Hottest Questions Today

1

vote

0

answers

22

views

Hardware roots of trust nowadays

asked 3 hours ago T. Maxx 55

2

votes

1

answer

52

views

Is Windows+L a secure attention sequence?

authentication windows

answered 38 mins ago Kamil Kurzynowski 337

25

votes

3

answers

4k

views

Why do “remote desktop” software (allegedly) commonly have a “blackout” feature?

remote-desktop

answered 10 hours ago Fred Stark 271

0

votes

0

answers

12

views

How to get all candidates / results from hashcat? [duplicate]

hashcat

asked 4 hours ago Jan Küfner 1

1

vote

1

answer

29

views

How can I store and manage my GPG key pair securely?

key-management gnupg disk-encryption

answered 4 hours ago fuzzy drawings 88

0

votes

0

answers

17

views

What are the ports that needs enhanced monitoring for suspicious activity at Security Operations Centre - SOC? [closed]

ports soc

modified 5 hours ago schroeder♦ 113k

27

votes

5

answers

6k

views

How can a non-admin program cover your entire screen with a window?

windows macos software screen-capture

answered 10 hours ago josh3736 2,065

0

votes

0

answers

22

views

Postgres password hash crack

postgresql

asked 8 hours ago Ven Ven 25

1

vote

1

answer

12

views

Refreshing access token using access token

authentication access-control

answered 50 mins ago DannyNiu 223

1

vote

2

answers

50

views

Is it possible to hack a database inside of local network by external attacker?

network databases attack-prevention server router

answered 5 hours ago schroeder♦ 113k

0

votes

0

answers

63

views

Can someone prove my theory wrong about passwords (but not by theoritical answers)? [closed]

password-cracking

modified 54 mins ago schroeder♦ 113k

0

votes

2

answers

39

views

SQL Server connections with TLS vs. through an encrypted tunnel?

tls sql-server tunneling

modified 2 hours ago Ljm Dullaart 1,658

0

votes

0

answers

27

views

Is client-side encrypted data really personal data [migrated]

asked 15 hours ago Peter 1

15

votes

2

answers

2k

views

Does biometric authentication in Android transfer any biometric data to the app?

authentication android biometrics

modified yesterday nobody 6,163

0

votes

1

answer

47

views

REST API is protected by HMAC based authentication. What does including URL path in the message protect from?

authentication api rest hmac

modified 9 hours ago CBHacking 26.2k

0

votes

0

answers

33

views

Can a hacker get through a VPN by way a IPhone ? Are there programs that can simply shut down a hacker that is known? [closed]

openvpn

asked 19 hours ago Jack 1

0

votes

1

answer

88

views

Is Bluetooth low energy (BLE) still secure?

encryption attacks bluetooth

answered 22 hours ago Nils 1

0

votes

1

answer

77

views

Is it easy to use pentesting tools in .onion websites?

web-application tor vulnerability-scanners

answered 18 hours ago Anonymous 4,703

0

votes

0

answers

40

views

How to supply both passphrase and string to encrypt to GnuPG using command line?

gnupg bash

modified 22 hours ago sunknudsen 145

0

votes

2

answers

57

views

Local IndexedDB in Browser - is it really a security risk?

web-browser sensitive-data-exposure caching

answered 20 hours ago Eric G 9,553

0

votes

0

answers

30

views

CAS Protocol ticket sent via GET request

sso

asked 22 hours ago Maicake 463

0

votes

0

answers

25

views

Unable to start exported activities when Drozer is running in background

android

asked yesterday xscorp7 1

1

vote

0

answers

38

views

Hashcat first wordlist then brute force if nothing found

password-cracking hashcat

modified yesterday schroeder♦ 113k

0

votes

0

answers

44

views

Is passlib cryptocontext verify method security for timing attacks? [closed]

passwords

modified 17 hours ago Steffen Ullrich 164k

0

votes

0

answers

44

views

XSS attack being blocked by the browser

web-browser xss reflected-xss

asked yesterday stannage 1

0

votes

1

answer

31

views

Is PKCE really protecting public facing clients? Can't a rogue app steal the ClientID and Secret and make a AuthCode request of its own?

authentication oauth authorization oauth2 openid-connect

answered 10 hours ago 45674567 1

0

votes

0

answers

21

views

Is there any speed benefit to performing your own algorithm to scramble IDs for security purposes? [migrated]

hash authorization

modified yesterday nobody 6,163

1

vote

2

answers

64

views

What are the advantages of using JWT over Basic Auth with Https?

oauth jwt http-basic-auth

answered yesterday CBHacking 26.2k

0

votes

0

answers

46

views

SSL self signed nginx Chrome ok, edge not ok

tls openssl nginx centos

modified yesterday LazyFatUglyShortQuestionMan 1

1

vote

3

answers

107

views

Self-Signed Certificates with SSL

tls certificates self-signed

modified yesterday Kamil Kurzynowski 337

0

votes

0

answers

55

views

What are the risks to my router when behind cable modem?

router

modified yesterday paulj 147

0

votes

0

answers

37

views

Sandboxing inside a docker container? [closed]

aws sandbox docker

asked yesterday j__ 101

0

votes

0

answers

40

views

How to correctly generate rainbow table with rtgen? Where are rainbow tables generated? [closed]

rainbow-table

modified yesterday schroeder♦ 113k

0

votes

0

answers

27

views

Bypassing Hydra's 4 billion password limit [duplicate]

brute-force hydra

modified yesterday schroeder♦ 113k

1

vote

1

answer

49

views

Is interface spoofing possible?

network iptables

modified yesterday Steffen Ullrich 164k

0

votes

0

answers

21

views

SSH into raspberry pi on WAN side of router [migrated]

ssh raspberry-pi

asked yesterday pie_town 1

0

votes

0

answers

50

views

Where is the source for OpenSSL RSA_private_encrypt? [closed]

encryption openssl decryption c

modified yesterday schroeder♦ 113k

0

votes

3

answers

56

views

What's the basis for recommending resetting my email password when an unknown account password is compromised?

passwords

answered yesterday CorruptedHeapScapeGoat 304

31

votes

3

answers

5k

views

Is it safe to share .git folder of a public repo?

privacy git information-exposure

modified Apr 5 at 14:56 mricon 5,848

0

votes

0

answers

27

views

Meterpreter Session Opened but not direct to Target [closed]

metasploit

modified yesterday schroeder♦ 113k

1

vote

2

answers

54

views

Relationship between DoT / DoH and HTTPS

tls dns ip doh dot

modified 2 days ago mti2935 12.3k

0

votes

1

answer

37

views

Tools to analyze if the URL is suspicious/Malicious? [closed]

url

modified 2 days ago schroeder♦ 113k

1

vote

1

answer

103

views

Will encrypting a dual boot OS prevent viruses from spreading between the two?

encryption boot

modified yesterday LSerni 21.6k

-1

votes

0

answers

40

views

Elevate privileges on Windows where I have a meterpreter session with a user who is not part of the administrators group [closed]

exploit metasploit privilege-escalation meterpreter

modified 2 days ago schroeder♦ 113k

0

votes

1

answer

66

views

Is it okay that a payment app is sending my payment details via a GET request? [duplicate]

payment-gateway

modified 2 days ago nobody 6,163

0

votes

0

answers

17

views

How can a phishing attempt SMS be sent by the same number as the legitimate company? [duplicate]

phishing spoofing banks sms

asked 2 days ago Digital Dracula 128

1

vote

2

answers

45

views

Are GNU coreutils SHA digest functions FIPS-validated (in NIST's Cryptographic Module Validation Program)?

openssl sha fips

answered yesterday Gilles 'SO- stop being evil' 46.8k

0

votes

1

answer

97

views

Privilege escalation using symlink [closed]

privilege-escalation

modified Apr 10 at 10:33 kelalaka 4,447

Top Questions

Looking for more? Browse the complete list of questions, or popular tags. Help us answer unanswered questions.