Skip to main content
Share Your Experience: Take the 2024 Developer Survey
mcgyver5's user avatar
mcgyver5's user avatar
mcgyver5's user avatar
mcgyver5
  • Member for 11 years, 7 months
  • Last seen this week
41 votes
7 answers
5k views

What are some important concepts to teach developers about cross-site scripting (XSS)?

14 votes
1 answer
19k views

How to detect suspicious content in a TrueType Font (.ttf) font file

13 votes
2 answers
386 views

Is my Windows phone protected from attacks that reveal list of ssids it knows about?

11 votes
2 answers
10k views

safe to use jBCrypt and recommend it to my organization?

9 votes
3 answers
3k views

How to view extension privileges in Firefox?

6 votes
1 answer
943 views

Is this the end of malware use of DNS?

5 votes
1 answer
521 views

can Veracode be taught to accept mitigations that it does not yet recognize

5 votes
2 answers
731 views

LastPass vulnerability: Should LastPass users change all their passwords?

5 votes
1 answer
3k views

SSL Labs report question: Is "Insecure Renegotiation" possible if weak cipher suites are not available on server?

4 votes
1 answer
533 views

How much protection is really offered by TLS_FALLBACK_SCSV?

4 votes
3 answers
3k views

JInitiator is obsolete and I should reject it on grounds of security, right?

4 votes
1 answer
6k views

Why did this attack use 0.0.0.0 as IP address and why did it work?

4 votes
1 answer
432 views

What documentation can I ask a vendor for to show HIPAA compliance

3 votes
2 answers
5k views

how to scan a web application that uses Captcha

2 votes
1 answer
1k views

Automated tools to test Struts OGNL security vulnerabilities

2 votes
2 answers
192 views

xcodeghost infection in a byod device

2 votes
1 answer
4k views

custom input format for hashcat

1 vote
1 answer
101 views

make specially encoded template available for file uploads

1 vote
1 answer
835 views

Android app permission warning: how serious?

1 vote
0 answers
2k views

Can anyone provide a hint for Webgoat 8's Deserialization exercise?

1 vote
2 answers
352 views

What causes Windows security logs saying an attempt was made to reset an account's password?

1 vote
2 answers
608 views

guidelines for password managers

1 vote
1 answer
800 views

Reflected file download Scenario

0 votes
1 answer
1k views

using temporary tokens for secure communication with IFRAME

0 votes
2 answers
232 views

encryption protection against lost password

0 votes
2 answers
368 views

password strength audits and mitigations

0 votes
1 answer
230 views

how to extract binaries from SOHO routers and other devices

0 votes
2 answers
192 views

Can Meta / Facebook Pixel be loaded by a script loaded from a third party CDN for my web site?

0 votes
1 answer
306 views

Inadvertent clickjacking on page causes LastPass login dialog to appear.

0 votes
2 answers
2k views

On urlscan.io Indicators of Compromise, what do the hashes represent?