All Questions
65,403
questions
0
votes
0
answers
2
views
Does Google Authenticator share device information to website?
I wonder about Google Authenticator privacy. I wonder if the app shares any information to the website owner about devices that we use to add a new key. I mean information like IP address and device ...
- 1
1
vote
0
answers
18
views
Why can't I use my phone for Google's Advanced Protection?
I am checking out Google's Advanced Protection program. I have registered in my Google account two security keys: my phone (a Realme 6) and a yubi key.
The advanced protection enrollment, asks me to ...
- 163
0
votes
0
answers
16
views
Exam intelligence for CompTIA Security+
I am currently preparing to take the CompTIA Security+ exam. After taking a few sample exams, it seems that passing the exam requires more than just knowing the subject matter – you need to get an ...
- 337
0
votes
1
answer
22
views
A personal user software solution providing both firewall + vpn features
I am completely new to the site, So please suggest me in comments, if the question to be improved in any way possible.
For personal use, What are the good software/solution out there which gives a ...
- 101
0
votes
0
answers
13
views
Modelling authorization on the basis of authentication method
At work we are starting to consider a replacement for an old system. The new system will use the Spring framework.
The security model is pretty simple: it is open to the general public. Each one of ...
- 103
0
votes
1
answer
34
views
Does recalculating per-user salt every time a user changes password make any difference?
I have set it up so that when my users change their password, the salt is recomputed.
Besides hiding the fact that they may change their password to the same thing (I am checking that by first hashing ...
- 123
0
votes
0
answers
14
views
Is different X-Forwarded-For values per site an indicator for something malicious?
I am using a mobile ISP to access the internet. I noticed something really weird: most sites (e.g. www.whatismyip.com, https://www.iplocation.net/http-browser-header) report my IP as let's say IP A: ...
- 163
0
votes
0
answers
6
views
Nmap -sV command not working
i ran a port scan
nmap x.x.x.x -sV
i got the following result
Host is up (0.040s latency).
Not shown: 996 filtered tcp ports (no-response)
PORT STATE SERVICE VERSION
80/tcp open http?
443/...
- 1
0
votes
0
answers
17
views
Using a pid in memory to identify the computername and username
I am new to digital forensics, and I'm practising cracking memory dumps. I have a pid with me which is 1764 and i need to extract the username and computer name of the dump file.
These are what i used ...
0
votes
0
answers
20
views
How to Infer Key from Hash and Password?
I have a hash H1 and a password P1. The hash is MD5. I have another hash H2 without a password. Can I leverage my knowledge of H1 and P1 to get a key? can I use this key to decrypt H2? Are there ...
0
votes
0
answers
13
views
How does pretty good privacy works for authentication and confidentiality?
I needed to study about these 2 topics. So I picked up a keyword "pretty good privacy" "authentication" "confidentiality" and searched for books in
libgen
google books
I ...
- 1
0
votes
0
answers
5
views
Input Sanitation injection reflects actual local cookie information inside the actual Input textbox how can this be leveraged to a xss attack?
The injection is inside an element for email address. The injection payload is ";"@site.com. Once submitted local cookie information appears inside the actual input textbox. This is for a ...
0
votes
0
answers
7
views
cors error with location
I'm trying to do a proof of concept, everything works fine for me. but after exploiting the cors i want to redirect to another web but when i try to do that it doesn't work anymore. Could you help me ...
- 1
0
votes
0
answers
8
views
How do I force an Android device to enable location (GPS) remotely when searching for it on google.com/android/find?
Let's imagine I lost my Android device and want to find it on google.com/android/find. It's works perfect when my GPS is enabled, but when it isn't, I can see only last location when GPS was turned on....
0
votes
1
answer
30
views
Is application layer DoS dangerous?
I host a website on a cheap 5$ IaaS hosting service without a CDN.
An actor with a higher bandwidth internet connection could try to overload my webserver with recursively downloading some data with ...
0
votes
1
answer
46
views
Is TLS version related to server?
In a recent pentest (java thick client) it was discovered by the pentesters that TLS version 1.3 is not supported. I'm investigating why it is not supported, so I was looking in the java code for ...
0
votes
1
answer
43
views
Hashing email addresses using scrypt
I want to hash email addresses so that they are anonymous but still unique in my database. I was thinking of using scrypt for this and creating the salt as a sha256 of some secret stored on the server ...
- 193
0
votes
0
answers
29
views
Is there a generic way to prevent HTTP timing attacks for sensitive requests?
If I have sensitive HTTP routes that could be subject to timing attacks (trying to guess an ID, user, etc.), is there a way without modifying the application code that it could be wrapped with a ...
- 3,372
0
votes
1
answer
25
views
Can the services inside the VPC be authentication less?
We have a micro-services architecture, where many microservers need to talk to each other for data.
These services are inside a VPC.
I need to understand if the HTTP APIs of these microservices need ...
0
votes
1
answer
39
views
Password Recovery email - secure enough?
I am currently implementing new auth schemes for a site, and decided to implement an "I forgot my password" email looking at this guide for inspiration.
My Flow
The flow I have designed is ...
- 123
1
vote
0
answers
23
views
Design review/criticism of secure master-workers system
I am designing a system which will have one main process/service (master) which can potentially offload part of it's work to N number of external remote processes (workers). I want the worker ...
- 111
0
votes
0
answers
4
views
Can you break PBKDF2 if you know the hash of the password? [migrated]
I know that PBKDF2 hashes the password a number of times, the result being a key. Can an attacker find the key if they don't know the password, but know the value of the hash of the password?
0
votes
0
answers
13
views
Can anyone explain IPv6 geographic locations, as assigned by Verizon? [closed]
I have a co-worker (non-technical workplace), who claims he's being hacked because some of the time his IPv6 locations are in other parts of the country, or in adjacent cities (large metro area).
I'm ...
0
votes
0
answers
24
views
Are ALDoS typically done from CLUI or GUI and how to protect from them? [closed]
Are Application Layer Denail of Service attacks typically done from CLUI or GUI and how to protect from them?
I understand that GUI web browsers themselves already protect from popping up data ...
- 1
0
votes
0
answers
22
views
What information can be accessed from my phone after I stupidly joined a specific network set up just for me on a “friends WiFi can they remote access [closed]
So as title says I joined a WiFi network whilst at a supposed friends place. Apparently it was made “just for me”. I have a feeling this was used to access all the information on my phone chat logs, ...
Helpisneeded
0
votes
1
answer
36
views
Why force the user to use a secure password throught choosing the password for them to solve the password problem?
I have read in innumerables articles that „Passwords must die“, because they are blamed for being the cause of most cyber attacks. But why no just issue random generated passwords, with the added ...
- 3
9
votes
2
answers
2k
views
Validating and storing credit card data for retrieval later
I need to validate and store credit card information (name, card number, expiration date, CVC) for retrieval at a later date. Once retrieved, the data will be used for manual processing on a separate ...
- 191
0
votes
3
answers
63
views
How file deletion works?
If deleting files just removes the references then why not just delete the actual files instead of just removing the references?
Just removing the references leaves the file intact until it is ...
0
votes
0
answers
73
views
My Google account with 2FA got hacked. But How? [closed]
I always kept my credentials in safety. My account is protected with two-factor authentication (2FA). Any user who wants to sign in must do one of the following steps:
Press "Ok" on the ...
0
votes
1
answer
14
views
Sub-key or new key-pair? (PGP/GPG Newbie)
I saw a PGP/GPG key of a dude on the internet with different sub-keys.
The reason is that when one sub-key expires, he creates a new one.
Now, from a security protective, is it better to create a new ...
1
vote
0
answers
14
views
How to turn a relative path script (js) import to an absolue one with a url for XSS ? (more details below)
basically i have a parameter whose value is injected in the HTML as the following
<script src="/dir1/dir2/dir3/dir4/INJECT_HERE"> </script>
I was able to traverse back to just / ...
- 11
-1
votes
1
answer
29
views
What is the relation between change management, patch management and configuration management?
How are:
change management
patch management
configuration management
related to each other and what is the security team's role in them?
0
votes
0
answers
23
views
Decrypt HTTP payload at client
I was browsing this website and tried to look at the network calls from the API which retrieves the data.
As you can see, the response payload is encrypted but the browser still shows the necessary ...
- 1,136
0
votes
1
answer
18
views
Trustless Application Architecture for end-users with secure enclaves
I am working on a project where I want to store end-user private data, but immediately this brings up the trust question of why a user would trust me to hold their data. I don't actually want to hold ...
- 1
0
votes
0
answers
11
views
Can't find private key file given CspKeyContainerInfo
I'm trying to use PowerShell to extra a private key from a certificate stored in the personal store. Most of the tools seem related to Local Machine certificates and are not working, and I hit on the ...
- 101
0
votes
0
answers
22
views
Network Traffic Simulator to Test a Botnet Detection Tool
I am developing a Botnet Detection Tool.
I am looking for a Network Traffic Simulator so that my software can analyze the traffic and detect potentially infected nodes that are acting maliciously.
It ...
0
votes
1
answer
18
views
How secure is a bitlocker startup key on a mountable encrypted container?
Let's say I want to protect the contents of my Desktop PC which I use in quite many occasions remotely.
I want to use Bitlocker with a startup key that only "activates" at a specific moment ...
-5
votes
1
answer
77
views
How to restrict access to someone who has local, physical to my computer? [closed]
I want to restrict access to only a specific folder and its contents.
I don't want anybody to access any of my drives (like hard drives CD drives DVD drives pen drives or any other USB drives, etc.) ...
- 417
0
votes
0
answers
14
views
Maintenance mode errors in Nexpose [closed]
I installed nexpose yesterday. And when I start the server in maintenance mode, I initialize the console with the command sudo sh nsc.sh and it throws me out the following errors:
14:07:14,340 |-ERROR ...
2
votes
0
answers
9
views
How to obtain "wp_rest" nonce for WP Statistics plugin manually?
During my pentest of a client's websites I stumbled upon the WP with vulnerable WP Statistics plugin installed.
To exploit this vulnerability, I should send a JSON-API request to endpoint /json-api/wp-...
- 121
0
votes
1
answer
32
views
What are the phases of penetration testing?
I tried to seach through google for the phases of penetration testing, but I found lots of articles, and each article defines this in a different way, some has 5 phases, some 6, and others 7!
What I ...
0
votes
0
answers
26
views
Discovering Devices Behind NAT?
What are all the techniques to Discover Devices behind a NAT?
I would like to be able to gather as much information as needed regarding those devices including ip address/ mac address/ OS ...
all what ...
- 1
1
vote
0
answers
47
views
How do I compare a signed .exe file with the unsigned version of the same .exe file?
I have had some binary executable files (.exe) for Windows signed, I have checked the signature of the signed files, but I would also like to check that the file that I sent for signing is indeed ...
1
vote
1
answer
56
views
Are CSRF attacks a thing of the past?
If the default value for the samesite directive in the Set-Cookie header is lax, then surely the only way for a CSRF attack to work, is if the website's developer, for some reason, puts a less ...
- 165
0
votes
0
answers
17
views
TCP SYN scan vs XMAS scan in terms of stealth
I am curious about which scan is stealthier? My first guess is TCP SYN, because it never completes the full TCP connection, but in the website I understand that XMAS is stealthier because firewalls ...
- 1
0
votes
2
answers
44
views
What are best practices for finding an account in a SQL database during authentication? Is using `LIMIT 1` vulnerable to timing attacks?
I have a application where users can log in by providing a username or email address (both case insensitive) and a password. In the users table in the database, the relevant account information is ...
- 3
0
votes
0
answers
19
views
How do we reliably know why the Master Key hash for a particular SID has changed?
We are developing a VB. NET application where we are building a 'Remember password' feature to store the user's application credentials using DPAPI for encryption (in a Windows domain environment) and ...
1
vote
0
answers
66
views
Detecting BIOS changes on PC
I've seen this question: Is it possible to determine if the BIOS has been modified between two points in time?
On my Linux PC, I've made a script that checks the MD5 hash of the boot partition to ...
- 11
0
votes
1
answer
66
views
Advice on how to organize web folders to prevent paths from being found out
In a private area of a website, I need to create a folder tree containing documents belonging to different clients.
The contents of these directories can only be accessed if you are logged in, but I ...
- 1
0
votes
1
answer
36
views
ROP - ret VS ret 0
I'm doing a binary challenge from pwnable.kr and I'm examining a some ROP gadget.
Until now I've always used gadget ending with ret or syscall/int 0x80, but now ROPgadget gave me a gadget ending with ...
- 103