Skip to main content
20 votes

Is VLC on Linux vulnerable to an attack from .wmv files designed to install viruses?

Video files by themselves can not contain a "virus" in the classical sense but they can be used to exploits bugs in the media players (or sometimes even the OS) when handling the file formats and ...
Steffen Ullrich's user avatar
13 votes
Accepted

Is VLC on Linux vulnerable to an attack from .wmv files designed to install viruses?

Yes, VLC can be hacked. Here you can check CVE list of VLC. But don't panic, just because your VLC freeze, that doesn't necessarily ​mean that someone hacked you. Make sure that your VLC is up to ...
Mirsad's user avatar
  • 10.2k
7 votes

Forensic analysis of file metadata

Where metadata is stored will be up to the OS and the file that created it (as you say about Notepad and Word docs). Some file types even create a separate file just to hold the metadata. Because of #...
schroeder's user avatar
  • 131k
6 votes
Accepted

What is the format of an X9.62 key?

It indeed is not ASN.1. (AFAIK all) The formats from X9.62 are replicated in SEC1 free from SECG with a curve point (which is the actual public key value, excluding metadata) in 2.3.3 and 2.3.4. ...
dave_thompson_085's user avatar
6 votes

Ensuring that non-executable files are not malicious

There is a new and growing technology area called Content Disarm and Reconstruction (CDR). This does what you are asking for in general, however not all CDR solutions tackle all file types (like audio ...
schroeder's user avatar
  • 131k
5 votes

Is VLC on Linux vulnerable to an attack from .wmv files designed to install viruses?

The attack listed in the referenced question certainly would not work with VLC or Linux. VLC does not support the obscure Windows Media Player DRM it utilizes (at least not to my knowledge), and even ...
Alexander O'Mara's user avatar
4 votes
Accepted

Forensic analysis of file metadata

You can use Apache Tika and create your own program to extract metadata, it is pretty easy to do and here is a tutorial on how to do that. As the other answer says there is no surefire way to extract ...
Ian's user avatar
  • 156
4 votes
Accepted

Can you trace someone through picture header information?

Modern Smart phones embed GPS coordinates into pictures. http://www.howtogeek.com/211427/how-to-see-exactly-where-a-photo-was-taken-and-keep-your-location-private/ This is often how sought out ...
Jeff Meigs's user avatar
4 votes

Can a file named "agreement.execds.pdf" really contain an executable file?

Can a file named “agreement.execds.pdf” really contain an executable file? In general yes. An executable file can be given any name, including any file name extension (the file type at the end of ...
David Andersson's user avatar
4 votes

Can a file named "agreement.execds.pdf" really contain an executable file?

I've seen this before, and it is a result of an unintelligent filter. It is picking up on the ".exe" in the middle of the file name. agreement .exe cds.pdf If you rename the file it should pass ...
Numeron's user avatar
  • 2,495
3 votes
Accepted

How does an OS execute code from a PNG file?

Looks that the bug is on the application that reads the PNG file. This works in the same way with vulnerabilities on pdf files, the vulnerability is on the application that process that file not on ...
camp0's user avatar
  • 2,267
3 votes
Accepted

What kind of encryption is this file using? It used to be plain text

Well, it may be encoded in binary instead of text. In that case, the data would still be there. But if the files are roughly the same size, than that most likely won't be the case. If it is indeed ...
Peter Harmann's user avatar
3 votes

Why are .URL and .WSH files considered dangerous?

.url may lead the use to click and redirect to website that host malicious exploit code, e.g. execute exploit code on installed unpatched software. Blocking of WSH is similar to blocking autorun.inf ...
mootmoot's user avatar
  • 2,407
3 votes
Accepted

What is an electronic document in the context of encryption?

In this case, I would recommend not overthinking it. The primary reason why it matters that it is an "electronic" document is that the document can be readily copied by electronic means. In public ...
Cort Ammon's user avatar
  • 9,396
3 votes

Various questions about file compression and encryption regarding hacking (zip, rar, 7z)

TL;DR; If the data is valuable, "slow down" will fix nothing. a script can be written to uncompress multi-level compression Brute force is possible. And also the password protection mechanism, using ...
mootmoot's user avatar
  • 2,407
3 votes

Ensuring that non-executable files are not malicious

It depends on the vulnerability. You can most likely remove the exploit by re-encoding or repacking the audio data. However, to do so, you must take care not to use the vulnerable library to decode ...
A. Hersean's user avatar
  • 10.6k
2 votes

Forensic analysis of file metadata

To complete #2 of this answer, there exists exiftool, which can show you the metadata (inside the file as well as file system metadata) of quite a range of file types, ranging from JPEG images over ...
Axel Beckert's user avatar
2 votes

Forensic analysis of file metadata

The Unix/Linux file command will extract a lot of metadata inside files, and if you are using Windows, you can install cygwin to gain access to that command or for recent Windows 10 versions, WSL (...
Mark Stewart's user avatar
2 votes
Accepted

Blacklisting accepted file extensions: how careful do I need to be

A file extension is just part of the name and by itself says nothing about the content of the file. It is only used by the OS and applications to decide what to do with the file. Thus if you have no ...
Steffen Ullrich's user avatar
2 votes

Various questions about file compression and encryption regarding hacking (zip, rar, 7z)

Many of the techniques you suggest are Security Through Obscurity. For example, naming a zip file as a psd will only slow down the attacker slightly. Using multiple different types of encryption and ...
700 Software's user avatar
2 votes

EML file type analysis

Spam and malware detection on mail files is done with a variety of techniques. To give you some idea of the techniques and heuristics involved here are some examples. Note that these examples are far ...
Steffen Ullrich's user avatar
2 votes

Difference between phpp, php, and phP?

Like a usual CTF challenge, the idea is that someone set something up but there is a vulnerability in it. Your goal is to get the flag, and since you can upload a file, you probably have to get your ...
Luc's user avatar
  • 33k
2 votes

Can I file download server specify what logo the file will have on the user's computer?

A icon / logo is not a security control and applications can specify any icon they wish attached to an exe and ini files on a desktop for windows.
McMatty's user avatar
  • 3,250
2 votes
Accepted

Why is VirusTotal "unable to process file type" for files packed with Mpress?

It’s likely the antivirus products are detecting the usage of MPress itself as a sign the file is malicious. Executable packers create files which are usually significantly different from “normal” ...
David's user avatar
  • 744
2 votes

How can I be attacked by opening a corrupt MS Office document?

There are many reasons to why a corrupt MS Office document could attack your computer when it is opened. The first reason is Macros, which is typically coded in Visual Basic. The code of the macros ...
Amol Soneji's user avatar
2 votes

Can string concatenation in file_get_contents() be exploited in PHP?

Per the comment above you could use path truncation on an older version of PHP, however, as there is no data before the attacker controlled data you can use wrappers (https://www.php.net/manual/en/...
wireghoul's user avatar
  • 5,969
2 votes

What PDF file format alternative should I choose if I am looking for more security in my document files?

There are a number of ways to divulge documents, all with their pro and cons. A simple comparison of a number of common formats is: Format Pro Con MS Word .doc ...
Ljm Dullaart's user avatar
  • 2,125
2 votes
Accepted

How can I make sure an image uploaded to my server is not harmful?

should I convert the images into a uniform format or can I just safely use the same format again? Quite probably, you will want to crop/resize the image anyway, and possibly add a watermark (which ...
Kate's user avatar
  • 8,405
2 votes

Can a file extension be spoofed in windows?

One way to do so would be to have a file evil.txt.exe. The user may think its a txt file and double click it which will cause it to execute. Two things to note here here: The file icon will not look ...
termcap's user avatar
  • 31

Only top scored, non community-wiki answers of a minimum length are eligible