Collaborate Disseminate
I want to increase the maximum number of HTTP parameters (maxParameterCount) from 10000 to 20000 in the Tomcat configuration:
https://tomcat.apache.org/tomcat-8.5-doc/config/http.html
What is the security risks of increasin… Continue reading What is the security risks of increasing the maximum number of HTTP parameter?
We use Web Application deployed on a CentOS server.
Can the attack will be performed via a browser?
Or the attacker need a physical access to the CentOS server?
I cannot understand the attack vector from the RHEL: https://a… Continue reading What is the attack vector for CVE-2018-3639 Speculative Store Bypass?
When base64 encoding a certificate in PEM format (for transprting it within XML), the content is first converted to binary and then base64 encoded. Are there any other options? E.g. do I have to specify a character set or is … Continue reading Base64 encoding PEM
I’m setting up a system where devices are going to be tested right after production. Each device has an individually given AES-key, which must be known in order to communicate. Those individual keys are delivered by the devic… Continue reading How can I improve security in a production environment?
i was just wondering what happens in internet traffic when virus steals private data – can EVERYTHING (including messages im typing and sending using https) be seen by ISP or somebody that sees our internet traffic?
I’m trying to use Hashcat to crack a file I forgot the password to but I need hashes from the file to test against. How do I extract hashes if I can’t open it at all? I encrypted the file with VeraCrypt using the AES encrypti… Continue reading How do I extract a hash from an encrypted VeraCrypt file using SHA-512
This question already has an answer here:
Why is using salt more secure?
4 answers
So if you had a stolen password databa… Continue reading How does salt make a password secure against dictionary attacks [duplicate]
What is the list of the CVE resolved in OpenJDK build that published in https://github.com/ojdkbuild/ojdkbuild/releases?
For example in this build:
https://github.com/ojdkbuild/ojdkbuild/releases/tag/1.8.0.151-1
Alternative… Continue reading List of CVE resolved in OpenJDK build
What is the list of the CVE resolved in OpenJDK build that published in https://github.com/ojdkbuild/ojdkbuild/releases?
For example in this build:
https://github.com/ojdkbuild/ojdkbuild/releases/tag/1.8.0.151-1
Alternative… Continue reading List of CVE resolved in OpenJDK build
I can capture using YAF and SiLK nmap (TCP) on my IP, however, I am unable to capture any UDP “flow.”
Isn’t YAF and SiLK suppose to be able to at least assign the first UDP packet as part of a flow? Is there a specific para… Continue reading YAF and SiLK fail to capture UDP flow