Search Results
| Search type | Search syntax |
|---|---|
| Tags | [tag] |
| Exact | "words here" |
| Author |
user:1234 user:me (yours) |
| Score |
score:3 (3+) score:0 (none) |
| Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
| Views | views:250 |
| Code | code:"if (foo != bar)" |
| Sections |
title:apples body:"apples oranges" |
| URL | url:"*.example.com" |
| Saves | in:saves |
| Status |
closed:yes duplicate:no migrated:no wiki:no |
| Types |
is:question is:answer |
| Exclude |
-[tag] -apples |
| For more details on advanced search visit our help page | |
Results tagged with web-application
Search options not deleted
user 142591
An application that is accessed over a network such as the Internet or an intranet using a browser.
0
votes
1
answer
137
views
Security of a sessionID stored in a div in the page source
I've just come across a web application that appears to store my current sessionID in form of a div element, which is not displayed on the web page.
This is an odd method, but to be honest I don't se …
2
votes
2
answers
835
views
CORS accepting arbitrary origin with GET but not with OPTIONS
I'm testing an API, which allows an arbitrary origin on POST/GET requests, by responding with the CORS header Access-Control-Allow-Origin: *.
However, with OPTIONS requests and an arbitrary origin, t …
1
vote
1
answer
851
views
SQL injection with an auto-incrementing parameter
I'm currently performing an API Pentest and I suspect an SQLi in one of the API calls. It updates a certain item of the web-service and requires an increase of the version number for each request.
Th …