All Questions

Filter by
Sorted by
Tagged with
0 votes
0 answers
2 views

Does Google Authenticator share device information to website?

I wonder about Google Authenticator privacy. I wonder if the app shares any information to the website owner about devices that we use to add a new key. I mean information like IP address and device ...
user avatar
  • 1
1 vote
0 answers
18 views

Why can't I use my phone for Google's Advanced Protection?

I am checking out Google's Advanced Protection program. I have registered in my Google account two security keys: my phone (a Realme 6) and a yubi key. The advanced protection enrollment, asks me to ...
user avatar
  • 163
0 votes
0 answers
16 views

Exam intelligence for CompTIA Security+

I am currently preparing to take the CompTIA Security+ exam. After taking a few sample exams, it seems that passing the exam requires more than just knowing the subject matter – you need to get an ...
user avatar
0 votes
1 answer
22 views

A personal user software solution providing both firewall + vpn features

I am completely new to the site, So please suggest me in comments, if the question to be improved in any way possible. For personal use, What are the good software/solution out there which gives a ...
user avatar
  • 101
0 votes
0 answers
13 views

Modelling authorization on the basis of authentication method

At work we are starting to consider a replacement for an old system. The new system will use the Spring framework. The security model is pretty simple: it is open to the general public. Each one of ...
user avatar
  • 103
0 votes
1 answer
34 views

Does recalculating per-user salt every time a user changes password make any difference?

I have set it up so that when my users change their password, the salt is recomputed. Besides hiding the fact that they may change their password to the same thing (I am checking that by first hashing ...
user avatar
  • 123
0 votes
0 answers
14 views

Is different X-Forwarded-For values per site an indicator for something malicious?

I am using a mobile ISP to access the internet. I noticed something really weird: most sites (e.g. www.whatismyip.com, https://www.iplocation.net/http-browser-header) report my IP as let's say IP A: ...
user avatar
  • 163
0 votes
0 answers
6 views

Nmap -sV command not working

i ran a port scan nmap x.x.x.x -sV i got the following result Host is up (0.040s latency). Not shown: 996 filtered tcp ports (no-response) PORT STATE SERVICE VERSION 80/tcp open http? 443/...
user avatar
  • 1
0 votes
0 answers
17 views

Using a pid in memory to identify the computername and username

I am new to digital forensics, and I'm practising cracking memory dumps. I have a pid with me which is 1764 and i need to extract the username and computer name of the dump file. These are what i used ...
user avatar
0 votes
0 answers
20 views

How to Infer Key from Hash and Password?

I have a hash H1 and a password P1. The hash is MD5. I have another hash H2 without a password. Can I leverage my knowledge of H1 and P1 to get a key? can I use this key to decrypt H2? Are there ...
user avatar
0 votes
0 answers
13 views

How does pretty good privacy works for authentication and confidentiality?

I needed to study about these 2 topics. So I picked up a keyword "pretty good privacy" "authentication" "confidentiality" and searched for books in libgen google books I ...
user avatar
  • 1
0 votes
0 answers
5 views

Input Sanitation injection reflects actual local cookie information inside the actual Input textbox how can this be leveraged to a xss attack?

The injection is inside an element for email address. The injection payload is ";"@site.com. Once submitted local cookie information appears inside the actual input textbox. This is for a ...
user avatar
0 votes
0 answers
7 views

cors error with location

I'm trying to do a proof of concept, everything works fine for me. but after exploiting the cors i want to redirect to another web but when i try to do that it doesn't work anymore. Could you help me ...
user avatar
  • 1
0 votes
0 answers
8 views

How do I force an Android device to enable location (GPS) remotely when searching for it on google.com/android/find?

Let's imagine I lost my Android device and want to find it on google.com/android/find. It's works perfect when my GPS is enabled, but when it isn't, I can see only last location when GPS was turned on....
user avatar
0 votes
1 answer
30 views

Is application layer DoS dangerous?

I host a website on a cheap 5$ IaaS hosting service without a CDN. An actor with a higher bandwidth internet connection could try to overload my webserver with recursively downloading some data with ...
user avatar
0 votes
1 answer
46 views

Is TLS version related to server?

In a recent pentest (java thick client) it was discovered by the pentesters that TLS version 1.3 is not supported. I'm investigating why it is not supported, so I was looking in the java code for ...
user avatar
0 votes
1 answer
43 views

Hashing email addresses using scrypt

I want to hash email addresses so that they are anonymous but still unique in my database. I was thinking of using scrypt for this and creating the salt as a sha256 of some secret stored on the server ...
user avatar
  • 193
0 votes
0 answers
29 views

Is there a generic way to prevent HTTP timing attacks for sensitive requests?

If I have sensitive HTTP routes that could be subject to timing attacks (trying to guess an ID, user, etc.), is there a way without modifying the application code that it could be wrapped with a ...
user avatar
  • 3,372
0 votes
1 answer
25 views

Can the services inside the VPC be authentication less?

We have a micro-services architecture, where many microservers need to talk to each other for data. These services are inside a VPC. I need to understand if the HTTP APIs of these microservices need ...
user avatar
0 votes
1 answer
39 views

Password Recovery email - secure enough?

I am currently implementing new auth schemes for a site, and decided to implement an "I forgot my password" email looking at this guide for inspiration. My Flow The flow I have designed is ...
user avatar
  • 123
1 vote
0 answers
23 views

Design review/criticism of secure master-workers system

I am designing a system which will have one main process/service (master) which can potentially offload part of it's work to N number of external remote processes (workers). I want the worker ...
user avatar
  • 111
0 votes
0 answers
4 views

Can you break PBKDF2 if you know the hash of the password? [migrated]

I know that PBKDF2 hashes the password a number of times, the result being a key. Can an attacker find the key if they don't know the password, but know the value of the hash of the password?
user avatar
0 votes
0 answers
13 views

Can anyone explain IPv6 geographic locations, as assigned by Verizon? [closed]

I have a co-worker (non-technical workplace), who claims he's being hacked because some of the time his IPv6 locations are in other parts of the country, or in adjacent cities (large metro area). I'm ...
user avatar
0 votes
0 answers
24 views

Are ALDoS typically done from CLUI or GUI and how to protect from them? [closed]

Are Application Layer Denail of Service attacks typically done from CLUI or GUI and how to protect from them? I understand that GUI web browsers themselves already protect from popping up data ...
user avatar
0 votes
0 answers
22 views

What information can be accessed from my phone after I stupidly joined a specific network set up just for me on a “friends WiFi can they remote access [closed]

So as title says I joined a WiFi network whilst at a supposed friends place. Apparently it was made “just for me”. I have a feeling this was used to access all the information on my phone chat logs, ...
user avatar
0 votes
1 answer
36 views

Why force the user to use a secure password throught choosing the password for them to solve the password problem?

I have read in innumerables articles that „Passwords must die“, because they are blamed for being the cause of most cyber attacks. But why no just issue random generated passwords, with the added ...
user avatar
  • 3
9 votes
2 answers
2k views

Validating and storing credit card data for retrieval later

I need to validate and store credit card information (name, card number, expiration date, CVC) for retrieval at a later date. Once retrieved, the data will be used for manual processing on a separate ...
user avatar
  • 191
0 votes
3 answers
63 views

How file deletion works?

If deleting files just removes the references then why not just delete the actual files instead of just removing the references? Just removing the references leaves the file intact until it is ...
user avatar
0 votes
0 answers
73 views

My Google account with 2FA got hacked. But How? [closed]

I always kept my credentials in safety. My account is protected with two-factor authentication (2FA). Any user who wants to sign in must do one of the following steps: Press "Ok" on the ...
user avatar
0 votes
1 answer
14 views

Sub-key or new key-pair? (PGP/GPG Newbie)

I saw a PGP/GPG key of a dude on the internet with different sub-keys. The reason is that when one sub-key expires, he creates a new one. Now, from a security protective, is it better to create a new ...
user avatar
1 vote
0 answers
14 views

How to turn a relative path script (js) import to an absolue one with a url for XSS ? (more details below)

basically i have a parameter whose value is injected in the HTML as the following <script src="/dir1/dir2/dir3/dir4/INJECT_HERE"> </script> I was able to traverse back to just / ...
user avatar
-1 votes
1 answer
29 views

What is the relation between change management, patch management and configuration management?

How are: change management patch management configuration management related to each other and what is the security team's role in them?
user avatar
0 votes
0 answers
23 views

Decrypt HTTP payload at client

I was browsing this website and tried to look at the network calls from the API which retrieves the data. As you can see, the response payload is encrypted but the browser still shows the necessary ...
user avatar
  • 1,136
0 votes
1 answer
18 views

Trustless Application Architecture for end-users with secure enclaves

I am working on a project where I want to store end-user private data, but immediately this brings up the trust question of why a user would trust me to hold their data. I don't actually want to hold ...
user avatar
0 votes
0 answers
11 views

Can't find private key file given CspKeyContainerInfo

I'm trying to use PowerShell to extra a private key from a certificate stored in the personal store. Most of the tools seem related to Local Machine certificates and are not working, and I hit on the ...
user avatar
  • 101
0 votes
0 answers
22 views

Network Traffic Simulator to Test a Botnet Detection Tool

I am developing a Botnet Detection Tool. I am looking for a Network Traffic Simulator so that my software can analyze the traffic and detect potentially infected nodes that are acting maliciously. It ...
user avatar
0 votes
1 answer
18 views

How secure is a bitlocker startup key on a mountable encrypted container?

Let's say I want to protect the contents of my Desktop PC which I use in quite many occasions remotely. I want to use Bitlocker with a startup key that only "activates" at a specific moment ...
user avatar
-5 votes
1 answer
77 views

How to restrict access to someone who has local, physical to my computer? [closed]

I want to restrict access to only a specific folder and its contents. I don't want anybody to access any of my drives (like hard drives CD drives DVD drives pen drives or any other USB drives, etc.) ...
user avatar
0 votes
0 answers
14 views

Maintenance mode errors in Nexpose [closed]

I installed nexpose yesterday. And when I start the server in maintenance mode, I initialize the console with the command sudo sh nsc.sh and it throws me out the following errors: 14:07:14,340 |-ERROR ...
user avatar
2 votes
0 answers
9 views

How to obtain "wp_rest" nonce for WP Statistics plugin manually?

During my pentest of a client's websites I stumbled upon the WP with vulnerable WP Statistics plugin installed. To exploit this vulnerability, I should send a JSON-API request to endpoint /json-api/wp-...
user avatar
  • 121
0 votes
1 answer
32 views

What are the phases of penetration testing?

I tried to seach through google for the phases of penetration testing, but I found lots of articles, and each article defines this in a different way, some has 5 phases, some 6, and others 7! What I ...
user avatar
0 votes
0 answers
26 views

Discovering Devices Behind NAT?

What are all the techniques to Discover Devices behind a NAT? I would like to be able to gather as much information as needed regarding those devices including ip address/ mac address/ OS ... all what ...
user avatar
  • 1
1 vote
0 answers
47 views

How do I compare a signed .exe file with the unsigned version of the same .exe file?

I have had some binary executable files (.exe) for Windows signed, I have checked the signature of the signed files, but I would also like to check that the file that I sent for signing is indeed ...
user avatar
1 vote
1 answer
56 views

Are CSRF attacks a thing of the past?

If the default value for the samesite directive in the Set-Cookie header is lax, then surely the only way for a CSRF attack to work, is if the website's developer, for some reason, puts a less ...
user avatar
0 votes
0 answers
17 views

TCP SYN scan vs XMAS scan in terms of stealth

I am curious about which scan is stealthier? My first guess is TCP SYN, because it never completes the full TCP connection, but in the website I understand that XMAS is stealthier because firewalls ...
user avatar
  • 1
0 votes
2 answers
44 views

What are best practices for finding an account in a SQL database during authentication? Is using `LIMIT 1` vulnerable to timing attacks?

I have a application where users can log in by providing a username or email address (both case insensitive) and a password. In the users table in the database, the relevant account information is ...
user avatar
0 votes
0 answers
19 views

How do we reliably know why the Master Key hash for a particular SID has changed?

We are developing a VB. NET application where we are building a 'Remember password' feature to store the user's application credentials using DPAPI for encryption (in a Windows domain environment) and ...
user avatar
1 vote
0 answers
66 views

Detecting BIOS changes on PC

I've seen this question: Is it possible to determine if the BIOS has been modified between two points in time? On my Linux PC, I've made a script that checks the MD5 hash of the boot partition to ...
user avatar
  • 11
0 votes
1 answer
66 views

Advice on how to organize web folders to prevent paths from being found out

In a private area of a website, I need to create a folder tree containing documents belonging to different clients. The contents of these directories can only be accessed if you are logged in, but I ...
user avatar
  • 1
0 votes
1 answer
36 views

ROP - ret VS ret 0

I'm doing a binary challenge from pwnable.kr and I'm examining a some ROP gadget. Until now I've always used gadget ending with ret or syscall/int 0x80, but now ROPgadget gave me a gadget ending with ...
user avatar

15 30 50 per page
1
2 3 4 5
1309