Questions tagged [security]
For requests for recommendations of security software. Before using this tag, make sure there's no more specific tag for the software you're after.
136
questions with no upvoted or accepted answers
7
votes
0answers
60 views
WordPress plugin to make it more CMS-like by securing content
I'm trying to mold WordPress into a CMS. The main problem I'm currently facing is that I want to secure entire pages: most of the website won't be publicly available. I'm looking for a plugin (and ...
6
votes
0answers
132 views
Application based firewalls for Linux
Linux has IPtables firewalls like GUFW which can block ports and IPs.
But what I need is an application based firewall like Zone Alarm and Comodo in Windows that blocks internet access to particular ...
6
votes
1answer
162 views
Alert if a remote computer tries to connect on a given port
I am looking for a Windows 7 program that can give an alert if a remote computer tries to connect on a given port, and gives the option to accept or refuse. I don't want any warning regarding other ...
6
votes
0answers
56 views
IEEE 802.11 Wi-Fi Radar
I'm frequently finding myself managing (and troubleshooting) an increasing number of networks that are (more or less) overrun with scores of 2.4GHz; 802.11; Wireless Access Points; and (for the most ...
5
votes
0answers
2k views
PixelBlock alternative for Firefox?
I'm using Firefox 57. I'm looking for software that blocks the 1x1 pixels that cause the HTTP{S} fetches that are used to track users. The product I used in the past is called PixelBlock. I searched ...
5
votes
0answers
117 views
Undetectable hypervisor for malware analysis
I am looking for a hypervisor that can be "hidden" from the guest OS such that they believe that they are running on real hardware, instead of being virtualized.
Microsoft-VM's report the motherboard ...
4
votes
0answers
40 views
Virtualization/sandbox software for Windows specifically designed to safely install software that may be bundled with PUPs
I'm looking for an extremely lightweight VM or virtualization tool for Windows that can be used to safely open installers that may be bundled with potentially unwanted programs (PUPs). (For an ...
4
votes
0answers
926 views
Biometric keepass
I use KeePass to store my passwords, but it still concerns me a little bit that now all my passwords are guarded behind a single password. It would be nice if it could do 2-of-3 authentication (not ...
4
votes
0answers
43 views
Whole disk encryption on a tablet (that has no pre-boot keyboard)
I am researching methods to encrypt whole disk on tablet. I would like to encrypt my tablet that comes with Dual Boot OS, with pre-installed Windows 10 Home and Android 5.1.
Let's start with what ...
4
votes
0answers
57 views
More targeted DNS Poisoning
I want to play around with DNS poisoning to see what I can do with it, how it works, etc. Unfortunately, the only tools I know of that poison the DNS cache go the whole mile and do a full MiTM attack, ...
3
votes
0answers
31 views
noCaptcha alternative
It's no secret, that CAPTCHA's no longer offer a reliable protection against automated attacks.
CAPTCHAs have become easy to solve for bots, but the distorted text is often very hard to read for ...
3
votes
0answers
305 views
Is there an offline two factor authentication client for Linux that I can use as TFA with Gmail, Dropbox, etc.?
In short, I have an offline desktop at home that I would like to use as a "dongle" for certain services. This desktop runs Debian Linux and does not have Chrome or Chromium. (It's offline! So I figure ...
3
votes
0answers
520 views
Multiuser, opensource, secure password manager?
There have been many similar questions, but I have not found recommendations with the following, common requirements:
Multi-user. We have a high fluctuation of devs, so all or nothing is not good ...
3
votes
0answers
184 views
Lightweight SMTP Server with TLS support
I have an application that requires an MTA with the following capabilities:
be able to receive email for multiple addresses in a single domain, e.g. 100@example.com, 101@example.com, and so on.
the ...
3
votes
0answers
529 views
File-based encryption with virtual disk support for Windows
With TrueCrypt users advised to stop using the software, is there similar software that:
supports virtual disk mounting from encrypted files
offers plausible deniability via hidden volumes
has been ...
3
votes
1answer
93 views
Nuclear launch alert
Is there an app or feature in iOS that can notify its owner of an impending missile, nuclear or otherwise, headed towards a particular location (or a nuclear launch of any sort)? All I seem to be able ...
2
votes
0answers
24 views
Windows Sandbox for executables
I am looking for a Sandbox system on Windows like nsjail. I found a few software packages as real sandboxes like VMs, but I wrote a server software I would like to additionally sandbox. For example:
$ ...
2
votes
0answers
25 views
Linux tool to anonymize captured data packets for commercial use according to GDPR
I am working on a project where I have to identify anomalies in network traffic of business networks with machine learning. The algorithm is feeded with captured network packets from inside of the ...
2
votes
0answers
21 views
Is there a solution which would allow me to easily monitor/control the traffic for all devices on my network at the hostname level?
I originally asked this question in a Superuser post but it was removed and I was told to post here.
I'm a huge fan of the uMatrix browser extension which allows you to control and limit which ...
2
votes
0answers
24 views
Software to build a taxi app easily, without vendor lock-in
Could you please help me narrow my search for software that can be used to make a taxi app?
The app will provide similar functionalities to the lyft app. It should be maintainable and robust. Must be ...
2
votes
0answers
44 views
On-premise Mobile Device Management solution for Android
I'm looking for a Mobile Device Management solution that can be deployed on my own servers. Cloud-based solutions are strictly NOT required.
Please enlist such solutions which can cater at-least ...
2
votes
0answers
8 views
Find a private certificate that has been made public
I've heard of people publishing private certificates to public sites. Given a public key are there any tools that can tell me if the private key has been published somewhere
2
votes
0answers
34 views
A software program that provides a fake UPNP server
I want to have UPNP server that is incapable of doing anything, except logging. Since it is impossible to have a secure UPNP server.
Log request for modifications to the firewall. As much information ...
2
votes
0answers
28 views
Enforced Password Change
Many services on the internet do not enforce two-factor, or even updating passwords at intervals. I'm looking for an application that is capable of advising when you should update your password, and ...
2
votes
1answer
140 views
Replacement for Secunia/Flexera PSI
Secunia/Flexera PSI is an application and system update monitor for Windows. In comparison to other similar programs, Secunia PSI is a
security tool designed to detect vulnerable and out-dated ...
2
votes
0answers
50 views
Firefox add-on to check SSL certificates for changes
I am looking for a Firefox add-on that checks SSL serial numbers or fingerprints and reports changes to the user. I realise that SSL certificates can change at any time for many legitimate reasons, ...
2
votes
0answers
17 views
Self-hosted webinar software (or provider located in the EU)
We're currently searching for a self hosted webinar software because we have customers that put a big focus on security and privacy, also we're located in Germany we have to fulfill German and ...
2
votes
0answers
27 views
Linux software to detect external drive partition-level rootkits
clamscan can search file systems for malware, but it can't scan possible rootkits on the boot sectors of an external disk. rkhunter also doesn't seem to provide the ability to scan boot sectors of an ...
2
votes
0answers
88 views
Replacement for obselete OpenDNS Umbrella App on iPhone
I have been a Prosumer OpenDNS Umbrella customer for years, but their iPhone App isn't being upgraded to 64-bit, so it won't work with iOS 11. It provides Umbrella's protections and also allows ...
2
votes
0answers
42 views
App that decrypts and displays an AES-encrypted file
I'm looking for a lightweight Android app, that:
lets the user choose a file
asks for the password
opens this file and displays the decrypted content in a textarea (scrollable)
However, the app:
...
2
votes
0answers
51 views
OpenSSL alternative that features better automation properties
I plan on making my own Certificate Authority, and already got quite a bit of money for the project, and now I need a way to issue certificates.
I was going to use OpenSSL, but it isn't great for ...
2
votes
0answers
35 views
Collaborative Vulnerability Assessment / Penetration Test Tool Suggestions
I am in the process of evaluating Infobyte's Faraday tool and putting it into use for pentesting and collaboration with my colleagues. The idea is great but the app seems to be in the early stages of ...
2
votes
0answers
41 views
Tool that actually prevents Windows 10 telemetry
Are there any tools that actually prevent all Windows 10 telemetry reports from being gathered, or at the least, from being transmitted?
Many tools claim to do this type of thing, but are there any ...
asked Jul 12 '16 at 12:38
2
votes
0answers
267 views
Password protected SMS app for iPhone
The Signal app on Android has its own password control, so you hand out your unlocked phone to a friend without giving them access to your SMSs.
But https://github.com/WhisperSystems/Signal-iOS/...
2
votes
0answers
25 views
What is a good choice for managing users/security in an SAAS environment?
I'm building an SAAS application and looking for solutions to secure my RESTful API (written in Java/Jersey 2). Developers should be able to consume my REST API via an Access token.
I had a look at ...
2
votes
0answers
33 views
JVM framework for creating scalable non-CMS web applications
I am doing research for a post-graduate project. It generally involves security and distributed server network. Project will aim for speed, scalability and safety and I am looking for a framework to ...
2
votes
0answers
29 views
Simple portable HTTPS-only browser with one pinned CA
Is there somewhere a project for a simple browser, that:
Only allows HTTPS connections;
Trusts only one Certificate Authority (like a file ca.pem in browser's directory);
Can use client-side ...
2
votes
0answers
27 views
GUI to monitor and manage webserver rate limiting and blocklists
There are various Apache modules that implement some kind of rate limiting. Eg. mod_security or mod_qos and services like stopforumspam and other blacklists to detect malicious requests.
My ...
2
votes
0answers
149 views
Offline encryption package for Chromebook
I am looking for a local encryption package that will work on a Chromebook.
The aim is to have a file stored on the Chromebook or an attached SD/USB device. Viewing the file will require entry of a ...
2
votes
0answers
34 views
“Firewall” for X applications
I don't want proprietary Skype directly accessing my Xorg server. I've already taken measures securing filesystem, network, processes/IPC, but there still a plenty of spying possibilities using X ...
2
votes
0answers
157 views
Single Step KDF specification
NIST SP 56A talks about Single Step Key derivation function. Is there any Java library which implements this?
2
votes
0answers
133 views
Open source Linux vpnc client that can connect to checkpoint gateway
I need an open source vpnc client that can connect to a Check Point gateway (firewall) for a Linux machine. It doesn't matter which Linux (red-hat, ubuntu, fedora...).
The target is to activate the ...
1
vote
0answers
19 views
Good (free or paid) command line based Antivirus for Linux
I am using ClamAV for some time now and it is quite okay. But I would like to give some other Antivirus Softwares/tools a try.
I am looking for something that:
is Command-line based i.e. GUI is ...
1
vote
0answers
9 views
detect network malicious activity coming from own linux server
I have a VPS provider that is strictly disallows malicious activity like ssh-bruting, ddos, and such.
I also have multiple users that use the single VPS machine, each allocated to one docker ...
1
vote
0answers
23 views
Automatically unlock desktop when approached with mobile
I'm looking for a way to use my mobile to automatically unlock my laptop. Blue Proximity seemed like a good answer, but it's clearly been abandoned as a project and I'm having problems with some of ...
1
vote
0answers
13 views
SIEM Dashboard/Add-On/App for Viewing Windows Registry Forensics Data
There are a number of forensically-useful areas in the Windows registry and file system like those detailed in this SANS Poster: https://www.sans.org/security-resources/posters/windows-forensic-...
1
vote
0answers
33 views
Can you think of any way in which “normal people” can contact me (one-way) with messages in a secure, anonymous (for me) manner?
I'm trying to be able to receive incoming messages from "the general public", in a way which:
Does not reveal my identity to the person contacting me, or to any company/entity.
Does not cost money.
...
1
vote
0answers
13 views
Web-app that provides email aliases similar to Yahoo's ones
The Current Service
With Yahoo mail, you they give you a second address like foo-*@yahoo.com.
You can replace the asterisk with whatever string and you can have up to 500 addresses with this template....
1
vote
0answers
12 views
Top 3 API gateway middle ware tools for managing multiple REST API's
Use Case:
Authentication and Authorization (Multi Tenant Support):
We have multiple REST API's resource with their own
authentication and authorization business logic. Most of them have
firm-wide ...
1
vote
0answers
34 views
Tool to see network calls made by an Android app
I am trying to search for security vulnerabilities in the Android app and hence wanted to know the software which can help me to track the network calls being by an Android App.
The software should ...
