Questions tagged [security]
For requests for recommendations of security software. Before using this tag, make sure there's no more specific tag for the software you're after.
130
questions with no upvoted or accepted answers
7
votes
1answer
176 views
Alert if a remote computer tries to connect on a given port
I am looking for a Windows 7 program that can give an alert if a remote computer tries to connect on a given port, and gives the option to accept or refuse. I don't want any warning regarding other ...
7
votes
0answers
61 views
WordPress plugin to make it more CMS-like by securing content
I'm trying to mold WordPress into a CMS. The main problem I'm currently facing is that I want to secure entire pages: most of the website won't be publicly available. I'm looking for a plugin (and ...
6
votes
0answers
133 views
Application based firewalls for Linux
Linux has IPtables firewalls like GUFW which can block ports and IPs.
But what I need is an application based firewall like Zone Alarm and Comodo in Windows that blocks internet access to particular ...
6
votes
0answers
57 views
IEEE 802.11 Wi-Fi Radar
I'm frequently finding myself managing (and troubleshooting) an increasing number of networks that are (more or less) overrun with scores of 2.4GHz; 802.11; Wireless Access Points; and (for the most ...
5
votes
0answers
42 views
Virtualization/sandbox software for Windows specifically designed to safely install software that may be bundled with PUPs
I'm looking for an extremely lightweight VM or virtualization tool for Windows that can be used to safely open installers that may be bundled with potentially unwanted programs (PUPs). (For an ...
5
votes
0answers
3k views
PixelBlock alternative for Firefox?
I'm using Firefox 57. I'm looking for software that blocks the 1x1 pixels that cause the HTTP{S} fetches that are used to track users. The product I used in the past is called PixelBlock. I searched ...
5
votes
0answers
123 views
Undetectable hypervisor for malware analysis
I am looking for a hypervisor that can be "hidden" from the guest OS such that they believe that they are running on real hardware, instead of being virtualized.
Microsoft-VM's report the motherboard ...
4
votes
0answers
973 views
Biometric keepass
I use KeePass to store my passwords, but it still concerns me a little bit that now all my passwords are guarded behind a single password. It would be nice if it could do 2-of-3 authentication (not ...
4
votes
0answers
53 views
Whole disk encryption on a tablet (that has no pre-boot keyboard)
I am researching methods to encrypt whole disk on tablet. I would like to encrypt my tablet that comes with Dual Boot OS, with pre-installed Windows 10 Home and Android 5.1.
Let's start with what ...
4
votes
1answer
64 views
More targeted DNS Poisoning
I want to play around with DNS poisoning to see what I can do with it, how it works, etc. Unfortunately, the only tools I know of that poison the DNS cache go the whole mile and do a full MiTM attack, ...
3
votes
0answers
39 views
noCaptcha alternative
It's no secret, that CAPTCHA's no longer offer a reliable protection against automated attacks.
CAPTCHAs have become easy to solve for bots, but the distorted text is often very hard to read for ...
3
votes
0answers
369 views
Is there an offline two factor authentication client for Linux that I can use as TFA with Gmail, Dropbox, etc.?
In short, I have an offline desktop at home that I would like to use as a "dongle" for certain services. This desktop runs Debian Linux and does not have Chrome or Chromium. (It's offline! ...
3
votes
0answers
546 views
Multiuser, opensource, secure password manager?
There have been many similar questions, but I have not found recommendations with the following, common requirements:
Multi-user. We have a high fluctuation of devs, so all or nothing is not good ...
3
votes
0answers
190 views
Lightweight SMTP Server with TLS support
I have an application that requires an MTA with the following capabilities:
be able to receive email for multiple addresses in a single domain, e.g. 100@example.com, 101@example.com, and so on.
the ...
3
votes
0answers
532 views
File-based encryption with virtual disk support for Windows
With TrueCrypt users advised to stop using the software, is there similar software that:
supports virtual disk mounting from encrypted files
offers plausible deniability via hidden volumes
has been ...
3
votes
1answer
96 views
Nuclear launch alert
Is there an app or feature in iOS that can notify its owner of an impending missile, nuclear or otherwise, headed towards a particular location (or a nuclear launch of any sort)? All I seem to be able ...
2
votes
0answers
45 views
Anonymous and Secure File Uploading
I help run a community group and need suggestions on an anonymous and secure file upload website. This group helps people deal with sensitive personal issues. I'd like a free option and limited ...
2
votes
0answers
16 views
Turn off PC if bluetooth device is disconnected (proximity) or loses connection
Is there such software, I've looked into Windows security features for such an option and it doesn't exist? I have found that you can unlock your PC with your Bluetooth device but can't shut it down ...
2
votes
0answers
29 views
Windows Sandbox for executables
I am looking for a Sandbox system on Windows like nsjail. I found a few software packages as real sandboxes like VMs, but I wrote a server software I would like to additionally sandbox. For example:
$ ...
2
votes
0answers
33 views
Linux tool to anonymize captured data packets for commercial use according to GDPR
I am working on a project where I have to identify anomalies in network traffic of business networks with machine learning. The algorithm is feeded with captured network packets from inside of the ...
2
votes
0answers
27 views
Is there a solution which would allow me to easily monitor/control the traffic for all devices on my network at the hostname level?
I originally asked this question in a Superuser post but it was removed and I was told to post here.
I'm a huge fan of the uMatrix browser extension which allows you to control and limit which ...
2
votes
0answers
19 views
Top 3 API gateway middle ware tools for managing multiple REST API's
Use Case:
Authentication and Authorization (Multi Tenant Support):
We have multiple REST API's resource with their own
authentication and authorization business logic. Most of them have
firm-wide ...
2
votes
0answers
26 views
Software to build a taxi app easily, without vendor lock-in
Could you please help me narrow my search for software that can be used to make a taxi app?
The app will provide similar functionalities to the lyft app. It should be maintainable and robust. Must be ...
2
votes
0answers
53 views
On-premise Mobile Device Management solution for Android
I'm looking for a Mobile Device Management solution that can be deployed on my own servers. Cloud-based solutions are strictly NOT required.
Please enlist such solutions which can cater at-least ...
2
votes
0answers
8 views
Find a private certificate that has been made public
I've heard of people publishing private certificates to public sites. Given a public key are there any tools that can tell me if the private key has been published somewhere
2
votes
0answers
36 views
A software program that provides a fake UPNP server
I want to have UPNP server that is incapable of doing anything, except logging. Since it is impossible to have a secure UPNP server.
Log request for modifications to the firewall. As much information ...
2
votes
0answers
28 views
Enforced Password Change
Many services on the internet do not enforce two-factor, or even updating passwords at intervals. I'm looking for an application that is capable of advising when you should update your password, and ...
2
votes
1answer
145 views
Replacement for Secunia/Flexera PSI
Secunia/Flexera PSI is an application and system update monitor for Windows. In comparison to other similar programs, Secunia PSI is a
security tool designed to detect vulnerable and out-dated ...
2
votes
0answers
51 views
Firefox add-on to check SSL certificates for changes
I am looking for a Firefox add-on that checks SSL serial numbers or fingerprints and reports changes to the user. I realise that SSL certificates can change at any time for many legitimate reasons, ...
2
votes
0answers
18 views
Self-hosted webinar software (or provider located in the EU)
We're currently searching for a self hosted webinar software because we have customers that put a big focus on security and privacy, also we're located in Germany we have to fulfill German and ...
2
votes
0answers
30 views
Linux software to detect external drive partition-level rootkits
clamscan can search file systems for malware, but it can't scan possible rootkits on the boot sectors of an external disk. rkhunter also doesn't seem to provide the ability to scan boot sectors of an ...
2
votes
0answers
94 views
Replacement for obselete OpenDNS Umbrella App on iPhone
I have been a Prosumer OpenDNS Umbrella customer for years, but their iPhone App isn't being upgraded to 64-bit, so it won't work with iOS 11. It provides Umbrella's protections and also allows ...
2
votes
0answers
44 views
App that decrypts and displays an AES-encrypted file
I'm looking for a lightweight Android app, that:
lets the user choose a file
asks for the password
opens this file and displays the decrypted content in a textarea (scrollable)
However, the app:
...
2
votes
0answers
51 views
OpenSSL alternative that features better automation properties
I plan on making my own Certificate Authority, and already got quite a bit of money for the project, and now I need a way to issue certificates.
I was going to use OpenSSL, but it isn't great for ...
2
votes
0answers
36 views
Collaborative Vulnerability Assessment / Penetration Test Tool Suggestions
I am in the process of evaluating Infobyte's Faraday tool and putting it into use for pentesting and collaboration with my colleagues. The idea is great but the app seems to be in the early stages of ...
2
votes
0answers
43 views
Tool that actually prevents Windows 10 telemetry
Are there any tools that actually prevent all Windows 10 telemetry reports from being gathered, or at the least, from being transmitted?
Many tools claim to do this type of thing, but are there any ...
asked Jul 12 '16 at 12:38
2
votes
0answers
268 views
Password protected SMS app for iPhone
The Signal app on Android has its own password control, so you hand out your unlocked phone to a friend without giving them access to your SMSs.
But https://github.com/WhisperSystems/Signal-iOS/...
2
votes
0answers
25 views
What is a good choice for managing users/security in an SAAS environment?
I'm building an SAAS application and looking for solutions to secure my RESTful API (written in Java/Jersey 2). Developers should be able to consume my REST API via an Access token.
I had a look at ...
2
votes
0answers
603 views
Best APK Audit Tool
I am looking for a simple and efficient tool for auditing apk's.
I would like an application that given a APK,
1) obtain the technologies used so that can check the vulnerabilities (cordova version ...
2
votes
0answers
33 views
JVM framework for creating scalable non-CMS web applications
I am doing research for a post-graduate project. It generally involves security and distributed server network. Project will aim for speed, scalability and safety and I am looking for a framework to ...
2
votes
0answers
30 views
Simple portable HTTPS-only browser with one pinned CA
Is there somewhere a project for a simple browser, that:
Only allows HTTPS connections;
Trusts only one Certificate Authority (like a file ca.pem in browser's directory);
Can use client-side ...
2
votes
0answers
27 views
GUI to monitor and manage webserver rate limiting and blocklists
There are various Apache modules that implement some kind of rate limiting. Eg. mod_security or mod_qos and services like stopforumspam and other blacklists to detect malicious requests.
My ...
2
votes
0answers
150 views
Offline encryption package for Chromebook
I am looking for a local encryption package that will work on a Chromebook.
The aim is to have a file stored on the Chromebook or an attached SD/USB device. Viewing the file will require entry of a ...
2
votes
0answers
36 views
"Firewall" for X applications
I don't want proprietary Skype directly accessing my Xorg server. I've already taken measures securing filesystem, network, processes/IPC, but there still a plenty of spying possibilities using X ...
2
votes
0answers
159 views
Single Step KDF specification
NIST SP 56A talks about Single Step Key derivation function. Is there any Java library which implements this?
2
votes
0answers
134 views
Open source Linux vpnc client that can connect to checkpoint gateway
I need an open source vpnc client that can connect to a Check Point gateway (firewall) for a Linux machine. It doesn't matter which Linux (red-hat, ubuntu, fedora...).
The target is to activate the ...
1
vote
0answers
23 views
Java Secure password generator with high entropy
What is the best Java password generator library that we can use to generate the good passwords that humans can use to login to an account.
I have a scenario where I’m trying to reduce the password ...
1
vote
0answers
17 views
Is there a self-hosted solution for analysing Apache httpd logs or server traffic?
Recently I've had several bouts of spambot traffic on my website. On each occasion the attacks have come from just a handful of IP addresses (so not a DDOS attack).
I would like to be able to monitor ...
1
vote
0answers
11 views
Taint analysis and visualization in CI for PHP
Is there a (preferably static) Taint analysis tool for PHP, which can visualize the result (e.g. as a call graph) in an output format suitable for a CI environment? (e.g. html) It would be good if you ...
1
vote
0answers
36 views
Offline static code analysis similar to the LGTM online service
LGTM provides an online service to analyze source code of all major languages for security bugs and errors.
I am looking for a similar solution, which performs the tests while the source code stays in ...
