Tag Info

Hot answers tagged

3

The proper method is to contact the provider's abuse email which is almost never answered. You will waste an enormous amount of time trying to report addresses. Further, most machines scanning for exploits, are often compromised machines in their own respects. You can try going to an upstream provider, but I can assure you, said providers are often ...


2

fuzzdb contains a collection of web backdoor programs which if they were present on a live server would be a good indication that it had been compromised. This is likely why the A-V tool is reacting to those files. It is a common issue with penetration testing tools that A-V software regards them as malicious. However just downloading them is not going to ...


1

Use-after-free attacks require the attacker to be able to allocate some memory reliably on heap. Say I have an object that takes 16 bytes, and happens to be allocated in memory to 0xb00000004 (completely made up numbers here). I delete this object and the memory is returned to the heap. Now I request another heap allocation for 16 bytes (a string for ...


1

Although windows can be installed on top of another copy, this is not required to break into it. A simple password removal tool, like "Offline NT Password and Registry editor" will do the job. I'm not sure I understand what you mean by "security applications". Lojack for laptops? That can reinstall itself even if you format, on supported laptop models.


1

How should I authenticate WebSocket clients like Socket.io on top of HTTPS ? There is no need to authenticate a connection more than once, so if you are using websockets, you can put security token in the first message that client sends after connecting to the service. HTTPS is a must. After handshake you will have secure connection (token can be ...


1

This is an old question, but I've had occasion to look into this question and decided to at least look into what some and CSRF libraries use by default and my results are as follows: Django : 32 random characters from the set [a-zA-Z0-9] : 190.53 bits of entropy Ruby on Rails : 32 bytes of entropy (encoded as base64) : 256 bits of entropy Spring Security : ...



Only top voted, non community-wiki answers of a minimum length are eligible