Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.

Sign up to join this community
Anybody can ask a question
Anybody can answer
The best answers are voted up and rise to the top

Top Questions

0 votes
1 answer
295 views

.Net WebClient - self signed certificate

1 vote
1 answer
18 views

Should I call a vulnerability XSS even though it is blocked by the CSP?

0 votes
0 answers
12 views

Malware application in Android

0 votes
1 answer
42 views

VM Hosting requirement for a Virtual Terminal application in SAQ-C-VT

0 votes
0 answers
12 views

Can a man in the middle tell what kind of encryption you're using from a key exchange?

2 votes
2 answers
227 views

Protecting a PWA authentication token on a public kiosk device

0 votes
0 answers
10 views

My Postgresql was invaded the database was deleted and just a table with column remains

6 votes
1 answer
123 views

How sensitive is the primary key stub of an ed25519 security key (~/.ssh/id_ed25519_sk)?

0 votes
0 answers
10 views

How to limit number strings with crunch

1 vote
2 answers
37 views

Using oauth for authentication

0 votes
1 answer
23 views

Should one reject login attempts with correct, but widely known passwords?

1 vote
1 answer
114 views

What are some well known websites that do not require multiple character sets in passwords?

2 votes
3 answers
283 views

Is checking against password lists a good way to enforce a secure password policy and possibly detect dictionary attacks on a web-based app?

0 votes
2 answers
10 views

Can another site redirect my domainname unintended?

4 votes
2 answers
1k views

RESTful web application security and authentication scheme

2 votes
4 answers
3k views

Are there any web application security standards?

0 votes
1 answer
14 views

Granting Local Admin permissions on domain workstations

0 votes
1 answer
16 views

validating the authenticity of messages from public client without authentication

0 votes
1 answer
30 views

If a computer gets infected with malware, can the host firewall block the malware from communicating back to its controller on the internet?

2 votes
1 answer
353 views

airgeddon returning the wrong key

1 vote
0 answers
42 views

String in JSON message body blocked by Azure WAF with OWASP 3.1 returning 403

11 votes
2 answers
2k views

Is compression mandatory with TLS?

3 votes
1 answer
48 views

Can you rule out the possibility that an email is spoofed despite passing SPF, DKIM, and DMARC?

0 votes
1 answer
1k views

Session management and login PHP scripts

-1 votes
0 answers
50 views

Data on Patterns in Human-Generated Hexadecimal Keys [closed]

1 vote
2 answers
87 views

Are browser extensions inherently unsafe?

1 vote
0 answers
173 views

Setup local Certificate Authority & integrate with SCEP

1 vote
2 answers
50 views

Is it safe to install curl and openssl in Alpine Docker image

0 votes
0 answers
26 views

NMAP Scan Indicating 1000 Ports Filtered [closed]

1 vote
1 answer
74 views

How to determine what process accessed the web browser

2 votes
0 answers
15 views

How to avoid hardcoded passwords on Apache httpd config file [migrated]

2 votes
2 answers
43 views

How can a users plaintext password be acquired while using biometricID with the following security model?

1 vote
1 answer
25 views

Vulnerabilities in Build-time Libraries Could be a Security Threat

0 votes
0 answers
6 views

Is it possible to put database in the cnf file To secure mysqldump [migrated]

1 vote
1 answer
115 views

Can the Origin header have alphabetical port or parameters in a real-life scenario?

2 votes
2 answers
888 views

Privacy implications of Intel CPU's secret 3G communication (Anti Theft 3.0)

8 votes
2 answers
3k views

Where can I find a canonical list of elliptic curve names and their aliases?

1 vote
1 answer
18 views

Qemu: SEV: Failed to query the attestation report length ret=-22 fw_err=0 ()

1 vote
0 answers
23 views

Using VPN with my camera [closed]

1 vote
0 answers
636 views

I received an email that someone created Snapchat with my e-mail - is this a known scam?

0 votes
0 answers
12 views

Automatically screen e-mails (from chkrootkit and rkhunter) for differences [closed]

5 votes
3 answers
275 views

How does a firewall software intercept network communication?

0 votes
0 answers
24 views

Searching in Chrome redirects to "find.fnavigate-now.com"

1 vote
0 answers
14 views

recon-ng syntax error

0 votes
1 answer
39 views

GnuPG: gpa.exe hungs when click on "smartcards" AND scdaemon cannot recognise SC-HSM 4K

0 votes
0 answers
24 views

EternalBlue Across Networks

4 votes
1 answer
370 views

How to exploit XSS and SQL injection via HTTP verb tampering?

0 votes
0 answers
10 views

XSS reflected in a parameter via POST (Body)


Looking for more? Browse the complete list of questions, or popular tags. Help us answer unanswered questions.