Collaborate Disseminate
I have a virtual attack server that I’ve thrown 10 nics on so I can run multiple scans in tandem without interfering with each other. I haven’t been able to find it, but does Nikto have a way to choose a specific interface to scan from? nm… Continue reading Scan with Nikto using specific interface
When using asymmetric encryption, signing and encryption are the same, but opposite, operations.
Say I have my drive encrypted with asymmetric encryption.
If I save a signed file to that drive, using the same key, would that file be in the… Continue reading Saving signed file on an encrypted drive using symmetric encryption
I’ve read a lot of advice against storing your 2FA codes in your password manager and I don’t understand why. Isn’t a file on your computer something you have?
There is the added benefit that you don’t have to worry about losing your phone… Continue reading Can a file on your computer be the "something you have"?
Is there an efficient way to hide nginx from Nmap’s Version Detection scan (nmap -sV)? The following is a sample result, we are trying to hide the nginx (reverse proxy) string.
PORT STATE SERVICE VERSION
80/tcp open http nginx (rever… Continue reading Blocking nginx from nmap version detection
How could an app that is malware be on the Google Play store? I found a Bible app "Bible Home" (which exhibits malware like behavior) available for Android on the Play Store. However, after installing it, I didn’t see the app. … Continue reading How can malware remain on the Google Play store?
Can someone give me examples of advanced operating system utilities and commands that bypass system access controls?
In context of application level control, how could these utilities potentially affect the application?
It could be web app… Continue reading Can someone give examples of Advanced operating system utilities and commands? [closed]
I am doing a practise SQL injection in a search field and I don’t understand the logic of what is happening.
The following behaviours is what I noticed:
Entering ‘ OR ‘1’ = ‘1 shows all the results.
Entering ‘ Shows no res… Continue reading SQL Injection only with OR
This question already has an answer here:
Are random URLs a safe way to protect profile photos?
7 answers
Is including a se… Continue reading Does random file name is hackable? [duplicate]
Looking at write-blocking devices I’ve notice a large variety of specialized hardware based on different source connector types, including USB-to-USB write blockers. It seems as though it should be sufficient to use the latte… Continue reading Commodity Conversion Cables with Write Blockers
I was wondering if any of you know of a guide similar to the OWASP Testing Guide but meant specifically for desktop applications?
I had no luck searching the Internet.
I am looking for something that focuses on or includes … Continue reading OWASP Testing Guide Equivalent for Desktop Applications