Information Security Stack Exchange

0

votes

1

answer

34

views

CSP - Unsafe-inline or unsafe-eval for specific domain is allowed or not

web-application web-browser xss content-security-policy

modified 2 hours ago EdOverflow 855

7

votes

3

answers

3k

views

How important is CAPTCHA on registration pages?

web-application enumeration

modified yesterday Community♦ 1

1

vote

0

answers

15

views

Where to store encryption based tokens in Encryption based Token Pattern?

encryption web-application xss csrf

asked yesterday Adelin 106

3

votes

2

answers

108

views

Possible SQLi with self-made prepared statements and real_escape_string?

web-application php sql-injection

modified 2 days ago Community♦ 1

1

vote

2

answers

37

views

How do i extract data from response and use it in url for next request in Burp Intruder?

web-application penetration-test attacks burp-suite

modified 2 days ago Glorfindel 1,099

0

votes

1

answer

86

views

+50

SameSite cookie attribute and Synchronizer Token Pattern

web-application web-browser http cookies csrf

modified 2 days ago 1lastBr3ath 709

3

votes

2

answers

121

views

How can a client verify that code sent from the server has not been tampered with?

web-application hash web-browser opensource end-to-end-encryption

answered Jan 19 at 15:20 reed 2,573

1

vote

1

answer

148

views

Using hashcat in order to crack the JWT signature in WebGoat

web-application hash password-cracking jwt hashcat

modified Jan 18 at 11:24 Vishal 166

29

votes

1

answer

2k

views

Is the core idea behind CSRF protection that the hacker doesn't know the token value?

web-application csrf

modified Jan 17 at 16:07 Mike Ounsworth 39.3k

0

votes

1

answer

51

views

Sql injection bypass against KONA(akmai) WAF

web-application sql-injection sqlmap bug-bounty

answered Jan 17 at 15:22 Vishal 166

11

votes

2

answers

4k

views

How to prevent directory traversal when joining paths in node.js?

web-application node.js directory-traversal

answered Jan 15 at 16:19 Damaged Organic 124

0

votes

1

answer

40

views

How do JavaScript (and mobile) APIs keep user data clean?

web-application javascript mobile account-security client-side

answered Jan 15 at 12:57 Silver 1,596

3

votes

3

answers

70

views

Are jQuery vulnerabilities exposed by the file being served from the server of by usage of the vulnerable code?

web-application xss javascript jquery

modified Jan 14 at 17:34 Benoit Esnard 6,808

4

votes

3

answers

38k

views

How to add X-Frame-Options header to a simple HTML file?

web-application windows http iis clickjacking

modified Jan 14 at 17:07 Xander 33k

Stack Exchange Network

current community

your communities

more stack exchange communities

Explore Our Questions

CSP - Unsafe-inline or unsafe-eval for specific domain is allowed or not

How important is CAPTCHA on registration pages?

Where to store encryption based tokens in Encryption based Token Pattern?

Possible SQLi with self-made prepared statements and real_escape_string?

How do i extract data from response and use it in url for next request in Burp Intruder?

SameSite cookie attribute and Synchronizer Token Pattern

How can a client verify that code sent from the server has not been tampered with?

Using hashcat in order to crack the JWT signature in WebGoat

Is the core idea behind CSRF protection that the hacker doesn't know the token value?

Sql injection bypass against KONA(akmai) WAF

How to prevent directory traversal when joining paths in node.js?

How do JavaScript (and mobile) APIs keep user data clean?

Are jQuery vulnerabilities exposed by the file being served from the server of by usage of the vulnerable code?

How to add X-Frame-Options header to a simple HTML file?

Hot Network Questions