O'Niel

I have a small web-project. I want to daily backup the database. Ideally I'd use a master-slave architecture but the budget is not there. So I need to stick to mysqldump. What would the estimated time to backup a database with mysqldump if the database would never contain more than 1.000.000 records with all tables combined?

It was a deauth attack

It were packages of a specific protocol but I forgot which protocol and what the name of the attack was.

Does someone know the name of the following attack: You could simply send a bunch of packages to a router/Wifi-point and it would get overflown and thus taken offline.

Is there any danger in putting the ID (primary_key) of an ticketing-order database on the physical ticket of the user related to that ID?

just example@domain

With other words an email without a top-level domain like .org, .net. .com,...

Question about email validation. Is there a context in which mails like name@domain are valid? instead of [email protected]? In a intranet environment for example?

When you visit another's Facebook profile, you can see his friends. Are those friends ordered by most interacted with you, or most interacted with the person who's profile you're viewing?

Just wondering, is there any possible security risk in using an application like Franz instead of webbrowser? I couldn't think of anything. Is it actually more secure because your chats are separated from your actual (dangerous) browsing activities?

Does someone here by any chance has a security/software company?

Is Firejail for Firefox secure enough to protect against malware coming in from the browser? I mean the Desktop and Downloads folder are still accessible.

I've got a question. In movies I hear a lot of people talking about 'untraceable and encrypted' phones? But what'd be the difference of those 'special expensive phones' and me buying a dedicated $50 smartphone and using only Signal on it? Besides those so called 'security mechanisms' e.g Blackphone uses.

@Limit No problemo amigo! At least I learned something from it! ;)

@Limit now I don"t even get an empty terminal, but just nothing. :D

@Limit That just gives me an empty new terminal window "gnome-terminal --command=cat test.txt"

Is it possible to open the result of the cat-command in a new terminal? Something like the 'gnome-terminal' command.

In the paragraph with title "Uploading a webshell and code execution" (Ctrl + F > "in 2010")

No I mean the vulnerability they talk about here: pentesterlab.com/exercises/from_sqli_to_shell_II/course

Someone knows if Metasploit payload does have cookie-stealing option for Chrome and Firefox?

Is that also in Apache?

In Nginx there is often a flow that allows code in images to be executed when you visit the URL of that image.

Does someone know a very active IRC about legal pentesting?

@RоryMcCune Would you bother telling me the network settings of that VM? I have a Host-only adapter and NAT-adapter set, the vm is found but I just don't get the website on it.

pentesterlab.com/exercises/cve-2014-6271

@RоryMcCune thanks! However I'm trying Shellshock, and thought the ISO was to setup in a VM and represented a 'vulnerable website' however, there is no website on that ISO when I visit it's IP.

However, I'm wondering... I finished one and indeed learnt from it, but is this way of learning really useful? Because it felt a lot like a game/queste-thingie/...

@TheJulyPlot Thanks a lot! Just done one.

Or a way to practice it on Metasploitable very web-server specific? Metasploitable is a bit to general for what I want to practice now.

Hi. I'm already experimenting with Metasploitable, but are there alternatives really based on the server-side of websites? I mean a metasploitable-like thing with services often used by real-life web-servers. I don't mean SQLi, XSS,... But really server-services specific for web-servers.

Can I insert a Linux LiveCD to copy files from another drive with Linux installed? I know all the passwords etc it's my own drive.

@AviD It's a website of a company and they make kind of 'stickers' for cars etc. They want their users to upload the design they want with. They won't get millions of users; but maybe over hundred over longer amount of years.

There's a website where registered users can upload images. What is the best practice: Making server-side folders for each user and place their uploaded pictures there. Or making one big folder with all uploaded images and giving them an id (000000001.png --> 9999999999.png) and register in a database which image belongs to which user?

Hi. When I search a method to limit only three limits per login in a PHP login-form I get the following methods: Cookie, Session, and IP. The first two are easy to 'bypass' and the last one is a bad practice because IPs are often shared with VPNs. Also IPs can be changed easily.

Seems like the advantage of your solution is that it's easier to implement and to make it user-friendly. However as you state yourself, for larger systems the other will work better. While the ticket system now is small, in the future I'll be mixing multiple events in one database.

@AaronF Clients where also happy to hear I found a solution for this problem after it came in the news.. So bonus bonus, not only security/IT-wise but also commercial. Now I can market my small ticketsystem as 'not having this severe security-issue all the big ticketsystems have.'

@AaronF I don't agree at all. With that mentality we could also stop using prepared statements and just put PHP-code full of SQLi-vulnerable code 'Why bother wasting time and money on those extra lines of prepared statements??? They could jump over the fence anyway...' The chance of this race condition being exploited is indeed very very small, and if the solution was too complicated I would also think twice about implementing it. But if this can be prevented by just typing 'SELECT FOR UPDATE' instead of 'SELECT' those 2 extra seconds are worth it IMHO.

@EdwinLambregts Yes, that video was the reason I asked this question. However, by using row-locks I can prevent the race-condition. Seems the solution for this problem isn't too complicated actualy.

@GregoryCurrie But what if the CIA wants to throw a sick party and use my TicketSystem? ;) Jokes aside, yes I was also thinking about storing the database on the devices itself and update those at an interval... But that'd give the problem you described yourself, and it will also be a lot of data going through the devices (writing/updating the database each time), and the guards also use 4G (mobile data) to scan, so that can become expensive.

@R.. True, but I'm also not really concerned about the volume of the database, but about the timespan. Most people buy their ticket the night before the event (around 10-11PM), so then the system has to be able to handle a huge load of requests and database-changes. I'd like to be more safe than sorry. ;)

@TheLoneMilkMan No this at the moment is not possible. However, this is a damn good idea. Thanks for the suggestion! Will take this into account the next developing cycle.

@mbomb007 Yes, I stated that as possible solution under 'Passport', and also told I was already doing that. However, this solution requires human interaction and the alertness of the guard. I prefer a solution which is human-proof, knowing they are often the weak spot in a (security) system. However, showing up the name is a nice extra. So I'll keep doing that.

@nvoigt Haha, you're correct. The chance that someone will successfully exploit this vulnerability is indeed very, very, very small. But in theory it's possible, and I just sleep better when knowing that my code is safe. Not only in practice but also in theory.

What is the name of this principle again?

Hi! I once heard about a principle that when you work in a production environment, it gets less efficient if more people work together; and maximum effeciency is only achieved by limiting the amount of workers to a specific amount. A guy named 'Ford' found out about this principle, don't know if it was Henry Ford...

@Kusalananda I already tried that and it ain't working because Apple is trying to block these methods. So I'd like to focus on the Linux > iCloud > iPhone idea, of that'd be possible? Thanks a lot!

It's a real pain to get a damn bit of music from my Debian to my iPhone cuz no iTunes support. However, could I place the music from my Linux to iCloud, and from iCloud to my iPhone? So I don't need that syncing with cable and blablabla?

You are validating client-side with Javascript code, which can be bypassed easily by the attacker by disabling Javascript/deleting that JS-code by pressing F12. Also, any chance you're running a Nginx server? If misconfigured .png images can be interpreted as PHP-code.