Hottest Questions Today

0

votes

1

answer

25

views

Somebody knows what is the decode or decrpyt of this text?

encryption decryption

modified 2 hours ago Qrow Saki 1

34

votes

14

answers

6k

views

How to safely save passwords for a future administrator?

passwords risk

answered 7 hours ago Criggie 466

0

votes

1

answer

24

views

Is it possible to use ROP to call legitimate functions even if the stack is not executable?

exploit-development stack-overflow rop

modified 1 hour ago multithr3at3d 10.3k

0

votes

0

answers

23

views

Directory to place files on windows

windows windows-permissions

asked 8 hours ago Ven Ven 23

5

votes

3

answers

931

views

Attack against OTP Cipher

cryptanalysis one-time-pad

answered 6 hours ago kelalaka 2,974

3

votes

1

answer

473

views

Can BadUSB be avoided by looking at the shapes and the controller model inside it?

malware windows hardware usb

answered 17 hours ago Gilles 'SO- stop being evil' 44.9k

0

votes

3

answers

31

views

Is a vulnerable router less of an issue when placed “behind” a secure one?

network router

modified 9 hours ago Steffen Ullrich 153k

0

votes

1

answer

21

views

Client Cert Authentication: Accept cert in request or retrieve from host?

certificates python client

answered 11 hours ago Mike Ounsworth 49k

0

votes

2

answers

44

views

Is accessing Cockpit through SSH tunnel secure?

ssh tunneling

modified 8 hours ago Daniel Krajnik 1

0

votes

1

answer

32

views

what are the best counter measures against reverse engineering of firmware? [closed]

hardening reverse-engineering firmware

answered 14 hours ago vidarlo 7,970

0

votes

0

answers

23

views

For package managers like pip, is it a better practice to install packages with the `--user` flag?

package-manager

asked 14 hours ago gen 1,672

15

votes

2

answers

2k

views

What is the impact of an exposed secret key for a JWT token implementation?

jwt

answered yesterday WhiteHotLoveTiger 111

0

votes

0

answers

45

views

How to alter text that was encrypted with AES CBC using PKCSPadding7 [migrated]

aes decryption pkcs7 cbc

modified 10 hours ago schroeder♦ 108k

27

votes

6

answers

6k

views

Is splitting a REST API server from a Web server considered a security threat?

xss rest

modified yesterday h22 883

0

votes

0

answers

31

views

Javascript PDF Brute Forcing

passwords javascript password-cracking pdf

asked 18 hours ago andastew 1

11

votes

1

answer

4k

views

Why is it possible to bypass Android full disk encryption?

encryption android disk-encryption

modified yesterday MechMK1 24.8k

0

votes

1

answer

72

views

Linux Privilege Escalation

linux bash

modified 13 hours ago Angela Hewitt 11

0

votes

0

answers

41

views

NEST Camera WiFi security disruption

wifi

modified 11 hours ago post as a guest 1

0

votes

0

answers

24

views

Payload Encryption Design for the Web application with Spring Boot Backend

encryption

asked 23 hours ago user1502707 1

0

votes

0

answers

34

views

API Returning Java Exception. Safe?

web-application java api error-handling

modified 12 hours ago Xander 34.6k

6

votes

5

answers

5k

views

Why doesn't a simple HTTP request to display a remote web page violate the same-origin policy?

http same-origin-policy remote-server

modified yesterday bdsl 595

0

votes

0

answers

32

views

If there is a fixed number of each character type, how do you calculate the number of permutations of passwords? [migrated]

passwords brute-force password-cracking

modified 21 hours ago schroeder♦ 108k

-1

votes

0

answers

52

views

How can an open source software such as LibreOffice not even tell me about it spying on me? [closed]

windows-10 spyware opensource office

asked yesterday Stallfan 1

0

votes

0

answers

33

views

What mitigations are there against a timing attack done to find which devices are communicating on a set of devices?

privacy attack-prevention timing-attack

asked yesterday temp_name_for_a_temp_fella 1

0

votes

0

answers

47

views

MiTM attack on a Tor V3 Onion Service?

man-in-the-middle tor ecc

asked yesterday Aaron Launius 1

0

votes

1

answer

31

views

Can attack to a website from a parked subdomain with different hosts?

sql-injection web-hosting sub-domain

answered yesterday suppko 101

0

votes

0

answers

32

views

Discover AD accounts with LM Hashes

hash active-directory ntlm

asked yesterday user19702 103

1

vote

0

answers

40

views

How is PKCE secure?

oauth2

asked yesterday arynaq 111

1

vote

2

answers

75

views

Best Way to hash passwords in database

passwords

answered yesterday LSerni 20.5k

2

votes

1

answer

75

views

Are thumbnails for url link previews a risk?

iphone image messenger link shares

modified yesterday MechMK1 24.8k

0

votes

0

answers

46

views

Language specific command injection keywords

injection

modified yesterday schroeder♦ 108k

2

votes

1

answer

87

views

Is the MIT implementation of Kerberos protocol as vulnerable as the one used by Microsoft?

linux windows kerberos

answered yesterday Steve 14.4k

0

votes

0

answers

22

views

Implications of querying OrientDB directly from front-end

databases architecture

asked yesterday DJakarta 1

-2

votes

0

answers

26

views

Access to data between devices sharing a LAN [closed]

lan

modified yesterday schroeder♦ 108k

19

votes

6

answers

4k

views

Is there a protocol that provides data integrity, but not encryption for HTTP?

tls certificates digital-signature

modified Oct 19 at 22:21 MikeSchem 1,905

0

votes

1

answer

49

views

Who initiates an authorization code flow?

oauth2

answered yesterday JamesTheAwesomeDude 111

0

votes

2

answers

57

views

HSTS without auto-upgrading HTTP to HTTPS

http hsts

answered yesterday bk2204 231

1

vote

1

answer

57

views

Direct VPN access to DBs - government guidelines (DBAs at home COVID)

vpn account-security sql-server

answered yesterday schroeder♦ 108k

43

votes

8

answers

10k

views

Is it really safe to use Signal or Telegram on untrusted phone hardware?

encryption privacy mobile spyware

modified 2 days ago schroeder♦ 108k

2

votes

2

answers

126

views

How can I safely print a keyfile on paper?

multi-factor keepass

modified 2 days ago user10216038 4,948

0

votes

0

answers

44

views

Can python be used to retrieve a session ID to mimic logged in user at periodical times?

vulnerability session-management python

modified 2 days ago zucc0nit 93

0

votes

1

answer

55

views

Authorization Code: Is there a specific format it has to follow?

oauth2

answered 2 days ago Steve 14.4k

0

votes

0

answers

32

views

Are there security issues around controlled cross site sharing behind SSO?

html sso cors iframe crossdomain

asked 2 days ago blankip 208

0

votes

1

answer

36

views

Open TCP port exploit with MSFConsole [closed]

exploit ports tcp

answered 2 days ago suppko 101

0

votes

1

answer

61

views

SQL injection without the use of union and select

sql-injection

answered 2 days ago Sjoerd 26.1k

2

votes

0

answers

64

views

What will be the key size for rsa, ecdhe and ecdsa from the cipher suite given?

rsa diffie-hellman tls dsa

2 days ago

0

votes

2

answers

60

views

Are 3rd party CAPTCHA techniques vulnerable to MITM attacks?

man-in-the-middle captcha

answered 2 days ago CaffeineAddiction 6,391

25

votes

5

answers

8k

views

Can a website steal passwords saved in my browser?

web-browser attacks

modified Oct 16 at 13:29 usr-local-ΕΨΗΕΛΩΝ 4,193

Top Questions

Looking for more? Browse the complete list of questions, or popular tags. Help us answer unanswered questions.