Andrew Jenkins

Explain Nmap intense scan vs quick result?

First, let's correct some assumptions and terminology which will make understanding of the nmap intense scan results a lot easier: The -F option is a "quick" scan because it scans only 100 ports. It is the equivalent of --top-ports 100. Without this option, Nmap scans 1000 TCP ports. The -A option is not "intense" but…

Cyber Security

Answered Mar 31, 2022 · 1.7K Views Read answer →

Are .exe files safe?

Are .exe files safe can be answered as - Online antivirus scanners detect known malware. New malware is not known to them, so it is absolutely possible to have malware that is not detected by any antivirus. An antivirus installed on your PC can use some more heuristics to detect potentially bad behaviour of running…

Cyber Security

Answered Mar 28, 2022 · 1.7K Views Read answer →

What's the purpose of DOS attack fin scan?

Regarding the DOS attack fin scan - Disconnect the "192.168.1.6" IP address from your router. If your router gateway is "192.168.1.1" then the dos attack log from 192.168.1.6 is another computer connected to your router. If you don't know how to disable it in the router settings, configure a rule in your firewall to…

Salesforce

Answered Mar 24, 2022 · 4.8K Views Read answer →

Can I hide webresource.axd and scriptresource.axd files?

This question seems more to fit in stack overflow. However you can remove those files by adding following to all my web.config files Now when y

Cyber Security

Answered Mar 23, 2022 · 1.4K Views Read answer →

Can I securely embed an iframe HTTPS on the HTTP page?

An iframe HTTPS within a page served over HTTP will not allow the user to be sure they are actually using the HTTPS connection that they expect to be; therefore, this potentially allows the iframe to be hijacked in a simple attack such as an iframe injection. This would allow password harvesting, among other things.…

Cyber Security

Answered Mar 21, 2022 · 1.2K Views Read answer →

On Mystalk Or Instagram How Would People Know That I See Their Stories

You asked - How would people know that I see their stories on mystalk Or Instagram : Assuming with 'people', you mean your friends, it is highly unlikely they will know it was you unless they would know your IP address and use some sort of analytics to see who visited and from where. It used to be possible for…

Cyber Security

Answered Mar 21, 2022 · 2.4K Views Read answer →

How to tell if a text message is spoofed?

The answer to how to tell if a text message is spoofed is that the best way to detect if the message was spoofed or not is to check the message-centre. Normally, a spoofed source will have the message-centre show a different gateway from the network of the gateway where the originating source is. Ex. Spoofed ID:…

Cyber Security

Answered Mar 17, 2022 · 1.4K Views Read answer →

From a security point of view, which is better if we compare SPF vs DKIM?

In a nutshell, SPF vs DKIM - SPF uses path-based authentication while DKIM uses an identity-based authentication. SPF uses DNS to publish a record of all mail transfer authorities (MTA) authorized to send mail on behalf of the domain. Recipient MTAs then query DNS for the SPF record and reconcile the list of approved…

Cyber Security

Answered Mar 14, 2022 · 1.2K Views Read answer →

Why is NAT not needed in IPv6?

The details of this answer will assume you use a Linux box as your firewall. If you use another platform details may vary but most of the principles should still hold. Why is NAT not needed in IPv6? Nat for ipv6 is strongly discouraged by Nevertheless there are implementations out there if you really want it. For…

Cyber Security

Answered Mar 14, 2022 · 53 Views Read answer →

How can I know if there is a javascript virus?

It most certainly is a javascript virus. It uses JavaScript with ActiveX* and VBScript to download and execute a stage two payload that does something else. Although it is written in JavaScript, it is not executed in the browser. Instead, it is executed in the Windows Script Host when it is double-clicked. This is the…

Java

Answered Mar 10, 2022 · 1.2K Views Read answer →

How can I create and use the cross signing certificate?

OK, this is the best that I came up with so far. The problem with depth processing, I believe, is just OpenSSL's. It's not good that it can't build proper paths. RFC-5280, Sec 6.1 says: A certificate MUST NOT appear more than once in a prospective certification path. OpenSSL probably violates that. However, I have to…

Cyber Security

Answered Feb 28, 2022 · 3.3K Views Read answer →

How is the PKCS.7 certificate different from X.509?

PKCS.7 can be thought of as a format that allows multiple certificates to be bundled together, either DER- or PEM- encoded, and may include certificates and certificate revocation lists (CRLs). Per RFC2315, PKCS#7 isa general syntax for data that may have cryptography applied to it, such as digital signatures and…

Cyber Security

Answered Feb 28, 2022 · 1.4K Views Read answer →