User Lex

347

votes

9

answers

210k

views

Is BASIC-Auth secure if done over HTTPS?

Apr 6 '19 at 7:35 Anders 59k

145

votes

4

answers

77k

views

Why is the same origin policy so important?

web-application web-browser javascript same-origin-policy

Apr 28 at 14:37 Sergey Pedan 3

134

votes

10

answers

277k

views

Where can I find good dictionaries for dictionary attacks?

authentication passwords attacks brute-force dictionary

May 11 '19 at 21:44 pacoverflow 263

99

votes

8

answers

31k

views

Why do ATMs accept any PIN?

atm

Oct 11 '16 at 21:57 Community♦ 1

49

votes

14

answers

107k

views

How to learn penetration testing at home?

professional-education

Jul 13 '16 at 21:31 Community♦ 1

49

votes

6

answers

145k

views

Testing for HTTP TRACE method

web-application appsec penetration-test http apache

Aug 2 '17 at 14:01 Keysha 1

31

votes

2

answers

55k

views

Is there any way to tell if CCTV is on or not?

physical cctv

Nov 13 '16 at 15:21 Betty 1

30

votes

9

answers

24k

views

Is encryption in HTTPS done by the browser or by the system?

encryption tls web-browser

Jun 26 '13 at 21:03 Lucas Kauffman 52.8k

25

votes

8

answers

29k

views

Can I detect web app attacks by viewing my Apache log file? [closed]

apache attacks ids

Nov 17 '13 at 23:59 Ashwin Jayaprakash 101

22

votes

4

answers

17k

views

Cross Site Scripting without special chars

web-application javascript xss

Jun 3 at 11:37 completeNoob 1

16

votes

2

answers

4k

views

Why does this XSS vector work in svg but not in HTML?

xss svg

Jun 1 '13 at 16:01 sh00pac 1

16

votes

3

answers

2k

views

Which companies facilitate payment in return for vulnerability disclosure?

disclosure bug-bounty

Dec 8 '16 at 4:27 Arminius 40.2k

16

votes

4

answers

35k

views

Tor and regular browser side by side. Does that make sense?

web-browser privacy tor surveillance

Apr 14 '14 at 9:54 user2428118 2,757

14

votes

3

answers

12k

views

SQL injection can bypass login but not drop table

php mysql injection

Jul 22 '13 at 11:27 Community♦ 1

13

votes

5

answers

5k

views

Apache/Linux server, DoS attack from own IP

linux http apache denial-of-service ip-spoofing

Mar 3 at 9:08 Maverjk 1

12

votes

1

answer

3k

views

How to study the packets sent by a keylogger

encryption malware keyloggers smtp wireshark

May 4 '15 at 7:28 Community♦ 1

12

votes

2

answers

4k

views

When performing a PenTest against a WAF-protected site, what should a Pentester know to enhance the Test-Quality?

penetration-test waf

Jul 19 '13 at 18:25 Community♦ 1

11

votes

1

answer

2k

views

How is time-based SQL injection different from other types of SQL injection?

web-application sql-injection

May 29 '14 at 10:57 DarkMantis 736

11

votes

1

answer

925

views

Safest way to keep an offline bitcoin wallet

bitcoin

Nov 30 at 21:52 Suncatcher 244

9

votes

1

answer

8k

views

How are chosen plaintext attacks against ECB implemented in the real world?

cryptography aes

Jun 30 '14 at 9:59 AlexH 361

8

votes

1

answer

905

views

How can I verify if a website revoked its old SSL certificate keys? [duplicate]

tls certificates heartbleed certificate-revocation

Apr 16 '14 at 6:48 Steffen Ullrich 149k

6

votes

4

answers

657

views

What do I need to be aware of to select a transfer method for digital forensic data?

forensics

Aug 28 '13 at 22:51 WMIF 272

6

votes

2

answers

14k

views

Why some sites are not shown when embedding them in an iframe?

xss dvwa

Jun 27 '13 at 2:08 NULLZ 11.1k

5

votes

1

answer

1k

views

Why should I pay for an email S/MIME certificate?

encryption email smime

Jun 30 '13 at 15:55 Rod MacPherson 1,039

5

votes

4

answers

9k

views

Finding all links under a website

penetration-test brute-force

May 24 '17 at 7:39 Community♦ 1

5

votes

1

answer

383

views

SQL injection not returning expected results

php mysql injection

Jul 21 '13 at 12:35 Deer Hunter 5,164

5

votes

1

answer

841

views

Custom web authentication scheme

authentication web-service rest

Aug 2 '13 at 13:44 Community♦ 1

5

votes

4

answers

1k

views

Pin + guid in URL secure for a web app?

authentication

Aug 8 '13 at 16:39 Community♦ 1

4

votes

1

answer

2k

views

Hashing passwords before inserting into database

cryptography hash .net

Sep 5 '13 at 13:33 Community♦ 1

4

votes

1

answer

2k

views

Can you make a digital signature using the receiver's public key?

encryption cryptography public-key-infrastructure digital-signature

Jul 15 '13 at 19:16 AJ Henderson 41k

Stack Exchange Network

current community

your communities

more stack exchange communities

Next privilege

Next badge

36 Bookmarks

Is BASIC-Auth secure if done over HTTPS?

Why is the same origin policy so important?

Where can I find good dictionaries for dictionary attacks?

Why do ATMs accept any PIN?

How to learn penetration testing at home?

Testing for HTTP TRACE method

Is there any way to tell if CCTV is on or not?

Is encryption in HTTPS done by the browser or by the system?

Can I detect web app attacks by viewing my Apache log file? [closed]

Cross Site Scripting without special chars

Why does this XSS vector work in svg but not in HTML?

Which companies facilitate payment in return for vulnerability disclosure?

Tor and regular browser side by side. Does that make sense?

SQL injection can bypass login but not drop table

Apache/Linux server, DoS attack from own IP

How to study the packets sent by a keylogger

When performing a PenTest against a WAF-protected site, what should a Pentester know to enhance the Test-Quality?

How is time-based SQL injection different from other types of SQL injection?

Safest way to keep an offline bitcoin wallet

How are chosen plaintext attacks against ECB implemented in the real world?

How can I verify if a website revoked its old SSL certificate keys? [duplicate]

What do I need to be aware of to select a transfer method for digital forensic data?

Why some sites are not shown when embedding them in an iframe?

Why should I pay for an email S/MIME certificate?

Finding all links under a website

SQL injection not returning expected results

Custom web authentication scheme

Pin + guid in URL secure for a web app?

Hashing passwords before inserting into database

Can you make a digital signature using the receiver's public key?