You asked how to get someone's IP from kik - A modified version of Kik messenger could be able to pose a security threat to other users, however there could be limitations though. For example, on a normal Kik messenger you cannot style your messages by customising your own messages with HTML or javascript (we are…
Cyber Security
Answered Mar 29, 2022
·
2.5K Views
Read answer →
There's a few problems with your configuration as it stands, and some other concerns which should be addressed regarding setting up a pentesting lab in a shared network environment. Firstly, only systems with a Bridged or NAT adapter will be able to communicate with anything beyond the VM network and/or host system. A…
Cyber Security
Answered Mar 29, 2022
·
763 Views
Read answer →
7zip password cracker is secure since it uses AES-256 in CBC mode that can provide CPA security and there is no problem there. Keep in mind that CBC has no integrity and authentication. The real problem comes from the human side; the password! 7zip uses 219-times iterated SHA256 to derive the AES-256 key from…
Cyber Security
Answered Mar 29, 2022
·
809 Views
Read answer →
A payment handler is user software to make a payment. Payment handlers may be implemented as Web pages, native mobile apps, or even built into the browser. Since the launch of the Web Payments Working Group, we have had as a goal to add extensibility hooks to browsers to foster payment handler innovation.
Cyber Security
Answered Mar 28, 2022
·
3.1K Views
Read answer →
How can password_verify php know the algorithm used, the salt and the cost? $save_hash looks like this: $2y$10$nmqlFAguURkkWhjgn7LP7.QxLw2fQ9GYSkiaEbypgXg6L4bESC.Mu Which is a bunch of fields separated by $: What Means this 2y Type of hash, in this case bcrypt10 The cost Salt and password hash The first 22 characters…
Cyber Security
Answered Mar 28, 2022
·
1.1K Views
Read answer →
Besides dictionary attacks or other possible techniques (like timing attacks, etc.), an attacker might try brute forcing all the combinations (if possible), or just try some combinations at random to guess your longest password (until they give up because it's not worth continuing). Suppose you have a 24-char…
Cyber Security
Answered Mar 25, 2022
·
1.1K Views
Read answer →
Applies to Windows 10 Windows Server 2016 To configure Windows Firewall to log dropped packets or successful connections, use the Windows Firewall with Advanced Security node in the Group Policy Management MMC snap-in. Administrative credentialsTo complete these procedures, you must be a member of the Domain…
Cyber Security
Answered Mar 25, 2022
·
1.5K Views
Read answer →
Regarding HP sure start trigger warnings, I think it looks like something is updating your trusted keys in UEFI (if you are using BIOS or "legacy", please switch to UEFI). This might come from the Ubuntu OS (or not). Have you updated the firmware of your motherboard? Have you set an admin password on your BIOS/UEFI?…
Cyber Security
Answered Mar 22, 2022
·
1.2K Views
Read answer →
That depends on the DNS configuration for the local networks. I would assume most companies have their own DNS servers which, aside from knowing where to ask for DNS records for other domains, also declare themselves as authoritative for the .local TLD. Assuming all clients are pointing at these DNS servers, owning…
Cyber Security
Answered Mar 22, 2022
·
779 Views
Read answer →
The IPsec stack does not create its own keys, or request any keys for that matter, instead the IKE daemon generates as much key material as required for the negotiated encryption and authentication algorithms using the PRF+ How key material is taken from the expanded KEYMAT is described in detail in RFC 7296 (IKEv2),…
Cyber Security
Answered Mar 22, 2022
·
992 Views
Read answer →
TLS_RSA_WITH_3DES_EDE_CBC_SHA - You should disable all triple DES ciphers because 192 bit triple DES keys only have about 112 bits of security and 128 bit triple DES keys have even less than 112 bit security, rather around 80 bits for the best attacks. Furthermore, triple DES only has a 64 bit block size, which is…
Cyber Security
Answered Mar 22, 2022
·
1.2K Views
Read answer →
Regarding the airprint security, if you want to use your printer, you cannot mitigate all risks. Even if it is at this moment not possible to hack your specific printer, that does not mean that it won't be possible in the (even near) future. So you need permanent subscription to security/vulnerabilities reports. What…
Cyber Security
Answered Mar 21, 2022
·
3.6K Views
Read answer →