Tag Info

New answers tagged

1

It's not fancy. You look at some cookies from the website and try to figure out what information they encode, then try to change the values returned and see if it does anything useful to you. At one extreme, a cookie value like UserToken=f7a7731073f766c6f555a0b9a821dded is unlikely to be any use to you. But if you have cookies like Item=iPhone6&Price=899 ...


1

As gcc complies to the ELF format. PE is Windows Executable files.


0

using System.IO; using System.Security.AccessControl; using System.Security.Principal; using System.Reflection; static void Main() { //////////// Security Prolog var codeBase = Assembly.GetExecutingAssembly().CodeBase; var uri = new UriBuilder(codeBase); var folderImage = Uri.UnescapeDataString(uri.Path); var fs = ...


8

This is extremely unsafe, to the point of being pointless: Your hash function is not a one-way function. One can instantly (with constant and low runtime) calculate an input producing any given hash if you allow arbitrary 4 character passwords as inputs by undoing the XOR with the initial hash value formed from the password length. With a little ingenuity, ...


6

32 bit hash function cannot be possibly safe for the purpose of password verification. Problem here is that it is "easy" to find a colliding password, that is, a password, that hashes to the "correct" hash value despite being different from the original password. On average it will take 2^31 password trials to get such collision, which is considered very ...



Top 50 recent answers are included