Questions tagged [security]

For requests for recommendations of security software. Before using this tag, make sure there's no more specific tag for the software you're after.

142 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
7
votes
0answers
60 views

WordPress plugin to make it more CMS-like by securing content

I'm trying to mold WordPress into a CMS. The main problem I'm currently facing is that I want to secure entire pages: most of the website won't be publicly available. I'm looking for a plugin (and ...
6
votes
0answers
132 views

Application based firewalls for Linux

Linux has IPtables firewalls like GUFW which can block ports and IPs. But what I need is an application based firewall like Zone Alarm and Comodo in Windows that blocks internet access to particular ...
6
votes
1answer
162 views

Alert if a remote computer tries to connect on a given port

I am looking for a Windows 7 program that can give an alert if a remote computer tries to connect on a given port, and gives the option to accept or refuse. I don't want any warning regarding other ...
6
votes
0answers
56 views

IEEE 802.11 Wi-Fi Radar

I'm frequently finding myself managing (and troubleshooting) an increasing number of networks that are (more or less) overrun with scores of 2.4GHz; 802.11; Wireless Access Points; and (for the most ...
5
votes
0answers
2k views

PixelBlock alternative for Firefox?

I'm using Firefox 57. I'm looking for software that blocks the 1x1 pixels that cause the HTTP{S} fetches that are used to track users. The product I used in the past is called PixelBlock. I searched ...
5
votes
0answers
117 views

Undetectable hypervisor for malware analysis

I am looking for a hypervisor that can be "hidden" from the guest OS such that they believe that they are running on real hardware, instead of being virtualized. Microsoft-VM's report the motherboard ...
4
votes
0answers
40 views

Virtualization/sandbox software for Windows specifically designed to safely install software that may be bundled with PUPs

I'm looking for an extremely lightweight VM or virtualization tool for Windows that can be used to safely open installers that may be bundled with potentially unwanted programs (PUPs). (For an ...
4
votes
0answers
916 views

Biometric keepass

I use KeePass to store my passwords, but it still concerns me a little bit that now all my passwords are guarded behind a single password. It would be nice if it could do 2-of-3 authentication (not ...
4
votes
0answers
41 views

Whole disk encryption on a tablet (that has no pre-boot keyboard)

I am researching methods to encrypt whole disk on tablet. I would like to encrypt my tablet that comes with Dual Boot OS, with pre-installed Windows 10 Home and Android 5.1. Let's start with what ...
4
votes
0answers
57 views

More targeted DNS Poisoning

I want to play around with DNS poisoning to see what I can do with it, how it works, etc. Unfortunately, the only tools I know of that poison the DNS cache go the whole mile and do a full MiTM attack, ...
3
votes
0answers
30 views

noCaptcha alternative

It's no secret, that CAPTCHA's no longer offer a reliable protection against automated attacks. CAPTCHAs have become easy to solve for bots, but the distorted text is often very hard to read for ...
3
votes
0answers
297 views

Is there an offline two factor authentication client for Linux that I can use as TFA with Gmail, Dropbox, etc.?

In short, I have an offline desktop at home that I would like to use as a "dongle" for certain services. This desktop runs Debian Linux and does not have Chrome or Chromium. (It's offline! So I figure ...
3
votes
0answers
519 views

Multiuser, opensource, secure password manager?

There have been many similar questions, but I have not found recommendations with the following, common requirements: Multi-user. We have a high fluctuation of devs, so all or nothing is not good ...
3
votes
0answers
184 views

Lightweight SMTP Server with TLS support

I have an application that requires an MTA with the following capabilities: be able to receive email for multiple addresses in a single domain, e.g. 100@example.com, 101@example.com, and so on. the ...
3
votes
0answers
529 views

File-based encryption with virtual disk support for Windows

With TrueCrypt users advised to stop using the software, is there similar software that: supports virtual disk mounting from encrypted files offers plausible deniability via hidden volumes has been ...
3
votes
1answer
93 views

Nuclear launch alert

Is there an app or feature in iOS that can notify its owner of an impending missile, nuclear or otherwise, headed towards a particular location (or a nuclear launch of any sort)? All I seem to be able ...
2
votes
0answers
24 views

Linux tool to anonymize captured data packets for commercial use according to GDPR

I am working on a project where I have to identify anomalies in network traffic of business networks with machine learning. The algorithm is feeded with captured network packets from inside of the ...
2
votes
0answers
21 views

Is there a solution which would allow me to easily monitor/control the traffic for all devices on my network at the hostname level?

I originally asked this question in a Superuser post but it was removed and I was told to post here. I'm a huge fan of the uMatrix browser extension which allows you to control and limit which ...
2
votes
0answers
24 views

Software to build a taxi app easily, without vendor lock-in

Could you please help me narrow my search for software that can be used to make a taxi app? The app will provide similar functionalities to the lyft app. It should be maintainable and robust. Must be ...
2
votes
0answers
42 views

On-premise Mobile Device Management solution for Android

I'm looking for a Mobile Device Management solution that can be deployed on my own servers. Cloud-based solutions are strictly NOT required. Please enlist such solutions which can cater at-least ...
2
votes
0answers
8 views

Find a private certificate that has been made public

I've heard of people publishing private certificates to public sites. Given a public key are there any tools that can tell me if the private key has been published somewhere
2
votes
0answers
34 views

A software program that provides a fake UPNP server

I want to have UPNP server that is incapable of doing anything, except logging. Since it is impossible to have a secure UPNP server. Log request for modifications to the firewall. As much information ...
2
votes
0answers
28 views

Enforced Password Change

Many services on the internet do not enforce two-factor, or even updating passwords at intervals. I'm looking for an application that is capable of advising when you should update your password, and ...
2
votes
1answer
138 views

Replacement for Secunia/Flexera PSI

Secunia/Flexera PSI is an application and system update monitor for Windows. In comparison to other similar programs, Secunia PSI is a security tool designed to detect vulnerable and out-dated ...
2
votes
0answers
50 views

Firefox add-on to check SSL certificates for changes

I am looking for a Firefox add-on that checks SSL serial numbers or fingerprints and reports changes to the user. I realise that SSL certificates can change at any time for many legitimate reasons, ...
2
votes
0answers
17 views

Self-hosted webinar software (or provider located in the EU)

We're currently searching for a self hosted webinar software because we have customers that put a big focus on security and privacy, also we're located in Germany we have to fulfill German and ...
2
votes
0answers
26 views

Linux software to detect external drive partition-level rootkits

clamscan can search file systems for malware, but it can't scan possible rootkits on the boot sectors of an external disk. rkhunter also doesn't seem to provide the ability to scan boot sectors of an ...
2
votes
0answers
87 views

Replacement for obselete OpenDNS Umbrella App on iPhone

I have been a Prosumer OpenDNS Umbrella customer for years, but their iPhone App isn't being upgraded to 64-bit, so it won't work with iOS 11. It provides Umbrella's protections and also allows ...
2
votes
0answers
41 views

App that decrypts and displays an AES-encrypted file

I'm looking for a lightweight Android app, that: lets the user choose a file asks for the password opens this file and displays the decrypted content in a textarea (scrollable) However, the app: ...
2
votes
0answers
51 views

OpenSSL alternative that features better automation properties

I plan on making my own Certificate Authority, and already got quite a bit of money for the project, and now I need a way to issue certificates. I was going to use OpenSSL, but it isn't great for ...
2
votes
0answers
35 views

Collaborative Vulnerability Assessment / Penetration Test Tool Suggestions

I am in the process of evaluating Infobyte's Faraday tool and putting it into use for pentesting and collaboration with my colleagues. The idea is great but the app seems to be in the early stages of ...
2
votes
0answers
41 views

Tool that actually prevents Windows 10 telemetry

Are there any tools that actually prevent all Windows 10 telemetry reports from being gathered, or at the least, from being transmitted? Many tools claim to do this type of thing, but are there any ...
2
votes
0answers
267 views

Password protected SMS app for iPhone

The Signal app on Android has its own password control, so you hand out your unlocked phone to a friend without giving them access to your SMSs. But https://github.com/WhisperSystems/Signal-iOS/...
2
votes
0answers
25 views

What is a good choice for managing users/security in an SAAS environment?

I'm building an SAAS application and looking for solutions to secure my RESTful API (written in Java/Jersey 2). Developers should be able to consume my REST API via an Access token. I had a look at ...
2
votes
0answers
33 views

JVM framework for creating scalable non-CMS web applications

I am doing research for a post-graduate project. It generally involves security and distributed server network. Project will aim for speed, scalability and safety and I am looking for a framework to ...
2
votes
0answers
29 views

Simple portable HTTPS-only browser with one pinned CA

Is there somewhere a project for a simple browser, that: Only allows HTTPS connections; Trusts only one Certificate Authority (like a file ca.pem in browser's directory); Can use client-side ...
2
votes
0answers
27 views

GUI to monitor and manage webserver rate limiting and blocklists

There are various Apache modules that implement some kind of rate limiting. Eg. mod_security or mod_qos and services like stopforumspam and other blacklists to detect malicious requests. My ...
2
votes
0answers
149 views

Offline encryption package for Chromebook

I am looking for a local encryption package that will work on a Chromebook. The aim is to have a file stored on the Chromebook or an attached SD/USB device. Viewing the file will require entry of a ...
2
votes
0answers
32 views

“Firewall” for X applications

I don't want proprietary Skype directly accessing my Xorg server. I've already taken measures securing filesystem, network, processes/IPC, but there still a plenty of spying possibilities using X ...
2
votes
0answers
157 views

Single Step KDF specification

NIST SP 56A talks about Single Step Key derivation function. Is there any Java library which implements this?
2
votes
0answers
133 views

Open source Linux vpnc client that can connect to checkpoint gateway

I need an open source vpnc client that can connect to a Check Point gateway (firewall) for a Linux machine. It doesn't matter which Linux (red-hat, ubuntu, fedora...). The target is to activate the ...
1
vote
0answers
23 views

How to find secrets in a Git repository?

I've been tasked to find secrets in a list of Git repositories. A secret can be: A password An encryption key An API key A passphrase Anything else I may not like to see in plain text in the wild ;) ...
1
vote
0answers
18 views

Good (free or paid) command line based Antivirus for Linux

I am using ClamAV for some time now and it is quite okay. But I would like to give some other Antivirus Softwares/tools a try. I am looking for something that: is Command-line based i.e. GUI is ...
1
vote
0answers
8 views

detect network malicious activity coming from own linux server

I have a VPS provider that is strictly disallows malicious activity like ssh-bruting, ddos, and such. I also have multiple users that use the single VPS machine, each allocated to one docker ...
1
vote
0answers
18 views

Automatically unlock desktop when approached with mobile

I'm looking for a way to use my mobile to automatically unlock my laptop. Blue Proximity seemed like a good answer, but it's clearly been abandoned as a project and I'm having problems with some of ...
1
vote
0answers
13 views

SIEM Dashboard/Add-On/App for Viewing Windows Registry Forensics Data

There are a number of forensically-useful areas in the Windows registry and file system like those detailed in this SANS Poster: https://www.sans.org/security-resources/posters/windows-forensic-...
1
vote
0answers
33 views

Can you think of any way in which “normal people” can contact me (one-way) with messages in a secure, anonymous (for me) manner?

I'm trying to be able to receive incoming messages from "the general public", in a way which: Does not reveal my identity to the person contacting me, or to any company/entity. Does not cost money. ...
1
vote
0answers
13 views

Web-app that provides email aliases similar to Yahoo's ones

The Current Service With Yahoo mail, you they give you a second address like foo-*@yahoo.com. You can replace the asterisk with whatever string and you can have up to 500 addresses with this template....
1
vote
0answers
12 views

Top 3 API gateway middle ware tools for managing multiple REST API's

Use Case: Authentication and Authorization (Multi Tenant Support): We have multiple REST API's resource with their own authentication and authorization business logic. Most of them have firm-wide ...
1
vote
0answers
34 views

Tool to see network calls made by an Android app

I am trying to search for security vulnerabilities in the Android app and hence wanted to know the software which can help me to track the network calls being by an Android App. The software should ...