Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options not deleted user 121141

An attempt to penetrate a system's security in an effort to evaluate the protections in place.

1 vote

standard operating procedure for pen test

Special Publication 800-115 Technical Guide to Information Security Testing and Assessment will help you in creating an SOP for security testing.
hax's user avatar
  • 3,951
2 votes

Why can't scanners usually detect stored XSS? Is there a way to automate the detection of st...

Here are a few problems with what you are looking for and why they are virtually non-existent. Tools find reflected XSS by searching for the injected script snippet in the HTML source of the immedia …
hax's user avatar
  • 3,951
1 vote

exploiting Open redirection vulnerability in java

Open Redirect happens when the application takes user supplied URLs or paths as parameter value and redirect to them without warning the user. Scenario: Step 1: The following get request takes a UR …
hax's user avatar
  • 3,951
17 votes

How do you capture ALL the traffic from an Android app?

You are unable to intercept Facebook traffic because it uses SSL pinning. On pen-testing an android application you may come across four different scenarios. I will list them down below concisely. A …
hax's user avatar
  • 3,951