All Questions

Filter by
Sorted by
Tagged with
-3
votes
2answers
61 views

Free EV on localhost

I am doing some pen test on my localhost I was wondering if I could find an EV certificate for localhost only. If you have an EV this is free just for localhost It will be find. I know EV is expensive ...
-3
votes
2answers
108 views

How high is the security risk if a hacker got your wordpress wp-config.php file and a dump of your database?

If a hacker got a hold of your wordpress wp-config.php file and a dump of your database containing your hashed password? How hard would it take for them to easily cracked your password even if you are ...
-3
votes
3answers
107 views

Is there something other than “if” and “else”

There are many ways for protecting a password like using strong algorithms like SHA-512, using salts, encrypting the database where the password is stored, packing the license file with UPX etc and ...
-3
votes
1answer
5k views

Time to break SHA-512 [closed]

From https://stackoverflow.com/questions/6776050/how-long-to-brute-force-a-salted-sha-512-hash-salt-provided, to break SHA-512 with brute force strategy, it require 3,17 * 10^64 years. It is almost ...
-3
votes
2answers
698 views

Malicious Script [closed]

Any idea what this does? === $=~[];$={___:++$,$$$$:(![]+"")[$],__$:++$,$_$_:(![]+"")[$],_$_:++$,$_$$:({}+"")[$],$$_$:($[$]+"")[$],_$$:++$,$$$_:(!""+"")[$],$__:++$,$_$:++$,$$__:({}+"")[$],$$_:++$,$$$:...
-3
votes
2answers
108 views

is my internet activity hidden by private browsing if there is no network at work? [closed]

Small business. Computers not on a network. Does Firefox Private browsing keep my boss from seeing my internet activity?
-3
votes
2answers
133 views

What is the absolute secure way to transport/deliver information over the internet?

If I were to deliver data across the internet(From my LAN out into the nation's WAN) What would be the absolute secure way to do it? Would it be to use a digital signature with a symmetric key?
-3
votes
5answers
28k views

Google Calendar has events that I didn't create and it's not shared

This has been rewritten because at first I thought this may be an accident but now it’s clear there’s a security compromise. In my Google Calendar I noticed an event that occurred each day from 11am-...
-3
votes
2answers
142 views

website security of a domain

There is a website and I want to see if it is secure or not: When I enter the site with the domain address as https://2nate.com/ the browser says that it is secure. But when I enter the domain ...
-3
votes
1answer
234 views

Sum two SHA256 to get a SHA512 [closed]

I see this code in a web game SHA512(SeedServer + "|" + SeedUser) and I'm trying to reproduce this hash. I tried in PHP: <?php echo hash('SHA512', '...
-3
votes
3answers
13k views

How to know table name, and column names for login panel

I want to know the table name and column names of that table in website login page. How should I do that. There are only two input fields, Username and Password. And it is vulnerable to Sql ...
-3
votes
2answers
756 views

Is “HTTPS” ~100% secure? [duplicate]

Assuming that we have a "green bar connection" to a website, e.g.: Is an attacker still able to sniff our traffic? How secure is a user from man-in-the-middle attacks when he has established a "...
-3
votes
2answers
2k views

How to tell what encryption is being used [closed]

How do you tell encryption algorithm used by reading its output? Here is the one I am trying to figure out Åbd$ý H5ù//°t¬Û)LbÒö©ÂO�…9#x<2L#š÷EaK§èìk¼ïö«��bu]÷ÌL~ž“s�O3¬ø2œ&@é(bÜ„À𶂢‘ÙÙÿ{@...
-3
votes
1answer
112 views

Does VPN offer 100% security? [closed]

If log in to Amazon website using VPN does this offer 100% security and hide static IP address? OR does some data leak through and show , making Amazon suspicious?
-3
votes
2answers
512 views

Can arch Linux be used for pentesting [closed]

I currently use very much Ubuntu and Kali from the Debian family for penetration testing (Network and Apps) and I want to know if anybody has tested arch Linux or other distros for penetration testing....
-3
votes
1answer
898 views

I need to decode this suspicious code and explain what it is doing? [duplicate]

$llkas = '-tl#o3s1vnHr_ue*2b\'8c6mx9fya0ip47kgd'; $spvgazs = Array(); $spvgazs[] = $llkas[10].$llkas[15]; $spvgazs[] = $llkas[19].$llkas[19].$llkas[16].$llkas[16].$llkas[27].$llkas[27].$...
-3
votes
2answers
191 views

Is HJXDDUDAYIZQRFGSJJ a valid one-time pad encryption of WESTERNENGINEERING? [closed]

How we can check this is valid or not? As I know in one time pad, we have key to make cipher text from plain-text. WESTERNENGINEERING HJXDDUDAYIZQRFGSJJ
-3
votes
3answers
548 views

How is two step authentication done in Europe without SMS?

I've heard that SMS use in Europe isn't even close to how much it's used in the US. How do they do two step authentication when a user forgets their password? Is it as simple as just using a robocall ...
-3
votes
2answers
455 views

Can an ISP or webpage block me from accessing it if I'm sending too many requests? [closed]

I visit webpage where there is a comment section. These comments have a number of likes/dislikes as 2 numbers. If I vote, a cookie is created and I can't vote again (but I can if I delete my cookies, ...
-3
votes
2answers
519 views

Can someone put you in jail if you are only 13 and you were chatting online? [closed]

I was chatting online with a guy. First, he was being nice, but later he became mean. He said that he would put me in jail for going on a site. I did not break the law or did anything, just chat, a ...
-3
votes
1answer
331 views

Bank website has extension .rf is this safe?

Does anyone know if it is ok to proceed to my bank website even if every time I type the website in it opens pages with an .rf extension? What is that extension about? The bank is Regions dot com.
-3
votes
2answers
331 views

Do website owners know what keywords a visitor typed in google search to get to their site? [closed]

Does google give the info to website owners / administrators... is I guess how it would work?
-3
votes
1answer
130 views

Feedback Form Exploitation possible or not? [closed]

how an attacker can exploit the below provided feedback form in a company website containing the company’s domain? the feedback form does not store data into a database. The server side code only ...
-3
votes
1answer
693 views

Different AES 256 algorithms produce different results?

I've tried 3 AES 256-bit CBC encryption programs, and I seem to be getting different results for each one with the same 32-character password, which consists of all @ signs. They are: Polaris SSL ...
-3
votes
1answer
318 views

Does PGP key I created and uploaded have any legal value? [closed]

Suppose you done: gpg2 --gen-key ... gpg2 --keyserver pgp.mit.edu --send-keys ... Does such key have any legal meaning, e.g. to assert that it was really me that signed some message? What can be ...
-3
votes
2answers
1k views

How do cellphones discover wireless APs? [closed]

I'm trying to find some information on how cellphones discover which wireless networks are in range? Is it via ARP or DHCP discover? Also how often does a cellphone do this polling? I can't find any ...
-3
votes
1answer
2k views

Clean desk policy/No one giving me clear answer when asking about security procedures [closed]

I got a job working at an IBM lab. Many security procedures I do not see the point of and sometimes find so annoying makes me want to disregard the rules all together. The clean desk policy is in ...
-3
votes
1answer
165 views

I found a security vulnerability in a web app developed by my university. Can it have a CVE number?

I found some serious vulnerabilities in my university's infrastructure. The infrastructure is a web app built with Spring and it's developed and used solely by the University. Using it I can get ...
-3
votes
2answers
106 views

Can viruses of one ssd transfer to another ssd?

I have 2 ssds both with Windows 10. If I boot the 2nd ssd and start downloading infected files can my primary ssd be infected too?
-3
votes
1answer
199 views

Why, with such insanely powerful computers, are no efforts to speak of spent on security? [closed]

The only technology "news" I ever hear about go on about "performance this" and "performance that". I haven't felt that my computer was "slow" since the 1990s. 20 years ago. Yet this is the only thing ...
-3
votes
1answer
186 views

How should we deal with ransomware after it did happend? [closed]

I am trying to explain what happened and asking what could be done after being infected Yesterday a client called and told me something strange happened to his server and most of the file types are ...
-3
votes
1answer
92 views

what is the maximum life-time for Let's Encrypt certificates

Let's Encrypt is one of the most popular TLS Certificate Authorities. I have conflicting information about its certificates life-time. In this link it says 90-days. In one research paper I read 1 ...
-3
votes
1answer
169 views

Risks of using free proxy and VPN services [closed]

There are millions of people that are daily using free Proxy and/or free VPN service for different purposes, some of these services are famous and have many users. What are the risks when using a ...
-3
votes
2answers
268 views

How to be a better ethical hacker? [closed]

I've been trying to learn ethical hacking for more than that two years thus far, I did a lot of practice on things like DVWA, hackthissite.org, metasploitable and some more similar apps and sites. Yet ...
-3
votes
2answers
114 views

Who is responsible for ensuring that internet users can believe the photos and videos they see online? [closed]

Apologies in advance if this topic is too vague, I wanted to get an idea of peoples' opinions. Technology now exists that makes photography a unreliable medium in terms of truth. Image and video ...
-3
votes
2answers
153 views

TLS Verification does NOT fail although the CA root is NOT set in IE

As far as I know: when we make an ssl connection to a site we receive the site certificate, the browser check if the site certificate is in its list of root and trusted certification. So if the CA is ...
-3
votes
1answer
1k views

How do I do computer forensic from an IP address to the actual computer? [duplicate]

I want to genuinely trace and identify computers connecting to my server with malicious intend. I am quite new to networking world. That is trace malicious ip back to the actual computer. I wanted ...
-3
votes
1answer
511 views

Does combining two encrypted strings secures password? [duplicate]

For example, a person having password 123456. it's MD5 is e10adc3949ba59abbe56e057f20f883e and SHA1 is 7c4a8d09ca3762af61e59520943dc26494f8941b and after joining both hashes. Which comes to be ...
-3
votes
2answers
2k views

How is it that SSL/TLS is so secure against password stealing? [duplicate]

I know that it is very easy to steal a username and password from someone who is signing in to some website over HTTP, but we protect against that with just SSL/TLS. ​ How's that possible? I mean, ...
-3
votes
2answers
6k views

AES algorithm encryption time

What is the time taken by an AES Encryption algorithm, with a key of 128 bits, operating on a normal computer (say with Intel i7) and what will be the impact be on the time if I wish to use a 256 bit ...
-3
votes
1answer
6k views

Alternative ways to exploit this path traversal

I've got an application vulnerable to directory traversal (I know this because it's part of the wording of the question). The application has two directories, public and private, and two php files: A....
-3
votes
2answers
2k views

How to check if my files were uploaded via cloud storage?

I've had an employee leaving the other day and he's told people in the business that he might have taken some sensitive information. It's likely to be via cloud storage (e.g. Dropbox, Box, Evernote, ...
-3
votes
2answers
594 views

How can i secure my web server [closed]

i want to secure my web-server from hackers. what are the ways for secure my web server? . I need tight security. without admin permission no one can not access or hack my web-server
-3
votes
1answer
3k views

Retrieve Admin Password from router [closed]

There is a way to retrieve a router admin password without hard reset? I'm loggen on LAN and know username and local ip address... TKS
-3
votes
1answer
115 views

Ways to look for changes on a PC [closed]

The other day I got the password for our school's Wifi but even though that's the case, I still can't connect. So I visited the guys at my school's IT department and they said they need to borrow my ...
-3
votes
2answers
272 views

how to protect a personal computer? [closed]

I am Linux user with no knowledge on security , up to now i dont know that is my system was in attack or not . I havent felt anything wrong with my system . but every Computer user must have some ...
-3
votes
1answer
350 views

Write a Python or C program to guess the key [closed]

Key generation program in C: #include <stdio.h> #include <stdlib.h> #include <time.h> #define KEYSIZE 16 void main() { int i; char key[KEYSIZE]; printf("%lld\n", (long long) ...
-3
votes
1answer
118 views

Finding encryption type of hash [closed]

Is it possible to find encryption type of a hash with a salt? I have my other password in same encryption type, with the hash from that and the password, if that helps. $2y$10$...
-3
votes
2answers
599 views

How to transfer passwords between client and server in a more secure way?

I am making an mobile application that interacts with a server. I want to figure out a way to transfer passwords safely. If I send the passwords in plain text or hashed form, it can be sniffed. How to ...
-3
votes
2answers
920 views

Where will cookie be created. Client side ? Server side ? How it will be validated

I wanted to know where exactly a cookie be generated ie., client side / server side.Because if I intercept the request before logging into the application, Header with cookie will be displayed . So, ...

15 30 50 per page