Tag Info

New answers tagged

0

QuaSAr is a "for pay" product designed to do just this. Disclaimer: I do not, nor have ever worked for confide, but have friends in the company.


1

From what I understand, you can find the data you need with tools like grep, but you are finding it difficult to deal with the resulting output because it, too, becomes sensitive data. It appears that you need sed with your grep. Once you find offending data, you can pipe the result through a substitution process to create obfuscated card numbers. But I'm ...


1

I don't believe there is a reliable, scientific study as to the prevalence of backdoors in proprietary devices or SCADA/industrial control systems. A search of JSTOR turns up nothing interesting (although, if someone else wants to double check, please let me know if you find something!) Thus, the number you reference is likely just speculation or based on ...


0

You could have a Virtual Machine set up, and buy subscriptions to/download the free versions of all the anti-virus engines you like (for instance, the list VirusTotal has), install them one at a time (making sure to turn off all the automatic features except updating - no on-line scanning, no email integration, no Web Toolbar, no SafeSearch, no URL checking, ...


3

There is no one way to find vulnerabilities. But here are some steps you can follow. Target First you need to choose a platform and a piece of software to attack. To begin I would choose something that is open source. There are several advantages to this; the main one being that you can look at the source code. You then need to pick an aspect that you ...


0

This type of research is, isn't, won't be, or will be illegal depending on where you live, and may have unintended consequences. Avoid doing that with your employer's network, or, worse, with your spouse's connection. Some vulnerabilities can be located by fuzzing. Once a vulnerability has been found, you can learn how to assess them by reading proof of ...


0

To explain in brief : First of all for your understanding,understand difference b/w making code and breaking code,as you are programmer you were aware of developing the web application's login page now as a vulnerablity finder how you need to test is,first fit in shoes of hacker and breach as much as u can, as you are aware of website vulnerabilities ...


3

As far as memory related issues go, there are still issues e.g. you can still stumble upon a null pointer, use an out of bounds collection index, accidentally share mutable data with other classes, make the application use all its allocated memory, or in some cases where almost all the memory is used and a lot of new temporary objects are created, the GC can ...


3

Whilst it's fair to say that managed languages are less prone to certain classes of issue whem compared to languages like c/c++ there's still several classes of software bug which can apply to Java/Scala and other languages that run in managed environments. This can vary from input validation issues like SQL injection and cross-site scripting to error ...



Top 50 recent answers are included