User Ben

4 votes

Login system using permanent "random" hashes in URLs

answered Feb 8, 2019 at 11:37

5 votes

Accepted

Are Password Strength/Entropy test web sites safe?

answered Jan 21, 2019 at 12:19

8 votes

Accepted

How long should a password reset token remain valid?

answered Nov 23, 2018 at 12:18

1 vote

Can a URL that has no links to it be discovered?

answered Oct 19, 2018 at 5:02

2 votes

Accepted

Is possible to attack a Wordpress website if someone know username and password of admin account?

answered Oct 18, 2018 at 10:03

16 votes

How should I verify a caller is from the bank or company they claim?

answered Sep 14, 2018 at 9:49

6 votes

How do you sniff a wifi router without connected into it?

answered Sep 14, 2018 at 9:42

0 votes

Have firewall and VPN already, should I buy a mini router to protect my laptop?

answered Sep 13, 2018 at 14:15

0 votes

Accepted

Will files added to an encrypted drive be encrypted as well?

answered Sep 11, 2018 at 5:28

1 vote

Routing traffic through compromised host

answered Sep 7, 2018 at 10:09

24 votes

Accepted

Is telnet secure through SSH tunneling

answered Sep 6, 2018 at 19:45

2 votes

Does the symmetric key exchange through asymmetric encryption have to be done asymmetrically?

answered Sep 5, 2018 at 4:35

1 vote

SSL MITM on the WAN side of my router

answered Sep 4, 2018 at 12:53

1 vote

What should be the life time for SMS OTP?

answered Sep 3, 2018 at 5:20

1 vote

Accepted

Netcat does not receive an response over tor

answered Sep 3, 2018 at 4:55

0 votes

What is the responsible thing to do when I care about a vulnerability more than the team behind the system?

answered Aug 31, 2018 at 12:00

1 vote

Freaked out by "impossible click" in logs

answered Aug 31, 2018 at 10:36

1 vote

What are some existing or ideas where the use of a password can be replaced to login to a service?

answered Aug 30, 2018 at 8:33

2 votes

Accepted

Apache2 Logs, need help in identifying if it is an attack or not

answered Aug 30, 2018 at 5:05

4 votes

How can I make a strong password that's easy to remember? Is the 4 Word method safe?

answered Aug 29, 2018 at 12:14

2 votes

Accepted

How to use custom injection in sqlmap?

answered Aug 27, 2018 at 5:23

2 votes

Accepted

Detecting GSM activity

answered Aug 24, 2018 at 12:38

3 votes

I'm not sure if this Website is SQL Injectable

answered Aug 24, 2018 at 12:08

1 vote

Automatic push on commit (on bitbucket repository)

answered Aug 24, 2018 at 8:06

1 vote

Is it SQL Injection Vuln?

answered Aug 23, 2018 at 11:52

1 vote

Accepted

Exposing internal, rental web app for multiple shops/employees

answered Aug 23, 2018 at 10:54

16 votes

What are the security risk of enabling cors on localhost?

answered Nov 16, 2017 at 11:55

3 votes

Docker secret security

answered Nov 16, 2017 at 6:06

14 votes

Hardware token vs Fingerprint based software token

answered Nov 15, 2017 at 10:38

3 votes

OWASP Secure Headers for Web Services

answered Nov 13, 2017 at 8:38

Stack Exchange Network

39 Answers

Login system using permanent "random" hashes in URLs

Are Password Strength/Entropy test web sites safe?

How long should a password reset token remain valid?

Can a URL that has no links to it be discovered?

Is possible to attack a Wordpress website if someone know username and password of admin account?

How should I verify a caller is from the bank or company they claim?

How do you sniff a wifi router without connected into it?

Have firewall and VPN already, should I buy a mini router to protect my laptop?

Will files added to an encrypted drive be encrypted as well?

Routing traffic through compromised host

Is telnet secure through SSH tunneling

Does the symmetric key exchange through asymmetric encryption have to be done asymmetrically?

SSL MITM on the WAN side of my router

What should be the life time for SMS OTP?

Netcat does not receive an response over tor

What is the responsible thing to do when I care about a vulnerability more than the team behind the system?

Freaked out by "impossible click" in logs

What are some existing or ideas where the use of a password can be replaced to login to a service?

Apache2 Logs, need help in identifying if it is an attack or not

How can I make a strong password that's easy to remember? Is the 4 Word method safe?

How to use custom injection in sqlmap?

Detecting GSM activity

I'm not sure if this Website is SQL Injectable

Automatic push on commit (on bitbucket repository)

Is it SQL Injection Vuln?

Exposing internal, rental web app for multiple shops/employees

What are the security risk of enabling cors on localhost?

Docker secret security

Hardware token vs Fingerprint based software token

OWASP Secure Headers for Web Services