Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.

Sign up to join this community
Anybody can ask a question
Anybody can answer
The best answers are voted up and rise to the top

Explore our Questions

0 votes
1 answer
1k views

XSS in <span> where only < and > are encoded

1 vote
1 answer
62 views

What are the security concerns of embedding Base64-encoded images into an HTML document?

0 votes
1 answer
30 views

How to mitigate risk of exploiting open POST endpoints?

0 votes
2 answers
41 views

File Upload(what type of file)

0 votes
1 answer
29 views

Modifying request responses leading to unauthorized access?

1 vote
1 answer
2k views

How to bypass sanitization of < while exploiting an XSS vulnerability?

0 votes
1 answer
196 views

Watering Hole Website NTLM Steal Attack

13 votes
5 answers
12k views

What is the right way of storing database connection strings from the security point of view?

0 votes
1 answer
86 views

How to control authorized access to specific data for specific users

115 votes
18 answers
20k views

Does an established HTTPS connection mean a line is really secure?

0 votes
0 answers
15 views

Oauth 2.0 current best practice for SPA and backends

0 votes
1 answer
31 views

A few questions about fixation attack

0 votes
1 answer
13 views

Arachni on VPS. ERR_CONNECTION_REFUSED on connect with WebUI

395 votes
10 answers
271k views

Is BASIC-Auth secure if done over HTTPS?

Browse more Questions