All Questions
69,351
questions
-1
votes
0
answers
20
views
Can Duo Desktop be used to remotely control a computer? [closed]
My company is asking me to install Duo Desktop on my personal computer to be able to access some services like payroll from my personal computer. What are the implications of this? What am I giving up ...
- 129
0
votes
1
answer
35
views
Should mobile app developers actively prevent apps from running on outdated devices/rooted devices/emulators for security purposes?
From personal experience many mobile apps that I've tested don't actively detect and discourage (with a warning) or even block the app from running on/in:
a rooted/jailbroken Android/iOS device
...
- 6,765
0
votes
0
answers
14
views
hydra only tries 16 of the passwords in the txt file [closed]
When I run the command
hydra -l sergeeva_kori -P /home/kali/Desktop/rockyousplit/file00 instagram.com http-get
to crack my own instagram account, it tries some of the passwords and says
1 of 1 ...
-1
votes
0
answers
19
views
Do TLS interceptors that use root certificates to inspect traffic need to worry about PCI? [closed]
Many schools and workplaces require people using their internet to first install a root certificate, so that web traffic passing through their system can be decrypted and checked.
If someone makes an ...
- 99
0
votes
0
answers
22
views
Does requiring log in every n hours actually increase security for a web app, if login info is stored in browser? [duplicate]
A web application I use forces log in again every 12 hours.
I'm struggling to see exactly how this increases security, considering the browser has user and pass pre-filled, and I simply have to click &...
- 1
0
votes
0
answers
18
views
How does antivirus know JAR file changed [closed]
I modified a Java JAR file using Recaf and Microsoft Defender Antivirus detected this and removed the file.
I am the author of the JAR file so I know the antivirus must have used heuristics to ...
- 103
0
votes
0
answers
16
views
Do CI/CD pipelines in Azure DevOps require a dedicated user without MFA?
During security audits I've seen several times that DevOps made a 'special' user account for CI/CD pipelines, especially when using Azure DevOps. Often this user is the only user where multi-factor ...
- 6,765
0
votes
2
answers
60
views
Why authenticator Apps produce code every few seconds?
Why authenticator Apps produce code every few seconds rather than having a button to generate an one time code that would be active for the same duration as in TOTP? Am I missing something here? Doesn'...
- 11
1
vote
1
answer
48
views
In Linux, what encryption implementation approach is optimal given specific use & threat models?
Given the following use & threat models, what is the optimal encryption implementation? Optimal is defined as the approach best matching the use model.
Use Model
Computer must be optimized for ...
- 3,174
3
votes
1
answer
296
views
What are the security implications of receiving a secret (e.g. OAuth BEARER) token via cookie vs. Authorization header?
I have seen applications use both the Authentication HTTP header, as well as a cookie, or sometimes even both, to store & transmit BEARER tokens (JWT) when they send requests. For example, I am ...
- 1,229
0
votes
1
answer
27
views
How can I securely store a sensitive user attribute used for account lookup?
At $work we need to store a sensitive attribute of a user (say SSN - so, short and with a small keyspace) and look up the user based on this attribute when data is submitted into our system. We cannot ...
- 729
1
vote
0
answers
64
views
WordPress Site Hacked to redirect stripe.js offsite for credit card skimming - Can't Find The Source
We are experiencing an issue on our WordPress site running WooCommerce, for the second time this year where a hacker is injecting some kind of script that is redirecting the stripe.js code from it's ...
0
votes
1
answer
41
views
What information is shared by an audio bluetooth connection?
I paired my phone with a rental car recently and told it not to share my contacts and messages. So I was only sharing my audio (or so I thought). But at one point I saw my phone number briefly pop up ...
- 119
4
votes
1
answer
1k
views
(How) is it possible to let portable communication devices detonate via software? [closed]
A recent attack in the Middle East turned pagers into weapons; apparently, the attacker was able to let them detonate without physical access to the devices, at least not after the victims obtained ...
- 1,091
1
vote
1
answer
33
views
How can authenticity be ensured for Node.js packages when using a public registry like npmjs.com?
I was thinking about how to ensure the authenticity of Node.js packages that are installed from a public registry like npmjs.com. The only mechanisms (optionally) in place to my understanding are:
...
- 6,765
-1
votes
0
answers
22
views
John the ripper (external mode)i [closed]
I can't seem to get this to work?
[List.External:ConcatWords]
void init() {
word[0] = 0;
}
void generate() {
int i = 0;
int len = 0; ...
1
vote
0
answers
29
views
Ubuntu - snap potential security issues (for privilege escalation) [closed]
Ubuntu snap is quite a hot topic. Therefore I am curious, what security risks are known for it?
Which misconfigurations are possible? And are there any misconfigurations which can be used to escalate ...
- 21
1
vote
0
answers
36
views
I don't understand ipsec [closed]
Can you explain what is Child SA? Is this exchange used only for rekey IKEv2 OR ESP or this exchange is used for rekey IKE SA AND Child SA at the same time?
What is IKE SA? Is it a set of params (...
- 11
1
vote
2
answers
47
views
Linux Privilege Escalation - (running) Services [closed]
Since I'm quite new to the whole topic of linux privilege escalation I've done a few courses in which usually the enumeration of services is mentioned with commands like:
ps aux
systemctl --type=...
- 21
0
votes
1
answer
16
views
CSP, inline SVG, and XML attributes
I recently added some inline SVG images to my website, and the browsers complained about the style attributes within the SVG code not being covered by my strict CSP (style-src: self). Instead of ...
- 125
-4
votes
0
answers
48
views
how to bypass blocked all wifi access on schools device not just certain websites but the internet as a whole [closed]
how to bypass blocked all wifi access on schools device not just certain websites but the internet as a whole how to bypass blocked all wifi access on schools device not just certain websites but the ...
- 1
1
vote
1
answer
45
views
Does PCI/DSS allow storing the cardholder's name a person entered (and not the real one)
I have an app where a person enters their card number, the cardholder's name, the expiration date and the cvv. I am now making it pci/dss-compliant. I will store the card number in an encrypted way. ...
- 113
0
votes
3
answers
618
views
How Can I Modify a C Program to Gain Root Shell Access Without Using Sudo or Editing the Sudoers File?
I have a C program that, when executed on my Ubuntu virtual machine, provides a regular shell. The program includes the following code:
#include <stdio.h>
#include <stdlib.h>
#include <...
1
vote
2
answers
40
views
Are peripheral issues and systems normally considered in a white box penetration testing scope?
As Wikipedia defines:
White-box testing is a method of software testing that tests internal structures or workings of an application, as opposed to its functionality (i.e. black-box testing).
When ...
- 6,765
6
votes
3
answers
2k
views
Determining Entropy in PHP
I am using the following code in my code to send a password reset token to a user.
$token = md5($user_id . time());
Why this is considered as a bad approach being cited as it has a weak entropy. The ...
- 243
0
votes
1
answer
72
views
Is there an attack vector for SMS verification code using a bunch of parallel requests
I'm trying to elaborate a login scenario with SMS verification code. Not sure whether it's an attack vector or not.
Assume, we have a N = 3 digit code sent to a user mobile phone (3-digit code just ...
- 3
0
votes
0
answers
30
views
My hosting has no content, but shows error - requested an insecure script 'http://cdn.jsinit.directfwd.com/sk-jspark_init.php [closed]
I have recently bought a hosting and hosted my php site, but after hosting site was not loading and showing a round loading image. I thought my files were infected, so I checked on console and I got ...
- 101
0
votes
1
answer
100
views
Why do sandboxes detect behaviour that isn't in the binary?
A case here: https://www.virustotal.com/gui/file/416b4499cd364f8d645e7bcd591ca4ac71ad1227e4a888c7f1d49e90445e07e2/behavior
You can get the file I uploaded here (POSTNTFS.EXE inside the zip file): ...
- 1,192
2
votes
1
answer
571
views
Can socks5 proxies work similiar to http connect?
I have difficulties understanding socks5 proxies.
I would like to know if I can avoid socks5 proxies seeing the traffic between the client and destination. I would like to achieve something similar to ...
- 23
0
votes
1
answer
75
views
Decrypting base2i encryption? [closed]
We all know base64, which can be easily decoded, but there's also base2i encryption. Yes, the base is a complex number. I can only find very limited resources online about this. I'm wondering how can ...
- 227
6
votes
3
answers
4k
views
What is the best way to protect from polymorphic viruses?
Due to malware infections becoming more and more common, antivirus are a growing industry.
But it is common knowledge that polymorphic viruses (that rewrite their own code) are much harder to detect ...
- 1,526
0
votes
0
answers
34
views
Administrator escalating to SYSTEM in the normal course of things
I am learning about interacting with Kerberos from a programming standpoint and have been recreating some of Rubeus's functions as a way of learning (because what better open source program is there ...
- 303
1
vote
1
answer
59
views
Is it safe to store harmful files to storage like AWS S3?
I am new to security topics, please don't assume knowledge and spare no details if you're able to answer my questions.
I am trying to design a system that performs the basic functionality of ...
- 11
4
votes
0
answers
74
views
Does a Risk Management approach work in Cybersecurity?
I was recently with a client discussing their cyber risks and what main risks we were going to focus on.
"And your top 5 information security risks are risks 1,2,3,4,5"
He then said to me, &...
- 1,099
3
votes
1
answer
81
views
Should I block traffic on UDP 5353, 5355, and 137,138,139?
I've just set up a new Debian-based VPS instance and put my usual iptables rules in place where I block off almost all ports and open the ones I need, and I've noticed that on this network I'm getting ...
- 346
1
vote
0
answers
72
views
What is the sense of the client's IP in a Host header? [closed]
In my webserver log files I sometimes find such entries:
185.30.14.116 [2024-09-14T07:56:57+02:00] 400 | HOST-HDR "185.30.14.116" | SRV _:80" | URI "/"
So there is a request ...
2
votes
1
answer
132
views
TLS certificates on a network drive/storage
For educational purposes, I am assembling a private network to act as a small sized company using BIND9 and OpenLDAP on FreeBSD 14.1 machines.
The private networks' DNS servers, NS1 on 172.21.0.20 and ...
- 321
1
vote
0
answers
35
views
allowing users to check email deliverability without creating spam
In the past year, alot of my customers have either ignored or responded very late to very important emails (many which regard presenting them an offer of a refund for a service not rendered).
So I ...
- 11
0
votes
0
answers
15
views
exfiltred .rnd file exploitation
Context
During a CTF, as www-data, I managed to exfiltrate an .rnd file used by phpseclib on a PHP app (I exfiltrated the entire app). Since SSHD is configured with PubkeyAuthentication yes and ...
- 111
1
vote
1
answer
41
views
how to exploit pathtraversal vulnerability
I am pentesting an http server using jetty, where I have access to the code.
One of the urls I am looking at is get /services/test.js
Looking at the code below:
@GET
@Path("services/{...
- 127
0
votes
0
answers
18
views
Differences in behavior between two Netcat and FIFO commands for creating a bind shell [closed]
I am trying to grasp the concept of terminal-emulators, shells and redirections.
I have two commands, both of them start a netcat listener for the bind shell:
1) rm /tmp/fifo; mkfifo /tmp/fifo; cat /...
- 1
1
vote
0
answers
16
views
How is Google's phone policy more secure? [duplicate]
Sometimes when you try to log in to a newly-created Google account, Google will block your log-in attempt saying "We've detected unusual activity on the account that you're trying to access,"...
- 227
1
vote
0
answers
31
views
Is the Appearance of Numerous Open Ports in Network Scans a Misconfiguration, Security Strategy, or Bad Practice? [duplicate]
While scanning networks, I have often come across a large number of open ports, or that’s the result returned by various tools like Nmap, Masscan, etc. Of course, this is false information...
But I’m ...
- 11
1
vote
1
answer
53
views
Circular dependencies in email recovery
My question is about the security of having "circular dependencies" in email recovery. I.e., is option 1:
[email protected] -> [email protected] -> [email protected]
better than option 2:
[email protected] -&...
- 113
2
votes
2
answers
96
views
How can I safely restore files from an infected computer?
This was asked before, however was 6 years ago and things change.
I have a relative's computer, that got owned by an AnyDesk "delete your files" ransomware attack.
I'm pretty sure they just ...
- 121
0
votes
0
answers
19
views
What type of anti-malware software is excellent for manually scanning files to check for potential malware? [closed]
I'm an avid enjoyer of declassified military documents, I read them all the time because I'm curious about what they contain, ranging from out-of-service aeroplane schematics to a brownie recipe. ...
- 1
1
vote
3
answers
147
views
Is there a security reason why few CAs offer IP-based SSL/TLS certificates?
I’ve heard numerous times that Few CAs offer IP-based SSL/TLS certificates.
This question seems extremely similar, but what the accepted answer says is:
Usual commercial CA won't accept to encode IP ...
- 1,526
1
vote
1
answer
43
views
Auto-unlock private key: which implications?
On my system (Ubuntu 22.04) I have encrypted my private key with a passphrase and added it to the ssh agent with ssh-add.
On use of the key, I am prompted with the option "Automatically unlock ...
- 141
0
votes
1
answer
83
views
Is it always possible to copy digital information from a physical medium?
If I have access to the physical medium on which information is stored (hard drive, NFC chip, SSD), are there any physical measures possible to stop me from cloning the exact data to a duplicate?
...
- 111
3
votes
1
answer
178
views
Is it wise to use sudo in .bash_aliases?
My ~/.bash_aliases contains aliases such as the following examples:
alias duh="sudo du -sh ./* | sort -hr | head -n 10"
alias pcm="sudo pcm -nc -nsys"
Question is, how smart that ...
- 253