Author Archives: Dodoytis

How can I write a function that will log a user in an old system without knowing any username or password? [closed]

Posted on by

I’m studying Internet Security and I learned something about code injection in older websites (using the string ‘ OR 1 == 1 // as a username will log in with any password provided); but what if a password related to a username is stored in… Continue reading How can I write a function that will log a user in an old system without knowing any username or password? [closed]→

Are fingerprints scans susceptible to either dictionary attack or pass-the-hash-attack? [closed]

Posted on by

If a user scan his fingerprint, and this fingerprint (let’s say a [x,y] image) is hashed and then sent to a server that stores this hash, is the fingerprint scan susceptible to either dictionary attack or pass-the-hash attack?

Continue reading Are fingerprints scans susceptible to either dictionary attack or pass-the-hash-attack? [closed]→