User bernie2436

21 votes

3 answers

24k views

what is the difference between a mac and a digital signiture

asked Mar 6, 2013 at 16:45

19 votes

1 answer

15k views

If SSL encrypts urls, then how are https messages routed?

asked Apr 24, 2013 at 20:11

13 votes

1 answer

11k views

how does a reflection attack work?

asked May 8, 2013 at 21:27

13 votes

1 answer

8k views

What is Virtual Machine Introspection?

asked Apr 12, 2013 at 15:17

11 votes

3 answers

5k views

how can an attacker use a fake temp file to compromise a program?

asked Apr 15, 2013 at 21:38

7 votes

4 answers

28k views

how can you inject malicious code into an innocent-looking URL?

asked Apr 12, 2013 at 16:23

7 votes

2 answers

28k views

what does it mean to be setuid root?

asked May 2, 2012 at 14:33

6 votes

3 answers

15k views

static vs dynamic vs challenge response

asked Feb 28, 2013 at 17:23

6 votes

2 answers

13k views

What's the difference between an application-level and circuit-level gateway?

asked May 8, 2013 at 23:22

5 votes

2 answers

20k views

How do you bruteforce decrypt data if you don't know what you are looking for?

asked Aug 19, 2013 at 11:21

5 votes

4 answers

6k views

Encryption of headers in IPsec tunnel mode

asked Apr 23, 2013 at 21:33

4 votes

1 answer

4k views

what is a security association and how does it relate to ipsec?

asked Apr 23, 2013 at 23:43

4 votes

2 answers

6k views

How could attackers exploit $_SERVER['HTTP_REFERER']

asked May 20, 2014 at 18:18

4 votes

1 answer

2k views

how does a return to system allow an attacker to evade a non-executable stack?

asked Feb 23, 2013 at 20:04

3 votes

2 answers

36k views

Is there a way to find out how long it takes John the Ripper to crack a particular password?

asked Feb 3, 2013 at 3:46

3 votes

1 answer

11k views

how does a sip flood attack work?

asked Mar 13, 2013 at 21:43

1 vote

2 answers

696 views

Determining a version of SSH from penetration testing?

asked Mar 15, 2015 at 14:52

1 vote

1 answer

2k views

are organizations that receive certificates considered "end entities" in a PKI?

asked Apr 24, 2013 at 21:24

Stack Exchange Network

18 Questions

what is the difference between a mac and a digital signiture

If SSL encrypts urls, then how are https messages routed?

how does a reflection attack work?

What is Virtual Machine Introspection?

how can an attacker use a fake temp file to compromise a program?

how can you inject malicious code into an innocent-looking URL?

what does it mean to be setuid root?

static vs dynamic vs challenge response

What's the difference between an application-level and circuit-level gateway?

How do you bruteforce decrypt data if you don't know what you are looking for?

Encryption of headers in IPsec tunnel mode

what is a security association and how does it relate to ipsec?

How could attackers exploit $_SERVER['HTTP_REFERER']

how does a return to system allow an attacker to evade a non-executable stack?

Is there a way to find out how long it takes John the Ripper to crack a particular password?

how does a sip flood attack work?

Determining a version of SSH from penetration testing?

are organizations that receive certificates considered "end entities" in a PKI?