Shritam Bhowmick's user avatar
Shritam Bhowmick's user avatar
Shritam Bhowmick's user avatar
Shritam Bhowmick
  • Member for 7 years, 8 months
  • Last seen more than a month ago
1 vote
1 answer
138 views

Questions to confirm a good standpoint on web app security?

1 vote
0 answers
104 views

Possibility of EMVCO 3DS Authentication Decoding [closed]

1 vote
2 answers
346 views

OpenSource API Security Testing Automation?

1 vote
0 answers
179 views

Application Security - Security Testing Log files?

0 votes
2 answers
151 views

Do Cyber Range(s) detect Business Logic Security Failures?

15 votes
1 answer
5k views

What does the NSA's Recently Leaked "The Equation Group" Files do?

3 votes
2 answers
6k views

How is Insufficient Attack Protection a Definite Threat/Risk to an Organization?

1 vote
0 answers
97 views

Will Gooligan or Gooligan-like near-future variants be capable of targeting Marshmallow users?

10 votes
2 answers
1k views

Techniques to detect & mitigate Crypto-ransomware?

1 vote
2 answers
104 views

How do we handle PDF securely from External to an Internal Network without having to deal with giving away the PDF's?

2 votes
1 answer
203 views

Is it necessary to have security documentations, policies, DRP & BCP's at place in order to execute secure network architectural review?

3 votes
2 answers
4k views

Setting up SFTP at Production Server is a Risk?

1 vote
1 answer
115 views

Ad-Banner Rendering Sites Serve with malicious content - how to respond?

1 vote
0 answers
1k views

Sensitive Information Disclosure via plist on iOS, does this affect security at all?

-1 votes
2 answers
135 views

What could be a suitable solution to single factor authorization worksheet bank password circulation with no control?

2 votes
1 answer
498 views

What's the best way to block all external proxy IP's which could be used for pivot points or as a DDOS Source?

1 vote
1 answer
2k views

Session Expiry due to weblogic.xml for mitigation of cookie hijacking? [closed]

-1 votes
1 answer
345 views

What is one way to verify emails of compromised website if registrations are not validated?

2 votes
1 answer
179 views

Are Ad-hoc security testing beneficial to small business?

4 votes
2 answers
5k views

What is a threat tree in threat modeling?

0 votes
2 answers
301 views

Performing a vulnerability assessment on Windows Tablets?

1 vote
2 answers
2k views

How to set X-FRAME-OPTIONS where 3rd Party frame is required to be loaded?

2 votes
2 answers
242 views

Prevent Web Login with Credentials Exposed

1 vote
1 answer
129 views

Security Assessment v/s Security Engagement Breakdown [closed]

2 votes
1 answer
730 views

How to test for CSRF if there are many hidden fields with different values?

2 votes
1 answer
4k views

Mandatory to implement HTTPOnly if Java Secure Cookies are set to 'true'?

0 votes
1 answer
315 views

Is creating secondary account on Black-Box Pentest Forbidden? [closed]