Tag Info

New answers tagged

1

Some businesses/corporations have their "publically accessible" wifi routers setup to disallow internal traffic - essentially a firewall that allows a connected device to only access the internet, and any attempts to connect to something on the local network would be denied. The idea behind this is usually to prevent an "evil user" from ...


1

How much a website knows Assuming you are browsing on a website without any protection, a website can know a great deal of things about a computer. Further, a great deal of this information is generally stored by the website in some sort of database. Often times, websites will store a great deal of information in order to remember some information about you ...


0

Is your application returning HTML when you GET /cart ? If it is then you could try using the ZAP persistent XSS scanner - that should inject XSS attacks via the POST and then check all of the URLs where the payload is displayed. If the GET doesnt return html then it all depends how that data gets used. FYI we have a ZAP Users group which is probably more ...


1

All of these sites work fine for me using ZAP 2.3.1 so could you try using that? FYI we have a ZAP Users group which is probably more suitable for questions like this: http://groups.google.com/group/zaproxy-users Thats linked off the ZAP "Online / ZAP User Group" menu item, which is apparently invisible as no one seems to spot it ;) Simon (ZAP Project ...


1

Security on a computer not controlled by you is relatively hard, but here's the best advice I can give: Use strong authenticated encryption. Whenever the question is "how do I protect against MITM attacks", the answer is always "use strong authenticated encryption." For web browsing, this means TLS (HTTPS) without mixed content and with valid ...


2

If hacking google to gather your phone details is considered a threat to your anonymity then surely the ISP logs must be also - they can relate you to your address much more so than most these other things, in which case a private VPN or TOR must be used. To be honest I would recommend TOR (browser/bundle) anyway, as it enforces the forgetful browser in case ...



Top 50 recent answers are included