273 reputation
210
bio website
location
age
visits member for 2 years, 11 months
seen Aug 24 at 12:27

Sep
12
awarded  Curious
Aug
24
accepted someone is trying to SQL injection me.. what are they trying to do?
Aug
24
comment someone is trying to SQL injection me.. what are they trying to do?
yes I noticed, but what is this SQL?
Aug
24
asked someone is trying to SQL injection me.. what are they trying to do?
Feb
9
awarded  Notable Question
Feb
5
comment How to test my website for the rails YAML vulnerability
can you explain the metasploit parameters required for the test?
Feb
2
comment How to test my website for the rails YAML vulnerability
I've checked with tinfoil and it comes up as vulnerable, but my metasploit test shows as not vulnerable..
Feb
2
comment How to test my website for the rails YAML vulnerability
so if I see in my rails log that the the webserver is running on port 52345 then that is the RPORT? or is it the port that the webserver listens to?
Feb
2
asked How to test my website for the rails YAML vulnerability
Dec
7
awarded  Critic
Dec
7
comment How can I prevent users from using bad passwords in my web application?
that is not the question. forcing a user to use another service to login will limit me to those kind of users (not everyone have facebook,gmail,twitter) and the list of third parties could be very long. Also, This doesn't improve security. There have been accounts of hacking one account results in enabling access to others. Also, easy-to-remember for one is not easy to remember for others
Dec
4
awarded  Teacher
Dec
4
answered How should I select an antimalware solution?
Dec
3
accepted How can I prevent users from using bad passwords in my web application?
Dec
3
awarded  Yearling
Dec
3
awarded  Commentator
Dec
3
comment Is it possible to make an xss with only html tags
is there a comparison for htmlpurifier vs ruby sanitize? how do you know it is more advanced?
Dec
3
accepted Is it possible to make an xss with only html tags
Dec
3
comment Is it possible to make an xss with only html tags
is it possible if " is escaped?
Dec
3
asked Is it possible to make an xss with only html tags