9
votes
What is the relationship between HTTP response codes and successful execution of XSS attacks?
TL;DR: Successful execution of XSS is unrelated to the response code.
XSS is the execution of attacker injected code at the client side. The HTTP response which includes the response code is created ...
- 201k
5
votes
Accepted
Fuzzing versus Symbolic Execution -- what's the difference?
Can someone clarify what the real difference is between the two and
why or when we should prefer one method over the other?
(Dynamic) symbolic execution is sometimes called whitebox fuzzing, see, e....
- 166
4
votes
Accepted
Extract urls from obfuscated android malware
I am afraid there are more ways to obfuscate an URL than one can count. It's very easy to come with another method when your last one got flagged, so static analysis is not recommended.
If possible, ...
- 54k
3
votes
Can results from DAST (Dynamic Application Security Testing) tools be false positive?
Oh yeah, I literally just finished triaging through a report full of false positives (I raised one legitimate ticket out of a 20 page DAST report). And by that I mean that, like @BrianWilliams' ...
- 58.9k
3
votes
Can results from DAST (Dynamic Application Security Testing) tools be false positive?
DAST can absolutely have false positives. It depends on the tool that you are using, but there are some that can give you hundreds of false positives.
For example, a tool might check for SQL ...
- 341
3
votes
Is it possible to make my host completely safe from the virtual machine (where I will do malware analysis)?
No, it is not possible to keep your host completely safe by using a VM. And on this years pwn2own competition a guest-drive-by to host system privileges exploit chain was shown.
Yet, for analysis of „...
- 14.4k
3
votes
Fuzzing versus Symbolic Execution -- what's the difference?
Can someone clarify what the real difference is between the two and
why or when we should prefer one method over the other?
Much like a baseball bat, the difference is in the goal of the person ...
- 72.9k
2
votes
How do you test security tools
The type of security tool you're testing will dictate what type of testing container you'll need. If you're testing malware detection, grab a container that contains the EICAR malware test file. If ...
- 619
2
votes
Accepted
Is it correct to say that AVs use the same signature-based detection methods in emulation as they do on static binaries?
Disclosure: I work for an anti-malware vendor.
The answer is "it depends on malicious content".
If the malicious content is obfuscated or encrypted, but otherwise it is the same content which would ...
- 3,534
1
vote
How do you test security tools
Before thinking about purchasing a security tool you should define the problem your are trying to solve. Then you can define true positive and true negative testcases. These test cases can be ...
- 11
1
vote
VeraCode static code scan of django view reports "External control of Filename or Path" on render method
I don't see anything wrong with this implementation.
It is also completely according to documentation:
https://docs.djangoproject.com/en/3.0/topics/http/shortcuts/
It seems like this Veracode result ...
- 250
1
vote
Dynamic Application Security Testing (DAST) Scanner for Post Authentication
Let's start with that Nessus and Openvas are not DAST tools.
Burp is a very good option, you might go with, OWASP ZAP is similar, but it is 100% free.
Than there are other vendors like Rapid7 Insight ...
- 1,032
1
vote
Malware Execution Delay
Cuckoo is an automated sandbox meant for malware analysis. It skips the first N seconds of delay functions when a program starts.
NtDelayExecutiom is commonly used to prevent dynamic malware ...
- 5,130
Only top scored, non community-wiki answers of a minimum length are eligible