Questions tagged [security]

For requests for recommendations of security software. Before using this tag, make sure there's no more specific tag for the software you're after.

137 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
7
votes
0answers
60 views

WordPress plugin to make it more CMS-like by securing content

I'm trying to mold WordPress into a CMS. The main problem I'm currently facing is that I want to secure entire pages: most of the website won't be publicly available. I'm looking for a plugin (and ...
6
votes
0answers
129 views

Application based firewalls for Linux

Linux has IPtables firewalls like GUFW which can block ports and IPs. But what I need is an application based firewall like Zone Alarm and Comodo in Windows that blocks internet access to particular ...
6
votes
1answer
161 views

Alert if a remote computer tries to connect on a given port

I am looking for a Windows 7 program that can give an alert if a remote computer tries to connect on a given port, and gives the option to accept or refuse. I don't want any warning regarding other ...
6
votes
0answers
55 views

IEEE 802.11 Wi-Fi Radar

I'm frequently finding myself managing (and troubleshooting) an increasing number of networks that are (more or less) overrun with scores of 2.4GHz; 802.11; Wireless Access Points; and (for the most ...
5
votes
0answers
38 views

Virtualization/sandbox software for Windows specifically designed to safely install software that may be bundled with PUPs

I'm looking for an extremely lightweight VM or virtualization tool for Windows that can be used to safely open installers that may be bundled with potentially unwanted programs (PUPs). (For an ...
5
votes
0answers
2k views

PixelBlock alternative for Firefox?

I'm using Firefox 57. I'm looking for software that blocks the 1x1 pixels that cause the HTTP{S} fetches that are used to track users. The product I used in the past is called PixelBlock. I searched ...
5
votes
0answers
99 views

Undetectable hypervisor for malware analysis

I am looking for a hypervisor that can be "hidden" from the guest OS such that they believe that they are running on real hardware, instead of being virtualized. Microsoft-VM's report the motherboard ...
4
votes
0answers
770 views

Biometric keepass

I use KeePass to store my passwords, but it still concerns me a little bit that now all my passwords are guarded behind a single password. It would be nice if it could do 2-of-3 authentication (not ...
4
votes
0answers
39 views

Whole disk encryption on a tablet (that has no pre-boot keyboard)

I am researching methods to encrypt whole disk on tablet. I would like to encrypt my tablet that comes with Dual Boot OS, with pre-installed Windows 10 Home and Android 5.1. Let's start with what ...
4
votes
0answers
181 views

Small utility to generate SSHA passwords?

I am looking for a small cross-platform utility that I can recommend people use to generate salted SHA1 digest passwords suitable for use with OpenLDAP. The utility should: Not require installing or ...
4
votes
0answers
57 views

More targeted DNS Poisoning

I want to play around with DNS poisoning to see what I can do with it, how it works, etc. Unfortunately, the only tools I know of that poison the DNS cache go the whole mile and do a full MiTM attack, ...
3
votes
0answers
253 views

Is there an offline two factor authentication client for Linux that I can use as TFA with Gmail, Dropbox, etc.?

In short, I have an offline desktop at home that I would like to use as a "dongle" for certain services. This desktop runs Debian Linux and does not have Chrome or Chromium. (It's offline! So I figure ...
3
votes
0answers
503 views

Multiuser, opensource, secure password manager?

There have been many similar questions, but I have not found recommendations with the following, common requirements: Multi-user. We have a high fluctuation of devs, so all or nothing is not good ...
3
votes
0answers
179 views

Lightweight SMTP Server with TLS support

I have an application that requires an MTA with the following capabilities: be able to receive email for multiple addresses in a single domain, e.g. 100@example.com, 101@example.com, and so on. the ...
3
votes
0answers
153 views

Single Step KDF specification

NIST SP 56A talks about Single Step Key derivation function. Is there any Java library which implements this?
3
votes
0answers
528 views

File-based encryption with virtual disk support for Windows

With TrueCrypt users advised to stop using the software, is there similar software that: supports virtual disk mounting from encrypted files offers plausible deniability via hidden volumes has been ...
3
votes
1answer
91 views

Nuclear launch alert

Is there an app or feature in iOS that can notify its owner of an impending missile, nuclear or otherwise, headed towards a particular location (or a nuclear launch of any sort)? All I seem to be able ...
2
votes
0answers
21 views

Software to build a taxi app easily, without vendor lock-in

Could you please help me narrow my search for software that can be used to make a taxi app? The app will provide similar functionalities to the lyft app. It should be maintainable and robust. Must be ...
2
votes
0answers
39 views

On-premise Mobile Device Management solution for Android

I'm looking for a Mobile Device Management solution that can be deployed on my own servers. Cloud-based solutions are strictly NOT required. Please enlist such solutions which can cater at-least ...
2
votes
1answer
31 views

Manage permissions and passwords for linux, windows and mac

I am searching some software to make something similar to a domain controller on windows that can be compatible with mac, linux and windows. I need to apply security roles and manage their password ...
2
votes
0answers
8 views

Find a private certificate that has been made public

I've heard of people publishing private certificates to public sites. Given a public key are there any tools that can tell me if the private key has been published somewhere
2
votes
0answers
27 views

A software program that provides a fake UPNP server

I want to have UPNP server that is incapable of doing anything, except logging. Since it is impossible to have a secure UPNP server. Log request for modifications to the firewall. As much information ...
2
votes
0answers
28 views

Enforced Password Change

Many services on the internet do not enforce two-factor, or even updating passwords at intervals. I'm looking for an application that is capable of advising when you should update your password, and ...
2
votes
0answers
128 views

Replacement for Secunia/Flexera PSI

Secunia/Flexera PSI is an application and system update monitor for Windows. In comparison to other similar programs, Secunia PSI is a security tool designed to detect vulnerable and out-dated ...
2
votes
0answers
50 views

Firefox add-on to check SSL certificates for changes

I am looking for a Firefox add-on that checks SSL serial numbers or fingerprints and reports changes to the user. I realise that SSL certificates can change at any time for many legitimate reasons, ...
2
votes
0answers
22 views

Linux software to detect external drive partition-level rootkits

clamscan can search file systems for malware, but it can't scan possible rootkits on the boot sectors of an external disk. rkhunter also doesn't seem to provide the ability to scan boot sectors of an ...
2
votes
0answers
82 views

Replacement for obselete OpenDNS Umbrella App on iPhone

I have been a Prosumer OpenDNS Umbrella customer for years, but their iPhone App isn't being upgraded to 64-bit, so it won't work with iOS 11. It provides Umbrella's protections and also allows ...
2
votes
0answers
36 views

App that decrypts and displays an AES-encrypted file

I'm looking for a lightweight Android app, that: lets the user choose a file asks for the password opens this file and displays the decrypted content in a textarea (scrollable) However, the app: ...
2
votes
0answers
49 views

OpenSSL alternative that features better automation properties

I plan on making my own Certificate Authority, and already got quite a bit of money for the project, and now I need a way to issue certificates. I was going to use OpenSSL, but it isn't great for ...
2
votes
0answers
35 views

Collaborative Vulnerability Assessment / Penetration Test Tool Suggestions

I am in the process of evaluating Infobyte's Faraday tool and putting it into use for pentesting and collaboration with my colleagues. The idea is great but the app seems to be in the early stages of ...
2
votes
0answers
37 views

Tool that actually prevents Windows 10 telemetry

Are there any tools that actually prevent all Windows 10 telemetry reports from being gathered, or at the least, from being transmitted? Many tools claim to do this type of thing, but are there any ...
2
votes
0answers
267 views

Password protected SMS app for iPhone

The Signal app on Android has its own password control, so you hand out your unlocked phone to a friend without giving them access to your SMSs. But https://github.com/WhisperSystems/Signal-iOS/...
2
votes
0answers
24 views

What is a good choice for managing users/security in an SAAS environment?

I'm building an SAAS application and looking for solutions to secure my RESTful API (written in Java/Jersey 2). Developers should be able to consume my REST API via an Access token. I had a look at ...
2
votes
0answers
33 views

JVM framework for creating scalable non-CMS web applications

I am doing research for a post-graduate project. It generally involves security and distributed server network. Project will aim for speed, scalability and safety and I am looking for a framework to ...
2
votes
0answers
28 views

Simple portable HTTPS-only browser with one pinned CA

Is there somewhere a project for a simple browser, that: Only allows HTTPS connections; Trusts only one Certificate Authority (like a file ca.pem in browser's directory); Can use client-side ...
2
votes
0answers
26 views

GUI to monitor and manage webserver rate limiting and blocklists

There are various Apache modules that implement some kind of rate limiting. Eg. mod_security or mod_qos and services like stopforumspam and other blacklists to detect malicious requests. My ...
2
votes
0answers
149 views

Offline encryption package for Chromebook

I am looking for a local encryption package that will work on a Chromebook. The aim is to have a file stored on the Chromebook or an attached SD/USB device. Viewing the file will require entry of a ...
2
votes
0answers
30 views

“Firewall” for X applications

I don't want proprietary Skype directly accessing my Xorg server. I've already taken measures securing filesystem, network, processes/IPC, but there still a plenty of spying possibilities using X ...
2
votes
0answers
132 views

Open source Linux vpnc client that can connect to checkpoint gateway

I need an open source vpnc client that can connect to a Check Point gateway (firewall) for a Linux machine. It doesn't matter which Linux (red-hat, ubuntu, fedora...). The target is to activate the ...
1
vote
0answers
6 views

Opensource software for endpoint visibility

Looking for FLOSS platform for monitoring many remote user endpoints (varying devices and OSs) for visibility and data leak protection (eg. if notice that a particular policy is violated on a user ...
1
vote
0answers
5 views

Which is the best security solution for the credentials in scripts HashiCorp or Thycotic Secret server?

Many of the DevOps activities involve the use of a hardcoded key or credential somewhere in the application’s environmentor in powershell scripts. However, hardcoded passwords of any type are a ...
1
vote
0answers
37 views

Post quantum TLS based web-browser client

Are there any open source projects that implement a web browser client that has support for post quantum TLS protocols so that it can talk with post quantum patched TLS web servers. I've checked ...
1
vote
0answers
18 views

recommendation for IAM for .NET Core with row level security

I am looking for a good IAM library or framework for .NET Core that would give row level filtering of a SQL data set. Are there any out of the box solutions that would support something similar to ...
1
vote
0answers
6 views

What software to use for DevSecOps pipeline?

I have a CD pipeline built in Jenkins that builds a Java project, packages the microservices as docker containers and uses terraform for provisioning on AWS. What are the plugins I should add to: Do ...
1
vote
0answers
21 views

Looking for a “remote wipe” software package for Windows 10

I'm looking for a solution that would allow me to locate a stolen or lost Windows 10 PC, and initiate a remote data wipe. We can't use the built in Windows 10 location feature as we don't log in with ...
1
vote
0answers
15 views

What is better alternative technologies of Elastic Stack for endpoint detection and response (EDR) products collecting/analyzing endpoint log data?

I am trying to develop endpoint detection and response (EDR) as a security solution. I am currently researching how to actually develop it. I googled quite a few websites, but they only described just ...
1
vote
0answers
5 views

drupal 7 restrict login by ip - Monitor

We are using a drupal 7, with the module "restrict login by IP". We restrict by: mail & Ip address. Our goal is to get "debug log", for Add new row to this table(for monitoring any changes in ...
1
vote
0answers
16 views

Platform For Selling Videos Online?

I'd like to set up an online store where I can sell some video courses ( 3 or 4 with a 10 minutes maximum length each) , I would like to know if I could have the option of doing live video streaming, ...
1
vote
0answers
9 views

Mac firewall or tool that blocks access to websites based on geographic location?

I'm looking for a free Mac OS firewall that allows blocking of sites based on the server's estimated geographic location or iptable-like banning at a minimum. The main application is to thwart ...
1
vote
0answers
16 views

Is there a backup tool for linux that allows selective deletion as well as performing backups with just a public key on the client?

In the era of GDPR, making backups comply with all regulations can be a busy task. I am looking for a backup tool for linux that allows me to: Selectively delete files in the backup. Do a backup from ...