Tag Info

New answers tagged

1

It depends on what whether you really mean the "most trustworthy". As with many aspects of digital security, there is a sliding scale of strength / reliability vs usability / feasibility. I think some important questions to consider are: Who are your users? To what extent do they care about proof of file integrity? Even if the users don't care, how ...


1

You already have your answer on methods to demonstrate integrity. Any of those techniques are as "trustable" as the entity implementing them is. Perhaps what you meant to say was "most appropriate"? Assuming this is your homework question: A user transfers several files to a destination, and wants to prove that the files have not been altered in ...


2

This is not possible. It is not possible to manipulate an HTML form using JavaScript as far as file upload fields go. As noted the form must be submitted as multipart/form-data and the filename needs to be submitted as part of that: Content-Disposition: form-data; name="file"; filename="foo.exe" The value of an input with type file is readonly in ...


4

Once the file is uploaded to the server (exploiting a bug in a word press theme), the .htaccess is reconfigured in a way that any .txt file will be interpreted by the server as a .php script and it will follow symlinks. The next step is the trick, he makes a symlink from / to Donnazmi.txt (2 ways) The code isn't really complex, it prints an html form with ...


1

The video that I found was the first thing to come up when I googled the hacker's name. Do you have Wordpress Cold Fusion theme installed by any chance? Here is the so called Mauritania Attacker's video on explaining how he exploits the specific WordPress theme to upload files on server.



Top 50 recent answers are included