Andrea Bailey

Differentiate between Due care vs Due Diligence.

Due care vs Due Diligence The issue is somewhat complicated by the fact that "due diligence" has a distinct, legal meaning in contract law, but since OP added the CISSP tag, I'll confine this answer to the usual meaning in that context. Simply put "due diligence" is what you know, and "due care" is what you do.…

Cyber Security

Answered Mar 14, 2022 · 792 Views Read answer →

What's the process of blocking bit torrent?

You have a number of ways for blocking bit torrent: Blocking ports: this doesn't work, because p2p traffic can use pretty much any port (even ones below 1024) Deep inspection: looking at traffic and blocking based on type can help you a lot, however encrypted traffic all looks alike Destination filtering: this may…

Cyber Security

Answered Mar 14, 2022 · 599 Views Read answer →

How can I decrypt hash password with salt?

To decrypt hash password with salt, you must understand that hash functions are designed to go only one way. If you have a password, you can easily turn it into a hash, but if you have the hash, the only way to get the original password back is by brute force, trying all possible passwords to find one that would…

Cyber Security

Answered Mar 14, 2022 · 955 Views Read answer →

Is grabify safe?

You asked - Is grabify safe? So, Don't worry, your phone is not hacked.Essentially they send you a tracking link and they know from which IP address this link was accessed. They then can match this IP address to your ISP, and might infer a more or less precise location depending on how your ISP assigns IP addresses.…

Cyber Security

Answered Mar 14, 2022 · 1.5K Views Read answer →

What do I do in the situation where John the ripper no password hashes loaded?

In this case of John the ripper no password hashes loaded - john --format=rar --wordlist=pass.txt test.rar You're telling john to look in the original .rar file for password hashes. John the Ripper does not understand how to parse .rar files (that's what rar2john is for); you need to pass the file containing the…

Cyber Security

Answered Mar 14, 2022 · 3.7K Views Read answer →

Can I get root access to a system that is using a setuid root binary?

execlp does not have an absolute path for chown here, so you should be able to manipulate the linux PATH variable and get arbitrary code execution. In order to do this, write a simple C program which calls system shell like : #include ... void main(){ system("/bin/bash"); }Save this file and compile this program using…

Cyber Security

Answered Mar 14, 2022 · 788 Views Read answer →

OpenVAS vs Nessus, which is better?

A recent test of OpenVAS vs Nessus shows the benefits in using multiple scanners due to the difference in the signatures: Nessus, OpenVAS and Nexpose VS Metasploitable (blog post by Peter at HackerTarget) Out of 15 known security holes in the system used for the test, 4 were spotted by all four tested tools (Nessus,…

Cyber Security

Answered Mar 14, 2022 · 841 Views Read answer →

Is Facebook video calling safe and private?

The answer to - Is Facebook video calling safe and private is that Nothing is safe. But it is always a question of how much effort needed to attack specific resource, and how much trust you give to people that hold the data and build software. No need to be paranoid, but its healthy to ask yourself questions, like:…

Cyber Security

Answered Mar 11, 2022 · 700 Views Read answer →

With all ports closed, how can I access the internet?

Access to the Internet consists of contacting hosts outside of your network, which relies on routing traffic via your local gateway, also your router typically. This traffic is sent to the router but not by accessing TCP or UDP ports since you're not trying to connect to the router itself. The router modifies the…

Cyber Security

Answered Mar 10, 2022 · 990 Views Read answer →

Can MP4 files have viruses?

To answer your questions - Can mp4 files have viruses, we have to understand what malware in an mp4 file actually means. An mp4 file isn't an executable, so it will not run any (malicious) code directly. Therefore, if a mp4 file contains malware that wants to execute instructions, it has to exploit a vulnerability…

Cyber Security

Answered Mar 9, 2022 · 1.0K Views Read answer →

When is HMAC used?

HMAC is a computed "signature" often sent along with some data. The HMAC is used to verify (authenticate) that the data has not been altered or replaced. Here is a metaphor:You are going to mail a package to Sarah which contains a photograph. You expect her to open the package and view the photograph. At some point in…

Cyber Security

Answered Mar 3, 2022 · 780 Views Read answer →

Devices with cryptic names such as hangzhou device have connected to my router, what am I supposed to do now?

These (Hangzhou devices and others) are not real devices. Your network device has some sort of memory fault and is displaying memory as "addresses". You can see that the device names contain sections of some JavaScript-like code. The IP and MAC addresses, when ASCII-decoded, show similar data: 120.91.105.43 = 'x[i+'…

Cyber Security

Answered Mar 2, 2022 · 2.0K Views Read answer →