New answers tagged appsec
0
votes
As long as an Android device does not get rooted, is it safe to assume that the main phone app has not been modified?
Yes if there is a vulnerability in the version of Android you are running, including a 0 day (undiscovered) vulnerability then that vulnerability can be exploited.
You can never say something was not ...
- 101
1
vote
Vary: origin response header and CORS exploitation
In the context of CORS requests, the “Vary: Origin” header is particularly important. When a browser makes a CORS request, it automatically adds an “Origin” header to indicate the source of the ...
- 11
Top 50 recent answers are included
Related Tags
appsec × 964web-application × 348
authentication × 82
penetration-test × 71
php × 56
xss × 56
mobile × 50
android × 45
encryption × 44
source-code × 43
passwords × 37
attacks × 37
attack-prevention × 36
javascript × 35
databases × 34
java × 33
web-browser × 32
sql-injection × 31
csrf × 30
tls × 28
code-review × 27
http × 26
network × 25
cryptography × 25
windows × 24