Questions tagged [security]
For requests for recommendations of security software. Before using this tag, make sure there's no more specific tag for the software you're after.
283
questions
0
votes
0
answers
5
views
Paid tool/solution for auditing cloud security posture and configuration
Which is a competent tool for checking the configuration and security posture of a deployment. I'm aware of Prisma. My question is more from an auditor point of view, if I'm to audit the security ...
1
vote
1
answer
34
views
Software to diagnose security breaches and protect account access
In the past few days, several of my accounts on different apps/websites (first Twitter, then Discord) have gotten hacked, posting messages and sending spam messages to my contacts without my knowledge....
- 121
0
votes
0
answers
16
views
Assure my website visitors, that their data is safe from me, that I don't see their data
I am building a White Label website where I would like to allow my visitors to host their sensitive data.
At the same time, I would like to assure them that no one, including me, doesn't use or even ...
0
votes
0
answers
20
views
Is there a tool to add subresource integrity (SRI) in place, i.e, in the HTML?
I have been searching quite a lot a tool adding SRI to my HTML that can easily integrated my front end CI. It is therefore a CLI I am looking for. Indeed having just the hash result is no easy to add ...
Christophe Brun
0
votes
0
answers
14
views
How to lockout only IP addresses that fail to login multiple times, and not usernames as well?
I've tried using both Limit Login Attempts Reloaded and WPS Limit Login, but they lockout both IP addresses and usernames. I have malicious login attempts that use the real usernames, end up blocked, ...
- 101
0
votes
0
answers
35
views
Suggestion regarding Static Application Security Testing for C++ Language
I was looking for a Open-Source Static Application Security Testing (SAST) tool. I have some limitation in selecting those,
Taint Analysis should be done.
Custom Configuration for Source, Sink and ...
- 51
0
votes
0
answers
2
views
Security testing of user authentication system
I have been coding in PHP for ~5 years now as a back-end dev for a bigger company. I have created my first user authentication system as a part of my first independent assignment. I implemented safety ...
2
votes
3
answers
63
views
What software shall I use to control the internet at my home?
I want to control the internet my kids using
so I can control what website they entre and videos they are watching on youtube
also, to control the time they spend online
I have a computer that is on ...
- 121
0
votes
0
answers
6
views
Game / Software control that allows the user to request permission to use a program and admin to grant access/startup?
I'm struggling with a scenario where I need to control software startup on Windows and macOS based on a request-granting model. In other words, the user would like to start a program/game/whatever and ...
- 865
0
votes
0
answers
57
views
Which is the app lock that doesn't let you edit other app when the Android is booted?
I want an app lock that when I reboot my Android I can't edit settings, because I've used this DoMobile Lab's AppLock and in the first maybe 10 seconds after the phone booted, I can still edit ...
- 1
0
votes
0
answers
5
views
Web Application Firewall as a Service
I'm looking for a recommendation for a web application firewall that I can add to a site that runs on a single digitalOcean droplet. I can't change the nameservers for the site, so cloudflare is out....
- 101
0
votes
0
answers
19
views
A recommended Tool/Software for hardening Windows Defender
According to a few blogs and tech sites, Microsoft isn't shipping Windows Defender with the strongest settings. It's someone knowing a Tool/Software, which is recommended for hardening Windows ...
- 101
0
votes
0
answers
4
views
Network Traffic Simulator to Test a Botnet Detection Tool
I am developing a Botnet Detection Tool.
I am looking for a Network Traffic Simulator so that my software can analyze the traffic and detect potentially infected nodes that are acting maliciously.
It ...
2
votes
0
answers
10
views
Pen Testing Webapp/Database - Solution
I am looking for a system for managing penetration test findings. Wondering if there's a vendor application out there - whereby my penetration testers can "log a finding" - and than manage ...
SecEng
1
vote
0
answers
29
views
Suspicious email in Gmail: How to safely see its original source/headers without opening the email?
In my Gmail inbox, I often see emails whose sender+title+intro is so well-targeted that I can't really tell whether it is a legitimate question/information or a phishing attempt.
I could open the ...
- 19.1k
1
vote
1
answer
42
views
Version Control System with audit logs on repo views
Are there any Version Control Systems (VCS) that provide audit logs on whether a repository (or a particular file within the repo) has been read by a user?
I am referring to tools such as Github ...
- 11
4
votes
0
answers
64
views
How family member can access my passwords if I'm incapacitated or dead?
I want to designate a certain person to be able to access my account credentials (e.g. the contents of my Bitwarden or LastPass) if and only if I'm dead or severely incapacitated (such as unresponsive ...
- 415
2
votes
2
answers
53
views
Is there an app that can scan all running processes in windows and tell which ones are not well-known?
I am wondering if I can scan my running processes/apps in windows and find out which ones are not well-known.
A list of unknown running processes/apps should be listed.
Note: the app should NOT turn ...
- 155
3
votes
2
answers
52
views
Which free antivirus app supports manual scanner only mode without turning off microsoft defender?
I am looking for a free antivirus app which supports manual scanner only mode. It should NOT turn off the Microsoft Defender app.
So far, I tried avast. The bad part to me is it turns off Microsoft ...
- 155
0
votes
1
answer
22
views
App for remote control
I am looking for an app for remote control of a device. Something looks like Google Family Link, which also allows remote direct control of the target device. It is not for my children (aka parental ...
1
vote
0
answers
74
views
Does an encrypted QR reader Android app exist that uses public/private keys?
One of the ways I quickly copy small texts from my computer to my Android phone is through a QR code generator. I pipe the clipboard text into my QR code generator on my computer, then I scan the QR ...
- 11
0
votes
2
answers
48
views
Data privacy on shared external HDD
I have a shared external HDD with my family and want to encrypt/secure my data. Now we already have a software that password protects the overall hard drive but once the HDD is accessed, all folders ...
2
votes
0
answers
67
views
Anonymous and Secure File Uploading
I help run a community group and need suggestions on an anonymous and secure file upload website. This group helps people deal with sensitive personal issues. I'd like a free option and limited ...
1
vote
1
answer
87
views
Ransomware detection software on Ubuntu Linux
I'm looking for a software that runs in the background and finds out if in specific directories an abnormal amount of files have been changed.
- 27
0
votes
2
answers
34
views
Tool to use the VirusTotal malware scanner more efficiently
Once or twice every day, I want to scan a group of 1-3 files on VirusTotal for malware, and about twice every week, I want to check a group of 5-10 files.
I find using the VirusTotal website very ...
0
votes
0
answers
21
views
Password protect individual Android apps
I am looking for an extremely secure Android app to password protect individual apps, such as banking.
Money is no object, only security matters.
Ideally, something that will let me use fingerprint, ...
0
votes
0
answers
44
views
MIT Licensed Whitelisting Agents Recommendations
In reference to this post:
MIT Licensed Whitelisting Agents
I am just starting out in cyber security and one of the "tasks" that I was told to do was to install an MIT Licensed Whitelisting ...
- 11
0
votes
1
answer
37
views
Why do you chose to not use Microsoft Access to develop applications? [closed]
Over the years I have heard from many Corporate IT departments and application developers as to why they chose to not use MS-Access, and even not allow it to be used, for developing applications. The ...
- 101
1
vote
0
answers
68
views
Java Secure password generator with high entropy
What is the best Java password generator library that we can use to generate the good passwords that humans can use to login to an account.
I have a scenario where I’m trying to reduce the password ...
- 111
1
vote
0
answers
20
views
Is there a self-hosted solution for analysing Apache httpd logs or server traffic?
Recently I've had several bouts of spambot traffic on my website. On each occasion the attacks have come from just a handful of IP addresses (so not a DDOS attack).
I would like to be able to monitor ...
- 171
0
votes
0
answers
119
views
What security software can I use alongside Windows Defender?
What security software (preferably, free) can I use alongside Windows Defender to make my computer safer?
I have seen several posts on different forums about arguing whether or not Windows Defender (...
- 121
1
vote
1
answer
37
views
Gratis, secure web browser which requires a password to open
Asking for a friend, who would prefer to use the Tor browser.
A plugin for that browser would be acceptable.
Failing that, a security oriented browser which requires a password at launch, otherwise it ...
2
votes
0
answers
19
views
Turn off PC if bluetooth device is disconnected (proximity) or loses connection
Is there such software, I've looked into Windows security features for such an option and it doesn't exist? I have found that you can unlock your PC with your Bluetooth device but can't shut it down ...
- 121
0
votes
2
answers
29
views
Setting up secured directory for my report done in Latex
I am not sure what Sub of StackExchange is correct to post this.
This is my original post in Tex.SE.
I want to create a secured Latex folder (as my working directory) in my Lab PC. Only I and my ...
- 101
1
vote
2
answers
984
views
Static Application Security Testing (SAST) Tool for JavaScript
I'm looking for software that I can integrate into a CI pipeline of a javascript project. The tool should check the code for security issues.
For Python code, I'm happy with bandit. For JavaScript, I ...
- 2,451
1
vote
1
answer
74
views
Is there such a thing as a "JavaScript black box" that I can safely feed JavaScript code into and get back the results?
I have various "JavaScript snippets". They are often related to some kind of obfuscation mechanism. For example:
var _0xb144=['setRequestHeader','x-tool','oldbrowsers','accept-ianguage','en-...
- 11
1
vote
0
answers
68
views
Offline static code analysis similar to the LGTM online service
LGTM provides an online service to analyze source code of all major languages for security bugs and errors.
I am looking for a similar solution, which performs the tests while the source code stays in ...
- 341
0
votes
0
answers
84
views
Software for copy protection
A friend wants to copy protect his teaching material.
This need not be foolproof as his customers are not necessarily black-belt hackers.
I have the idea to include a not easily removable fingerprint ...
- 217
0
votes
1
answer
57
views
PDF-File Sanitizer
Do you know a good PDF-file sanitizer?
Free would be nice but is not a must-have.
The sanitizer should either be a .NET-Core library or a program that can be executed in Windows CMD.
It should remove ...
- 11
1
vote
1
answer
33
views
Any app to know what an app is doing, checking, creating, and etc.?
As you may know, some apps doing, checking, creating somethings in the background that we don't see and know. Is there any app that can show us what is doing, checking, creating, etc. an app?
e.g. the ...
- 111
2
votes
0
answers
42
views
Windows Sandbox for executables
I am looking for a Sandbox system on Windows like nsjail. I found a few software packages as real sandboxes like VMs, but I wrote a server software I would like to additionally sandbox. For example:
$ ...
- 141
1
vote
1
answer
67
views
Looking for a passwordless authentication system
I'm looking for an authentication system that works like this: You type in your e-mail address, you get an e-mail with a link that signs you in and keeps you signed in on that device until you ...
- 11
2
votes
1
answer
207
views
How to find secrets in a Git repository?
I've been tasked to find secrets in a list of Git repositories.
A secret can be:
A password
An encryption key
An API key
A passphrase
Anything else I may not like to see in plain text in the wild ;)
...
- 131
1
vote
0
answers
33
views
Good (free or paid) command line based Antivirus for Linux
I am using ClamAV for some time now and it is quite okay. But I would like to give some other Antivirus Softwares/tools a try.
I am looking for something that:
is Command-line based i.e. GUI is ...
- 111
1
vote
0
answers
17
views
detect network malicious activity coming from own linux server
I have a VPS provider that is strictly disallows malicious activity like ssh-bruting, ddos, and such.
I also have multiple users that use the single VPS machine, each allocated to one docker ...
- 111
1
vote
0
answers
69
views
Automatically unlock desktop when approached with mobile
I'm looking for a way to use my mobile to automatically unlock my laptop. Blue Proximity seemed like a good answer, but it's clearly been abandoned as a project and I'm having problems with some of ...
- 111
0
votes
1
answer
38
views
Linux-based detector of files encrypted by ransomware
Today I've had an unpleasant accident at work, one of the users downloaded something infected by Eight ransomware on their Windows computer. Worst part is it encrypted some of the files on the drives ...
- 465
1
vote
0
answers
25
views
SIEM Dashboard/Add-On/App for Viewing Windows Registry Forensics Data
There are a number of forensically-useful areas in the Windows registry and file system like those detailed in this SANS Poster: https://www.sans.org/security-resources/posters/windows-forensic-...
2
votes
0
answers
44
views
Linux tool to anonymize captured data packets for commercial use according to GDPR
I am working on a project where I have to identify anomalies in network traffic of business networks with machine learning. The algorithm is feeded with captured network packets from inside of the ...
- 21
3
votes
0
answers
43
views
noCaptcha alternative
It's no secret, that CAPTCHA's no longer offer a reliable protection against automated attacks.
CAPTCHAs have become easy to solve for bots, but the distorted text is often very hard to read for ...
- 131