Collaborate Disseminate
Is there a tool or technique that can identify all the forms in a website so that we don’t have to visit the entire website manually to look for forms?
Continue reading How to automatically find all forms in a website?
what if I have a website database credential
like this which was found in debug mode open section
-DB_CONNECTION=mysql
-DB_HOST=rm-bp133q688322yc2x64o.mysql.example.com
-DB_PORT=3306
-DB_DATABASE=example
-DB_USERNAME=example_root
-DB_PASSW… Continue reading Env file database credential disclose vulnerability [closed]
I would like to learn how to find the private IP address of anyone connected to a network.
This specific network has a firewall. The only info I have on it is that it blocks ICMP requests (I’m pretty sure ping sends and receives ICMP reque… Continue reading How do I find the IP address of a specific device on the local network? [closed]
Some search engines for Internet-connected devices (like Shodan) can identify an exposed system as a honeypot.
How to know if a system is a honeypot?
Continue reading How to identify a honeypot on the Internet? [closed]
My question is more towards how this is implemented. I mean do they expose apis to each other or store data at a common place to be accessed by others. Please excuse me if it seems too naive.
Continue reading How do mobile apps share details with each other to show customized ads
Being gadgets change per each system and architecture (do they?), how would an attacker be able to determine the offsets of various Return Oriented Programming gadgets, would an attacker first need to determine:
-The operating system?
-The… Continue reading How do attackers determine ROP gadgets remotely?
Our application stored **e.printstacktrace()** in a log file, which is accessible to a specific user group. We need such detailed information for debugging purposes.
As per the security team, they are requesting us to remove such detailed … Continue reading Impact of the System Information Leak
I am creating a website with the CMS MediaWiki and its extension named ContactPage. The website is principally all core and I use only that one extension ContactPage (as one which is not one of the core extensions already shipped with the … Continue reading Is a simple text field a good alternative for phone/website fields if a form’s data isn’t saved in a database?
In order to increase the sources of information in my technology watch, do you have any links to share ? 🙂
Continue reading Does anyone has some RSS feeds on cybersecurity/data protection to share?
I am a novice about digital things (imagine the antonym for "tech savvy").
Can my ISP know my yahoo email address? I have signed in on yahoo more than a million times. Yahoo is https.
Can my ISP know my Yahoo password?