Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange


A tag is a keyword or label that categorizes your question with other, similar questions. Using the right tags makes it easier for others to find and answer your question.

× 400
an open source exploitation framework that acts as a tool for developing and executing exploit code against a remote target machine
× 394
Popular web browser by Google, see for more information.
× 392
For questions about the assessment of hardware, software, systems, people, processes, projects, etc, that are somehow related to the security of an organization or product. Often these are related to …
× 390
Computer forensics works to analyze information on computer systems in an attempt to find evidence regarding certain actions of a process, application, user or computer to determine the source of chan…
× 387
an attempt to steal user's personal information such as username, password, credit card number etc. The main idea of such attack is that the attacker pretends to be a trusted web-site whic…
× 383
Security controls and features related to an end user's account with a web/mobile based application or an operating system.
× 379
Intrusion Detection System, a system for detecting and alerting based on behavior.
× 378
an anomaly where a program, while writing data to a buffer, overruns the buffer's boundary and overwrites adjacent memory.
× 376
Apple's operating system for the iPhone, iPad and iPod Touch.
× 373
The process of encrypting individual files on a storage medium and permitting access to the encrypted data only after proper authentication is provided.
× 373
the creation of a virtual (rather than actual) version of something, such as an operating system, a server, a storage device or network resources.
× 372
Payment cards. For questions about storing credit card numbers, see also pci-dss. For questions involving the physical object, see also smartcard (if the card has a chip).
× 369
a networking device that routes forwards between networks. A router generally has two or more data connections allowing data to be routed between networks.
× 363
a family of attacks that attempt to force a target to use up resources (CPU time, memory, bandwidth etc) through flood a target with useless packets, connections or tasks
× 363
the software component that provides abstraction of physical hardware, and provides a generalized model for application software to execute without the need for specific hardwa…
× 350
known to the designers, implementers, or operators of the system, but has not been corrected.
× 345
a series of Unix-based graphical interface operating systems developed, marketed, and sold by Apple Inc.
× 344
The use of physical measures (such as locks and tamper-proofing) or policies (such as Clean Desk) in order to protect sensitive information from unauthorized access.
× 340
the uncontrolled, unauthorized transmission of classified information from a data centre or computer system to the outside. Such leakage can be accomplished by physical removal of data…
× 337
the use of electronic messaging systems (including most broadcast media, digital delivery systems) to send unsolicited bulk messages indiscriminately.
× 331
Offensive Security's penetration testing Linux distribution.
× 317
The generation of random or pseudorandom data, and the use of randomness in security protocols
× 315
A piece of software and or hardware designed to detect the presence of vulnerabilities in an IT system.
× 315
a software construct serving as a communications endpoint in a computer's host OS.
× 312
a standard for a public key infrastructure used for authentication and access control. X.509 specifies standard formats for certificates, revocation lists, attribute certificates, and path va…
× 312
Specific to logging of alerts, activities and actions. This also covers user's history managed by software such as browsers.
× 312
inserting malicious content, usually code (like SQL, Javascript) into a vulnerable application. Is used only if there is no more specific injection tag available (see tag wiki)
× 308
A runtime, architecture, and libraries for Microsoft Windows used for creating applications.
× 308
a random addition to a password to make the hashed password less susceptible to a lookup table attack
× 299
application that provides a standard means of interoperating between different software applications, running on a variety of platforms and/or frameworks - typically using HTTP or HTT…
× 295
An abreviation for REpresentational State Transfer. A design pattern for stateless client-server systems. Popular in the implementation of web services.
× 291
the process of determining whether a user, program or device is allowed to access a protected resource in a particular way. Not to be confused with authentication.
× 290
Programs that map out a network to figure out which computers and services are available to be exploited.
× 289
Related to the laws and regulations imposed by governments, the enforcement of those laws, and legal and judicial process including investigation and trial. Note that if your question matches this de…
× 286
Application Programming Interface; a set of routines, protocols, tools or endpoints used in software development.
× 284
A description and set of rules for the ordered exchange of structured information designed with the goal of protecting the security of the system.