Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Favorites infavorites:mine
infavorites:1234
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with Search options user 836

An attempt to exploit a weakness in a system, either for nefarious or research reasons. Questions with this tag should be about designing, carrying out, or defending against the attack itself, rather than about the underlying weakness.

8
votes
Steps to take in an attack like this: In this particular case, it is important to cease serving the site, so firewalling it off would be appropriate -- either at a gateway device or by pulling the p …
answered Oct 8 '11 by Jeff Ferland
5
votes
Strongly consider using operating system controls to provide an extra layer of control and auditing on top of your webserver. Do also take the time to read all the answers on that question.
answered Dec 13 '11 by Jeff Ferland
3
votes
The RSA signature size is dependent on the key size. A 512 bit key produces a 64 byte long signature. The header ends with a Base64 encoded signature, so with padding my memory tells me that will be 8 …
answered Oct 25 '12 by Jeff Ferland
5
votes
Rainbow table: each "color" takes a random input (the output hash of the last iteration or the original hash) and returns an output that maps to whatever pattern you wanted (e.g., all letters). That i …
answered Dec 10 '12 by Jeff Ferland
7
votes
The logging facility that is reporting kernel: Notice this message: Mar 27 15:28:40 kernel: eth3 Link UP 100 mbps full duplex So, kernel is saying that eth3 change. Therefore, the kernel is rep …
answered Mar 27 '12 by Jeff Ferland
5
votes
Alright, here's how you steal money from a bank's computer: Make a wire or ACH transfer to another bank. Withdraw that money from the other bank. If you're of the go big or go home mentality, run tha …
answered Mar 29 '12 by Jeff Ferland
18
votes
I think you seek the use of a packet generator and a corresponding number of systems generating packets to match the load you seek. Use random valid IP addresses for the packet source addresses and yo …
answered Oct 12 '11 by Jeff Ferland
3
votes
The primary warning about TRACE is that it is designed to pick apart the routing of an HTTP request similar to how traceroute is meant to pick apart the routing of a packet. The key difference is that …
answered Oct 10 '12 by Jeff Ferland
8
votes
Yes, that is exactly what is talked about when discussing XSS vulnerabilities. In the context you described, one could also add code to redirect a user to any site or present possibly malicious code d …
answered Aug 16 '11 by Jeff Ferland
6
votes
Was/is there a reason for a host to receive a packet larger than 84 byte total? There are several layers involved here, and that's the first part of the problem. ICMP's 84 bytes for a ping messag …
answered Nov 10 '15 by Jeff Ferland
103
votes
categories were Hacking, Malware, and Social. The most common types of hacking actions used were the use of stolen login credentials, exploiting backdoors, and man-in-the-middle attacks … demonstrating where threats are really at. For fuzzier references to MiTM attacks and methods, see also this excellent answer to MITM attacks - how likely are they? on Serverfault. I would go …
answered Feb 22 '12 by Jeff Ferland
3
votes
Trying to write password resistance to brute force attacks as an equation: complexity * transformation cost = resistance. Your limiting bound on transformation cost is how long you want to work to …
answered Nov 10 '11 by Jeff Ferland