We’re rewarding the question askers & reputations are being recalculated! Read more.

Questions tagged [security]

For requests for recommendations of security software. Before using this tag, make sure there's no more specific tag for the software you're after.

Filter by
Sorted by
Tagged with
1
vote
1answer
40 views

linux/ubuntu os that follows Tails/Tor ideals

I am a new ubuntu user, So forgive me if I sound stupid, In my head my question sounds like it could work. so my question has 2 parts. Is there already a OS that can have just a basic file system ...
0
votes
0answers
4 views

Software to get better experiences with “modern” web page

I take steps to minimize the amount of data that can be collected about me, for a variety of reasons. For example, to reduce instances of "identity theft", hacking, etc. I normally use an older ...
1
vote
0answers
6 views

What software to use for DevSecOps pipeline?

I have a CD pipeline built in Jenkins that builds a Java project, packages the microservices as docker containers and uses terraform for provisioning on AWS. What are the plugins I should add to: Do ...
0
votes
0answers
4 views

App to fingerprint (possibly password) protect an Android app

If I don’t have a password on my Android device (I know, I know), is there an app which can protect individual applications, such as my email? I strongly prefer fingerprint protection, but will ...
1
vote
0answers
21 views

Looking for a “remote wipe” software package for Windows 10

I'm looking for a solution that would allow me to locate a stolen or lost Windows 10 PC, and initiate a remote data wipe. We can't use the built in Windows 10 location feature as we don't log in with ...
1
vote
0answers
16 views

What is better alternative technologies of Elastic Stack for endpoint detection and response (EDR) products collecting/analyzing endpoint log data?

I am trying to develop endpoint detection and response (EDR) as a security solution. I am currently researching how to actually develop it. I googled quite a few websites, but they only described just ...
0
votes
0answers
9 views

Detecting vulnerabilities in JNI systems

I'm looking for a tool that is able to detect vulnerabilities in JNI (Java native interface) systems (systems are written with C(++) and Java?) IS there any tool that can analyze and extract the ...
0
votes
0answers
9 views

I found out my new android secretly unlocking my microphone.. i need a app to check what app is responsible for this

sorry for the long title.. I'm looking for a app to check what app is set my microphone (secretly) on. Does anybody know a tool/app to find this out.. i can only find apps/tools for blocking mic/cam. ...
0
votes
0answers
6 views

What are some free/open source plugins in Android Studio to identify vulnerable code written in application code?

I am testing an Android App, I have the code access and want to perform vulnerability analysis in the code. Please suggest me some open source/free plugin of Android Studio/IntelliJ. I tried RIPS but ...
0
votes
0answers
25 views

Security solution for prosumer

I need to protect two machines, both are running W10; one is my work PC and the other a gaming PC. Actually Im running GData Is on both, but it seems it is draining more resources at every update, and ...
0
votes
0answers
7 views

Azure AD v. ADFS

We had (Before it went belly up) an ADFS server that was simply doing a translation from SAML 2.0 to WSFED (My end point software can not take in SAML only WSFED). My question is, what are the ...
0
votes
0answers
4 views

access control solution for cpanel environment to control access to (external) password protected sites

I need a solution. The solution is probably more about configuration of existing software rather than new code but whatever can work in my environment. The challenge: I have a number of internet ...
0
votes
0answers
14 views

Keycloak SPI - OAuth2 and 2 FA using my own 2FA Service

I want to use keycloak OAuth2 and 2factor auth for my project. But I have to use my own service(not FreeOTP or Google Authenticator) for 2FA. I have made many research, but I couldn't find good ...
0
votes
0answers
3 views

How best to deal with repeated arbitrary requests (DDOS) to my website

security noob here. So my website is starting to experience some ddos attacks (a lot of requests being made to arbitrary endpoints from a few source IPs). What are some common approaches to dealing ...
0
votes
0answers
18 views

Most secure cloud storage service

I'm looking for a secure cloud storage. Currently using Dropbox, but considering to switch given that it doesn't fully encrypt files, and thus files aren't really only mine lol. I've heard about ...
0
votes
0answers
6 views

Looking for Home Network Monitor/IDS

I've spent some time looking for a home network IDS, and I've tried a couple of tools but to no luck. Do you have any recommendations? I'll be running the software on an old laptop, that's got 16GB ...
1
vote
0answers
5 views

drupal 7 restrict login by ip - Monitor

We are using a drupal 7, with the module "restrict login by IP". We restrict by: mail & Ip address. Our goal is to get "debug log", for Add new row to this table(for monitoring any changes in ...
4
votes
1answer
140 views

Free Windows Firewall Control Alternative

(Working on Windows 7 64 bit) Looking for a free alternative to Windows Firewall Control where I can block all outgoing connections AND the program alerts whenever there is an outgoing connection ...
0
votes
0answers
106 views

Recommendation for using Spring Security SAML library version

I'm trying to use the Spring Security SAML DSL wrapper for configuring the SAML Service Provider using the actual Spring Security SAML library to leverage the easy to use Java based configuration ...
0
votes
0answers
21 views

Hosting simple html with authentication-only access

I have this weird idea in my mind - like is it possible to host simple html page on my desktop the access to which is only accepted via an authentication key? I have a static IP and nowadays domain ...
0
votes
1answer
9 views

Looking for cloud- or Unix-based open-source tools that support long-term enterprise-wide key/passphrase management and provide a programmatic API

My question really is: how does an enterprise (a small ~150-employee company) manage the passphrases and encryption keys used at the time of encrypting a large volume of data, when such encrypted data ...
5
votes
2answers
265 views

Random, truly memorable password generator

I'm looking for a password generator that: Generates secure, truly memorable passwords such as: week826]Welcome Stick+heavy:359 Red6.32inch.Who Simple9983$front;Has niece57]Double%his88 ...
1
vote
0answers
16 views

Platform For Selling Videos Online?

I'd like to set up an online store where I can sell some video courses ( 3 or 4 with a 10 minutes maximum length each) , I would like to know if I could have the option of doing live video streaming, ...
4
votes
3answers
101 views

Software to password-protect individual folder(s) on Windows 7

I have a folder of sensitive pictures. Viewed in any of File Explorer's icon views, the contents of this folder are previewed to the user before the folder has been opened. I'm looking for Windows 7 ...
2
votes
0answers
40 views

On-premise Mobile Device Management solution for Android

I'm looking for a Mobile Device Management solution that can be deployed on my own servers. Cloud-based solutions are strictly NOT required. Please enlist such solutions which can cater at-least ...
0
votes
0answers
3 views

Distributed attacks detection - software or services

I need more distributed attacks detection software or services such as https://www.abuseipdb.com/ or https://www.blocklist.de. Right now I'm using those to add IPs that are near-guaranteed to be ...
1
vote
0answers
33 views

Anti-theft against smart thieves

1. Summary I don't find anti-theft Android application, that would work against thieves: that can install new ROM, that can to make Hard Reset. 2. Expected behavior 1. Requirements Not a big ...
0
votes
0answers
10 views

Software for managing domain object ACLs

We are developing a MEAN stack application that includes discretionary access control for business/domain objects, much like a file or content management system does. Users must be able to give other ...
0
votes
2answers
34 views

Simple encryption app

I need to send passwords to other people. Is there an app (cross-OS if possible) that allows me to send them in a secure way ? Maybe a simple private/public keys system. Thanks !
0
votes
1answer
9 views

All-In-One vulnerability scanner for PHP project?

I've asked this on incorrect sub-site (security.se), however, i think that question fits this site more. So, I was searching for a tool, which includes multiple Vulnerability-Scanners, so we could ...
0
votes
0answers
19 views

Open source solution for self destruction messages on my own server (like Privenote)

I need a software solution for self destruction messages like for example privnote. But i need to run it on my own server due to security reasons. Does anyone have an idea? Thanks allot :)
1
vote
1answer
37 views

Secure delete files

I have a folder which I need to secure delete. I tried File Shredder and BleachBit but I got error because the files were in use or priviledge problems. Is there a program to delete files and restart ...
0
votes
2answers
90 views

Deterministic Password Generator

I am looking for deterministic password generators which are available for Linux. My goal is to have one password to remember and use that to make passwords for all my logins.
1
vote
0answers
33 views

Android application for analyzing apks

This one is for all the side loaders. I basically want an app like this https://play.google.com/store/apps/details?id=sk.styk.martin.apkanalyzer It analyzes the installed applications' permissions, ...
1
vote
0answers
9 views

Mac firewall or tool that blocks access to websites based on geographic location?

I'm looking for a free Mac OS firewall that allows blocking of sites based on the server's estimated geographic location or iptable-like banning at a minimum. The main application is to thwart ...
3
votes
2answers
2k views

Vulnerability scanner for scanning AngularJS web application

I tried scanning my web application built with AngularJS front-end and PHP backend. But scanning with scanners like Nessus and Websecurify fails due to '#' in URL. My URL has format http://domain....
1
vote
2answers
86 views

Pentesting tool for windows environment

in Linux platform there were separate frameworks and tools for carrying out pen test of web applications, Myself looking for windows alternative of arachni or the powerful distro kali linux, Is it ...
0
votes
0answers
13 views

iOS: secure storage for sensitive information

Sometimes I need to view some of my documents and it's always a huge pain to search for a physical copy, especially if you are not at home and just need to get some number. I am looking for a secure, ...
0
votes
1answer
35 views

Change Detection

I am currently using TDI Console Works for baseline and configuration change detection, and it is, unfortunately, rather expensive software. I was hoping someone might be able to recommend an ...
0
votes
0answers
24 views

Golang implementation of PCKS#11

With a PCKS#11 standard implementation, you can use a PIN smartcard for a MFA (multi-factor authentication) sign on. Commonly, there is a PKCS#11 interface in a webbrowser software to access secure ...
0
votes
1answer
403 views

Java equivalent to Ruby's SecureRandom?

Is there a Java equivalent to Ruby's SecureRandom.hex(...) method? Happy with anything in JVM-land: Something living inside the Java crypto APIs Something provided by a 3rd party/open source library ...
9
votes
1answer
2k views

Tool to find hard-coded passwords in source code

One of requirements I have in my work is that passwords cannot be hardcoded in source code, database dumps, scripts, etc. However, scanning all this stuff manually and repeatedly gets tedious. Is ...
2
votes
2answers
2k views

Private/privacy conscious calendar app for Android (and maybe contact manager) to replace Flock

I just recently found out about Flock by Open Whisper Systems. Aaaaaaand then they decided to shut it down. Flock has these features that I like: The company has a great reputation in the security/...
2
votes
2answers
110 views

Looking for a service to display 2 factor auth codes online, rather than on my phone

I am using my phone as 2 factor authentication. I have some backup codes written down but in general - it would be a hassle to restore my credentials if my phone is lost. I'm looking for 2 factor ...
0
votes
1answer
84 views

Git file encryption to support file/folder based permission to protect the source code from theft

I am using git and have the following problem: In the company where I work we want to protect the source code from theft. For example, when a a developer leaves and takes the source code of a project ...
4
votes
3answers
119 views

OS for key ceremony

Right now I'm assembling parts and plans for a key ceremony, i.e. a procedure to generate cryptographic keys in a high security environment. In particular I want to take a laptop with coreboot (...
3
votes
2answers
601 views

Software to find network security loopholes of Android Application

I am looking for a software that can check the security loopholes in Android Application. I have an Android Application and I want to check that how many network based call that application is making ...
2
votes
2answers
75 views

Open source antimalware software for macOS

I'm looking for good categorically open source software for macOS. I did not use the term "antivirus", because I refer to software that can protect not only from viruses, but also from other types ...
1
vote
0answers
16 views

Is there a backup tool for linux that allows selective deletion as well as performing backups with just a public key on the client?

In the era of GDPR, making backups comply with all regulations can be a busy task. I am looking for a backup tool for linux that allows me to: Selectively delete files in the backup. Do a backup from ...
1
vote
1answer
30 views

Tools to assess WiFi network security

It does focus on different areas of WiFi security: Monitoring: Packet capture and export of data to text files for further processing by third party tools. Attacking: Replay attacks, deauthentication,...