User hax

7 votes

1 answer

600 views

Should 2FA over SMS be considered insecure in the wake of recent SS7 attacks?

asked May 4, 2017 at 14:31

6 votes

1 answer

2k views

What was the real reason for dropping reflected-xss directive from CSP?

asked Dec 19, 2019 at 21:39

3 votes

1 answer

1k views

Can a javascript on parent page log keystrokes inside an iframe?

asked Aug 14, 2019 at 23:19

3 votes

1 answer

232 views

Can a user be redirected to a malicious website if only a part of the url can be controlled by user input?

asked Oct 2, 2019 at 17:45

3 votes

1 answer

2k views

Is it acceptable to enable relay of emails in an internal email server in a corporate network?

asked Jan 17, 2017 at 21:19

3 votes

2 answers

14k views

How to find who granted local admin privileges to a user?

asked Jan 26, 2017 at 18:24

2 votes

3 answers

7k views

How to perform buffer overflow on non-argument parameters?

asked Aug 14, 2016 at 1:47

2 votes

1 answer

465 views

Can we use network hub as an MITM sniffing device?

asked Mar 23, 2019 at 23:33

2 votes

3 answers

821 views

Is it possible to create a certificate for a key pair which I do not possess?

asked Feb 10, 2021 at 17:23

1 vote

0 answers

132 views

Is XSS possible when the user input gets reflected inside <textarea> when '<' and '>' symbols are sanitized [duplicate]

asked Mar 23, 2017 at 18:12

0 votes

1 answer

4k views

How to exploit system call when the full path of binary is given inside the call?

asked Oct 10, 2016 at 12:11

0 votes

1 answer

255 views

Inconsistent behavior while attempting to exploit a misconfigured flash crossdomain.xml

asked Oct 4, 2019 at 5:33

0 votes

1 answer

234 views

Is there a vulnerability other than XSS which can result in client side script execution?

asked Jan 2, 2020 at 19:25

0 votes

1 answer

397 views

Can end-to-end encryption be securely implemented on a web application?

asked Jan 16, 2020 at 12:42

-1 votes

1 answer

5k views

How to route the entire traffic of a linux machine through TOR? [closed]

asked Oct 28, 2016 at 18:58

Stack Exchange Network

15 Questions

Should 2FA over SMS be considered insecure in the wake of recent SS7 attacks?

What was the real reason for dropping reflected-xss directive from CSP?

Can a javascript on parent page log keystrokes inside an iframe?

Can a user be redirected to a malicious website if only a part of the url can be controlled by user input?

Is it acceptable to enable relay of emails in an internal email server in a corporate network?

How to find who granted local admin privileges to a user?

How to perform buffer overflow on non-argument parameters?

Can we use network hub as an MITM sniffing device?

Is it possible to create a certificate for a key pair which I do not possess?

Is XSS possible when the user input gets reflected inside <textarea> when '<' and '>' symbols are sanitized [duplicate]

How to exploit system call when the full path of binary is given inside the call?

Inconsistent behavior while attempting to exploit a misconfigured flash crossdomain.xml

Is there a vulnerability other than XSS which can result in client side script execution?

Can end-to-end encryption be securely implemented on a web application?

How to route the entire traffic of a linux machine through TOR? [closed]