399 reputation
315
bio website
location
age
visits member for 2 years, 7 months
seen Nov 30 at 14:35

ca51ce1fb15acc6d69b8a5700256172fcc507e02073e6f19592e341bd6508ab8


May
5
awarded  Yearling
Apr
9
comment How does SSL/TLS work?
I'm printing this answear for my Security Management exam.
Mar
7
accepted Is sha-1 hash always the same?
Oct
7
accepted Where and How is data stored in a session?
Oct
4
accepted Is there a method to detect an active man-in-the-middle?
Sep
30
asked Is there a method to detect an active man-in-the-middle?
Sep
21
awarded  Custodian
Sep
19
comment From a technical standpoint, how does the zero-day Internet Explorer vulnerability discovered in September 2012 work?
Seems like a buffer overflow.
Sep
16
reviewed Reviewed Low level attacks on WLAN/LAN connection while connected to VPN
Sep
15
revised Is there a term for a “Master + extension” style password scheme?
added 1 characters in body
Sep
14
accepted Is Window's system restoration useful for getting rid of malware?
Sep
14
answered Is there a term for a “Master + extension” style password scheme?
Sep
14
asked Is Window's system restoration useful for getting rid of malware?
Sep
5
accepted Is not checking the src url a vulnerability?
Aug
31
answered Current best practices to prevent persistent XSS attacks
Aug
31
comment Is not checking the src url a vulnerability?
And, apart from CSRF, are there other ways to exploit it?
Aug
30
comment Is not checking the src url a vulnerability?
It sanitizes, I updated the question to show how. BTW I made a little mistake, img tag does not have the href attribute, it is src ;)
Aug
30
comment Is not checking the src url a vulnerability?
I edited the question, now you can see how it is done. BTW I made a little mistake, img tag does not have the href attribute, it is src ;)
Aug
30
revised Is not checking the src url a vulnerability?
added 533 characters in body; edited tags
Aug
30
revised Is not checking the src url a vulnerability?
deleted 1 characters in body; edited title