New answers tagged

3

I can think of following scenarios: Since you are processing your data and then carrying out a DB call, you should ensure that you used prepared statements in your webserver. That will take care of all your SQL Injection attacks If you are presenting the data on your webpage, then ensure you are sanitizing your input to prevent a Stored XSS attack. An ...


0

Proper input validation. I have seen many times that the applications handle special characters in the input fields very well except present in the data in the uploaded excel file. Make sure any error message that you show for invalid data in excel file should be a generic message and should not include unencoded cell value. Otherwise your app will be ...


7

If you have access to email sent from those domains, the headers will contain a wealth of information that will help you determine where they're hosted. The downside is that, unlike poking at their public MX records, you'll need to get actual email from someone there in order to get headers to examine. The Received header of is prepended to the message by ...


1

Detecting malware in Office documents works like everywhere else too: You might use a pattern-based approach for known malware and you shall use heuristic to detect potentially malicious behavior. There is no “common pattern“ for malware. Some might write text files, some might download binaries, some might delete registry settings, some might copy ...



Top 50 recent answers are included