Questions tagged [security]

For requests for recommendations of security software. Before using this tag, make sure there's no more specific tag for the software you're after.

Filter by
Sorted by
Tagged with
1
vote
0answers
9 views

Taint analysis and visualization in CI for PHP

Is there a (preferably static) Taint analysis tool for PHP, which can visualize the result (e.g. as a call graph) in an output format suitable for a CI environment? (e.g. html) It would be good if you ...
1
vote
1answer
29 views

Is there such a thing as a “JavaScript black box” that I can safely feed JavaScript code into and get back the results?

I have various "JavaScript snippets". They are often related to some kind of obfuscation mechanism. For example: var _0xb144=['setRequestHeader','x-tool','oldbrowsers','accept-ianguage','en-...
1
vote
0answers
7 views

Offline static code analysis similar to the LGTM online service

LGTM provides an online service to analyze source code of all major languages for security bugs and errors. I am looking for a similar solution, which performs the tests while the source code stays in ...
0
votes
0answers
8 views

Scanning a file / bytestream for malware with Python

I am looking for a Python package that allows me to scan uploaded files (or the bytestream of them) for malware. I have found a couple of wrappers for calmAV, but all of them seem rather questionable ...
0
votes
0answers
8 views

DAST (Dynamic Application Security Testing) Software for Web Services in a team

I am looking for DAST software to test a Flask (Python) web service. An important point is how to integrate it in the workflow: Either it needs to be part of a CI/CD pipeline or it needs to run ...
0
votes
0answers
10 views

Learning environment for security researchers

I have a need for software that enables students to do security research tasks. That is, I need a PC set up with an operating system and services that have known vulnerabilities. The student then gets ...
0
votes
0answers
11 views

Background video recording app for Android with uploading capabilities

As an anti-theft deterrent, I am looking for an application for Android that, once started, will record constantly (in low quality, to conserve space and data) from a particular camera source, ...
0
votes
0answers
16 views

Lair-Framework Alternative

Is there any good alternatives to the lair-framework. I think that was an awesome platform, and unfortunately its not maintained anymore and no more updates to it. But i have tried all other kinds of ...
0
votes
0answers
24 views

Software for copy protection

A friend wants to copy protect his teaching material. This need not be foolproof as his customers are not necessarily black-belt hackers. I have the idea to include a not easily removable fingerprint ...
0
votes
1answer
39 views

PDF-File Sanitizer

Do you know a good PDF-file sanitizer? Free would be nice but is not a must-have. The sanitizer should either be a .NET-Core library or a program that can be executed in Windows CMD. It should remove ...
1
vote
1answer
29 views

Any app to know what an app is doing, checking, creating, and etc.?

As you may know, some apps doing, checking, creating somethings in the background that we don't see and know. Is there any app that can show us what is doing, checking, creating, etc. an app? e.g. the ...
2
votes
0answers
26 views

Windows Sandbox for executables

I am looking for a Sandbox system on Windows like nsjail. I found a few software packages as real sandboxes like VMs, but I wrote a server software I would like to additionally sandbox. For example: $ ...
0
votes
1answer
35 views

Looking for a passwordless authentication system

I'm looking for an authentication system that works like this: You type in your e-mail address, you get an e-mail with a link that signs you in and keeps you signed in on that device until you ...
2
votes
1answer
60 views

How to find secrets in a Git repository?

I've been tasked to find secrets in a list of Git repositories. A secret can be: A password An encryption key An API key A passphrase Anything else I may not like to see in plain text in the wild ;) ...
1
vote
0answers
20 views

Good (free or paid) command line based Antivirus for Linux

I am using ClamAV for some time now and it is quite okay. But I would like to give some other Antivirus Softwares/tools a try. I am looking for something that: is Command-line based i.e. GUI is ...
1
vote
0answers
11 views

detect network malicious activity coming from own linux server

I have a VPS provider that is strictly disallows malicious activity like ssh-bruting, ddos, and such. I also have multiple users that use the single VPS machine, each allocated to one docker ...
1
vote
0answers
28 views

Automatically unlock desktop when approached with mobile

I'm looking for a way to use my mobile to automatically unlock my laptop. Blue Proximity seemed like a good answer, but it's clearly been abandoned as a project and I'm having problems with some of ...
0
votes
0answers
12 views

Tools to protect Android code

By protecting Android code I mean things like making code decompiling more difficult, cyphering code and whatever technical measure that makes it more complicated for a hacker to get the code. I ...
0
votes
1answer
16 views

Linux-based detector of files encrypted by ransomware

Today I've had an unpleasant accident at work, one of the users downloaded something infected by Eight ransomware on their Windows computer. Worst part is it encrypted some of the files on the drives ...
1
vote
0answers
14 views

SIEM Dashboard/Add-On/App for Viewing Windows Registry Forensics Data

There are a number of forensically-useful areas in the Windows registry and file system like those detailed in this SANS Poster: https://www.sans.org/security-resources/posters/windows-forensic-...
2
votes
0answers
26 views

Linux tool to anonymize captured data packets for commercial use according to GDPR

I am working on a project where I have to identify anomalies in network traffic of business networks with machine learning. The algorithm is feeded with captured network packets from inside of the ...
3
votes
0answers
33 views

noCaptcha alternative

It's no secret, that CAPTCHA's no longer offer a reliable protection against automated attacks. CAPTCHAs have become easy to solve for bots, but the distorted text is often very hard to read for ...
2
votes
0answers
22 views

Is there a solution which would allow me to easily monitor/control the traffic for all devices on my network at the hostname level?

I originally asked this question in a Superuser post but it was removed and I was told to post here. I'm a huge fan of the uMatrix browser extension which allows you to control and limit which ...
1
vote
0answers
33 views

Can you think of any way in which “normal people” can contact me (one-way) with messages in a secure, anonymous (for me) manner?

I'm trying to be able to receive incoming messages from "the general public", in a way which: Does not reveal my identity to the person contacting me, or to any company/entity. Does not cost money. ...
1
vote
0answers
13 views

Web-app that provides email aliases similar to Yahoo's ones

The Current Service With Yahoo mail, you they give you a second address like foo-*@yahoo.com. You can replace the asterisk with whatever string and you can have up to 500 addresses with this template....
2
votes
1answer
27 views

Portable software to investigate which apps on Windows PC are sending data to the internet, and how much

It appears that my Windows 10 PC is sending out unusual data to the internet. Reasons why I believe this: I often (about once a day) get a ReCaptcha Turing Test when I search something on Google (i.e....
2
votes
0answers
16 views

Top 3 API gateway middle ware tools for managing multiple REST API's

Use Case: Authentication and Authorization (Multi Tenant Support): We have multiple REST API's resource with their own authentication and authorization business logic. Most of them have firm-wide ...
3
votes
2answers
51 views

Is there a P2P/decentralized “e-mail alternative” which more than 10 people in the world use?

I'm trying to provide a way for myself to reach people who contact me through what is essentially a website form. The problem with e-mail, the obvious contender, is that it's inherently insecure and ...
1
vote
0answers
35 views

Tool to see network calls made by an Android app

I am trying to search for security vulnerabilities in the Android app and hence wanted to know the software which can help me to track the network calls being by an Android App. The software should ...
0
votes
1answer
15 views

how to store google/facebook client id and secret in web server?

Purpose: To find a way to securely store google/facebook client id and secret in backend web server. I read that, I should not store client id and secret in web server. Recommendation needed: What ...
3
votes
2answers
125 views

Modern alternative to GnuPG for symmetric encryption on Linux

I'm looking for an alternative to GnuPG for symmetric encryption. Specifically, I want to encrypt short, secret files using a passphrase using Linux, and have them secured against modern attacks, such ...
0
votes
2answers
39 views

Software to notify me when someone rings my doorbell?

I'm trying to get a notification on my main phone or email when someone rings my doorbell, without changing the doorbell. The sound is loud, so I'm thinking to set a secondary phone next to the ...
1
vote
0answers
14 views

A server environment that allows clients to audit server code in execution

What I'm not asking is a way for a trusted server-owner to authenticate that they are running the server to a client. That would just be a cert. What I was hoping for is a way to limit the power of a ...
3
votes
2answers
70 views

What free secure file erasure software for Windows 10 can be used without installation?

What downloadable data-erasing software (like Eraser) for Windows 10 are wholly free can be operated (without losing any functions) without installation like TeamViewer? don't require command lines? ...
1
vote
0answers
11 views

Opensource software for endpoint visibility

Looking for FLOSS platform for monitoring many remote user endpoints (varying devices and OSs) for visibility and data leak protection (eg. if notice that a particular policy is violated on a user ...
0
votes
1answer
40 views

Antivirus for Windows and Mac

Which anti virus is the best for Mac and Windows (I'm using both). I know the list of malware and virus removal tools is long (Avast, Sophos, AiroAV, Norton, Mcafee, Bit Defender, etc., etc).
2
votes
0answers
25 views

Software to build a taxi app easily, without vendor lock-in

Could you please help me narrow my search for software that can be used to make a taxi app? The app will provide similar functionalities to the lyft app. It should be maintainable and robust. Must be ...
1
vote
1answer
33 views

What software can I use to encrypt all files that are copied out of a system?

What software can I use to encrypt all files that are copied out of the system(USB, network, email,...) such that only systems with the same encryption will be able to read the files. OS is Windows.
-2
votes
1answer
18 views

How to limit login access and create ban after 4 attempts to web application based on user's IP address? [closed]

i have created the js file for this purpose but i cannot find a way to limit the access after 3 failed attempts based on user's ip address. can someone please suggest me a way to do that? i do not ...
1
vote
0answers
21 views

recommendation for IAM for .NET Core with row level security

I am looking for a good IAM library or framework for .NET Core that would give row level filtering of a SQL data set. Are there any out of the box solutions that would support something similar to ...
1
vote
0answers
6 views

Software to get better experiences with “modern” web page

I take steps to minimize the amount of data that can be collected about me, for a variety of reasons. For example, to reduce instances of "identity theft", hacking, etc. I normally use an older ...
1
vote
0answers
14 views

What software to use for DevSecOps pipeline?

I have a CD pipeline built in Jenkins that builds a Java project, packages the microservices as docker containers and uses terraform for provisioning on AWS. What are the plugins I should add to: Do ...
1
vote
0answers
21 views

Looking for a “remote wipe” software package for Windows 10

I'm looking for a solution that would allow me to locate a stolen or lost Windows 10 PC, and initiate a remote data wipe. We can't use the built in Windows 10 location feature as we don't log in with ...
1
vote
0answers
19 views

What is better alternative technologies of Elastic Stack for endpoint detection and response (EDR) products collecting/analyzing endpoint log data?

I am trying to develop endpoint detection and response (EDR) as a security solution. I am currently researching how to actually develop it. I googled quite a few websites, but they only described just ...
0
votes
0answers
32 views

Most secure cloud storage service

I'm looking for a secure cloud storage. Currently using Dropbox, but considering to switch given that it doesn't fully encrypt files, and thus files aren't really only mine lol. I've heard about ...
1
vote
0answers
8 views

drupal 7 restrict login by ip - Monitor

We are using a drupal 7, with the module "restrict login by IP". We restrict by: mail & Ip address. Our goal is to get "debug log", for Add new row to this table(for monitoring any changes in ...
0
votes
1answer
21 views

self hosted website, trival ssl certificate installs

I host my own website from a home server (domain hosted through go daddy) and I have been trying to find information on how to install a ssl certificate. How ever I cant find any information on how to ...
0
votes
0answers
23 views

Hosting simple html with authentication-only access

I have this weird idea in my mind - like is it possible to host simple html page on my desktop the access to which is only accepted via an authentication key? I have a static IP and nowadays domain ...
0
votes
1answer
9 views

Looking for cloud- or Unix-based open-source tools that support long-term enterprise-wide key/passphrase management and provide a programmatic API

My question really is: how does an enterprise (a small ~150-employee company) manage the passphrases and encryption keys used at the time of encrypting a large volume of data, when such encrypted data ...
1
vote
0answers
16 views

Platform For Selling Videos Online?

I'd like to set up an online store where I can sell some video courses ( 3 or 4 with a 10 minutes maximum length each) , I would like to know if I could have the option of doing live video streaming, ...

1
2 3 4 5 6