Paul Podlipensky
  • Member for 10 years
  • Last seen more than a month ago
Can Cookies Without the Secure Flag be Stolen, even when only accessed via HTTPS?
2 votes

Agree with @symcbean, in addition here is an interesting session fixation technique: It’s been known for a long time that HTTP can set cookies that can be read in HTTPS space because cookies don’...

View answer
Clickjacking: can't browsers just forbid/reject placing transparent elements over frames?
1 votes

Even if browsers disallow overlaying elements (over iframes) and figured out how to deal (when deny) with opacity. There are still clickjacking techniques which can workaround these rules, for example,...

View answer
Microsoft ASMX Web Services Test form available on remote machines
1 votes

There are couple approaches here, first and the most dilettantish way is to modify the page where the information is shown: Page DefaultWsdlHelperGenerator.aspx located in %SYSTEMROOT%\microsoft.net\...

View answer
What are the biggest unsolved problems in IT Security?
0 votes

The most popular attacks are XSS and clickjacking as far as I know.

View answer