Collaborate Disseminate
I am working through a report of an automated vulnerability scanner. One Item is
Web Server Misconfiguration: Insecure Content-Type Setting ( 11359 )
It’s about not returning the character-set for a given HTML page like so, for examp… Continue reading Security Report about "Insecure Content-Type Setting": Does this apply to CSS and JavaScript as well?
I am learning about web security, but I’m very confused about URL Encoding.
On PortSwigger, I learned that the URL http://127.0.0.1/admin
can be written as http://127.0.0.1/%2561dmin
by encoding a as %61 and then encoding % again, thus ma… Continue reading How does URL Encoding work?
In analyzing the LUKS header on an encrypted volume, the cipher-name field shows a single-character = ‘@’. What does that mean?
The LUKS On-Disk Format Specification originally published by Clemens Fruhwirth in 2005 clearly defines the en… Continue reading What is a LUKS cipher-name "@"?
Are there any character encoding mixup attacks that are still a threat in 2020? Such as with XSS or SQL injection being the most obvious.
Some examples:
Tricking a browser to display a page in UTF-7 despite XSS filtering was done in UT… Continue reading XSS / SQL Injection Attacks with Character Encoding Mixups
Before encryption
1581255707647
After encryption
eb01f48145ff35dfed2089ba8c684dd659b36f555d9bdc2775a74a4b6724ec4c
Can anyone help me to find the encryption method
Does anyone have tips/suggestions to decode this strange lookalike of base64?:
mvj03Z/F98Sf25nLw8L/5t3MyNvaxMn72prZ6N7YnMKezPz33tTByd3Uyejd1PzLns/B+9qa4MvDwv/72uvjycOb3cme2P/ow+GZ9A==
The strange thing it’s not base64 because it has slas… Continue reading Base64 encoding [duplicate]
I am not that familiar with security and malware analysis, but I know it is theoretically possible to embed a malware into files like video, audio …
Say that someone managed to embed a malware into an mp4 file and send it via gmail.
I… Continue reading How to check if an mp4 file contains malware?
By giving a look to my php emailer log file I noticed some strange strings that seemed to me to be encoded base64. But after decode them nothing meaningful came out. so I suppose there is something else to understand in order to decode.
I … Continue reading A potential encoded string in my website : how decode it?
Today I discover a encryption method
Which
0 = 35
1 = 34
2 = 37
3 = 36
4 = 31
5 = 30
6 = 33
7 = 32
8 = 3d
9 = 3c
It’s the encode of number 1 to 0 for the method
Can you please help me to find the name of the method?
I’m trying to learn and push myself into the world of Cybersecurity, so I am still fairly new to concepts. I came across this encryption:
T25llFZlaGljbGUgQXQgQSBUaW1l
My original observation was that this was in Base36. I plugged it into… Continue reading Need a push in the right direction with this encoding I found [Not Homework] [duplicate]