Skip to main content
Rory McCune's user avatar
Rory McCune's user avatar
Rory McCune's user avatar
Rory McCune
  • Member for 13 years, 5 months
  • Last seen this week
29 votes

Where can I find good dictionaries for dictionary attacks?

29 votes
Accepted

What tools are available to assess the security of a web application?

27 votes
Accepted

What are the security risks of letting the users upload content to my site?

26 votes
Accepted

What should a security audit report include?

26 votes
Accepted

Why don't banks get hacked?

25 votes
Accepted

Is Linux spying on its users?

25 votes
Accepted

New XSS cheatsheet?

25 votes
Accepted

Is having the name of web server software in HTTP response header a serious problem?

24 votes
Accepted

Is this idea for a password manager secure? If so, why doesn't anybody use it?

22 votes

Song Lyrics as passphrases

21 votes
Accepted

Vulnerable OS's?

21 votes

How long should the maximum password length be?

21 votes
Accepted

Secure FTP access; best practices

20 votes

Servers for penetration testing

19 votes
Accepted

Browsing exploits with Metasploit console

18 votes

How feasible is it for a CA to be hacked? Which default trusted root certificates should I remove?

18 votes
Accepted

What is the best option for setting up a several sites supporting SSL on the same IP?

18 votes

How to choose a password that I have to remember for a long time but do not use a lot

17 votes

Is gmail-to-gmail still insecure? Why?

17 votes
Accepted

Does using WPA2-Enterprise just change the attack model vs WPA2-PSK?

17 votes
Accepted

Safety of publishing last 4 credit card digits in age of fast computing?

17 votes

How to restrict access to a web application to authorized devices only?

17 votes

How secure is RDP?

17 votes
Accepted

How to execute a command directly on the host system through docker.sock in a Docker container?

16 votes

Keylogger web application protection

16 votes
Accepted

How to make a website patch their poor security?

16 votes

How can I explain SQL injection without technical jargon?

16 votes
Accepted

What is the difference between ordinary XSS and Dom XSS vulnerabilities?

16 votes

Docker as a sandbox for untrusted code

15 votes

Password strength of random words and brainflayer

1
2
3 4 5
26