Collaborate Disseminate
I have a centralized server and DB that each of my devices polls every ten seconds. The centralized server may respond with a list of “active jobs”, which the devices will then run.
I need to ensure the data sent from the se… Continue reading What should I use to encrypt data between a centralized server and multiple devices running NodeJS?
(I know this topic has been discussed a lot in the past, and I’ve read a lot of threads here as well as OWASP, but have additional questions including the specific CSP listed below.)
We want to allow our users to write each … Continue reading Safe user input HTML in 2019
I am using PHP to create a small script that uploads images to a server.
While going through the PHP documentation, I found a contribution from user CertaiN that gives a very clear example of how this script should look like… Continue reading File upload security with PHP – Header to text/plain
As an assignment for my cybersecurity course, I’ve been tasked to execute a penetration test on a login form which is bound to be vulnerable to SQL Injection and if we can’t penetrate it like that we must run a brute force at… Continue reading Advanced SQL Injection Test
serialize($_POST);
where $_POST is always an array. I have control over one of the array values, e.g. $_POST[‘evil’]. Is the unserialize exploit possible with this kind of structure?
I coulnd’t get it to work with a structure like this… Continue reading Does PHP unserialize work with an object inside a string
I have a vb or a c# file am confused what language anyway here is what we need
from the file as functions (PHP fan :p).
public static object StringParser(object d, object p)
{
ASCIIEncoding asciiencoding = new … Continue reading How to reverse this VB code
I have a web application that should manage a multi client solution. Due to the complexity of the solution, each client would require 4 database to store data.
The portal itself is another database that sits on top.
I now t… Continue reading Create a new database + user with php script — Secure
What, if anything, can be used to provide confidentiality and authenticity guarantees for the storage keys used to store data in a key-value store?
To be clear what I mean by the storage keys – I mean the “key” in “key-value… Continue reading Confidentiality and Authenticity of the Key in a Key-Value Store
Assuming you are authorized to pentest a live website that’s login page is vulnerable to SQL Injection.
Lets say your backpack has only 2 crafted queries by you which is admin’ — and ‘=’ ‘OR’.
Your past experience on a tes… Continue reading SQLI Login Bypass Cheat-sheets Question
Found this on a WordPress server under the filename wp-includes/class-wp-image-editor-fd.php when WordFence picked it up as being an unexpected file.
Link to source is here: https://pastebin.com/DWe4d33K
Very clearly looks … Continue reading What does the attached php malware do?