As of May 31, 2023, we have updated our Code of Conduct.
Lucas NN's user avatar
Lucas NN's user avatar
Lucas NN's user avatar
Lucas NN
  • Member for 9 years, 1 month
  • Last seen more than 5 years ago
21 votes
Accepted

How zip symlink works?

14 votes

Password Storage - Self Encryption vs Hashing?

6 votes
Accepted

DNS Rebinding attack - will the victim's browser send cookies?

6 votes
Accepted

Is this PHP code XSS proof?

6 votes
Accepted

Information Transfer Between Browsers and Tabs

6 votes

End user security awareness measurement

5 votes
Accepted

How can a connection be secure, if somebody observes it from the beginning?

5 votes
Accepted

XSS vulnerability in raw script response?

5 votes

How can document.referrer be used for XSS?

4 votes

Is converting `<` to `&lt;` sufficient to prevent execution of JavaScript from arbitrary HTML?

4 votes
Accepted

"Inverted" asymmetric encryption

2 votes

PGP-encrypted Email or SSL/TLS Webform for Responsible Disclosure Communication?

2 votes

Careers in pentesting vs Development

2 votes

Is there a security difference between remote desktop or VPN?

2 votes

Transmitting Credit Card Information

2 votes
Accepted

Security concerns on API

2 votes

W3af and automated vulnerability scanners vs manual testing

1 vote

Can javascript code served by a server under HTTPS talk to another server under a subdomain with a different certificate?

1 vote

php execution possibility in img src

1 vote

What is the shortest malicious XSS possible?

1 vote
Accepted

Passing session id in query string to maintain state in third party iframe - good practice?

1 vote

Google Authenticator Error on Reboot

1 vote

How to avoid DDoS Attack

1 vote

Screen capture through silent install routed back out port 80

0 votes
Accepted

Preventing Illegal Access to Webservice

0 votes

Clicked link on fake email which appeared to be from friend