Skip to main content
Gumbo's user avatar
Gumbo's user avatar
Gumbo's user avatar
Gumbo
  • Member for 13 years, 7 months
  • Last seen more than 7 years ago
15 votes
Accepted

Is stripping out < and > characters an effective way of preventing XSS?

10 votes
Accepted

SQL injection using letters and numbers?

9 votes
Accepted

Understanding boolean based SQL injection

8 votes

Found this weird code in my Wordpress under wp-includes

8 votes

Is HSTS (Strict-Transport-Security header) for HTTP or HTTPS?

8 votes

Is cookie-based XSS exploitable?

6 votes
Accepted

SQL Injection via Unicode

5 votes

How does SQL injection work through URL?

5 votes

XSS attack vector without forward slash?

5 votes

Is converting `<` to `&lt;` sufficient to prevent execution of JavaScript from arbitrary HTML?

5 votes
Accepted

How can PHP unserialize() object injection be used to bypass authentication?

5 votes

How to secure MySQL database usernames and passwords within a php file?

4 votes

Does escaping quotes protect me from SQL injection?

4 votes
Accepted

How To Patch LFI Vulnerability

4 votes

Can pipe | shell | nc > pipe achieve remote shell?

4 votes
Accepted

What types of software vulnerabilities are out there?

3 votes
Accepted

SQL injection filter evasion

3 votes
Accepted

Some queries regarding SQL injection

3 votes

Why do people think that this is bad way to hash passwords?

3 votes

SQL Injection - MSSQL

3 votes

Is PHP unserialize() exploitable without any magic methods?

3 votes

How can I bypass double quotes in a attribute based xss attack

2 votes
Accepted

Calling string functions safely

2 votes

After trying successful SQL injection why the result isn't getting displayed on the webpage?

2 votes

Is testing for SQL injection vulnerabilities still relevant in modern web applications?

2 votes

What are the dangers of sql injection with php?

2 votes

Blind SQL injection: Can you execute a hex string as part of the query?

2 votes

Is + as an alternative to %20 an attack vector?

2 votes

How to guarantee that password is hashed on server-side?

2 votes
Accepted

Is this a bot fishing for security vulnerabilities on my site?