Information Security Stack Exchange

1

vote

0

answers

11

views

How x-permitted-cross-domain-policies is different from CORS(cross origin resource sharing)?

web-application appsec cors

asked 1 hour ago Pawan Dwivedee 23

1

vote

0

answers

39

views

Is there a way to exploit file_get_contents that has a prepended website?

web-application php web directory-traversal

modified 1 hour ago Raymond Nijland 101

1

vote

1

answer

87

views

How to verify Diffie Hellman uses a “Safe” prime

tls web-application penetration-test openssl diffie-hellman

modified yesterday The Gilbert Arenas Dagger 123

1

vote

1

answer

44

views

Remote detection of spring framework

web-application http spring-framework

answered 2 days ago h4ckNinja 2,821

3

votes

2

answers

186

views

+100

Is this hybrid (cookie, jwt) authentication method for web applications known and practical?

web-application xss cookies csrf jwt

modified 2 days ago Anders 49.6k

1

vote

1

answer

85

views

What attack vector is prevented by using the 'coupling code'?

web-application multi-factor attack-vector

modified Mar 18 at 23:19 meowcat 141

6

votes

2

answers

125

views

Can a web app fingerprint your device as identical to a native app's fingeprint

web-application web-browser android chrome user-tracking

modified Mar 18 at 8:08 Nebi M Aydin 9

0

votes

1

answer

60

views

Command injection with brace expansion

web-application network linux bash

modified Mar 17 at 1:00 Community♦ 1

0

votes

1

answer

28

views

CSRF protection for an email subscription website - are there any risks of having it turned off?

web-application csrf web

answered Mar 16 at 23:28 CBHacking 10.7k

5

votes

1

answer

143

views

How can I find a web application's document root using a path traversal vulnerability?

web-application penetration-test webserver operating-systems web-service

modified Mar 16 at 9:07 Bob 508

1

vote

2

answers

87

views

What is the difference between “missing function level access control” and “privilege escalation”?

web-application privilege-escalation

modified Mar 13 at 11:26 unstable 14

0

votes

1

answer

34

views

What are the different security concerns associated with open ports on mobile vs open ports on servers?

web-application mobile server

answered Mar 12 at 22:15 Polynomial 101k

2

votes

0

answers

36

views

'Fake SSO & self registration' access to a web api

authentication web-application sso registration

asked Mar 11 at 9:19 Bartosz 111

1

vote

1

answer

71

views

Can XSS be exploited this way?

web-application xss cookies

modified Mar 10 at 17:40 Vipul Nair 57

Stack Exchange Network

current community

your communities

more stack exchange communities

Explore Our Questions

How x-permitted-cross-domain-policies is different from CORS(cross origin resource sharing)?

Is there a way to exploit file_get_contents that has a prepended website?

How to verify Diffie Hellman uses a “Safe” prime

Remote detection of spring framework

Is this hybrid (cookie, jwt) authentication method for web applications known and practical?

What attack vector is prevented by using the 'coupling code'?

Can a web app fingerprint your device as identical to a native app's fingeprint

Command injection with brace expansion

CSRF protection for an email subscription website - are there any risks of having it turned off?

How can I find a web application's document root using a path traversal vulnerability?

What is the difference between “missing function level access control” and “privilege escalation”?

What are the different security concerns associated with open ports on mobile vs open ports on servers?

'Fake SSO & self registration' access to a web api

Can XSS be exploited this way?

Hot Network Questions