Skip to main content
nobody's user avatar
nobody's user avatar
nobody's user avatar
nobody
  • Member for 4 years
  • Last seen more than a month ago
2 votes

How does the certificate transparency check in Chrome work?

2 votes

Is possible to reverse engineer a AES encryption of a known file format?

2 votes

How is the stream cipher key shared on GSM?

2 votes
Accepted

Who is accessing my pop3 email accounts?

2 votes

Malware dropper uses "^" character in syntax of cmd.exe before calling mshta.exe to download file?

2 votes

How does a TLS client know the CA certificate?

2 votes

Do websites send full URL over HTTP instead of HTTPS if there's an HTTPS connection?

2 votes
Accepted

Can XSS ever occur in an <img> tag's "src" attribute?

2 votes
Accepted

Is a private VPS without a domain name and http entry likely to get DDOS'd for more than 5 hours?

2 votes
Accepted

Do Spyier or similar products really hack the phones remotely?

2 votes

Protection against different attack vectors, password manager

2 votes
Accepted

Is combining salt from two places secure enough and what length

2 votes

Are high traffic apps and websites used in DDoS attacks?

2 votes
Accepted

Can the hosting provider who has access to the email server machine, access the emails?

2 votes
Accepted

Forging SSL certificate to the browser

2 votes
Accepted

CertGetCertificateChain doesn't recognise revoked certificate if the reason is "unspecified"

2 votes
Accepted

Is there a point in randomizing my WPA2-Personal SSID (meaning, set a random string in place of the SSID)?

2 votes
Accepted

Is it okay that a payment app is sending my payment details via a GET request?

2 votes
Accepted

Privatebin URL/key interception?

2 votes
Accepted

Can a host access a VPS disk's encrypted directory directly while running?

2 votes
Accepted

How can I generate a binary from an payload without any other addons?

2 votes

Can an iOS backup be compromised?

2 votes

Is it important that every TLS1.2 encrypted message have padding?

2 votes
Accepted

Windows file to look for to test LFI

1 vote
Accepted

Rogue network printers as an attack vector in windows

1 vote

Smaller password lists

1 vote

It's possible to trigger a XSS in url context without this following caracter ' : '?

1 vote
Accepted

Performing a simpler ssl handshake

1 vote
Accepted

Encrypting a salted password hash with RSA before storing in a database

1 vote
Accepted

Decompiling shellcode