User DarkLighting

9 votes

Accepted

Writing keylogger and viruses in python

answered Jan 8, 2015 at 13:47

8 votes

Provide subjectAltName to openssl directly on the command line

answered Dec 5, 2014 at 14:08

7 votes

Pentesting file upload functionality

answered Sep 27, 2017 at 21:02

5 votes

Can bad guys record phone conversations without the carrier's knowledge?

answered Dec 2, 2015 at 16:58

5 votes

Why does this Laravel CSRF vulnerability work?

answered Nov 24, 2014 at 17:41

5 votes

Python 2 or 3 for offensive security?

answered Jan 9, 2015 at 17:06

4 votes

Accepted

Can CVE-2015-4852 be exploited against WebLogic servers after a load balancer?

answered Nov 19, 2015 at 17:34

3 votes

Know of any HTTP tarpits/blackholes to use for redirecting malicious traffic?

answered Jan 23, 2015 at 17:13

3 votes

Python security hardening

answered Jan 8, 2015 at 14:49

2 votes

Accepted

Safety in Access Control Matrix and Take-Grant Model

answered Dec 1, 2014 at 15:50

2 votes

What does "hosts-modifier" tag in VirusTotal Intelligence means?

answered Nov 24, 2014 at 19:47

2 votes

Cordova/Phonegap: RefreshToken in localstorage

answered Nov 5, 2014 at 12:50

2 votes

What would you call an attack where authenticated user modifies other users information on web app?

answered Mar 10, 2015 at 22:21

2 votes

Accepted

What can hacker do, if he knows my SALTED password?

answered Mar 12, 2015 at 19:30

2 votes

Accepted

I just found many facebook entries on my registry?

answered Mar 31, 2015 at 20:33

2 votes

LDAP Authentication and Sessions

answered Apr 7, 2015 at 0:11

2 votes

Does http.sys vulnerability affect Windows not running any webservers?

answered Apr 16, 2015 at 22:05

2 votes

MySQL BACKRONYM (CVE-2015-3152) only affects MySQL client?

answered Nov 10, 2015 at 16:05

2 votes

attack on port 80

answered Nov 19, 2015 at 12:30

1 vote

Is there any danger from CSRF if a webservice doesn't impact server data?

answered Nov 10, 2015 at 15:46

1 vote

Decrypting SSL over a mobile network

answered Jan 27, 2015 at 20:33

1 vote

ISAKMP and OSI layer

answered Nov 25, 2014 at 13:07

1 vote

Firewall with packet capture and inspection?

answered Oct 31, 2014 at 14:30

1 vote

Accepted

Do firewall rules have to be symmetric? That is, does a firewall have to block a particular traffic type both inbound and outbound

answered Dec 3, 2014 at 12:52

1 vote

What's the difference between nmap -v and nmap -O?

answered Jan 9, 2015 at 17:01

1 vote

Why do we trust session info over the wire but not an OAuth access token?

answered Dec 9, 2014 at 15:24

1 vote

Trojan name I can't find any information about

answered Dec 12, 2014 at 13:58

1 vote

Example of how the remaining shellshock bash bug CVE-2014-7169 (taviso bug) could be exploited?

answered Dec 17, 2014 at 13:41

1 vote

Accepted

Security concerns about purchased PHP script (web app)

answered Dec 17, 2014 at 14:14

1 vote

Does every hash value have an inverse value?

answered Dec 2, 2015 at 18:33

Stack Exchange Network

42 Answers

Writing keylogger and viruses in python

Provide subjectAltName to openssl directly on the command line

Pentesting file upload functionality

Can bad guys record phone conversations without the carrier's knowledge?

Why does this Laravel CSRF vulnerability work?

Python 2 or 3 for offensive security?

Can CVE-2015-4852 be exploited against WebLogic servers after a load balancer?

Know of any HTTP tarpits/blackholes to use for redirecting malicious traffic?

Python security hardening

Safety in Access Control Matrix and Take-Grant Model

What does "hosts-modifier" tag in VirusTotal Intelligence means?

Cordova/Phonegap: RefreshToken in localstorage

What would you call an attack where authenticated user modifies other users information on web app?

What can hacker do, if he knows my SALTED password?

I just found many facebook entries on my registry?

LDAP Authentication and Sessions

Does http.sys vulnerability affect Windows not running any webservers?

MySQL BACKRONYM (CVE-2015-3152) only affects MySQL client?

attack on port 80

Is there any danger from CSRF if a webservice doesn't impact server data?

Decrypting SSL over a mobile network

ISAKMP and OSI layer

Firewall with packet capture and inspection?

Do firewall rules have to be symmetric? That is, does a firewall have to block a particular traffic type both inbound and outbound

What's the difference between nmap -v and nmap -O?

Why do we trust session info over the wire but not an OAuth access token?

Trojan name I can't find any information about

Example of how the remaining shellshock bash bug CVE-2014-7169 (taviso bug) could be exploited?

Security concerns about purchased PHP script (web app)

Does every hash value have an inverse value?