Egret's user avatar
Egret's user avatar
Egret's user avatar
Egret
  • Member for 7 years, 5 months
  • Last seen more than 1 year ago
4 votes
Accepted

Cookie stealing with Redirection

3 votes

Is there any way to find all the endpoints for any website for sql injection?

2 votes
Accepted

Firefox Account - Export user data (GDPR)

2 votes

What is untrusted data

2 votes
Accepted

Are employee or badge numbers PII?

2 votes

Is it safe to get html encoded data from database to prevent stored XSS attack?

1 vote

bypassing metacharacter filtering

1 vote

Generating request-specific token for an API

1 vote

Is the overwrite of a Javascript prototype method a XSS attack?

1 vote
Accepted

How does an SQL injection inject HTML?

1 vote
Accepted

AngularJS Sanitize function vs. server-side output encoding

1 vote

How to make this script run from image?

1 vote

Validate database column and table names to prevent SQLi?

1 vote
Accepted

SQL injection with UNION and two queries with same input

1 vote

TLS and Java Client

0 votes

Is SQL injection possible via integer?

0 votes

HTTPS cert private key option optional

0 votes

Should we prevent this login XSS attack?

0 votes
Accepted

Sql Injection ByPass problem

0 votes

Can 4 single quotes still be escaped producing a sql injection on sql server?

0 votes

SQL Injection "Error 1 - Operand should contain 1 column(s)"

0 votes

Blind SQLi - guessing column name

0 votes

TDE - Encrypting different rows with different keys