Xenos's user avatar
Xenos's user avatar
Xenos's user avatar
Xenos
  • Member for 6 years, 11 months
  • Last seen more than 1 year ago
33 votes
8 answers
6k views

If password expiration is applied, should door-lock expiration be applied too?

6 votes
1 answer
213 views

Do anti-XSS rules of Web Application Firewall break business logic?

4 votes
2 answers
157 views

Should I forbid GET for non-side effect POST by default?

4 votes
1 answer
200 views

Could PDF's `/Filespec` type allow for remote file access?

3 votes
3 answers
931 views

Can one find the value of a "constant salt" if they can set the password and get the hash?

3 votes
1 answer
9k views

Combined-Dictionary attack with hashcat, for 4 words passphrases?

3 votes
2 answers
394 views

Mysql injection with a single `USE` statement

1 vote
1 answer
556 views

Exploit for a CSRF to a POST server with specific "Accept" header?

1 vote
1 answer
1k views

Do we know a MD5 collision exploiting PHP loose type comparision (0123e2 == 123e02 == 012300)?

0 votes
0 answers
128 views

Is there a list of Unicode symbols that matches ASCII when lowercased (in java)?

-1 votes
1 answer
306 views

Can one alter SHA-1 input data without changing the hash internal state? [duplicate]