Collaborate Disseminate
If I visit a website with an http address, and the publisher of the material is reputable, is there a security concern?
In other words if I know the publisher of the website is not trying to attack me, do I face a risk from 3rd party malic… Continue reading http site security of reputable source
Consider a web app that allows the user to upload files to a server. While uploading files, the app will generate hashes from the file content and send that hash to the server, along with the actual file content. Server will also generate … Continue reading Is hashing user input data redundant on HTTPS?
It appears that HTTP/2 requires TLS. Which is fine, but why are certificates mandatory?
From what I know you can have TLS without certificates. Certificates just add an extra layer of security. How can we test HTTP 2 on localhost if certif… Continue reading HTTP 2 not possible without certificate? [closed]
Is the -salt option useful when you are doing file encryption?
From what I understand, the salt protects from rainbow table attack, but such tables are used against passwords, which are usually 10-20-30 characters long. If you encrypt file… Continue reading Openssl salt option useless for file encryption? [duplicate]
I need to receive some important documents from another person. It may be important to be able to prove (in justice) which files exactly I received from that person at a specific moment.
My first guess was to ask the person to send me the … Continue reading How to receive large files guaranteeing authenticity, integrity and sending time
Someone is claiming that there was a derogatory comment made on their WordPress website by someone. Their proof is a screenshot of the comment, which shows their work email address, ipv6 address and an alias. People are trying to get them … Continue reading WordPress comment with unverified email [closed]
I want grab some data from response of request and put it in next request post data how to do that? I know that there is postprocess | preprocess features but how they work and how to edit response by these feature?
I tried to work with po… Continue reading Extract data from request response and use it in next request in SQLmap
I want to protect a web app behind some other application.
This application should only let users through after they authenticated. While this is a common use case for Web Application Firewalls it seems. I want the WAF to try out filling u… Continue reading WAF checking username/password before passing to app [closed]
I am studying ethical hacking and I work in the cybersecurity department of a company.
I have been testing a hacking program but some PCs delete this executable as soon as I plug in the USB and some don’t.
I have been trying some things bu… Continue reading Windows Security deletes my USB virus as soon as I plug it in
I’m trying to test a man-in-the-middle attack between two Docker containers.
The local virtual machine has two containers with the same bridging network, I ‘m trying to use burpsuite to intercept their traffic.
I want to use arpspoof to d… Continue reading How to intercept traffic between two Docker containers