meta user
network profile
| bio | website | erlend.oftedal.no/blog |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 2 years, 6 months |
| seen | May 18 at 17:45 | |
| stats | profile views | 25 |
|
Apr 1 |
comment |
bypass a regex filtration to perform an xss attack If var is user controlled, that line allows arbitrary script injection. Why would you want to load a script specified by the user? |
|
Jan 1 |
comment |
How can this xss challenge be solved? As the author behind the challenge, here are the intended solutions: research.insecurelabs.org/xssmas/solutions.html |
|
Oct 6 |
comment |
How does Amazon bill me wihout the CVC / CVV / CVV2? @GdD If you read the PCI DSS requirements it clearly states you are not allowed to store CVC/CVV/CVV2 codes. See page 8 pcisecuritystandards.org/documents/pci_dss_v2.pdf |
|
Sep 1 |
comment |
Current best practices to prevent persistent XSS attacks The OWASP XSS Prevention cheat sheet and OWASP Abridged XSS prevention cheat sheet are probably worth mentioning: owasp.org/index.php/… owasp.org/index.php/Abridged_XSS_Prevention_Cheat_Sheet |
|
Nov 17 |
comment |
Server wide javascript injection Sounds to me like the php interpreter has been modified. Maybe reinstall php, but make a copy of the php binary and send it to virustotal.com first. |
|
Sep 17 |
comment |
C# Encrypting string in DES 3 CBC mode That's why a good encryption algorithms like AES takes an IV (initialization vector). The IV has many similarities with the salt when hashing passwords. It makes sure that even though you encrypt the same text, the cipher text becomes different (as long as you use a different IV of course) |
|
Apr 27 |
comment |
How do you make sure a pdf is deleted after being viewed in the browser? Oh, sorry. My question is, is there anything I can do from the server side (headers etc.) to tell the browser/plugin to delete the pdf when the user navigates away from the pdf or closes the pdf reader? |
