Search Results
| Search type | Search syntax |
|---|---|
| Tags | [tag] |
| Exact | "words here" |
| Author |
user:1234 user:me (yours) |
| Score |
score:3 (3+) score:0 (none) |
| Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
| Views | views:250 |
| Code | code:"if (foo != bar)" |
| Sections |
title:apples body:"apples oranges" |
| URL | url:"*.example.com" |
| Saves | in:saves |
| Status |
closed:yes duplicate:no migrated:no wiki:no |
| Types |
is:question is:answer |
| Exclude |
-[tag] -apples |
| For more details on advanced search visit our help page | |
Results tagged with appsec
Search options not deleted
user 121141
Application security - Specific to security concerns for an application that are independent from the underlying operating system, or surrounding infrastructure. Pertains to the design / architecture, source code, patching and maintenance cycle, or deployment and configuration of this software.
2
votes
Is Opera on Android Causing a Vuln?
Your little experiment and the inferences are actually inconclusive.
Verify if you are using IPV4 or IPV6. [ You can do this by checking your public IP in any of the websites for that. ]
If you are …
- 3,951
1
vote
0
answers
129
views
Is XSS possible when the user input gets reflected inside <textarea> when '<' and '>' symbol... [duplicate]
The scenario:
I have an application which takes user input and reflect everything to the following field in response.
<textarea rows="5" cols="32" name="test_name" tabindex="6">user input </textar …
- 3,951
11
votes
Poor error handling source code review
How are these related to security? According to my understanding it
seems like the above issues are code quality issues.
These are code quality issues. From the name, it looks like they are str …
- 3,951
1
vote
Testing web applications from an end user's perspective
If the session IDs are indeed encrypted due to HTTPS, are we still
able to determine if the session IDs are sufficiently random and
unpredictable? I was asking myself this question and for me, …
- 3,951
17
votes
How do you capture ALL the traffic from an Android app?
You are unable to intercept Facebook traffic because it uses SSL pinning.
On pen-testing an android application you may come across four different scenarios. I will list them down below concisely. A …
- 3,951
3
votes
Can Burp be setup to intercept traffic from client application?
Short answer:
It depends on how your client application communicates to the backend server.
Long answer
The answer to this question depend on how the application communicates.
If it is using HTTP …
- 3,951