Questions tagged [security]

For requests for recommendations of security software. Before using this tag, make sure there's no more specific tag for the software you're after.

Filter by
Sorted by
Tagged with
2
votes
1answer
31 views

Manage permissions and passwords for linux, windows and mac

I am searching some software to make something similar to a domain controller on windows that can be compatible with mac, linux and windows. I need to apply security roles and manage their password ...
6
votes
1answer
162 views

Alert if a remote computer tries to connect on a given port

I am looking for a Windows 7 program that can give an alert if a remote computer tries to connect on a given port, and gives the option to accept or refuse. I don't want any warning regarding other ...
4
votes
1answer
213 views

Small utility to generate SSHA passwords?

I am looking for a small cross-platform utility that I can recommend people use to generate salted SHA1 digest passwords suitable for use with OpenLDAP. The utility should: Not require installing or ...
1
vote
0answers
9 views

Top 3 API gateway middle ware tools for managing multiple REST API's

Use Case: Authentication and Authorization (Multi Tenant Support): We have multiple REST API's resource with their own authentication and authorization business logic. Most of them have firm-wide ...
1
vote
0answers
10 views

Is there a P2P/decentralized “e-mail alternative” which more than 10 people in the world use?

I'm trying to provide a way for myself to reach people who contact me through what is essentially a website form. The problem with e-mail, the obvious contender, is that it's inherently insecure and ...
1
vote
2answers
58 views

Personal proxy server software that filters DNS response and protects against DNS rebinding attacks on Windows?

Thanks to this question/answer, I now need to find a personal proxy server that filters DNS responses and protects against DNS rebinding attacks. I'd prefer that it runs on Windows as employers seem ...
3
votes
2answers
38 views

Modern alternative to GnuPG for symmetric encryption on Linux

I'm looking for an alternative to GnuPG for symmetric encryption. Specifically, I want to encrypt short, secret files using a passphrase using Linux, and have them secured against modern attacks, such ...
0
votes
0answers
14 views

JWT alternative without database lookup

I have used JWT in my application and found it interesting as they don't require a database lookup, which makes them faster and puts less load on the database. A major concern with JWT is related to ...
0
votes
1answer
18 views

Antivirus for Windows and Mac

Which anti virus is the best for Mac and Windows (I'm using both). I know the list of malware and virus removal tools is long (Avast, Sophos, AiroAV, Norton, Mcafee, Bit Defender, etc., etc).
1
vote
0answers
27 views

Tool to see network calls made by an Android app

I am trying to search for security vulnerabilities in the Android app and hence wanted to know the software which can help me to track the network calls being by an Android App. The software should ...
5
votes
1answer
127 views

Maximum security web browser

I recently upgraded Firefox and it screwed up the NoScript UI and greatly increased CPU usage. When I downgraded to an older version, it deleted my Adblock Plus and NoScript installs instead of ...
1
vote
1answer
23 views

What software can I use to encrypt all files that are copied out of a system?

What software can I use to encrypt all files that are copied out of the system(USB, network, email,...) such that only systems with the same encryption will be able to read the files. OS is Windows.
0
votes
0answers
6 views

What tool to use to assess vulnerabilities on MongoDB?

What tool can one use to assess vulnerabilities of a MongoDB for the purpose of security audit. Thanks.
0
votes
2answers
18 views

Software to notify me when someone rings my doorbell?

I'm trying to get a notification on my main phone or email when someone rings my doorbell, without changing the doorbell. The sound is loud, so I'm thinking to set a secondary phone next to the ...
0
votes
0answers
4 views

Enabling SSLv3 for one specific endpoint

Some Java software I'm working on requires that we use a very old API that doesn't support TLS - it uses SSLv3. How could I access that endpoint without compromising the security of the rest of the ...
0
votes
1answer
11 views

how to store google/facebook client id and secret in web server?

Purpose: To find a way to securely store google/facebook client id and secret in backend web server. I read that, I should not store client id and secret in web server. Recommendation needed: What ...
0
votes
0answers
8 views

Password Manager

I'm looking for suggestions. As we all know to keep your password safe a big pain in this digital world, So I'm looking for an open-source Password manager which I can use in a local network. I have ...
0
votes
0answers
8 views

Generate passcodes to grant users to access page(s) on a Wordpress site

I am looking to implement a functionality into wordpress and I dont know how to do it. Here is the idea : I want to be able to generate passcodes in the admin panel (JX23S for exemple) Users can ...
2
votes
1answer
133 views

Replacement for Secunia/Flexera PSI

Secunia/Flexera PSI is an application and system update monitor for Windows. In comparison to other similar programs, Secunia PSI is a security tool designed to detect vulnerable and out-dated ...
3
votes
2answers
1k views

OpenSource Security scan tools for REST APIs

I am very new in security testing. It will be very helpful if any one can suggest open-source/free tools that can run Scans for security issues (E.G SQL Injection) on REST APIs which use JSON ...
0
votes
0answers
5 views

Looking for equivalent lib to Vertx: io.vertx.ext.auth in Spring-Boot

The former code is using io.vertx.ext.auth lib for user password hashing and token generation. I"m writing a new micro-service in Spring boot and want to use the same lib but in Spring. The vertx lib ...
0
votes
0answers
6 views

Tools for DDOS my own website and flood my layer 2 switch broadcast

It is not for illegal activities. Before bringing my mail server online, I am preparing for the worst situation when my website and mail server get a DDOS attack. All I have are just a 100mbps ...
0
votes
0answers
5 views

What is a better option in terms of security between anyDesk and team viewer?

My company is looking for a remote desktop software to contact out clients and our two candidates are anyDesk and teamviewer, in terms of securing connections and access, how do both compare? Thanks ...
0
votes
0answers
4 views

Does OSSIM support low RAM server?

Good evening/morning what are the available options to install OSSIM on A low RAM server? Best wishes
2
votes
2answers
61 views

What free secure file erasure software for Windows 10 can be used without installation?

What downloadable data-erasing software (like Eraser) for Windows 10 are wholly free can be operated (without losing any functions) without installation like TeamViewer? don't require command lines? ...
1
vote
0answers
14 views

A server environment that allows clients to audit server code in execution

What I'm not asking is a way for a trusted server-owner to authenticate that they are running the server to a client. That would just be a cert. What I was hoping for is a way to limit the power of a ...
0
votes
0answers
9 views

Store the access token from OAuth2 Authorization code on the browser (cookie)

To avoid systematically going through a reverse proxy whose role is to link the session (session ID) to access_token (pic 1), I would like to push the access_token obtained by OAuth2 Authorization ...
0
votes
0answers
6 views

How to trust javascript opensource libraries found in the internet

Actually , I need to use some of JS libraries or packages found in the internet. But for security reasons , I have doubts using them. For example this JS simplebar found in github . It's cool, saves ...
0
votes
0answers
11 views

I need a secure isolated browser for up to 68 staff to use

We need a third party isolated browser that can be used by up to 68 staff on our network, and ensure network integrity. The browser needs to be isolated in a sense that it sits in the cloud, and is ...
0
votes
0answers
14 views

Tool to check https security

I am looking for a tool to check the security of the https services I offer. I want to be sure the SSL cipher suite, the protocol version ... is secure. Maybe checking for some CVE Vulnerabilities ...
0
votes
0answers
12 views

completely extract install4j package

I need to scan a setup.exe created by install4j for viruses and thus need to unpack the contained files. 7z can unpack setup.exe, however, the content mainly can be found in a file with the name [O]. ...
0
votes
1answer
19 views

self hosted website, trival ssl certificate installs

I host my own website from a home server (domain hosted through go daddy) and I have been trying to find information on how to install a ssl certificate. How ever I cant find any information on how to ...
0
votes
0answers
4 views

Recommendations for site that saves user's browser sessions in 'tabs'

I'd like to find the best software option to save a user's 'tabs' as well as all data associated with it (say google, microsoft, etc accounts) within my application. Ex: A user logs in to my app, can ...
0
votes
0answers
19 views

Ruby library for secure password hashing

Following several resources on the web (e.g. here), I'd like to use the $6$rounds=500000$%.16s format for password hashing. One option is mkpasswd -m sha-512 -R 50000. However, I would prefer a Ruby ...
0
votes
0answers
4 views

Microsoft Dynamics CRM to Sharepoint permission synchronisation

Does anyone know software/addons for Microsoft Dynamics CRM and Sharepoint which synchronize the permission rights between these two systems? Dynamics CRM and Sharepoint have a standard integration ...
0
votes
0answers
7 views

Use oauth2 or oauth3?

I've been thinking in the creation of a new software (software development, software design ...) and when taking part in the software security / how to do securily the software, I've discovered that a ...
1
vote
0answers
8 views

Opensource software for endpoint visibility

Looking for FLOSS platform for monitoring many remote user endpoints (varying devices and OSs) for visibility and data leak protection (eg. if notice that a particular policy is violated on a user ...
0
votes
0answers
7 views

PC Component Firmware integrity and security software

I recently bought a new laptop. If you read the news you must've noticed Vault 6 and Vault 7 leaks (from Wikileaks), which contain rootkits which sit on your Hard Drive Firmware, MBR and other hidden ...
0
votes
0answers
5 views

What software can I use to safely store clients' credentials to 3rd party applications which don't have an API?

I'm currently developing a business which acts like an automatization tool. I'm working with a few sites which don't have an API and I desperately need to get data from the clients' accounts. Because ...
0
votes
0answers
12 views

Where can I find a C library for Linux that implements C11 annex K?

I'm looking for a C library for Linux that implements the optional C11 Annex K bounds-checking interface. It should: Provide commonly-used *_s interfaces included in the standard. Actively and ...
0
votes
0answers
5 views

Encrypted data and DLP

I was looking at solutions to detect sensitive data using a DLP solution, from a encrypted data set being transmitted. Although DLP can detect and block password protected files, I don't suppose it ...
0
votes
0answers
2 views

Is there a framework or a tool which will test 3rd party Java jars for security vulnerability and recommends suitable updates or upgrades?

I am looking for a framework or a tool which will test 3rd party Java jars for security vulnerability and recommends suitable updates or upgrades.
0
votes
0answers
8 views

What program can I use to prove my application is malware-free/safe?

I've created an electron application that I intend to distribute to others through email. I'd like to know if there is some sort of software or website I can use to show clients that the application ...
0
votes
0answers
7 views

A tool for time specific log analysis

I often have web logs when an incident happens and I need to analyse the activity to find out how it happened. So I do not have full logs, I just have it for last 2 hours before the incident or so. Is ...
0
votes
0answers
6 views

Container security/ vulnerability testing tools

I am doing performance bench-marking for different container technology. Now I want to check the performance of a container from security perspective. Is their any tools or way to find and compare ...
0
votes
0answers
4 views

Protect files in a lan shared folder from copy or deleting

I've several cad project in a lan shared folder. Now they are accessible from the technical office computers and they can work on them, but also copy them on private drives or delete them from the ...
2
votes
0answers
24 views

Software to build a taxi app easily, without vendor lock-in

Could you please help me narrow my search for software that can be used to make a taxi app? The app will provide similar functionalities to the lyft app. It should be maintainable and robust. Must be ...
1
vote
0answers
7 views

Which is the best security solution for the credentials in scripts HashiCorp or Thycotic Secret server?

Many of the DevOps activities involve the use of a hardcoded key or credential somewhere in the application’s environmentor in powershell scripts. However, hardcoded passwords of any type are a ...
0
votes
0answers
6 views

Need a security tool for docker base images

I need to find a tool that could cover the needs of my team. More sooner than later we will be allowing developer to push their own docker base images to registry and need to find a tool that inspect ...
1
vote
0answers
41 views

Post quantum TLS based web-browser client

Are there any open source projects that implement a web browser client that has support for post quantum TLS protocols so that it can talk with post quantum patched TLS web servers. I've checked ...