User SilverlightFox

30 votes

4 answers

9k views

How secure is Snowden's MargaretThatcheris110%SEXY password?

asked Jun 30, 2015 at 10:31

15 votes

3 answers

2k views

Is Gmail showing images by default a good idea for privacy?

asked Dec 13, 2013 at 9:48

13 votes

2 answers

7k views

Custom Metasploit payload with UAC bypass

asked Jul 9, 2015 at 13:56

11 votes

4 answers

2k views

What are the drawbacks of login request throttling?

asked Jun 11, 2015 at 14:07

10 votes

2 answers

344 views

What is a Poison Dart attack?

asked Jan 6, 2016 at 11:23

9 votes

9 answers

933 views

Which factors should you take into account when deciding whether users should be informed of a penetration test?

asked Jun 11, 2015 at 14:48

8 votes

1 answer

1k views

What is the name for this type of URL attack?

asked Feb 12, 2015 at 8:57

6 votes

1 answer

316 views

Why doesn't PCI DSS requirement 4.1 match the SAQ?

asked Sep 5, 2016 at 10:46

5 votes

1 answer

568 views

What is an Origin Error Attack?

asked Jan 6, 2016 at 11:36

5 votes

1 answer

2k views

Automatically enumerate missing patches on penetration test

asked Oct 2, 2015 at 14:12

5 votes

1 answer

1k views

How can a trusted intranet certificate be issued if they are being phased out?

asked Jan 19, 2014 at 13:25

5 votes

4 answers

3k views

Effectiveness of Interactive Application Security Testing

asked Apr 4, 2014 at 13:23

5 votes

3 answers

13k views

Proxychains + nmap = segmentation fault

asked Jul 25, 2014 at 16:00

5 votes

1 answer

586 views

How secure is CertiVox M-PIN?

asked May 29, 2015 at 10:42

4 votes

1 answer

3k views

Generate wordlist using non-default rules (John The Ripper)

asked Nov 16, 2016 at 20:51

4 votes

2 answers

364 views

PCI service provider and separation

asked Nov 12, 2014 at 9:53

4 votes

2 answers

1k views

The effect of hidden or spoofed service banners on vulnerability scanners

asked Dec 2, 2014 at 12:23

4 votes

3 answers

15k views

Setup of Kali Linux for reverse shell connections over the internet

asked Mar 17, 2014 at 14:40

4 votes

1 answer

205 views

ASV scan with reverse proxy

asked Dec 17, 2015 at 9:10

4 votes

3 answers

902 views

Should LastPass use the YubiKey public identifier as a secret key?

asked Jan 6, 2015 at 15:56

3 votes

1 answer

4k views

Linux responds to ARP requests for other interfaces - could this be a security vulnerability?

asked Feb 3, 2016 at 18:33

3 votes

2 answers

3k views

How to ensure an email address is not free webmail or ISP address?

asked Dec 13, 2013 at 14:38

3 votes

1 answer

2k views

Access-Control-Allow-Origin wihout AJAX

asked Nov 6, 2013 at 10:42

3 votes

4 answers

5k views

Security risk of allowing ICMP "destination unreachable" packets on AWS

asked Dec 19, 2014 at 11:28

3 votes

1 answer

517 views

Handling unencrypted HTTP data for a PCI compliant system - in scope for PCI DSS v3 but not v2?

asked Sep 9, 2014 at 11:11

2 votes

1 answer

856 views

Code deployment in PCI CDE

asked Oct 24, 2014 at 16:20

2 votes

2 answers

167 views

Secure alerting for a monitored web application

asked Aug 27, 2014 at 10:59

2 votes

1 answer

205 views

For PCI compliance, does every request need to be logged regardless of how it affects system performance?

asked Dec 15, 2014 at 15:26

2 votes

2 answers

348 views

How safe is Money Toolkit?

asked Nov 12, 2013 at 10:23

2 votes

0 answers

364 views

Clarification on DH groups

asked Aug 24, 2016 at 13:49

Stack Exchange Network

44 Questions

How secure is Snowden's MargaretThatcheris110%SEXY password?

Is Gmail showing images by default a good idea for privacy?

Custom Metasploit payload with UAC bypass

What are the drawbacks of login request throttling?

What is a Poison Dart attack?

Which factors should you take into account when deciding whether users should be informed of a penetration test?

What is the name for this type of URL attack?

Why doesn't PCI DSS requirement 4.1 match the SAQ?

What is an Origin Error Attack?

Automatically enumerate missing patches on penetration test

How can a trusted intranet certificate be issued if they are being phased out?

Effectiveness of Interactive Application Security Testing

Proxychains + nmap = segmentation fault

How secure is CertiVox M-PIN?

Generate wordlist using non-default rules (John The Ripper)

PCI service provider and separation

The effect of hidden or spoofed service banners on vulnerability scanners

Setup of Kali Linux for reverse shell connections over the internet

ASV scan with reverse proxy

Should LastPass use the YubiKey public identifier as a secret key?

Linux responds to ARP requests for other interfaces - could this be a security vulnerability?

How to ensure an email address is not free webmail or ISP address?

Access-Control-Allow-Origin wihout AJAX

Security risk of allowing ICMP "destination unreachable" packets on AWS

Handling unencrypted HTTP data for a PCI compliant system - in scope for PCI DSS v3 but not v2?

Code deployment in PCI CDE

Secure alerting for a monitored web application

For PCI compliance, does every request need to be logged regardless of how it affects system performance?

How safe is Money Toolkit?

Clarification on DH groups