The Stack Overflow podcast is back! Listen to an interview with our new CEO.

Questions tagged [security]

For requests for recommendations of security software. Before using this tag, make sure there's no more specific tag for the software you're after.

Filter by
Sorted by
Tagged with
0
votes
0answers
4 views

access control solution for cpanel environment to control access to (external) password protected sites

I need a solution. The solution is probably more about configuration of existing software rather than new code but whatever can work in my environment. The challenge: I have a number of internet ...
0
votes
0answers
14 views

Keycloak SPI - OAuth2 and 2 FA using my own 2FA Service

I want to use keycloak OAuth2 and 2factor auth for my project. But I have to use my own service(not FreeOTP or Google Authenticator) for 2FA. I have made many research, but I couldn't find good ...
0
votes
0answers
3 views

How best to deal with repeated arbitrary requests (DDOS) to my website

security noob here. So my website is starting to experience some ddos attacks (a lot of requests being made to arbitrary endpoints from a few source IPs). What are some common approaches to dealing ...
0
votes
0answers
15 views

Most secure cloud storage service

I'm looking for a secure cloud storage. Currently using Dropbox, but considering to switch given that it doesn't fully encrypt files, and thus files aren't really only mine lol. I've heard about ...
0
votes
0answers
6 views

Looking for Home Network Monitor/IDS

I've spent some time looking for a home network IDS, and I've tried a couple of tools but to no luck. Do you have any recommendations? I'll be running the software on an old laptop, that's got 16GB ...
1
vote
0answers
5 views

drupal 7 restrict login by ip - Monitor

We are using a drupal 7, with the module "restrict login by IP". We restrict by: mail & Ip address. Our goal is to get "debug log", for Add new row to this table(for monitoring any changes in ...
0
votes
1answer
19 views

self hosted website, trival ssl certificate installs

I host my own website from a home server (domain hosted through go daddy) and I have been trying to find information on how to install a ssl certificate. How ever I cant find any information on how to ...
0
votes
0answers
98 views

Recommendation for using Spring Security SAML library version

I'm trying to use the Spring Security SAML DSL wrapper for configuring the SAML Service Provider using the actual Spring Security SAML library to leverage the easy to use Java based configuration ...
0
votes
0answers
21 views

Hosting simple html with authentication-only access

I have this weird idea in my mind - like is it possible to host simple html page on my desktop the access to which is only accepted via an authentication key? I have a static IP and nowadays domain ...
0
votes
1answer
9 views

Looking for cloud- or Unix-based open-source tools that support long-term enterprise-wide key/passphrase management and provide a programmatic API

My question really is: how does an enterprise (a small ~150-employee company) manage the passphrases and encryption keys used at the time of encrypting a large volume of data, when such encrypted data ...
1
vote
0answers
16 views

Platform For Selling Videos Online?

I'd like to set up an online store where I can sell some video courses ( 3 or 4 with a 10 minutes maximum length each) , I would like to know if I could have the option of doing live video streaming, ...
0
votes
0answers
3 views

Distributed attacks detection - software or services

I need more distributed attacks detection software or services such as https://www.abuseipdb.com/ or https://www.blocklist.de. Right now I'm using those to add IPs that are near-guaranteed to be ...
2
votes
0answers
40 views

On-premise Mobile Device Management solution for Android

I'm looking for a Mobile Device Management solution that can be deployed on my own servers. Cloud-based solutions are strictly NOT required. Please enlist such solutions which can cater at-least ...
0
votes
0answers
10 views

Software for managing domain object ACLs

We are developing a MEAN stack application that includes discretionary access control for business/domain objects, much like a file or content management system does. Users must be able to give other ...
0
votes
2answers
34 views

Simple encryption app

I need to send passwords to other people. Is there an app (cross-OS if possible) that allows me to send them in a secure way ? Maybe a simple private/public keys system. Thanks !
0
votes
1answer
9 views

All-In-One vulnerability scanner for PHP project?

I've asked this on incorrect sub-site (security.se), however, i think that question fits this site more. So, I was searching for a tool, which includes multiple Vulnerability-Scanners, so we could ...
0
votes
0answers
18 views

Open source solution for self destruction messages on my own server (like Privenote)

I need a software solution for self destruction messages like for example privnote. But i need to run it on my own server due to security reasons. Does anyone have an idea? Thanks allot :)
1
vote
1answer
35 views

Secure delete files

I have a folder which I need to secure delete. I tried File Shredder and BleachBit but I got error because the files were in use or priviledge problems. Is there a program to delete files and restart ...
1
vote
0answers
9 views

Mac firewall or tool that blocks access to websites based on geographic location?

I'm looking for a free Mac OS firewall that allows blocking of sites based on the server's estimated geographic location or iptable-like banning at a minimum. The main application is to thwart ...
0
votes
0answers
13 views

iOS: secure storage for sensitive information

Sometimes I need to view some of my documents and it's always a huge pain to search for a physical copy, especially if you are not at home and just need to get some number. I am looking for a secure, ...
0
votes
0answers
23 views

Golang implementation of PCKS#11

With a PCKS#11 standard implementation, you can use a PIN smartcard for a MFA (multi-factor authentication) sign on. Commonly, there is a PKCS#11 interface in a webbrowser software to access secure ...
0
votes
2answers
87 views

Deterministic Password Generator

I am looking for deterministic password generators which are available for Linux. My goal is to have one password to remember and use that to make passwords for all my logins.
2
votes
1answer
31 views

Manage permissions and passwords for linux, windows and mac

I am searching some software to make something similar to a domain controller on windows that can be compatible with mac, linux and windows. I need to apply security roles and manage their password ...
1
vote
0answers
16 views

Is there a backup tool for linux that allows selective deletion as well as performing backups with just a public key on the client?

In the era of GDPR, making backups comply with all regulations can be a busy task. I am looking for a backup tool for linux that allows me to: Selectively delete files in the backup. Do a backup from ...
1
vote
1answer
30 views

Tools to assess WiFi network security

It does focus on different areas of WiFi security: Monitoring: Packet capture and export of data to text files for further processing by third party tools. Attacking: Replay attacks, deauthentication,...
2
votes
0answers
8 views

Find a private certificate that has been made public

I've heard of people publishing private certificates to public sites. Given a public key are there any tools that can tell me if the private key has been published somewhere
2
votes
2answers
73 views

Open source antimalware software for macOS

I'm looking for good categorically open source software for macOS. I did not use the term "antivirus", because I refer to software that can protect not only from viruses, but also from other types ...
2
votes
1answer
33 views

Tools for checking Spectre and Meltdown system vulnerabilities on Linux?

I seek some reliable ways / tools for checking Spectre and Meltdown system vulnerabilities on Linux? That are currently the following CVEs: CVE-2017-5753 [bounds check bypass] aka Spectre Variant 1 ...
1
vote
1answer
253 views

Replacement for RequestPolicy addon for Firefox?

The venerable, vintage, and very useful, RequestPolicy add-on for Firefox now seems to be behaving erratically for me (and I know that I won't be able to use it for much longer in any case, when ...
2
votes
0answers
28 views

A software program that provides a fake UPNP server

I want to have UPNP server that is incapable of doing anything, except logging. Since it is impossible to have a secure UPNP server. Log request for modifications to the firewall. As much information ...
2
votes
0answers
28 views

Enforced Password Change

Many services on the internet do not enforce two-factor, or even updating passwords at intervals. I'm looking for an application that is capable of advising when you should update your password, and ...
0
votes
1answer
35 views

Change Detection

I am currently using TDI Console Works for baseline and configuration change detection, and it is, unfortunately, rather expensive software. I was hoping someone might be able to recommend an ...
1
vote
0answers
15 views

Any sandboxing software that prevents scattered application files?

I'm looking for software that can sandbox applications, but without some of the traditional limitations. This is my use-case: I want to run Node and have it executable so Visual Studio Code can ...
1
vote
1answer
81 views

Pen Testing for REST API

I am new to security testing. I have been able to set things up for web applications. I want to run automated scans for my REST API. Burpsuite is a good tool but is not free. Are there any open source ...
0
votes
1answer
27 views

2FA Application Access

I'm looking for a "2 Factor" authentication option (I suppose, "Parental Controls") to manage the ability to open applications. Take the following scenario: 1) User attempts to open an application ...
0
votes
1answer
81 views

Git file encryption to support file/folder based permission to protect the source code from theft

I am using git and have the following problem: In the company where I work we want to protect the source code from theft. For example, when a a developer leaves and takes the source code of a project ...
5
votes
0answers
39 views

Virtualization/sandbox software for Windows specifically designed to safely install software that may be bundled with PUPs

I'm looking for an extremely lightweight VM or virtualization tool for Windows that can be used to safely open installers that may be bundled with potentially unwanted programs (PUPs). (For an ...
0
votes
0answers
55 views

NextCloud Version Control

I plan on hosting a NextCloud instance via a Web-Server at work (due to high PC specs, "always online", and well...free power) to house all my Powershell, Bash and other documentation and scripts for ...
0
votes
1answer
38 views

Tools for checking Spectre (both variants) system vulnerabilities on Windows 10?

I seek some reliable ways / tools for checking Spectre (both variants) system vulnerabilities on Windows 10? That are the following CVEs: CVE-2017-5754 [rogue data cache load] CVE-2017-5715 [branch ...
2
votes
1answer
130 views

Replacement for Secunia/Flexera PSI

Secunia/Flexera PSI is an application and system update monitor for Windows. In comparison to other similar programs, Secunia PSI is a security tool designed to detect vulnerable and out-dated ...
0
votes
1answer
28 views

What are my options to encrypt a file before writing it on Python?

I need something simple, where I can: encrypt it with a password (salt, everything related) write it to disk Then the opposite: read from disk decrypt it with my password Everything I find out ...
2
votes
0answers
50 views

Firefox add-on to check SSL certificates for changes

I am looking for a Firefox add-on that checks SSL serial numbers or fingerprints and reports changes to the user. I realise that SSL certificates can change at any time for many legitimate reasons, ...
1
vote
1answer
32 views

Checking code for malicious parts

Let us presume we have a big pile of.. many c- like source code, example: an OS and repositories code. The question: In general, how can we search for malicious code? What automated (?) softwares are ...
1
vote
1answer
34 views

Store logon data for different types of systems, and apply to GDPR

As a software developing company, we have a lot of logon data for different types of systems. This can be a simple username/password combination for a website, but also FTP accounts, database accounts,...
1
vote
0answers
14 views

Self-hosted webinar software (or provider located in the EU)

We're currently searching for a self hosted webinar software because we have customers that put a big focus on security and privacy, also we're located in Germany we have to fulfill German and ...
1
vote
0answers
25 views

Is there any software to disconnect the lan or wi-fi network connection when you stop using a specific application?

I am looking for some software that has the functionality of disconnecting the lan or wi-fi network when closing a specific application and that when opening the application, reconnect. This could ...
2
votes
0answers
22 views

Linux software to detect external drive partition-level rootkits

clamscan can search file systems for malware, but it can't scan possible rootkits on the boot sectors of an external disk. rkhunter also doesn't seem to provide the ability to scan boot sectors of an ...
1
vote
1answer
124 views

Is there some correlation rules and threat signatures available out there for an ELK based SIEM?

For commercial SIEMs, correlation rules and threat signatures are available from some communities (CERTs and others) or from some commercial offers. What about ELK based SIEMs? Where can I find off-...
1
vote
1answer
40 views

linux/ubuntu os that follows Tails/Tor ideals

I am a new ubuntu user, So forgive me if I sound stupid, In my head my question sounds like it could work. so my question has 2 parts. Is there already a OS that can have just a basic file system ...
0
votes
1answer
22 views

Simple secure standalone “offline” app to generate securely random passwords

I'm looking for an app (used on laptop) to generate long, securely random, 1-use passwords that are impossible to be memorized. It must be "offline" or at least openly verifiably sandboxed from a ...