Questions tagged [security]

For requests for recommendations of security software. Before using this tag, make sure there's no more specific tag for the software you're after.

Filter by
Sorted by
Tagged with
0
votes
0answers
11 views

JWT alternative without database lookup

I have used JWT in my application and found it interesting as they don't require a database lookup, which makes them faster and puts less load on the database. A major concern with JWT is related to ...
1
vote
0answers
26 views

Tool to see network calls made by an Android app

I am trying to search for security vulnerabilities in the Android app and hence wanted to know the software which can help me to track the network calls being by an Android App. The software should ...
0
votes
0answers
6 views

What tool to use to assess vulnerabilities on MongoDB?

What tool can one use to assess vulnerabilities of a MongoDB for the purpose of security audit. Thanks.
0
votes
0answers
4 views

Enabling SSLv3 for one specific endpoint

Some Java software I'm working on requires that we use a very old API that doesn't support TLS - it uses SSLv3. How could I access that endpoint without compromising the security of the rest of the ...
0
votes
1answer
11 views

how to store google/facebook client id and secret in web server?

Purpose: To find a way to securely store google/facebook client id and secret in backend web server. I read that, I should not store client id and secret in web server. Recommendation needed: What ...
3
votes
2answers
35 views

Modern alternative to GnuPG for symmetric encryption on Linux

I'm looking for an alternative to GnuPG for symmetric encryption. Specifically, I want to encrypt short, secret files using a passphrase using Linux, and have them secured against modern attacks, such ...
0
votes
0answers
8 views

Password Manager

I'm looking for suggestions. As we all know to keep your password safe a big pain in this digital world, So I'm looking for an open-source Password manager which I can use in a local network. I have ...
0
votes
0answers
8 views

Generate passcodes to grant users to access page(s) on a Wordpress site

I am looking to implement a functionality into wordpress and I dont know how to do it. Here is the idea : I want to be able to generate passcodes in the admin panel (JX23S for exemple) Users can ...
0
votes
0answers
5 views

Looking for equivalent lib to Vertx: io.vertx.ext.auth in Spring-Boot

The former code is using io.vertx.ext.auth lib for user password hashing and token generation. I"m writing a new micro-service in Spring boot and want to use the same lib but in Spring. The vertx lib ...
0
votes
2answers
18 views

Software to notify me when someone rings my doorbell?

I'm trying to get a notification on my main phone or email when someone rings my doorbell, without changing the doorbell. The sound is loud, so I'm thinking to set a secondary phone next to the ...
0
votes
0answers
6 views

Tools for DDOS my own website and flood my layer 2 switch broadcast

It is not for illegal activities. Before bringing my mail server online, I am preparing for the worst situation when my website and mail server get a DDOS attack. All I have are just a 100mbps ...
0
votes
0answers
5 views

What is a better option in terms of security between anyDesk and team viewer?

My company is looking for a remote desktop software to contact out clients and our two candidates are anyDesk and teamviewer, in terms of securing connections and access, how do both compare? Thanks ...
0
votes
0answers
4 views

Does OSSIM support low RAM server?

Good evening/morning what are the available options to install OSSIM on A low RAM server? Best wishes
1
vote
0answers
14 views

A server environment that allows clients to audit server code in execution

What I'm not asking is a way for a trusted server-owner to authenticate that they are running the server to a client. That would just be a cert. What I was hoping for is a way to limit the power of a ...
0
votes
0answers
9 views

Store the access token from OAuth2 Authorization code on the browser (cookie)

To avoid systematically going through a reverse proxy whose role is to link the session (session ID) to access_token (pic 1), I would like to push the access_token obtained by OAuth2 Authorization ...
0
votes
0answers
6 views

How to trust javascript opensource libraries found in the internet

Actually , I need to use some of JS libraries or packages found in the internet. But for security reasons , I have doubts using them. For example this JS simplebar found in github . It's cool, saves ...
0
votes
0answers
11 views

I need a secure isolated browser for up to 68 staff to use

We need a third party isolated browser that can be used by up to 68 staff on our network, and ensure network integrity. The browser needs to be isolated in a sense that it sits in the cloud, and is ...
0
votes
0answers
14 views

Tool to check https security

I am looking for a tool to check the security of the https services I offer. I want to be sure the SSL cipher suite, the protocol version ... is secure. Maybe checking for some CVE Vulnerabilities ...
0
votes
0answers
11 views

completely extract install4j package

I need to scan a setup.exe created by install4j for viruses and thus need to unpack the contained files. 7z can unpack setup.exe, however, the content mainly can be found in a file with the name [O]. ...
0
votes
0answers
4 views

Recommendations for site that saves user's browser sessions in 'tabs'

I'd like to find the best software option to save a user's 'tabs' as well as all data associated with it (say google, microsoft, etc accounts) within my application. Ex: A user logs in to my app, can ...
0
votes
0answers
19 views

Ruby library for secure password hashing

Following several resources on the web (e.g. here), I'd like to use the $6$rounds=500000$%.16s format for password hashing. One option is mkpasswd -m sha-512 -R 50000. However, I would prefer a Ruby ...
0
votes
0answers
4 views

Microsoft Dynamics CRM to Sharepoint permission synchronisation

Does anyone know software/addons for Microsoft Dynamics CRM and Sharepoint which synchronize the permission rights between these two systems? Dynamics CRM and Sharepoint have a standard integration ...
0
votes
0answers
7 views

Use oauth2 or oauth3?

I've been thinking in the creation of a new software (software development, software design ...) and when taking part in the software security / how to do securily the software, I've discovered that a ...
2
votes
2answers
61 views

What free secure file erasure software for Windows 10 can be used without installation?

What downloadable data-erasing software (like Eraser) for Windows 10 are wholly free can be operated (without losing any functions) without installation like TeamViewer? don't require command lines? ...
1
vote
0answers
8 views

Opensource software for endpoint visibility

Looking for FLOSS platform for monitoring many remote user endpoints (varying devices and OSs) for visibility and data leak protection (eg. if notice that a particular policy is violated on a user ...
0
votes
0answers
7 views

PC Component Firmware integrity and security software

I recently bought a new laptop. If you read the news you must've noticed Vault 6 and Vault 7 leaks (from Wikileaks), which contain rootkits which sit on your Hard Drive Firmware, MBR and other hidden ...
0
votes
0answers
5 views

What software can I use to safely store clients' credentials to 3rd party applications which don't have an API?

I'm currently developing a business which acts like an automatization tool. I'm working with a few sites which don't have an API and I desperately need to get data from the clients' accounts. Because ...
0
votes
1answer
18 views

Antivirus for Windows and Mac

Which anti virus is the best for Mac and Windows (I'm using both). I know the list of malware and virus removal tools is long (Avast, Sophos, AiroAV, Norton, Mcafee, Bit Defender, etc., etc).
0
votes
0answers
5 views

Encrypted data and DLP

I was looking at solutions to detect sensitive data using a DLP solution, from a encrypted data set being transmitted. Although DLP can detect and block password protected files, I don't suppose it ...
0
votes
0answers
2 views

Is there a framework or a tool which will test 3rd party Java jars for security vulnerability and recommends suitable updates or upgrades?

I am looking for a framework or a tool which will test 3rd party Java jars for security vulnerability and recommends suitable updates or upgrades.
0
votes
0answers
8 views

What program can I use to prove my application is malware-free/safe?

I've created an electron application that I intend to distribute to others through email. I'd like to know if there is some sort of software or website I can use to show clients that the application ...
0
votes
0answers
12 views

Where can I find a C library for Linux that implements C11 annex K?

I'm looking for a C library for Linux that implements the optional C11 Annex K bounds-checking interface. It should: Provide commonly-used *_s interfaces included in the standard. Actively and ...
0
votes
0answers
7 views

A tool for time specific log analysis

I often have web logs when an incident happens and I need to analyse the activity to find out how it happened. So I do not have full logs, I just have it for last 2 hours before the incident or so. Is ...
0
votes
0answers
6 views

Container security/ vulnerability testing tools

I am doing performance bench-marking for different container technology. Now I want to check the performance of a container from security perspective. Is their any tools or way to find and compare ...
0
votes
0answers
3 views

Protect files in a lan shared folder from copy or deleting

I've several cad project in a lan shared folder. Now they are accessible from the technical office computers and they can work on them, but also copy them on private drives or delete them from the ...
2
votes
0answers
23 views

Software to build a taxi app easily, without vendor lock-in

Could you please help me narrow my search for software that can be used to make a taxi app? The app will provide similar functionalities to the lyft app. It should be maintainable and robust. Must be ...
1
vote
0answers
7 views

Which is the best security solution for the credentials in scripts HashiCorp or Thycotic Secret server?

Many of the DevOps activities involve the use of a hardcoded key or credential somewhere in the application’s environmentor in powershell scripts. However, hardcoded passwords of any type are a ...
0
votes
0answers
6 views

Need a security tool for docker base images

I need to find a tool that could cover the needs of my team. More sooner than later we will be allowing developer to push their own docker base images to registry and need to find a tool that inspect ...
1
vote
0answers
41 views

Post quantum TLS based web-browser client

Are there any open source projects that implement a web browser client that has support for post quantum TLS protocols so that it can talk with post quantum patched TLS web servers. I've checked ...
0
votes
0answers
10 views

how to secure REST APIs from a backend app that are called from a frontend app?

I have 2 web apps running in the cloud. the frontend one serves an angular app and the backend one exposes REST services. Frontend is secured via SSO, but backend needs be secured as well. Backend ...
1
vote
1answer
23 views

What software can I use to encrypt all files that are copied out of a system?

What software can I use to encrypt all files that are copied out of the system(USB, network, email,...) such that only systems with the same encryption will be able to read the files. OS is Windows.
-2
votes
1answer
17 views

How to limit login access and create ban after 4 attempts to web application based on user's IP address? [closed]

i have created the js file for this purpose but i cannot find a way to limit the access after 3 failed attempts based on user's ip address. can someone please suggest me a way to do that? i do not ...
1
vote
0answers
18 views

recommendation for IAM for .NET Core with row level security

I am looking for a good IAM library or framework for .NET Core that would give row level filtering of a SQL data set. Are there any out of the box solutions that would support something similar to ...
0
votes
0answers
12 views

Identity and Access Management solution

1) We are using Oracle IDM (Identity Management) solution for authentication (includes MFA), authorization, single-sign-on and self-service password reset (forgot password) needs. 2) Some of the ...
0
votes
0answers
7 views

Software to trace back a decrypted video

My friend has sent his students some videos weeks ago for educational purposes of his course. As he does not want that other people resell them, he decided to encrypt the video with ev4-encryption. ...
0
votes
0answers
6 views

What are the alternatives for storing keys, secrets and certificates securely in the cloud

I'm looking for an alternative to a service like Azure Key Vault to store secrets, keys and certificates. While Azure key vault does a commendable job, I want a solution that is cloud agnostic and ...
0
votes
0answers
5 views

Software to get better experiences with “modern” web page

I take steps to minimize the amount of data that can be collected about me, for a variety of reasons. For example, to reduce instances of "identity theft", hacking, etc. I normally use an older ...
1
vote
0answers
6 views

What software to use for DevSecOps pipeline?

I have a CD pipeline built in Jenkins that builds a Java project, packages the microservices as docker containers and uses terraform for provisioning on AWS. What are the plugins I should add to: Do ...
0
votes
0answers
4 views

App to fingerprint (possibly password) protect an Android app

If I don’t have a password on my Android device (I know, I know), is there an app which can protect individual applications, such as my email? I strongly prefer fingerprint protection, but will ...
1
vote
0answers
21 views

Looking for a “remote wipe” software package for Windows 10

I'm looking for a solution that would allow me to locate a stolen or lost Windows 10 PC, and initiate a remote data wipe. We can't use the built in Windows 10 location feature as we don't log in with ...