Questions tagged [web]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
152
votes
5answers
13k views

What to do if stuck with website that has poor security?

I have a student loan account with a company, not the biggest company but big enough to where they should have their act together. Today I couldn't remember my password to log into my account ...
0
votes
0answers
136 views

'=' 'OR' SQL Injection Login Bypass Question [duplicate]

I was testing SQLI Cheatsheets on a vulnerable test site. This particular injection '=' 'OR' seems to work on the login page. Why does that injection work? What's the back-end SQL code, if I could ...
56
votes
6answers
10k views

Why do some sites ask for username/email and password on two separate screens? [duplicate]

Well, I only have two examples, but it seems to be a slowly growing thing. First, I noticed that hotmail.com/live.com started to do this - ask for the email address on the first screen, and then you ...
57
votes
1answer
4k views

Does a client certificate identify the owner to unrelated websites?

If I install a client certificate in my browser, which websites can see any information about this client certificate or the CA that issued it? I once visited an ssl diagnostic site that immediately ...
52
votes
4answers
6k views

Why submit a website to plaintext offenders?

I've read this question and to quote from the accepted answer Besides that, by submitting the site to plaintext offenders, you will provide a third-party point of view, which might help your case. ...
4
votes
1answer
248 views

How can I see whether the e-mails I exchanged with someone have been encrypted?

In my understanding (please correct if applicable), The e-mails sent through a secure server are encrypted in the route between me as client and the mail server, whether this is a local or remote ...
0
votes
2answers
1k views

hundreds of users creating mail.ru and projectgold.ru accounts on my application db

I am working on Ubuntu Server with mysql installed, I have a forum application vbulletin 5 installed and there are hundreds of mail.ru and projectgold.ru created on my application, it looks like this: ...