All Questions

I'm new in SQL mapping I try to test my own website which is written in PHP for developing my penetration testing skill. I find all Database and Table information. But after that what can I do next? ...

I have dual booted my Macbook Pro, connected my Panda Wireless USB adapter, and configured my WIFI, but I am still unable to access the internet on my Kali Linux distribution. I was curious if there ...

A user may have multiple addons installed on a browser. But typically, the browser is running in userspace with an unprivileged uid. I was wondering how modern browsers can, in such a setting, provide ...

i have the following script: $user_input = $_POST['user_input']; // If there is a way, i want to escape it here. shell_exec("php some_file.php $user_input"); Is there a way to properly escape the ...

I downloaded truecrypt not from website can someone please verify the SHA 512 value

Redis' default port is 6379 and MySQL's default port is 3306. Let's say we disable these ports to outside of the world with ufw. And let's say only I have access to the servers. Is there still a point ...

I'm looking for a way to categorize CVE product names by operating system, application etc. Is there any dataset available to deal with this? https://www.cvedetails.com offers these categories for ...

Let's say as an end user I generate a CSR (for a server cert) to send over to a CA and I don't include a subject alternative name. How or what would they do in order to include that information on the ...

Are there any best practices around distributing an encrypted package to multiple end user systems, specially if the end system are offline ones, in context of asymetric cryptography? Is it a must to ...

I would like to get scammed via email to have some fun. How can I achieve this? (I have looked online and have found no answers only how to not get scammed.)

I have a REST API that allows authenticated users to read data about their own account and make changes to their accounts. For authentication I use JWTs stored as httpOnly cookies. To protect against ...

I have a proxy server that runs on my local system. It's designed to capture traffic that passes through it for testing. It generates a self signed certificate that it uses to sign traffic. Here's ...

Is there a way to get OWASP ZAP to send a p12 certificate? I have an https website that receives p12 certificates for authentication. I have the certificates installed in the browser. Previously, ...

I'm considering use of a scanner driver I see on a website. I don't know the site or the owner so I'll be paranoid and assume that this Windows 10 exe is malicious. I can run the code in a throwaway ...

From what I read online, it's possible to apply binary search to exploit blind SQL injection vulnerabilities, and that is probably what tools like sqlmap use to lower the number of queries that need ...

Browsers and other Web software tend to allow the system resolver to use the local domain search list when resolving URLs. E.g. www -> www.example.com., if your domain search list is example.com. ...

How can I get a list of privacy emails? I have a list of emails, and I want to filter only the emails that bought email privacy service (For them to be anonymous) for example: 'noreply@data-protected....

I was wondering what will be the risks when I am only working with semantic templates like handlesbars, ejs or pug?

I have a slight misunderstanding in the way TLS works. I know that I can use Burpsuite Proxy to intercept HTTPS traffic coming from my browser. How is this possible when the server is going to see the ...

I have a spring MVC web application and am running ZAP Active scan on it. I noticed that ZAP will modify URL , and add additional parameter named query and value query+AND+1%3D1+--+ to test SQL ...

Example for enabling case sensitivity will be for example "/show" route is not the same as "/Show". What are the best security best practice will be here? I was also wondering if I should enable ...

Having read this article, one line in particular caught my attention: The AFP raided the boy's family home last year and found two Apple laptops with serial numbers that matched those of the ...

How to secure a web application hosted on Amazon Web Service AWS? Securing web applications on the cloud is different and require more measures

I'm maintaining a website which uses Sha256 hashing of passwords. The passwords are hashed with a GUID key, and a RNGCrypto generated random salt. I'm just trying to understand the security risks ...

While I was developing the front-end side of my web project, I got an CORS protection error. Not surprising since my front-end project was not in the same origin. After some search on how to bypass ...

I'm trying to find some information about potential security risks with allowing long lasting cookies for website authentication. Initially it was set to not persist the login session, so it would ...

I had never thought much about this until the only account on my home PC somehow lost admin privileges (changing to guest - I suspect this is a Microsoft bug but will probably never know). So, ...

I have an nginx server running an instance of and express/nodejs server. I was going through the logs to see what was being requested, and I noticed a few normal attempts for common flaws in things ...

We have five internal web applications written in Java / AngularJs that are secured via Kerberos/ Spnego ( Spring Security implementation) . We are looking to transition these apps to AWS ( EBS) . ...

I'm working on a php application that is handling file upload. I'm trying to inject a path transversal payload in the filename such as /../../../../etc/. The thing is that the vulnerable line of code ...

Recently I've noticed a delay in my Internet speed. Pages seem to start loading a little later than they used to. I decided to do a speed test on speedtest.net, but it wouldn't do the speed test ...

I am trying to crack a google account that I own personally. I have forgotten the password I have a wordlist that might have the password for the account. When I try to crack it using hydra it returns ...

What is the recommended rotation period of a TLS/client certificate? I have seen organizations rotating at half life and some that rotate only 30-50 days before expiry. For example, for a certificate ...

I'm creating platform where I need to sign a lot of messages (1k/sec), I want to use Ed25519 signature, because it has the best performance. Is it safe to sign that many messages with the same private ...

Is biometric data (photo, fingerprints etc). on new EU passports stored somewhere centrally?

I wonder if machine learning method has already applied to security issues like IP spoofing detection. Would like to see if you could offer some sources/journals that combine these two fields, thank ...

I'm trying to use a service that uses a self-signed cert. Download the cert: # printf QUIT | openssl s_client -connect my-server.net:443 -showcerts 2>/dev/null > my-server.net.crt Check that ...

I am trying to understand DNS flood and DNS amplifier attack. I have read the definition and am still confused, could you give me an example of each attack or tell me the differences between them? It ...

Every year an automated password reset occurs on a VPN account that I use to connect to the institution's servers. The VPN accounts/passwords are managed by the institution's IT department, so I have ...

UPDATED FROM THE LAST QUESTION WITH MORE DETAILS I'm building a full javascript app from Salesforce.com API with no server side script that will be hosted on salesforce.com domain (https) This app ...

The root certificates on my Windows XP machine have expired. As far as I understand it, Windows XP only uses crytography for doing "intranet" data transfers, which in my case is irrelevant because I ...

I do not want to lose my search history (i.e entering a phrase in the URL bar and the most related searches) because I use that to access all my websites with ease.

A technology company starts small in the early 90's and, for various reasons, blows up into a multi-million dollar company in a very short time around 2013. The problem is that this company is ...

I am looking for (also paid) option to get a list of bad, malicious IPs. Are there some vendors selling those? So far I found many IP lookup website and lists, but they relate mostly to SPAM. I want ...

I am using a mobile app that installs a fake trusted CA certificate and therefore can capture the HTTPS traffic of other apps. Most of the time, this MITM attack is successful. However, I noticed ...

Recently my buddy at work wanted to order some food for lunch from a website that we usually order from. The site allows the visitor to become a member of the site by registering and then logging in. ...

Today I tried to change my password on GitHub, but the site rejected my new password: The new password you provided has also been reported as compromised due to re-use of that password on another ...

I have faced the same issue twice: 2 people, whose names are definitely not the same as mine, used my email address to book hotels through a well-known hotel company and a lesser-known hotel booking ...

My personal website Drupal compromised. I replaced all Drupal core modules. I scanned all malicious php scripts in sites folder, found some shells and removed. Now when i hosted in wamp there are ...

I see that password based authentication is out of favor today, and Internet is moving toward RSA keys-based authentication. Coming from that fact, I am wondering if there would be a real benefit to ...