Collaborate Disseminate
was trying to brute force a random number generated by the ruby method rand which generated a random float number between 0.0 and 1.0 excluding 1.0.
so for example I have this code:
Time.now.to_s.split(//).sort_by {rand}.join
this produce… Continue reading brute forcing a pseudoRandom number Generator
I am using the following line of code to create a reset password code sent to the user in her/his email. when scanned with brakeman to my ruby code, this line of code is catched and describes it as it is vulnerable.
this is the line of cod… Continue reading exploiting the scenario and how to generate a secure reset password token
I want to create a website with password login and social login (e.g. Google only.)
For password login, first I will send a verification email.
I want to prevent pre-hijacking.
For those who do not know pre-hijacking: https://msrc-blog.mic… Continue reading Pre-Hijacking Mitigation
Short
I known
0x02135 gets encrypted to -> NzY4MzY5
0x02136 gets encrypted to -> NzcxMzc0
…etc
I want to know
0x02137 will get encrypted to -> ??? (in same enc. pattern)
Brief
I was testing a … Continue reading Password reset encryption mechanism based on username [duplicate]
It’s a serious bug… but there’s a fix for it, so you know exactly what to do! Continue reading Critical Samba bug could let anyone become Domain Admin – patch now!
Problem
For some reason I forgot the passphrase for my GnuPG signing subkey, but I have my master key stored in a separate device. Is there a way to regain access to my subkey? Or should I replace my old subkey with a new one hoping the ol… Continue reading Reset forgotten subkey password using master key?
Windows 10 offers many ways for you to reset a… Continue reading How to Reset a Windows 10 Password
I am currently implementing new auth schemes for a site, and decided to implement an "I forgot my password" email looking at this guide for inspiration.
My Flow
The flow I have designed is as follows (three phases):
Saving the e… Continue reading Password Recovery email – secure enough?
Is there a workaround to the Windows 10 Hello PIN security login policy?
The PIN is the only credential needed to log in, no password is set, checked with samdump2.
I inherited this computer from a recently deceased family member, Microsof… Continue reading Windows hello pin removal/crack
According to this article Dell Support can help a user to gain access to data after forgetting the HDD password:
Once Dell Support has provided the reset password, you enter this when prompted and then press Ctrl + Enter to complete the p… Continue reading Isn’t "BIOS reset password" a security flaw?