User Lex

100

votes

8

answers

32k

views

Why do ATMs accept any PIN?

atm

Oct 11 '16 at 21:57 Community♦ 1

9

votes

1

answer

8k

views

How are chosen plaintext attacks against ECB implemented in the real world?

cryptography aes

Jun 30 '14 at 9:59 AlexH 371

8

votes

1

answer

915

views

How can I verify if a website revoked its old SSL certificate keys? [duplicate]

tls certificates heartbleed certificate-revocation

Apr 16 '14 at 6:48 Steffen Ullrich 162k

2

votes

2

answers

261

views

Should the root Unix user have a shell?

linux

Sep 19 '16 at 0:58 Robert 1

11

votes

1

answer

2k

views

How is time-based SQL injection different from other types of SQL injection?

web-application sql-injection

May 29 '14 at 10:57 DarkMantis 736

4

votes

1

answer

2k

views

Hashing passwords before inserting into database

cryptography hash .net

Sep 5 '13 at 13:33 Community♦ 1

5

votes

4

answers

1k

views

Pin + guid in URL secure for a web app?

authentication

Aug 8 '13 at 16:39 Community♦ 1

5

votes

1

answer

843

views

Custom web authentication scheme

authentication web-service rest

Aug 2 '13 at 13:44 Community♦ 1

3

votes

2

answers

2k

views

A protocol to authenticate users without login/password

passwords tls authentication

Aug 3 '13 at 19:28 Community♦ 1

15

votes

3

answers

12k

views

SQL injection can bypass login but not drop table

php mysql injection

Jul 22 '13 at 11:27 Community♦ 1

5

votes

1

answer

400

views

SQL injection not returning expected results

php mysql injection

Jul 21 '13 at 12:35 Deer Hunter 5,195

4

votes

1

answer

2k

views

Can you make a digital signature using the receiver's public key?

encryption cryptography public-key-infrastructure digital-signature

Jul 15 '13 at 19:16 AJ Henderson 41.2k

12

votes

2

answers

4k

views

When performing a PenTest against a WAF-protected site, what should a Pentester know to enhance the Test-Quality?

penetration-test waf

Jul 19 '13 at 18:25 Community♦ 1

17

votes

4

answers

36k

views

Tor and regular browser side by side. Does that make sense?

web-browser privacy tor surveillance

Apr 14 '14 at 9:54 user2428118 2,767

5

votes

1

answer

1k

views

Why should I pay for an email S/MIME certificate?

encryption email smime

Jun 30 '13 at 15:55 Rod MacPherson 1,039

6

votes

2

answers

15k

views

Why some sites are not shown when embedding them in an iframe?

xss dvwa

Jun 27 '13 at 2:08 NULLZ 11.2k

30

votes

9

answers

24k

views

Is encryption in HTTPS done by the browser or by the system?

encryption tls web-browser

Jun 26 '13 at 21:03 Lucas Kauffman 53.4k

31

votes

2

answers

55k

views

Is there any way to tell if CCTV is on or not?

physical cctv

Nov 13 '16 at 15:21 Betty 1

2

votes

1

answer

975

views

SSL: MITM possible if private key is known? [closed]

tls rsa

Jun 16 '13 at 16:49 CodesInChaos 11.3k

16

votes

2

answers

4k

views

Why does this XSS vector work in svg but not in HTML?

xss svg

Jun 1 '13 at 16:01 sh00pac 1

22

votes

4

answers

19k

views

Cross Site Scripting without special chars

web-application javascript xss

Jun 3 at 11:37 completeNoob 1

52

votes

6

answers

154k

views

Testing for HTTP TRACE method

web-application appsec penetration-test http apache

Aug 2 '17 at 14:01 Keysha 1

6

votes

4

answers

692

views

What do I need to be aware of to select a transfer method for digital forensic data?

forensics

Aug 28 '13 at 22:51 WMIF 272

13

votes

5

answers

5k

views

Apache/Linux server, DoS attack from own IP

linux http apache denial-of-service ip-spoofing

Mar 3 '20 at 9:08 Maverjk 1

11

votes

1

answer

940

views

Safest way to keep an offline bitcoin wallet

bitcoin

Nov 30 '19 at 21:52 Suncatcher 256

12

votes

1

answer

3k

views

How to study the packets sent by a keylogger

encryption malware keyloggers smtp wireshark

May 4 '15 at 7:28 Community♦ 1

2

votes

3

answers

7k

views

Is it possible to list folder from my web server if i have an empty index.html in the root folder?

webserver http

Aug 17 '17 at 8:57 Matthew 27k

4

votes

3

answers

364

views

SQLi-protection ORDER BY

php sql-injection

Jan 30 '13 at 19:29 Community♦ 1

5

votes

4

answers

10k

views

Finding all links under a website

penetration-test brute-force

May 24 '17 at 7:39 Community♦ 1

4

votes

2

answers

231

views

Secure Wireless Implementations

wpa2 wireless

Feb 19 '13 at 6:29 Community♦ 1

Stack Exchange Network

current community

your communities

more stack exchange communities

Next privilege

Next badge

36 Bookmarks

Why do ATMs accept any PIN?

How are chosen plaintext attacks against ECB implemented in the real world?

How can I verify if a website revoked its old SSL certificate keys? [duplicate]

Should the root Unix user have a shell?

How is time-based SQL injection different from other types of SQL injection?

Hashing passwords before inserting into database

Pin + guid in URL secure for a web app?

Custom web authentication scheme

A protocol to authenticate users without login/password

SQL injection can bypass login but not drop table

SQL injection not returning expected results

Can you make a digital signature using the receiver's public key?

When performing a PenTest against a WAF-protected site, what should a Pentester know to enhance the Test-Quality?

Tor and regular browser side by side. Does that make sense?

Why should I pay for an email S/MIME certificate?

Why some sites are not shown when embedding them in an iframe?

Is encryption in HTTPS done by the browser or by the system?

Is there any way to tell if CCTV is on or not?

SSL: MITM possible if private key is known? [closed]

Why does this XSS vector work in svg but not in HTML?

Cross Site Scripting without special chars

Testing for HTTP TRACE method

What do I need to be aware of to select a transfer method for digital forensic data?

Apache/Linux server, DoS attack from own IP

Safest way to keep an offline bitcoin wallet

How to study the packets sent by a keylogger

Is it possible to list folder from my web server if i have an empty index.html in the root folder?

SQLi-protection ORDER BY

Finding all links under a website

Secure Wireless Implementations