All Questions

Filter by
Sorted by
Tagged with
1
vote
0answers
8 views

A technician injected malware into my computer without my knowledge

So this fixer that I asked to fix my busted front audio ports injected my PC with KMS-R@in in order to get rid of the activate windows watermark without my consent/knowledge, and it gave me Floxif.E ...
-1
votes
0answers
4 views

Monitor mode for pentesting with Alfa wireless card

 THIS IS A REPOST OF MY ORIGINAL QUESTION THAT GOT PUT ON HOLD BECAUSE IT WAS NOT RELATED TO NETWORK SECURITY OR PENTESTING? LIES I have a wireless card (Alfa AWUS036H) that I use for pen-testing ...
0
votes
0answers
13 views

Hawk vs. API key authentication

For a HTTP(S) API, which is better (/ which is better under which circumstances)? Hawk authentication (a secret key is used to create a signature which is transmitted with the request: similar to AWS ...
0
votes
0answers
14 views

Alfa wireless card monitor mode problem [closed]

I have a wireless card (Alfa AWUS036H) that I use for pen-testing on my test network. Due to my recent interest in network hacking, I picked up this card and put it into monitor mode. While it scanned ...
-1
votes
0answers
20 views

What should I do if I find a suspicious device in public space? [closed]

This question is partially inspired by this video. In case I find a suspicious device somewhere in a public space. What should I do with the device? Take the device I've found to my home/lab to ...
0
votes
0answers
19 views

LVM on LUKS implementation

LVM on LUKS is the only secure option for encrypting a Linux/Ubuntu USB system. If someone gets access to an unencrypted USB that's not LVM on LUKS they know what it is and what's on it. However LVM ...
-1
votes
2answers
22 views

Should a 2FA app require authentication to grant access to 2FA tokens?

I don't know the theoretical background for 2FA so I'm asking here. I've used a few 2FA apps before including Duo Mobile and Steam Mobile (Guard). When Duo is opened, it will display your tokens as ...
0
votes
1answer
35 views

Can someone redirect or block emails of a specific sender?

I’m expecting some information from a governmental organisation, they claim that they already send the info via email, but I have never received anything. They also have an automatic reply email, ...
1
vote
0answers
38 views

HTTP Desync Attacks - TE.CL Against Site

So I have created a website and it is being hosted in Amazon AWS and leveraging AWSELB. I am teaching myself web application security as I am learning development so I went ahead and ran some checks ...
2
votes
1answer
73 views

If I accept a root Cert what am I opening myself up to?

If I connect to a WIFI AP and it wants to install a root cert. They read my HTTPS traffic, Right? Does using OpenSSH on my cell phone to my home router help protect me? Or can this traffic be ...
0
votes
0answers
27 views

Can a PKCS12 keystore be FIPS compliant?

Is it possible to generate a PKCS12 keystore that will be FIPS compliant? In regular mode, I'm using "1.2.840.113549.1.12.1.3" - pbeWithSHAAnd3-KeyTripleDES-CBC(3) algorithm to encrypt private keys, ...
0
votes
0answers
32 views

Is any key signing party directory - or a mean to facilitate such meetings, exists?

I need to develop my web of trust. I don't live in or near a metropolitan area and as such it is a bit difficult to find possible local people to sign. I assume I must not be alone in that context. ...
0
votes
0answers
28 views

Session hijacking: JSESSIONID resets on being changed to another valid one

I am trying to understand session hijacking, and read that to avoid session fixation, the id should be regenerated on authentication completion, and so I have implemented in my application. Playing ...
1
vote
1answer
44 views

False Positive of Cleartext Submission in (CWE-319) in Burp?

In a recent execution of a spider, Burp reported cleartext submission of a password CWE-319, but the evidence in the report is merely the preceding GET request of a non-existant page, redirected via ...
0
votes
0answers
51 views

Custom IPv6 network and security risks

I draw a custom network (I would use that for developing and testing, my ISP does not support IPv6), there IPv4 and IPv6 are present. 'A' device has firewall: incoming blocked, only accept access (SSH)...
0
votes
1answer
58 views

How to identify malicious Wordpress user agents

I have noticed our website, which is Wordpress based, gets frequent daily requests from other sites where the user agent is Wordpress and the other site is obviously an already hacked Wordpress ...
0
votes
0answers
29 views

Data security compliances and tools

Are the tools and services (esp. cloud based) that help with data security compliances (PCI, HIPPA etc) themselves need to be compliant?
0
votes
0answers
33 views

Western Digital My Cloud - Website GUI & Security

I am trying to figure out if using the Website "files.mycloud.com" is exposing my files to being intercepted at a central point. I see that there is an HTTPS connection with valid cert for *.mycloud....
-3
votes
0answers
63 views

I am a beginner, I need help [closed]

I want to learn about Windows Forensics. Any softwares or tutorials or any material would be helpful. Thank you.
0
votes
0answers
39 views

Forensic image of hard disk on VMWare using Autopsy

Is there a recommended, forensically sound method of acquiring virtual hard drives on VMWare using Autopsy? Or is it a simple copy and paste? I’ve used other software like Caine in the past, where ...
0
votes
0answers
27 views

removing fake login pages by CDN [closed]

Are there any services provided by CDN or others which hunt for fake bank pages cached in CDNs and scrub these pages - based on closely matching names, CSS styles, colors, etc.?
0
votes
0answers
5 views

OpenSSL encrypts public key after conversion to pfx [migrated]

I'm exporting a certificate and private key into .pfx file with: openssl pkcs12 -export -out export.pfx -in public.crt -inkey private.key -nodes However despite encrypting private key with provided ...
1
vote
2answers
105 views

Does it make a difference to use a VPN to access home services?

Situation: I want to set up some home servers that can store my files. Currently in the planning stage of the setup. Problem: Security and stuff comes to mind when doing such things, especially ...
1
vote
0answers
42 views

Is this php smarty template statement a security flaw?

$smarty->assign("action", $_SERVER["PHP_SELF"]); PHP_SELF is set client side by the browser so it can be modified by an attacker. Is Smarty "action" assigned to the form action field? So can an ...
2
votes
0answers
33 views

Are the trade offs for putting an auth token in an http-only cookie for an SPA worth it?

I've been building a web app (rails api + react SPA) for learning / fun and have been researching authentication. The most commonly recommended approach for authenticating SPAs that I have read is to ...
0
votes
0answers
47 views

protecting login pages of a bank using CDN and TLS [closed]

A bank claims that its customer login pages cannot be cached - apparently because there's some unique number associated with each instance of a page rendered on the client browser. Supposedly, a ...
-5
votes
1answer
108 views

How to hack Facebook/Twitter/Instagram/WhatsApp? [closed]

How to hack Facebook? How can I hack me ex's Facebook account? Can someone hack my wife/husband's Facebook for free? As I go through several Facebook groups which accommodate total newbies, ...
8
votes
3answers
2k views

The maximum size of a file that I can encrypt with a specific key size

a 1024-bit private key is generated using the openssl genrsa privateKey.pem 1024 command. we extract the public key from the private key using the command openSSl rsa -in privatekey.pem -pubout -...
0
votes
0answers
37 views

Netcat on Debian Security advice please nc -(dknl) [closed]

This is with regards to a Netcat based script running on a Debian based distribution, specifically the Proxmox hypervisor (see here if unknown https://en.wikipedia.org/wiki/...
0
votes
0answers
35 views

Verify Checksum of a UDP Packet [closed]

So I am supposed to create a UDP server that is supposed to verify the checksums of packets being sent, and then log failures. The packets have the structure of: 4 bytes - Packet ID 4 bytes - ...
0
votes
2answers
76 views

ret2libc - why need 4 bytes of garbage

So I started to learn reverse engineering, and I came across the ret2libc exploit. I tried to understand how it works and I got a bit confused. They say that when you return to the address of system ...
2
votes
1answer
105 views

What do I do if I catch someone doing a physical pentest? [duplicate]

This question was primarily inspired by this (related) question, but is about the other side of the equation. I'm a security engineer at Medium Sized Company, Inc. We recently hired John for a ...
0
votes
0answers
36 views

Remote connection to 2 computers are combined to one hostname [closed]

Currently, I have 2 computers COMP1.local and COMP2.local. When going to RDP to COMP2.local it takes me to COMP1.local. Now, When I try to log into COMP1.local I get a connection error and have to ...
3
votes
1answer
52 views

OAuth 2.0 authorization code flow vulnerable to “shoulder surfing”?

When using the OAuth authorization code flow in web applications, after successful authentication of the resource owner, the authorization server usually responds with a browser redirect to pass the ...
1
vote
2answers
68 views

Session ID containing username?

Is it safe to append the user's username to the session ID? The session ID is 32 bytes long generated using a secure PRNG. I encode it using base64 URL to save it in a HttpOnly cookie. The cookie ...
0
votes
0answers
14 views

Let's encrypt certificate in the backend server [migrated]

I created a let's encrypt certificate for my domain and install my SSL certificate in the nginx reverse proxy. Now, I want to secure the communication between the proxy and the backend server using ...
0
votes
0answers
44 views

Wireshark packet captures using HTTPS filter [closed]

Is it possible to capture packets on Wireshark using a HTTPS filter? I’ve noticed on Wireshark only has the HTTP filter. Was wondering if there’s another way around this?
0
votes
0answers
27 views

How to be able to still view Encrypted files on Samsung S9/Android, but not outside of it [closed]

I had lost a phone once and I was more upset with the idea of the bad guy having access to my Micro SD memory card/personal data than losing the phone itself. After getting a new phone, Samsung S9 ...
1
vote
2answers
66 views

Can you trust your computer devices to be safe to use if they have been in the hands of potential hackers? [duplicate]

Suppose you lose the bag containing your laptop along with its accessories or while travelling the police confiscate all your computer devices, can you safely use all the devices again if you format ...
1
vote
2answers
49 views

Private way to connect to my SQL Server database

I'm running on linux and I am using a SQL Server database server on some other machine. My python code has to sit in a directory that many other users have read access to. I also have a "...
0
votes
0answers
55 views

Meltdown/Spectre attack

What concepts should a newbie(someone who doesn't have too much knowledge about computer architecture, user/kernel space, memory etc.) understand if he wants to know how Metldown/Spectre works? I ...
2
votes
0answers
42 views

Ghidra Load Linux Headers [closed]

I'm trying to reverse engineer a linux kernel module (kernel version 4.19). Ghidra does recognize correctly all function names such as: open, misc_register etc, but it cannot determinate their exact ...
0
votes
1answer
66 views

Privilege escalation modifying cookie

I have two accounts, an administrator and a simple user. I can capture the administrator's cookie and use it in a simple user request, I find myself logged in with the administrator user and then log ...
0
votes
1answer
69 views

Clarification of relationship between CORS and CSRF

To summarize: CSRF is an attack where a page in a different window/tab of the browser sends nonconsensual request to an authenticated web app, that can typically be prevented from server-side by ...
-1
votes
0answers
26 views

Are there separate CIS benchmarks for Windows Server 2008 R2 standard and enterprise editions? [closed]

I can find the benchmark for Windows Server 2008 R2. However, are there different benchmarks for the standard vs enterprise?
0
votes
0answers
38 views

SAML Passing a JWT token from the API to the SPA application

We are trying to implement the SAML 2.0 protocol and I stumbled upon a problem related to passing the token from the API to the client SPA application. The authentication flow goes like this, the ...
0
votes
1answer
53 views

Speed issues with VPN to cooperate network in Europe from Asia - is it possible to attach a local VPN server to the europe network?

Got this situation where we are forced due to security reasons to only be allowed to connect through VPN to our network - which is fine when you are in Germany (GER) where the main office is located, ...
0
votes
0answers
4 views

Making an encrypted backup of my dropbox folder to my NAS [migrated]

How can I save an encrypted backup my Dropbox folder to my NAS drive?
-2
votes
0answers
58 views

WiFi Hacking using Kali Linux

What WiFi hacking method connects to router, disconnects all devices connected there, and connect to Fake Made up wifi, and once connected get the information from the connected device (get password) ...
0
votes
0answers
43 views

How can reCAPTCHA be disabled on my website? [closed]

We're having a website to host a big event with reCAPTCHA enabled on it in order to prevent spammers from registering the event. However, we've received numerous spam form registration recently. An ...

15 30 50 per page