Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.

Sign up to join this community
Anybody can ask a question
Anybody can answer
The best answers are voted up and rise to the top

Explore our questions

0 votes
3 answers
144 views

Is HTTP/0.9 considered "End-of-Life" (EOL) due to security vulnerabilities or risks?

0 votes
1 answer
87 views

Is <img :src="require`${JSON.parse(string)}`"> in electron vue is safe from XSS?

0 votes
0 answers
34 views

How to prevent public key tampering

3 votes
1 answer
35 views

Format string vulnerability in Java?

0 votes
2 answers
858 views

Crunch wordlist with different number of words

0 votes
1 answer
22 views

Can you retrieve messages from instagram or messenger off of a SIM card?

22 votes
6 answers
6k views

What's wrong with the use of a WAF (Web Application Firewall)?

1 vote
1 answer
249 views

VPN for accessing server behind home router

9 votes
3 answers
2k views

What happens if my anti-CSRF token is compromised by an XSS attack?

20 votes
3 answers
4k views

How long should 2 factor authentication codes be?

1 vote
1 answer
729 views

How to set autorunscript of core commands?

4 votes
2 answers
1k views

Should every post request include csrf token?

1 vote
2 answers
510 views

Checking system integrity after clicking scam email link on Linux

1 vote
1 answer
2k views

Website doesn't provide cookie (csrf token) when connecting over proxy. Why/how?

Browse more Questions