ensure that passwords on a system I am responsible for are not already compromised.
To have complete peace of mind, I prefer to get ...
- 331
0
votes
0
answers
6
views
AES CBC: When to use new IV [migrated]
I am trying to figure out when to use a new IV for an AES-CBC communication and whether my approach is safe.
Here is a quote from Thomas Pornin from a similar question:
So, to sum up: you must choose ...
- 151
-1
votes
0
answers
9
views
Is it possible to enforce CSS1 in browsers? [migrated]
I was recently surprised to learn that CSS2+ is Turing complete, and hence it is potentially dangerous, from the information security standpoint, to open websites containing CSS. That being said, if a ...
- 99
4
votes
2
answers
490
views
Redirect to login page if authorization required -- security flaw?
Suppose we have a site that has public and private areas. The private areas require login.
For example "www.site.com/about" is publicly accessible. But "www.site.com/message_inbox"...
- 111
1
vote
1
answer
40
views
What are the security concerns of embedding Base64-encoded images into an HTML document?
We are developing an MVC web-application in Django and having concerns about image uploading.
First of all, here are our business requirements:
Our users can upload images (like profile pictures, etc)...
- 23
0
votes
0
answers
10
views
Is there a service for storing sensitive user identity documents? [closed]
A new client wants to conduct KYC checks on users on a basic level, meaning they will need to submit their ID card (Hong Kong) and proof of address. The client will simply check the documents manually ...
- 101
0
votes
0
answers
13
views
TLS Interception basics [closed]
I am trying to perform TLS interception in which I was given 2 containers: Host01 and Attacker with a br-intercept bridge. So every HTTP/HTTPS request from Host01 to the Internet passes through the ...
0
votes
1
answer
20
views
Modifying request responses leading to unauthorized access?
I have been developing some applications lately where the content on the web app is rendered based on the request's response. For example, a user with a "free" plan has limited access, ...
- 101
0
votes
1
answer
38
views
I suspect someone entered my server via SSH after I created a pem file for the SSH access key. What I can learned about it?
I created an id_rsa key in my server with ssh-keygen -b 4096 without a passphrase. I added my id_rsa.pub into .ssh/authorized_keys and downloaded my private id_rsa key into local PC and changed it ...
- 101
0
votes
2
answers
24
views
File Upload(what type of file)
While I was learning about file upload vulnerability one question come to my mind. What type of file do I use while hunting file upload vulnerability ? Do I need to detect which programming language ...
- 1
0
votes
0
answers
11
views
XSS Onerror alt param [closed]
I'm doing bug bounty and have found a place where there may be some XSS but the IMG is always given an alt tag whenever I try (as a defense), any bypasses?
0
votes
1
answer
21
views
Docker, running programs as Root and AWS
It is well known that running programs inside your docker container as root is bad practice. As far as I can tell, the reason for this is because root on the container is rather similar to root on the ...
- 101
0
votes
0
answers
9
views
Programmatically Scrape iPhone Messages For Spam With Python/Ruby [closed]
I would like to start an intelligence Data Base for the spam messages & calls that I receive on my iPhone with the primary goal of figuring out 1) What they want and 2) How they got my contact ...
- 205
0
votes
1
answer
35
views
Is this 36 character long string a hash [closed]
I found this string
b2335332-d28f-449b-8d00-80a550b43046
Do you think it´s a hash?
If yes any idea which one and if not any other ideas what it could be?
0
votes
1
answer
18
views
Is a VPN effective when connected to WiFi network that requires authentication?
I pay monthly for a VPN. However, I browse online while connected to my university WiFi which requires authentication to use. The WiFi is open (no password directly) but when someone connects to it a ...
1
vote
1
answer
22
views
To what attacks is using the value of the HOST header to craft self-referential URLs vulnerable?
From official ASP.NET Core docs, namely Routing in ASP.NET Core § URL generation concepts:
Use GetUri* extension methods with caution in an app configuration that doesn't validate the Host header of ...
- 5,587
0
votes
0
answers
6
views
Chain apache web server acting like reverse proxys using proxychains
I've configure multiple apache web servers so they filter the request and if they have a specific request_uri the request would be redirect to a c2 server.
I do that with the next line in the apache ...
- 5
0
votes
0
answers
11
views
ProxyPassMatch redirect to the same request uri
I am doing a reverse proxy with apache to redirect https traffic filtering by the uri request.
Right now I have the next
ProxyPassMatch "^/thisisthepath$" "https:192.168.1.40/...
- 5
0
votes
0
answers
25
views
Is SSL necessary when sending password to a API from a server?
I have bought a online service which allows me to send SMS messages by making a call to the provider's SOAP-API.
This is the WSDL I need to send a message:
<?xml version="1.0"?>
<...
- 2,740
0
votes
0
answers
18
views
Mobile Application Security
Do we need to carry out separate pentest for apps that are written in language that supports multi platform compilation like fultter? How much value it will bring since backend and major chunk of code ...
- 21
0
votes
0
answers
21
views
TCP Reset attack: unable to break the TCP connection [closed]
I am trying to create a TCP Reset Attack on 3 docker containers: Attacker, Host01, Host02.
My goal is to attack the TCP connection between Host01 and Host02 and the end result would be the TCP ...
0
votes
0
answers
19
views
What are vulnerabilities of saving user input directly in wordpress plugin?
I have a WordPress plugin that helps create an organization chart/tree and then generates a URL where the chart is available to be viewed by the public.
The plugin dashboard looks like this
the plugin ...
0
votes
1
answer
28
views
How to mitigate risk of exploiting open POST endpoints?
I'd like to ask for advice reg. protecting the state-altering HTTP API endpoints of the API that I'm owning (POST etc.).
I'm owning a web application that exposes some HTTP endpoints to the world. ...
- 1
0
votes
2
answers
42
views
What are the vulnerabilities of exposing url end point param?
I have a wordpress plugin that helps create an organization chart/tree and then generates a URL where the chart is available to be viewed by the public?
Inside the plugin's view in WordPress dashboard....
3
votes
1
answer
67
views
Possible to avoid device fingerprinting with imagemagick?
If I took a picture with my mobile phone and wanted to publish that photo without any artefacts connect to me, the first thing I would do is strip all of the image metadata with 'exiftool':
exiftool -...
- 181
1
vote
0
answers
25
views
Unlocking a Windows computer through the CMD prompt [closed]
Let's say I had an "NT AUTHORITY\SYSTEM" command shell on my locked Windows computer (at the login prompt) and I would like to get log in as user X (as if I logged in normally with their ...
- 11
0
votes
0
answers
19
views
File can upland bug works on my localhost but it's not working on the server [closed]
I am trying to find bugs in a source code in php and I found this
<?php
$Key=$_POST["key"];
$FileName=$_POST["filename"];
$FileData=$_POST["filedata"];
$Key=...
- 23
0
votes
0
answers
23
views
Image uploading in a web-application [closed]
We are developing an MVC web-application in Django and having concerns about image uploading. We've done some research on this topic and came up with a setup we want to share here for advices and ...
- 23
0
votes
2
answers
116
views
How can I hide my internet usage? [closed]
This can be seen as a rather dubious question but let me explain. I'm a 22 year old still living with my father and his wife (my stepmother).
I've been living here for over a year now and ever since ...
0
votes
2
answers
63
views
How much does the strength of the password depend on the variety of characters?
For example, a password consisting only of lower-case characters [a-z], but a length of 10 (26^10), will always be better than all characters, but a length of 7 (95^7).
That is, how much is it correct ...
- 25
0
votes
0
answers
38
views
Does adding a user to sudo improve security? [duplicate]
I always use the root user for everything, but I've heard several times that I should disable the root login and use a secondary user (with sudo) instead.
If I use my public key to authenticate and ...
0
votes
0
answers
11
views
Nids log files step by step [closed]
Can anyone tell me what is happening here step by step:
# This text file shows a collection of log entries from the NIDS and one of the hosts on the network
# Only relevant entries are shown
#
1. 14:...
0
votes
0
answers
3
views
Monitor keyboard access on the Windows lock screen [migrated]
I don't do this very often, but every time I lock the screen in Windows [Win+L], the keyboard (and sometimes the mouse) stops responding and it goes straight into the password field and it starts ...
- 3
-1
votes
0
answers
39
views
What is the difference between a code and a cipher (Cypher)? [closed]
I have understood from reading in "Hit the expert" in Hebrew Wikipedia that a Cipher is a code which includes a key in the input.
Also:
A code affects the word, and a cipher affects the ...
- 1
1
vote
1
answer
80
views
What is a safe way to display malicious URLs in research PDFs?
Is there a convention or safeguard to show malicious URLs in a paper if they are relevant to the topic?
Some PDF viewers parse the text for URLs, which makes removing the hyperlink alone insufficient. ...
- 13
0
votes
0
answers
14
views
Meterpreter shell re-enter previous/next command
After a Meterpreter session has been established, you can start an interactive shell on the target host using the shell command. In the shell, I'm trying to switch between previously entered commands ...
- 101
1
vote
1
answer
79
views
Military-grade encryption on Blu-ray discs?
Another thread addresses the question of what can count as "military-grade encryption." In this case, I see that CyberLink Power2Go software boasts "advanced military-grade 256-bit ...
- 113
0
votes
0
answers
18
views
Question about video downloader websites and encrypted response [closed]
I am interested in to find out how download video from different social networks websites work. As I understand, we sending post request with video url, after that, on the backend we somehow get this ...
- 1
0
votes
1
answer
35
views
Would storing the users IP address in a session token be more secure?
In a web app, would storing a users IP address in a session be more secure then storing it without it? I think that if I store a JWT in their cookies that includes their IP address for session ...
- 113
0
votes
2
answers
49
views
How does bitlocker work when unlocking a removable drive on another PC using a password?
Here's the scenario:
I have an external harddrive encrypted with bitlocker. I disconnect that drive from the PC that encrypted it, and connect it to a different PC.
Surprisingly, when I do this, all ...
- 113
0
votes
0
answers
13
views
Is there a diagram for start point on the Win 10 browser properties box when sending the CA of the website currently open [closed]
How do I POST the CA certificate of the current website to the right archive of the home server .etc. using a Windows 10 browser.
Include details:
The lock on the browser to open the dropdown list ...
-1
votes
1
answer
46
views
What are symmetric and asymmetric encryption and what would be a good example from daily life? [duplicate]
I understand that to "encrypt" something means to "code" it, to make it understandable for two parties, giver and receiver and generally only for them, but I don't know what it ...
- 5
2
votes
1
answer
89
views
Where to store the password: in RAM or another user's home folder (Linux)
There is user1 and user2. All work is done from under user1. user2 is only created to store important information.
If important information is stored in RAM, but in the session of user1, which is ...
- 25
0
votes
1
answer
37
views
Good checksum algorithm for backup / cloud sync system
I am writing a cloud backup system, and want to use a checksum to know if a file has been modified, and accordingly sync it with the server.
This question shows that xxHash is super fast, and this ...
- 103
0
votes
1
answer
58
views
P-384 vs. SHA384
Forgive my inexperience with encryption, I've been researching this for the better part of the morning and still cannot find a smoking gun answer.
A vendor is requesting that we verify a website we ...
- 1