You asked - How to find out who hacked your snapchat The answer is Email Geo-location Depending on which email service provider you are using, you may be able to check the IP address from which the dirty email came.Step 1 To do this (with gmail), first, view the email that you would like to track. Find the drop down…
Cyber Security
Answered Mar 21, 2022
·
961 Views
Read answer →
Try looking for the details of NMAP traceroute with this command nmap -sn --traceroute And lookup these: https://serverfault.com/questions/432017/whats-going-on-with-traceroute https://svn.nmap.org/nmap/zenmap/share/zenmap/config/scan_profile.usp http://seclists.org/basics/2011/Mar/19
Cyber Security
Answered Mar 21, 2022
·
705 Views
Read answer →
SAML vs JWT SAML and OAuth 2 are protocols used in authentication/authorization. JSON Web Tokens (JWT) is a specification for a token that can be used in many applications or protocols - it happens that the OpenID Connect (OIDC) protocol uses the JWT. SAML also defines its own token: SAML Assertion; as does OAuth 2:…
Cyber Security
Answered Mar 17, 2022
·
1.3K Views
Read answer →
Iframes XSS have a special tag called "sandbox" that sets how to treat the content of the iframe. Using that tag, you can granularly set permissions to allow an iframe to interact with the parent. Normally iframes are pretty restrictive as to how they can affect a parent when loaded from a different domain, but if you…
Cyber Security
Answered Mar 15, 2022
·
879 Views
Read answer →
As you saw msnbot netstat on your computer,you should know that this IP address is in legitimate Microsoft IP space, and the msnbot process appears to be related to fetching Windows/Bing search results for the search functions integrated into Windows. Such processes are only called "bot" because search engine crawlers…
Cyber Security
Answered Mar 15, 2022
·
810 Views
Read answer →
Depending on how your VPN is configured, you might or might not use the same DNS for your VPN and for Internet. VPN's are (typically) like an additional IP stack on your system, and can have a separate DNS server address configured. But not all systems do this. If your VPN does not assign a new DNS for the VPN session…
Cyber Security
Answered Mar 14, 2022
·
796 Views
Read answer →
In theory, you could try to brute force the key and recover the data. In practice, that's extraordinarily unlikely to be successful as it would be expected to take a very, very long time. Per Wikipedia: AES-256 Decrypt permits the use of 256-bit keys. Breaking a symmetric 256-bit key by brute force requires 2128 times…
Cyber Security
Answered Mar 14, 2022
·
795 Views
Read answer →
HSM vs TPM Trusted Platform ModulesA Trusted Platform Module (TPM) is a hardware chip on the computer’s motherboard that stores cryptographic keys used for encryption. Many laptop computers include a TPM, but if the system doesn’t include it, it is not feasible to add one. Once enabled, the Trusted Platform Module…
Business Analyst
Answered Mar 14, 2022
·
3.1K Views
Read answer →
In my opinion "Yubikey Keepass 2 using OTP" can not be "secure". Why? OTP can not be used to encrypt data Keepass encrypts data and the problem with encrypted data is that you encrypt the data because you want to protect it against offline attacks. S.o. gets access to the data in the encrypted form and you want to…
Cyber Security
Answered Mar 14, 2022
·
683 Views
Read answer →
Just wanted to add this method of using fcrackzip CLI tool as a zip password cracker. It's in most Linux distro repos such as Ubuntu & Fedora/CentOS. Using it is pretty straightforward: $ fcrackzip -b -c a1:$% -l 1-6 -u myencrypted.zip Options -b - brute force -c a1:$% - specifies the character sets to use -l 1-6 -…
Cyber Security
Answered Mar 14, 2022
·
968 Views
Read answer →
The question how to access Windows 10 keylogger can be answered as - they don't really let us know where it is stored (we're not meant to access it), but it seems like this may be it: C:UsersusernameAppDataLocalMicrosoftInputPersonalizationTextHarvesterTextHarvester.dat According to Microsoft: Note: The…
Cyber Security
Answered Mar 9, 2022
·
3.4K Views
Read answer →
There are a number of ways to test for SQL Injection. The tests break down into three different methodologies: Blind Injection: MySQL example:http://localhost/test.php?id=sleep(30) If this SQL statement is interpreted by the database then it will take 30 seconds for the page to load. Error Messages:…
SQL Server
Answered Mar 9, 2022
·
846 Views
Read answer →