All Questions

Filter by
Sorted by
Tagged with
0 votes
0 answers
4 views

Akmai WAF protecting against request smuggling

Okay so I've seen lot of articles & spent a pretty long while looking around, couldn't find a straight answer for this. Does Akmai WAF always protect against request smuggling attacks? can a user ...
M0ngi's user avatar
  • 53
0 votes
0 answers
15 views

Why is newer router mac filtering not a secure way to select devices for the home network? [closed]

What is the current Mac filtering for the newest routers? Isn't the IETF responsible for standards and protocol security? Then why is mac filtering not secure? If my router says "allow these ...
AmazingMaz's user avatar
1 vote
2 answers
48 views

Text message containing mp3 [closed]

I got a message saying somebody deposited 1000 on my bank but then they sent an mp3 with the text and a link. I don't know what to do.
Aparlow2's user avatar
3 votes
2 answers
363 views

How to recieve large files guaranteeing authenticity, integrity and sending time

I need to recieve some important documents from another person. It may be important to be able to prove (in justice) which files exactly I recieved from that person at a specific moment. My first ...
alex's user avatar
  • 131
4 votes
1 answer
590 views

What sort of security does Docusign provide?

In the last days I have seen two apparent "breaches" of Docusign's security. Neither are good evidence, but they illustrate the point: Wall Street Millennial's youtube review of Joonko's ...
User65535's user avatar
  • 229
0 votes
0 answers
22 views

Nmap can't scan ip outside my network [closed]

I am new to cyber security and networking and would like to ask, I installed on my virtual machine Kali Linux and in the settings enabled a bridged connection instead of NAT, but when a friend sent me ...
Snaks's user avatar
  • 1
1 vote
1 answer
17 views

Opening PowerShell (PS) session with STs

I am solving Tryhackme> Exploiting Active Directory > Task 3. At very last, how new powershell session is opening with the dumped Service Tickets (STs)? He typed this command... PS> New-...
Aryan's user avatar
  • 61
1 vote
1 answer
24 views

what should be the response of keyupdate if the initial KeyUpdateRequest is set to update_not_requested not update_requested

"The KeyUpdate handshake message is used to indicate that the sender is updating its sending cryptographic keys." "If the request_update field is set to "update_requested", ...
hjhjh's user avatar
  • 41
1 vote
0 answers
21 views

Getting reverse shell as another user

I'm performing Overpass the hash attack @ CompTIA Pentest+ > Attacks and Exploits > Lateral Movement and Pivoting > Task 3 > Let's Get to Work! I dumped Key of my target user: t1_toby.beck ...
Aryan's user avatar
  • 61
1 vote
1 answer
51 views

ARP Spoof: Will it work on public wifi networks as compared to a home network?

I have recently successfully demonstrated a simple ARP spoofing attack on my home network. The setup in my home network, described to the best of my abilities is as follows: Optical network router (...
Jarrett GXZ's user avatar
0 votes
0 answers
15 views

Issue while building BusyBox for ARM (Cross Compilation) [closed]

I am following this guide (https://medium.com/@denisobrezkov/xen-on-arm-and-qemu-1654f24dea75) to run Xen on Qemu and Arm. Here is the command that I am using to build busybox: make O=$BUILD_DIR/...
Mishaal Ahmed's user avatar
0 votes
0 answers
36 views

Would a domain registrar be considered a Service Provider for PCI compliance if it never touches its customer's card holder data?

Hypothetical: Company A accepts credit card payments and must be PCI compliant. Company B provides domain registration (but not DNS or web hosting) services to Company A. Some of these domains are ...
Jordan Rieger's user avatar
1 vote
0 answers
180 views

What's the origin of "A sequence has been discovered that could indicate a hacker attack. Your request can not be processed." error message? [migrated]

I'm working on a website for client that is setup on Joomla. While testing various forms, I noticed the following message on white background after submitting any of them with various data: A ...
Destroy666's user avatar
0 votes
1 answer
44 views

Is the ability to use Machine Owner Keys effectively a bypass of SecureBoot security?

SecureBoot uses a PKI path to verify particular signed bootloader binaries before it runs these binaries. This PKI, as far as I understand, is basically owned by Microsoft, meaning that only Microsoft ...
Jonathan Wilbur's user avatar
0 votes
0 answers
6 views

sshd won't start from xinetd in OpenSSH 9.8p1 [migrated]

We start sshd using xinetd on our gateway. Here is the xinetd config file: service ssh { instances = 10 socket_type = stream wait = no user = root ...
follie2000's user avatar
0 votes
0 answers
30 views

How to enhance protection in my NTP architecture against cyber attacks? [closed]

I built three NTP servers each with chrony, openntpd and NTPsec and one Ubuntu server that monitors NTP traffic: Zeek and Suricata generate logs Logs are sent to syslog. Logstash reads logs from ...
faten-zz's user avatar
1 vote
0 answers
38 views

How to launch XSS code from an INPUT tag?

I have a website with the following code: <input class="Header--search--form-input" name="search" value="&quot; onfocus=&quot;alert(1)&quot; autofocus=&quot;...
Уканис Алексей's user avatar
4 votes
2 answers
194 views

How safe are my app's keys inside the TPM against other apps trying to impersonate mine?

This is a follow-up of these two questions about using the TPM to store application's keys. While both have great answers, there is a specific aspect I am missing: How safe are the keys inside the TPM ...
mist's user avatar
  • 111
3 votes
1 answer
69 views

PCI DSS SAQ A qualification - what counts as a 'found' vulnerability?

This Q pertains to PCI DSS v4.0 SAQ A - previous Q&A only touched on previous versions of PCI. Since 4.0, merchants that accept credit card payment, even if they only iframe or link to their ...
bukwyrm's user avatar
  • 131
4 votes
0 answers
61 views

Can someone with access to the infrastructure of the VPN provider access my or other devices in my local network?

The network of a customer/company/VPN provider is compromised while using VPN Clients, like for example Check Point Endpoint VPN or (Palo Alto Networks) Global Protect and so on. Would it be possible ...
mab's user avatar
  • 41
0 votes
0 answers
26 views

Bypassing strict network access control implemented at the ISP/country level [closed]

If some countries implement strict network access control, allowing access to the Internet (e.g. Google) only to IP addresses on an approved whitelist, is there any way to bypass such network ...
user24958594's user avatar
2 votes
0 answers
59 views

Searchable encryption for phone numbers

I have a table in Postgres that stores phone numbers. Since phone numbers are considered PII, I cannot store them as plaintext. For other PII fields, I use AES-256-CBC. However, the requirements are ...
Stefan van den Akker's user avatar
0 votes
0 answers
30 views

can non-rotatable secrets be stored in ciphertext form in a DB/file/etc.?

We have a service running on AWS. This service uses secrets such as API keys of third party services (in other words: secrets which do not rotate automatically). These secrets are stored in AWS ...
Itay Maman's user avatar
1 vote
0 answers
35 views

How can blockchain P2P network help in bypassing country-level whitelist network blocking? [closed]

I've seen people on the web discussing the issue of network blocking, and they were discussing that if one day a country wanted to whitelist mode (i.e. outbound traffic is blocked by default, and ...
user24958594's user avatar
1 vote
0 answers
11 views

Highly suspicious System.Map (5.14.21-150500.55.68) - Linux compromised? [migrated]

I'm running the 5.14.21-150500.55.68 x86_64 kernel on OpenSuSe Leap 15.5. I have over 20 years of experience with many different distros, but I always come back to OpenSuSe for several reasons. I have ...
new_sec_from_scratch's user avatar
-2 votes
0 answers
40 views

Old Routers are what compared to new ones besides the 6E upgrade [closed]

Why would I need to replace my gig bit router with a new one? What do I gain from the new one when the network has not changed? Mac Filtering is necessary.
AmazingMaz's user avatar
0 votes
1 answer
60 views

Root CA blocked by OS - would apps programmed to trust the root CA be affected?

The situation: Custom Root CA is created by some country. Not trusted by major browsers but trusted by some local ones. Also used by some local sites which direct users to install this root CA. some ...
Tauri's user avatar
  • 109
1 vote
0 answers
10 views

Forcing OpenVPN process to run with a specific group using nmcli [migrated]

I am struggling with this script of mine that should prepare a secure VPN connection with VPN kill switch and I need some help. What I am trying to do (in general): My goal is to set up a very strict ...
PleaseLetThisWork's user avatar
1 vote
0 answers
22 views

Are ECC CSR always different and if yes, why? [closed]

I've noted that SHA256 of CSRs for RSA keys, generated as openssl req -new -config leaf.conf -key rsa.key rsa.csr are always the same, given the same key and configuration. In the same time, every ...
simon's user avatar
  • 181
0 votes
1 answer
102 views

Can we catch signals from a cellphone using AI to interpret the encrypted data?

Would it be possible for someone to steal EM waves from our mobile devices to listen to our conversations or get our OTP? Whatever encryptions they have they are just EM waves. Based on the patterns ...
Newtron Malayalam's user avatar
2 votes
1 answer
64 views

How much should we generally trust security-only support of a legacy version of a software and what should we look out for? [closed]

Many software vendors maintain old versions by providing security-only fixes. Some examples include: Android on Google Pixel Phones. Python. Firefox ESR. My understanding is that people are most ...
xuhdev's user avatar
  • 123
5 votes
3 answers
1k views

What is the next layers of defence against cookie stealing if GET parameter is vulnerable to XSS and there is no HttpOnly flag in a website?

If a GET parameter in a website is vulnerable to XSS and the user input is reflected without any change or escaping or filtering and also HttpOnly is not set for session cookie, is stealing the cookie ...
fed's user avatar
  • 61
0 votes
0 answers
8 views

Kernel 6.8.11-amd64 Headers not being able to install [migrated]

I am not able to install the linux-headers-6.8.11-amd64 kernel even after repeated trying. I tried several methods - apt-get update, apt-get upgrade, apt-get dist-upgrade dkms --configure linux-...
vidyarthi's user avatar
  • 113
0 votes
0 answers
34 views

How to Protect NTP Servers from Cyberattacks? [closed]

I am a beginner in cyber security and they asked me to build a secure architecture for time servers. I have 3 three NTP servers on Ubuntu, each configured with chrony, nptd, NTP (In order to test them ...
faten-zz's user avatar
0 votes
0 answers
19 views

Rcvd Error Response - Attribute Not Found for Heart Rate Measurement [closed]

I’ve been using the Fitbit Charge 6 Fitness Tracker with the Obsidian Silicone Strap and encountered a persistent issue related to heartbeat rate data retrieval. I consistently encounter the error ...
abdul's user avatar
  • 23
6 votes
2 answers
146 views

Use of TPM to encrypt data of my application in practice

I am not very familiar with TPMs, but from what I can tell their main benefit for the user is to make the system as a whole more secure, if you take the appropriate measures, e.g. by checking the boot ...
mist's user avatar
  • 111
1 vote
0 answers
44 views

Ubuntu upgrade changed my home directory permissions - malicious or mistake? [migrated]

My setup I have a private server (Ubuntu 22.04.4) that I use as a test server for my web development code. Every couple of weeks I update it (sudo apt update; sudo apt upgrade -y). I don't usually ...
Dr Phil's user avatar
  • 111
4 votes
0 answers
30 views

PCI-DSS Scope - How to determine client scope segmentation

We are a medium sized organization and use Payment Service Providers for all purchases, including credit card and non-credit card purchases. We get yearly audits and our internal payments platform is ...
jtkline's user avatar
  • 41
1 vote
0 answers
16 views

Windows 10 - Block File Transfer [migrated]

I would like to disable file transfer via Bluetooth while allowing other Bluetooth services to function normally such as mouse, keyboard, audio, etc. The devices are not on a domain and are not ...
Andam's user avatar
  • 111
0 votes
0 answers
7 views

Implementing end to end encryption (react js , laravel) [migrated]

I need to implement end to end encryption between front (reactjs) and back (laravel). What I try to do is encrypt data in front using package cryptojs, send it using axios to backend, in the backend I ...
user26307664's user avatar
1 vote
0 answers
39 views

TPM PCR values change after the first reboot

My setup consists of a QEMU image with u-boot 2024.01 and 6.6 Linux kernel. As a TPM I'm using swtpm. For some reason, if I reboot the device the PCR register values are different in the initial boot ...
Avaruusmuikku's user avatar
2 votes
1 answer
22 views

Is Kerberos Constrained Delegation (KCD) deprecated?

Referred to the official microsoft documentation on KCD where they are using the terms KCD & Resource Based Constrained Delegation (RBCD) almost interchangeably which got me confused. They have ...
Aryan's user avatar
  • 61
1 vote
0 answers
42 views

Where to store Refresh Token in custom Authentication

I am currently trying to build an authentication flow where the front end lives on one domain, say X.com and the backend lives on Y.com. I have implemented a refresh/access token system where when a ...
Kiran Manicka's user avatar
1 vote
0 answers
59 views

Pegasus spyware, computers, and spam [closed]

I just received an email in my spam folder saying I had been infected with Pegasus. After a few searches, it looks like Pegasus is a multi-million dollar toolkit used by Israelis and others to ...
floor cat's user avatar
  • 111
1 vote
2 answers
116 views

How did he find my full real name based on my Steam or FACEIT Profile? [closed]

Yesterday, I was playing a counterstrike game on FACEIT, when all of sudden one of my teammates started bullying me for my bad plays. It was standard trash-talking for a bit, but then all of a sudden, ...
Game Account's user avatar
0 votes
0 answers
46 views

CVSS 3.0 score for reflected XSS vulnerability in GET parameter [closed]

There is a website that allows searching for content (without need for authentication). It uses GET parameter named "query" to search and it is vulnerable to reflected XSS. What is CVSS 3.0 ...
user26317030's user avatar
0 votes
1 answer
60 views

Why are 2 IP addresses mapped to a single MAC address not an evidence of ARP spoofing? (confusion with slide eg)

I am going through the slides at: https://www.slideshare.net/slideshow/packet-sniffing-85873158/85873158 i.e. we have 3 machines: A’s ARP cache shows: B’s IP address is associated with Z’s MAC ...
user2994783's user avatar
1 vote
0 answers
39 views

CVSS Score for brute force attack [closed]

A website is given to pentester. It is observed that the website has a login page at https://example.com/admin. In this login page it is also possible to enumerate from error messages that the user &...
user26317030's user avatar
1 vote
0 answers
21 views

"PUF CRPs authentication requires trust in manufacturer since it's him who performs the storage of CRPs"....?

"PUF CRPs authentication requires trust in manufacturer since it's him who performs the storage of CRPs". So does it mean that we have to trust manufacturer, because he could replace the ...
allexj's user avatar
  • 129
1 vote
1 answer
128 views

Understanding how to correctly migitate CVE-2024-38095

I am trying to understand under which circumstances CVE-2024-38095 applies. When reading the advisory (https://github.com/dotnet/runtime/security/advisories/GHSA-447r-wph3-92pm), one finds the ...
Felix's user avatar
  • 273

15 30 50 per page
1
2 3 4 5
1383