Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [security]

For requests for recommendations of security software. Before using this tag, make sure there's no more specific tag for the software you're after.

0
votes
0answers
5 views

Native Mobile Security Testing Tool [closed]

How can we test security feature of the native mobile application with the help of any tool. So that we can check the payment related vulnerability or so.
-1
votes
0answers
4 views

Azure Security Assessment

I'm looking for standards or checklist that can be used for Microsoft Azure to assess security. Similar to the "well architected" framework for AWS. Not looking for a paid for tool but if there is ...
0
votes
0answers
3 views

Distributed attacks detection - software or services

I need more distributed attacks detection software or services such as https://www.abuseipdb.com/ or https://www.blocklist.de. Right now I'm using those to add IPs that are near-guaranteed to be ...
2
votes
0answers
34 views

On-premise Mobile Device Management solution for Android

I'm looking for a Mobile Device Management solution that can be deployed on my own servers. Cloud-based solutions are strictly NOT required. Please enlist such solutions which can cater at-least ...
0
votes
0answers
9 views

Software for managing domain object ACLs

We are developing a MEAN stack application that includes discretionary access control for business/domain objects, much like a file or content management system does. Users must be able to give other ...
0
votes
2answers
31 views

Simple encryption app

I need to send passwords to other people. Is there an app (cross-OS if possible) that allows me to send them in a secure way ? Maybe a simple private/public keys system. Thanks !
0
votes
1answer
8 views

All-In-One vulnerability scanner for PHP project?

I've asked this on incorrect sub-site (security.se), however, i think that question fits this site more. So, I was searching for a tool, which includes multiple Vulnerability-Scanners, so we could ...
0
votes
0answers
10 views

Open source solution for self destruction messages on my own server (like Privenote)

I need a software solution for self destruction messages like for example privnote. But i need to run it on my own server due to security reasons. Does anyone have an idea? Thanks allot :)
1
vote
1answer
23 views

Secure delete files

I have a folder which I need to secure delete. I tried File Shredder and BleachBit but I got error because the files were in use or priviledge problems. Is there a program to delete files and restart ...
1
vote
0answers
9 views

Mac firewall or tool that blocks access to websites based on geographic location?

I'm looking for a free Mac OS firewall that allows blocking of sites based on the server's estimated geographic location or iptable-like banning at a minimum. The main application is to thwart ...
0
votes
0answers
9 views

iOS: secure storage for sensitive information

Sometimes I need to view some of my documents and it's always a huge pain to search for a physical copy, especially if you are not at home and just need to get some number. I am looking for a secure, ...
0
votes
0answers
9 views

Golang implementation of PCKS#11

With a PCKS#11 standard implementation, you can use a PIN smartcard for a MFA (multi-factor authentication) sign on. Commonly, there is a PKCS#11 interface in a webbrowser software to access secure ...
0
votes
2answers
59 views

Deterministic Password Generator

I am looking for deterministic password generators which are available for Linux. My goal is to have one password to remember and use that to make passwords for all my logins.
2
votes
1answer
27 views

Manage permissions and passwords for linux, windows and mac

I am searching some software to make something similar to a domain controller on windows that can be compatible with mac, linux and windows. I need to apply security roles and manage their password ...
0
votes
0answers
9 views

3rd party Android fingerprint unlock program?

I am looking for an Android program to allow fingerprint unlocking of my Lenovo P2 phone running Android 8.1. (The built-in support and settings appear not to work in the current mode I am testing ...
0
votes
0answers
23 views

Secure paidment method Primefaces

I´m interested in adding a payment method to my Primefacess app. Is there any paypal or any secure library for credit card payment that I can add? I´m specially interested in the credit card payment.
0
votes
0answers
11 views

Hosted VPN service for cloud-based business

Our business has about 400 associates who have to travel, and consequently use public Wi-Fi hotspots almost daily. It sounds like "best practice" dictates we should have them connect to a VPN to ...
0
votes
0answers
17 views

Certificate Management

Broadly, we are a Microsoft shop and our company manages about 1,500 certificates, mostly for our websites. We are no longer doing self-signed certificates and another contracted company "manages" the ...
1
vote
0answers
16 views

Is there a backup tool for linux that allows selective deletion as well as performing backups with just a public key on the client?

In the era of GDPR, making backups comply with all regulations can be a busy task. I am looking for a backup tool for linux that allows me to: Selectively delete files in the backup. Do a backup from ...
0
votes
0answers
15 views

How do I create an ITI-41 transaction receiver in Java?

Is there a standard way to implement an ITI-41 receiver in Java? Is there maybe a library I can utilize? Is there just some simple example code maybe? The specification for ITI-41 is quite large ...
1
vote
1answer
28 views

Tools to assess WiFi network security

It does focus on different areas of WiFi security: Monitoring: Packet capture and export of data to text files for further processing by third party tools. Attacking: Replay attacks, deauthentication,...
2
votes
0answers
8 views

Find a private certificate that has been made public

I've heard of people publishing private certificates to public sites. Given a public key are there any tools that can tell me if the private key has been published somewhere
2
votes
2answers
55 views

Open source antimalware software for macOS

I'm looking for good categorically open source software for macOS. I did not use the term "antivirus", because I refer to software that can protect not only from viruses, but also from other types ...
2
votes
1answer
31 views

Tools for checking Spectre and Meltdown system vulnerabilities on Linux?

I seek some reliable ways / tools for checking Spectre and Meltdown system vulnerabilities on Linux? That are currently the following CVEs: CVE-2017-5753 [bounds check bypass] aka Spectre Variant 1 ...
1
vote
1answer
142 views

Replacement for RequestPolicy addon for Firefox?

The venerable, vintage, and very useful, RequestPolicy add-on for Firefox now seems to be behaving erratically for me (and I know that I won't be able to use it for much longer in any case, when ...
2
votes
0answers
17 views

A software program that provides a fake UPNP server

I want to have UPNP server that is incapable of doing anything, except logging. Since it is impossible to have a secure UPNP server. Log request for modifications to the firewall. As much information ...
2
votes
0answers
27 views

Enforced Password Change

Many services on the internet do not enforce two-factor, or even updating passwords at intervals. I'm looking for an application that is capable of advising when you should update your password, and ...
0
votes
1answer
32 views

Change Detection

I am currently using TDI Console Works for baseline and configuration change detection, and it is, unfortunately, rather expensive software. I was hoping someone might be able to recommend an ...
1
vote
0answers
13 views

Any sandboxing software that prevents scattered application files?

I'm looking for software that can sandbox applications, but without some of the traditional limitations. This is my use-case: I want to run Node and have it executable so Visual Studio Code can ...
1
vote
1answer
64 views

Pen Testing for REST API

I am new to security testing. I have been able to set things up for web applications. I want to run automated scans for my REST API. Burpsuite is a good tool but is not free. Are there any open source ...
0
votes
0answers
23 views

Encrypt internet traffic for Mac

I'm looking for ways to encrypting my Internet activity. I'm on a Mac. I was wondering what softwares are out there that can make it such that what I do on on computer will be encrypted.
0
votes
0answers
22 views

Is there any software that scans sh files for vulnerabilities?

I am looking for software (could be a simple script as well as a full software application) that can scan Linux shell scripts for code vulnerabilities. I know there is a powershell script scanner, ...
0
votes
1answer
25 views

2FA Application Access

I'm looking for a "2 Factor" authentication option (I suppose, "Parental Controls") to manage the ability to open applications. Take the following scenario: 1) User attempts to open an application ...
0
votes
1answer
58 views

Git file encryption to support file/folder based permission to protect the source code from theft

I am using git and have the following problem: In the company where I work we want to protect the source code from theft. For example, when a a developer leaves and takes the source code of a project ...
5
votes
0answers
36 views

Virtualization/sandbox software for Windows specifically designed to safely install software that may be bundled with PUPs

I'm looking for an extremely lightweight VM or virtualization tool for Windows that can be used to safely open installers that may be bundled with potentially unwanted programs (PUPs). (For an ...
0
votes
0answers
10 views

Access Reporting Tool

I am looking for some piece of code or software to run as a daemon or applet on Ubuntu 17.10 that will monitor and log all files changed for specific directories. Let's say I want to host a Nextcloud ...
0
votes
0answers
40 views

NextCloud Version Control

I plan on hosting a NextCloud instance via a Web-Server at work (due to high PC specs, "always online", and well...free power) to house all my Powershell, Bash and other documentation and scripts for ...
0
votes
1answer
38 views

Tools for checking Spectre (both variants) system vulnerabilities on Windows 10?

I seek some reliable ways / tools for checking Spectre (both variants) system vulnerabilities on Windows 10? That are the following CVEs: CVE-2017-5754 [rogue data cache load] CVE-2017-5715 [branch ...
2
votes
0answers
121 views

Replacement for Secunia/Flexera PSI

Secunia/Flexera PSI is an application and system update monitor for Windows. In comparison to other similar programs, Secunia PSI is a security tool designed to detect vulnerable and out-dated ...
0
votes
1answer
27 views

What are my options to encrypt a file before writing it on Python?

I need something simple, where I can: encrypt it with a password (salt, everything related) write it to disk Then the opposite: read from disk decrypt it with my password Everything I find out ...
2
votes
0answers
42 views

Firefox add-on to check SSL certificates for changes

I am looking for a Firefox add-on that checks SSL serial numbers or fingerprints and reports changes to the user. I realise that SSL certificates can change at any time for many legitimate reasons, ...
1
vote
1answer
29 views

Checking code for malicious parts

Let us presume we have a big pile of.. many c- like source code, example: an OS and repositories code. The question: In general, how can we search for malicious code? What automated (?) softwares are ...
1
vote
1answer
28 views

Store logon data for different types of systems, and apply to GDPR

As a software developing company, we have a lot of logon data for different types of systems. This can be a simple username/password combination for a website, but also FTP accounts, database accounts,...
1
vote
0answers
12 views

Self-hosted webinar software (or provider located in the EU)

We're currently searching for a self hosted webinar software because we have customers that put a big focus on security and privacy, also we're located in Germany we have to fulfill German and ...
1
vote
0answers
24 views

Is there any software to disconnect the lan or wi-fi network connection when you stop using a specific application?

I am looking for some software that has the functionality of disconnecting the lan or wi-fi network when closing a specific application and that when opening the application, reconnect. This could ...
2
votes
0answers
15 views

Linux software to detect external drive partition-level rootkits

clamscan can search file systems for malware, but it can't scan possible rootkits on the boot sectors of an external disk. rkhunter also doesn't seem to provide the ability to scan boot sectors of an ...
1
vote
1answer
78 views

Is there some correlation rules and threat signatures available out there for an ELK based SIEM?

For commercial SIEMs, correlation rules and threat signatures are available from some communities (CERTs and others) or from some commercial offers. What about ELK based SIEMs? Where can I find off-...
0
votes
0answers
27 views

IP/Security camera app with web interface and FTP client

I am trying to setup an old Android phone as a home IP/security camera. There seems to be quire a few apps available but they seem to focus on the ability to stream/upload recordings into cloud ...
1
vote
1answer
34 views

linux/ubuntu os that follows Tails/Tor ideals

I am a new ubuntu user, So forgive me if I sound stupid, In my head my question sounds like it could work. so my question has 2 parts. Is there already a OS that can have just a basic file system ...
0
votes
1answer
22 views

Simple secure standalone “offline” app to generate securely random passwords

I'm looking for an app (used on laptop) to generate long, securely random, 1-use passwords that are impossible to be memorized. It must be "offline" or at least openly verifiably sandboxed from a ...