Tag Info

New answers tagged

1

Yes this still poses a security risk. From what I understand this header is only used by IE 8 and newer tell the browser to use it's built in XSS filtering. Even if modern versions of other browsers user it, there are certainly older browsers that do not. In addition - I would not trust IE's built in XSS protection to keep anyone safe. If preventing ...


2

No, you seem to have a misunderstanding of how encryption and obfuscation work. Encryption provides confidentiality: a message is hidden with a mechanism using a shared secret from all parties not possessing that secret. Obfuscation refers to a number of techniques employed to make, in general, a scripting programming language application difficult to ...


0

What you describe sounds like obfuscation, not encryption. Please do not use "invented" encryption or hashing algorithms (please read this OWASP write-up). If you'd like to use password-driven keys, check out this JavaScript library for key derivation. There are several JavaScript libraries that implement AES (check out this StackOverflow post) and other ...


0

Use LAIR -- https://github.com/lair-framework/lair -- from FishNet Security There is a drone component for nmap -- https://github.com/fishnetsecurity/Lair-Drones -- which allows ease of import from either Nmap XML or Nmap grep files. You can view even NSE script output in the LAIR web front-end by clicking into your project, then Hosts, then select the ...


0

<disclaimer> I am the author of the tool I suggest here </disclaimer> IVRE is a network recon framework that includes a Web user interface to browse Nmap results. You might want to have a look at some screenshots to decide if that fits your needs.



Top 50 recent answers are included