Collaborate Disseminate
If one uses a storage device (USB stick or SD card) on Windows, then it leaves "System Volume Information" folder in the file system. Would there be a way so a forensic guy could definitely tell on which computer the storage devi… Continue reading Could "System Volume Information" be used to find out on which system the storage was used?
If one formats the same USB stick (or SD card) to FAT32 file system on Windows, or on Linux, or on Android – would there be differences so a forensic guy could definitely tell on which OS or even on which specific machine the USB stick was… Continue reading Are there differences on how storages are formatted between different OS?
If one uses a micro SD card with a card reader on Windows, or on Linux, or on Android – would there be a way so a forensic guy could definitely tell on which computer the flash card was used by examining it?
I know OS can log which devices… Continue reading Which traces leave on a flash card after using it?
If one uses a micro SD card with a card reader on Windows, or on Linux, or on Android, would there be a way to forensically determine on which computer the card reader was used?
I know OS can log which USB devices was connected. As far as … Continue reading What traces are left on a flash card reader after using it?
If one uses a FAT32-formatted USB stick on Windows, Linux, or Android, would there be a way to determine on which computer the USB stick was used by examining the USB stick?
I know OS can log which USB sticks were connected. As far as I kn… Continue reading What traces are left on a USB stick after using it?
I recently saw a very interesting post from a person describing all the steps he would take before running a scan (https://groups.google.com/g/zaproxy-users/c/SMd9OmcVWbE). It caught my attention because I do exactly the same thing he does… Continue reading Doesn’t seem to change _csrf token
I wanted to know if it was a bad thing to have a _csrf token stored in a url. I saw that in a POST request that allows me to upload a file, the _csrf token was displayed in the url. Is it sensitive to store this token in a url. Is there a … Continue reading token _csrf in an url POST
I wanted to know if it was a bad thing to have a _csrf token stored in a url. I saw that in a POST request that allows me to upload a file, the _csrf token was displayed in the url. Is it sensitive to store this token in a url. Is there a … Continue reading token _csrf in an url POST
I want to run an automatic scan on a web application made with Angular and JSNode. On this one I have access to different types of accounts. On ZAP OWASP I can select the POST request, it detects the parameters in the request, I show it wh… Continue reading Auto-login to refresh token in Burp Suite 2
I tested two web applications with OWASP ZAP. Now I want to do the same with Burp Suite so I can compare the results. Here’s my approach.
To launch an attack:
right-click on my target that I previously enriched manually and with the crawl… Continue reading My active scans ends almost instantly on Burp Suite [closed]