User yeah_well

90 votes

Accepted

Bypass with wrong cvv of debit card and getting OTP

answered Jul 1, 2019 at 10:30

72 votes

Are all these attacks possible with WiFi MitM or is it over-hyped nonsense?

answered Jan 19, 2020 at 12:34

23 votes

How can I re-use my password and still protect the password if it is exposed from one source?

answered Aug 7, 2019 at 11:58

12 votes

What is the attack scenario against which encrypted files provide protection?

answered May 10, 2020 at 13:01

10 votes

How dangerous is XSS?

answered Apr 1, 2019 at 5:54

8 votes

How to decide whether an eshop is safe or compromised

answered Aug 19, 2019 at 12:38

6 votes

Accepted

Does SSL inspection break applications utilizing certificate pinning?

answered Jul 10, 2019 at 18:54

6 votes

Accepted

Connect msfvenom reverse shell without metasploit

answered Jul 27, 2020 at 10:23

5 votes

Accepted

Stored XSS + PHP Backdoor + File upload vulnerability

answered Jul 19, 2019 at 10:30

5 votes

UserName and Password information can be seen on https

answered Jul 25, 2019 at 7:03

4 votes

Are all anchor tag href attributes considered XSS vulnerabilities?

answered Jul 2, 2019 at 16:39

3 votes

What are the risks of just clearing cookies instead of logging off?

answered Jun 1, 2019 at 13:57

3 votes

Accepted

Do you have to reset CSRF token after login?

answered Apr 29, 2019 at 19:27

3 votes

Is it safe to backup data (images, documents, videos, etc...) from a possibly infected computer?

answered Jul 27, 2019 at 16:14

3 votes

Difference between shell and meterpreter?

answered Jul 28, 2019 at 14:58

3 votes

Can a user be redirected to a malicious website if only a part of the url can be controlled by user input?

answered Oct 2, 2019 at 17:59

3 votes

Does a hacker know which IP they hacked?

answered Nov 29, 2020 at 9:24

3 votes

Can random subdomain naming enhance security?

answered Jan 21, 2020 at 15:40

3 votes

Accepted

Is there a difference between a rainbow table and a dictionary attack?

answered Jan 17, 2020 at 10:30

3 votes

Accepted

Can antivirus software detect if your PC is hooked to BeEF?

answered Feb 3, 2020 at 15:03

2 votes

Does a professional website know that person A switches the Chrome "user" and logged into its website with another email address?

answered Dec 31, 2020 at 15:55

2 votes

Security without Login

answered Dec 13, 2019 at 17:13

2 votes

If i download a pic in telegram secret chat on a public wifi then can hacker see the photo?

answered Dec 5, 2020 at 6:54

2 votes

If malware can be attached to an image file, then why aren't images a common attack vector?

answered Aug 29, 2020 at 17:03

2 votes

How safe is opening any website on new browser tab?

answered Jul 21, 2020 at 8:53

2 votes

JWT(Json Web Token) Tampering

answered Sep 19, 2019 at 9:52

2 votes

Accepted

Is revealing a PC account user name bad?

answered Aug 30, 2019 at 22:57

2 votes

Accepted

How can I avoid getting exposed while travelling to Russia?

answered Aug 31, 2019 at 21:18

2 votes

Accepted

Is exposing enumerated id's a bad idea if precautions are taken?

answered Sep 2, 2019 at 3:07

2 votes

What's the reason of both "Allow-Origin: *" and "Allow-Credentials: true" headers?

answered Sep 15, 2019 at 17:44

Stack Exchange Network

93 Answers

Bypass with wrong cvv of debit card and getting OTP

Are all these attacks possible with WiFi MitM or is it over-hyped nonsense?

How can I re-use my password and still protect the password if it is exposed from one source?

What is the attack scenario against which encrypted files provide protection?

How dangerous is XSS?

How to decide whether an eshop is safe or compromised

Does SSL inspection break applications utilizing certificate pinning?

Connect msfvenom reverse shell without metasploit

Stored XSS + PHP Backdoor + File upload vulnerability

UserName and Password information can be seen on https

Are all anchor tag href attributes considered XSS vulnerabilities?

What are the risks of just clearing cookies instead of logging off?

Do you have to reset CSRF token after login?

Is it safe to backup data (images, documents, videos, etc...) from a possibly infected computer?

Difference between shell and meterpreter?

Can a user be redirected to a malicious website if only a part of the url can be controlled by user input?

Does a hacker know which IP they hacked?

Can random subdomain naming enhance security?

Is there a difference between a rainbow table and a dictionary attack?

Can antivirus software detect if your PC is hooked to BeEF?

Does a professional website know that person A switches the Chrome "user" and logged into its website with another email address?

Security without Login

If i download a pic in telegram secret chat on a public wifi then can hacker see the photo?

If malware can be attached to an image file, then why aren't images a common attack vector?

How safe is opening any website on new browser tab?

JWT(Json Web Token) Tampering

Is revealing a PC account user name bad?

How can I avoid getting exposed while travelling to Russia?

Is exposing enumerated id's a bad idea if precautions are taken?

What's the reason of both "Allow-Origin: *" and "Allow-Credentials: true" headers?