Trending questions in Cyber Security & Ethical Hacking

0 votes
1 answer

Are Security Controls Overlapping?

In information security, overlapping controls, where a ...READ MORE

Jan 7, 2025 in Cyber Security & Ethical Hacking by CaLLmeDaDDY
 • 31,280 points • 792 views
0 votes
1 answer

How Can P2P Systems Recover Compromised Identities Using a Web-of-Trust?

In peer-to-peer (P2P) systems, the Web of ...READ MORE

Jan 10, 2025 in Cyber Security & Ethical Hacking by CaLLmeDaDDY
 • 31,280 points • 639 views
0 votes
1 answer

Is code obfuscation common in FOSS?

In Free and Open-Source Software (FOSS), code ...READ MORE

Jan 10, 2025 in Cyber Security & Ethical Hacking by CaLLmeDaDDY
 • 31,280 points • 637 views
0 votes
1 answer

Why does NMAP host discovery give different results between NAT and Bridged modes?

The discrepancies in Nmap host discovery results ...READ MORE

Dec 23, 2024 in Cyber Security & Ethical Hacking by CaLLmeDaDDY
 • 31,280 points • 1,412 views
0 votes
1 answer

How to Secure Windows Services with Open Ports Without Compromising Functionality?

Securing Windows services that require open ports ...READ MORE

Jan 7, 2025 in Cyber Security & Ethical Hacking by CaLLmeDaDDY
 • 31,280 points • 761 views
0 votes
1 answer

Does code obfuscation give any measurable security benefit?

Code obfuscation involves deliberately making code difficult ...READ MORE

Jan 10, 2025 in Cyber Security & Ethical Hacking by CaLLmeDaDDY
 • 31,280 points • 601 views
0 votes
1 answer

Why would a replay attack be considered a threat to integrity and not confidentiality?

A replay attack involves an attacker intercepting ...READ MORE

Dec 26, 2024 in Cyber Security & Ethical Hacking by CaLLmeDaDDY
 • 31,280 points • 1,212 views
0 votes
1 answer

Which command-line tools are recommended for SNMP enumeration?

Effective SNMP enumeration is essential for network ...READ MORE

Dec 19, 2024 in Cyber Security & Ethical Hacking by CaLLmeDaDDY
 • 31,280 points • 1,508 views
0 votes
1 answer

What is recipient non-repudiation in secure email transport?

Recipient non-repudiation in secure email transport refers ...READ MORE

Dec 31, 2024 in Cyber Security & Ethical Hacking by CaLLmeDaDDY
 • 31,280 points • 1,001 views
0 votes
0 answers

How can I securely log user metadata (IP addresses) without compromising privacy in a web app?

In our web application, we need to ...READ MORE

Dec 31, 2024 in Cyber Security & Ethical Hacking by Anupam
• 18,950 points • 937 views
+1 vote
1 answer

How to exploit open ports?

Exploiting open ports is a common attack ...READ MORE

Nov 7, 2024 in Cyber Security & Ethical Hacking by CaLLmeDaDDY
 • 31,280 points • 3,256 views
0 votes
0 answers

Which of the following poses the greatest risk to an organization's computer network security?

I’ve been analyzing several potential risks to ...READ MORE

Dec 31, 2024 in Cyber Security & Ethical Hacking by Anupam
• 18,950 points • 919 views
0 votes
1 answer

What’s the difference between auditing, accounting, logging, and accountability?

In the context of security and monitoring, ...READ MORE

Dec 26, 2024 in Cyber Security & Ethical Hacking by CaLLmeDaDDY
 • 31,280 points • 1,184 views
0 votes
1 answer

How many businesses experienced a Spectre/Meltdown attack?

Even though there aren't exact numbers on ...READ MORE

Nov 29, 2024 in Cyber Security & Ethical Hacking by CaLLmeDaDDY
 • 31,280 points • 2,297 views
0 votes
1 answer

How can I enumerate valid email addresses using SMTP enumeration techniques?

An essential component of a security audit ...READ MORE

Nov 19, 2024 in Cyber Security & Ethical Hacking by CaLLmeDaDDY
 • 31,280 points • 2,999 views
0 votes
1 answer

Is the MFA push notification approval/deny method safe in O365? Concerns over phishing risks and user behavior?

Multi-Factor Authentication (MFA) using push notifications in ...READ MORE

Jan 2, 2025 in Cyber Security & Ethical Hacking by CaLLmeDaDDY
 • 31,280 points • 870 views
0 votes
0 answers

Why Should a Testing Network Be Non-Routable to the Firewall?

I’m setting up a testing network for ...READ MORE

Jan 2, 2025 in Cyber Security & Ethical Hacking by Anupam
• 18,950 points • 799 views
0 votes
1 answer

How can I control the use of admin tools like IP scanners and PsExec to prevent misuse?

Admin tools like IP scanners and PsExec ...READ MORE

Dec 31, 2024 in Cyber Security & Ethical Hacking by CaLLmeDaDDY
 • 31,280 points • 918 views
0 votes
1 answer

Are control categories actually exclusive in security?

In information security, controls are commonly categorized ...READ MORE

Jan 7, 2025 in Cyber Security & Ethical Hacking by CaLLmeDaDDY
 • 31,280 points • 598 views
0 votes
1 answer

You need to email a spreadsheet containing personal data. How should you send it?

Here's a step-by-step guide on the best ...READ MORE

Nov 27, 2024 in Cyber Security & Ethical Hacking by CaLLmeDaDDY
 • 31,280 points • 2,347 views
0 votes
0 answers

How to create an effective threat model using OWASP Threat Dragon: Understanding actors, processes, and trust boundaries?

I’m exploring OWASP Threat Dragon to build ...READ MORE

Dec 30, 2024 in Cyber Security & Ethical Hacking by Anupam
• 18,950 points • 894 views
0 votes
1 answer

How to decrypt the encrypted password?

The technique used to guard an encrypted ...READ MORE

Nov 26, 2024 in Cyber Security & Ethical Hacking by CaLLmeDaDDY
 • 31,280 points • 2,386 views
0 votes
1 answer

What are the relative costs involved in making changes to the current organizational security?

Evaluating the costs associated with enhancing your ...READ MORE

Dec 31, 2024 in Cyber Security & Ethical Hacking by CaLLmeDaDDY
 • 31,280 points • 885 views
0 votes
1 answer

How to interpret cost comparison for changes in organizational security procedures?

Interpreting a report that compares the costs ...READ MORE

Dec 31, 2024 in Cyber Security & Ethical Hacking by CaLLmeDaDDY
 • 31,280 points • 883 views
0 votes
0 answers

What’s the purpose of the secret in express-session? How does it mitigate threats?

I’ve noticed that the express-session library requires ...READ MORE

Dec 30, 2024 in Cyber Security & Ethical Hacking by Anupam
• 18,950 points • 867 views
0 votes
0 answers

Is bcrypt a hashing algorithm?

I’ve been learning about various cryptographic techniques, ...READ MORE

Dec 31, 2024 in Cyber Security & Ethical Hacking by Anupam
• 18,950 points • 808 views
0 votes
1 answer

How to bypass CVV code?

In order to understand how attackers bypass ...READ MORE

Nov 25, 2024 in Cyber Security & Ethical Hacking by CaLLmeDaDDY
 • 31,280 points • 2,398 views
0 votes
1 answer

How Secure Are Virtual Machines?

Virtual machines (VMs) are widely used to ...READ MORE

Jan 3, 2025 in Cyber Security & Ethical Hacking by CaLLmeDaDDY
 • 31,280 points • 734 views
+1 vote
1 answer

How do I create a custom Metasploit payload that avoids antivirus detection?

If you're trying to create a custom ...READ MORE

Oct 23, 2024 in Cyber Security & Ethical Hacking by CaLLmeDaDDY
 • 31,280 points • 3,815 views
0 votes
1 answer

How is authentication related to the CIA triad?

Authentication is a fundamental component of the ...READ MORE

Dec 26, 2024 in Cyber Security & Ethical Hacking by CaLLmeDaDDY
 • 31,280 points • 1,038 views
0 votes
1 answer

Why does HTTPS not support non-repudiation?

HTTPS (Hypertext Transfer Protocol Secure) is designed ...READ MORE

Dec 31, 2024 in Cyber Security & Ethical Hacking by CaLLmeDaDDY
 • 31,280 points • 823 views
0 votes
1 answer

What is a 2FA attestation object for non-repudiation?

In the context of two-factor authentication (2FA), ...READ MORE

Dec 27, 2024 in Cyber Security & Ethical Hacking by CaLLmeDaDDY
 • 31,280 points • 965 views
0 votes
0 answers

How can I securely log user metadata without exposing personally identifiable information (PII) in a web app?

We want to improve our logging practices ...READ MORE

Dec 31, 2024 in Cyber Security & Ethical Hacking by Anupam
• 18,950 points • 738 views
0 votes
1 answer

Is it possible to get the user groups or other attributes with TACACS authentication?

Yes, the TACACS+ (Terminal Access Controller Access-Control ...READ MORE

Dec 26, 2024 in Cyber Security & Ethical Hacking by CaLLmeDaDDY
 • 31,280 points • 1,033 views
0 votes
0 answers

How does single sign-on (SSO) enhance security in an architecture?

We are considering implementing Single Sign-On (SSO) ...READ MORE

Dec 31, 2024 in Cyber Security & Ethical Hacking by Anupam
• 18,950 points • 734 views
0 votes
1 answer

What could cause Nmap host discovery not to show all hosts?

Nmap's host discovery may yield incomplete results ...READ MORE

Dec 23, 2024 in Cyber Security & Ethical Hacking by CaLLmeDaDDY
 • 31,280 points • 1,100 views
0 votes
1 answer

How to check if someone is remotely accessing your computer?

Here's a step-by-step guide to help you ...READ MORE

Nov 29, 2024 in Cyber Security & Ethical Hacking by CaLLmeDaDDY
 • 31,280 points • 2,127 views
0 votes
1 answer

Does PCI DSS require an SAQ for each site?

When managing PCI DSS compliance for a ...READ MORE

Dec 31, 2024 in Cyber Security & Ethical Hacking by CaLLmeDaDDY
 • 31,280 points • 761 views
0 votes
1 answer

What is the overarching term for authentication and authorization?

The overarching term that encompasses both authentication ...READ MORE

Dec 26, 2024 in Cyber Security & Ethical Hacking by CaLLmeDaDDY
 • 31,280 points • 942 views
0 votes
1 answer

Why isn't AES-256 with Argon2i-based memory hardening used for at-rest file encryption?

Combining AES-256 encryption with Argon2i key derivation ...READ MORE

Jan 2, 2025 in Cyber Security & Ethical Hacking by CaLLmeDaDDY
 • 31,280 points • 679 views
0 votes
0 answers

Why the Something You Know Factor is Considered the Weakest in Authentication?

In authentication systems, the Something You Know factor, ...READ MORE

Jan 2, 2025 in Cyber Security & Ethical Hacking by Anupam
• 18,950 points • 610 views
0 votes
1 answer

Can information security risks essentially only be triaged according to the CIA triangle?

While the CIA triad—Confidentiality, Integrity, and Availability—provides ...READ MORE

Dec 26, 2024 in Cyber Security & Ethical Hacking by CaLLmeDaDDY
 • 31,280 points • 922 views
0 votes
1 answer

What are the best methods to prevent session hijacking?

Preventing session hijacking requires a comprehensive approach ...READ MORE

Dec 26, 2024 in Cyber Security & Ethical Hacking by CaLLmeDaDDY
 • 31,280 points • 958 views
0 votes
1 answer

Who is the creator of the CIA triad?

The CIA triad, representing Confidentiality, Integrity, and ...READ MORE

Dec 26, 2024 in Cyber Security & Ethical Hacking by CaLLmeDaDDY
 • 31,280 points • 904 views
0 votes
1 answer

Why would full disk encryption miss slack space, swap files, and memory?

Full Disk Encryption (FDE) is designed to ...READ MORE

Dec 31, 2024 in Cyber Security & Ethical Hacking by CaLLmeDaDDY
 • 31,280 points • 704 views
0 votes
1 answer

How to spoof an IP address?

What is IP Address Spoofing? IP address spoofing ...READ MORE

Nov 15, 2024 in Cyber Security & Ethical Hacking by CaLLmeDaDDY
 • 31,280 points • 2,655 views
0 votes
1 answer

How to achieve non-repudiation?

Non-repudiation ensures that a party cannot deny ...READ MORE

Dec 27, 2024 in Cyber Security & Ethical Hacking by CaLLmeDaDDY
 • 31,280 points • 838 views
0 votes
0 answers

How to regain SSH access without alerting a threat actor?

Our server may have been compromised, and ...READ MORE

Dec 30, 2024 in Cyber Security & Ethical Hacking by Anupam
• 18,950 points • 673 views
0 votes
0 answers

How to prevent lookalike domain phishing and secure client-side code against replication?

We’re concerned about phishing attacks using lookalike ...READ MORE

Dec 30, 2024 in Cyber Security & Ethical Hacking by Anupam
• 18,950 points • 663 views
0 votes
1 answer

Can someone explain what enumeration means in network security?

In network security, enumeration refers to the ...READ MORE

Dec 19, 2024 in Cyber Security & Ethical Hacking by CaLLmeDaDDY
 • 31,280 points • 1,162 views
Page:

Most popular tags

"PMP®","PMI®", "PMI-ACP®" and "PMBOK®" are registered marks of the Project Management Institute, Inc. MongoDB®, Mongo and the leaf logo are the registered trademarks of MongoDB, Inc.