Collaborate Disseminate
It is common to generate random identifiers to expose through an API instead of using a simple auto incrementing primary key. The reasons are many:
Prevents easy enumeration.
Does not give away order objects were created.
D… Continue reading Should I use a cryptograpically secure random number generator when I generate IDs?
When I am implementing password reset functionality I usually do not include informative messages about whether a user was found, because I have always believed that it can lead to user name enumeration. So instead of showin… Continue reading Informative error messages in password reset functionality?
Recently WebRTC has been in the news as a way to scan internal networks using a regular webpage. We’ve seen some interesting uses of this functionality such as The New York Times scanning your internal network to detect bots. The idea of a random webpage on the internet being able to scan your internal network for live… Read More Continue reading sonar.js – A Framework for Scanning and Exploiting Internal Hosts With a Webpage
Enumeration, enumeration, and even more enumeration is the generic pentesting mantra, but enumeration is worthless if you can’t read the results.
I came across the Windows RPC service, where metasploit returns results such a… Continue reading enumeration and MS DCERPC
Enumeration, enumeration, and even more enumeration is the generic pentesting mantra, but enumeration is worthless if you can’t read the results.
I came across the Windows RPC service, where metasploit returns results such as
msf auxilia… Continue reading enumeration and MS DCERPC
I’m not sure if I’m right here, but I just wanted to know if there is a tool that scans all possible filename combinations on a server and tells you what filenames the server responded to. So it would try something like that:… Continue reading Scan all possible files on server (Brute force Filenames)
I’m not sure if I’m right here, but I just wanted to know if there is a tool that scans all possible filename combinations on a server and tells you what filenames the server responded to. So it would try something like that:… Continue reading Scan all possible files on server (Brute force Filenames)
Being on the company security email list, I get emails with some regularity complaining about email discovery on various forms on my employers website. The reporters are complaining about things like our login form returning a specific mes… Continue reading How to prevent email discovery in forms?
From what I understand it is bad security practice to display informative failed login messages like:
The email you entered does not exist
Instead of
Incorrect email/password combination
because it can lead to username enumerat… Continue reading Is username enumeration practical when the username is an email address?
I am working on a site and I would like to add CAPTCHA to the user registration page to prevent user name enumeration.
I am working with a front end developer who feels pretty strongly that we should not add CAPTCHA to the r… Continue reading How important is CAPTCHA on registration pages?