User Andrey Botalov - IT Security Stack Exchange

bio	website
	location	Minsk, Belarus
	age	22
visits	member for	1 year, 7 months
	seen	19 hours ago
stats	profile views	120

	1,132 reputation	bio	website		visits	member for	1 year, 7 months
1031 badges		location	Minsk, Belarus		seen	19 hours ago

29

28

votes

6

answers

9

kviews

Servers for penetration testing

penetration-test remote-server

mar 13 at 15:16 Aman Hardikar 1

5

4

votes

4

answers

8

kviews

Modern high quality password dictionary

passwords

jun 24 at 17:26 chao-mu 1,682

6

votes

2

answers

8

kviews

How do I test for SQL injection vulnerabilities on a site with input fields?

sql-injection

apr 25 '12 at 19:33 Rory Alsop♦ 32.4k

15

50

votes

13

answers

7

kviews

Why do sites implement locking after 3 failed password attempts?

attack-prevention passwords risk-analysis denial-of-service

jun 2 '11 at 14:39 Vineet Reynolds 1,126

7

26

votes

5

answers

4

kviews

How hard is it to intercept SMS (two-factor authentication)?

encryption authentication mobile phone sms

sep 15 at 2:40 Thomas Pornin 82.3k

5

7

votes

2

answers

3

kviews

What is ECDHE-RSA?

ssl protocols ecc

jan 11 at 19:30 Thomas Pornin 82.3k

2

7

votes

3

answers

3

kviews

pros and cons of a bootable BackTrack instance vs installed

penetration-test

mar 2 '12 at 12:18 Colin Cassidy 510

1

4

votes

1

answer

3

kviews

When will the webbrowsers have TLS 1.2 support?

ssl

dec 21 '11 at 11:48 Rory Alsop♦ 32.4k

67

47

votes

18

answers

3

kviews

What security resources should a white-hat developer follow these days?

appsec attacks source-code professional-education

nov 27 at 10:14 Community♦ 1

4

23

votes

5

answers

2

kviews

How do some sites (e.g. online banks) only ask for specific characters from a password without storing it as plaintext?

cryptography authentication passwords

oct 13 '11 at 6:14 D.W. 44.7k

8

13

votes

5

answers

2

kviews

Preventing information disclosure from browser back button/history?

appsec web-application web-browser javascript data-leakage

nov 22 '11 at 11:19 Z_TLAW 46

7

19

votes

6

answers

2

kviews

Secure Linux Desktop

operating-systems linux hardening desktop

nov 26 '11 at 7:42 Gilles 9,987

6

7

votes

5

answers

2

kviews

Does HTTPS Everywhere defend me against sslsniff-like attacks?

ssl certificates web-browser man-in-the-middle

jun 26 at 10:13 Rory Alsop♦ 32.4k

4

7

votes

4

answers

2

kviews

Protecting against DOS attacks

webserver apache denial-of-service

sep 8 at 3:48 tftd 321

7

2

votes

5

answers

2

kviews

Decent programmer looking to learn to Hack

penetration-test

oct 28 '11 at 19:52 Antony Vennard 11.3k

9

15

votes

4

answers

1

kviews

Open-source penetration-test automation

penetration-test tools vulnerability-scanners network-scanners

apr 11 '11 at 13:46 Ormis 1,342

12

11

votes

1

answer

1

kviews

REST specific security weaknesses

appsec certificates rest web-service

apr 26 '11 at 15:00 AviD♦ 20.3k

5

15

votes

1

answer

837

views

What cookie attacks are possible between computers in related DNS domains (*.example.com)?

appsec web-application cookies session-management

mar 9 '12 at 1:41 AviD♦ 20.3k

2

votes

1

answer

775

views

RSA Key Pair generation with Javascript

appsec encryption javascript key-generation

jul 26 '11 at 5:39 AviD♦ 20.3k

6

17

votes

8

answers

739

views

How to protect against brute forcing

appsec web-application authentication countermeasure

dec 5 '10 at 21:21 AviD♦ 20.3k

3

13

votes

4

answers

644

views

What type of content better not to transfer by email?

email

dec 2 at 14:44 makerofthings7 12.5k

6

15

votes

2

answers

488

views

Are URLs viewed during HTTPS transactions to one or more websites from a single IP distinguishable?

cryptography encryption ssl privacy

oct 5 '11 at 15:04 Thomas Pornin 82.3k

3

votes

4

answers

438

views

Is it safe to serve any user uploaded file under only white-listed MIME content types?

appsec virus file-upload

jan 10 at 6:16 D.W. 44.7k

3

7

votes

2

answers

375

views

Drupal filters XSS with regexes. What could bypass it?

xss html drupal

nov 2 at 20:09 D.W. 44.7k

2

1

vote

2

answers

248

views

Really secure webmail

web-application ssl

apr 10 '12 at 20:25 D.W. 44.7k

Andrey Botalov

25 Favorites