Collaborate Disseminate
I have a website where a user needs to register with his mobile phone number. It is verified by sending a verification code by SMS, each SMS costs me €0,10.
I have already implemented a check that if a user enters the same phone number twi… Continue reading Server-side solution to protect from bots? [duplicate]
Is there a way in WAF(FortiWeb) to prevent our website to be browsable using its web public ip address?
Continue reading WAF: Access the website via its public ip address [closed]
A website is returning valid response if IP of the client is in specific range(whitelist). I know that one can spoof IP within that range to bypass that block, but in that case the spoofer will not receive response as it will be sent to th… Continue reading Spoofing IP to get content from website? [duplicate]
How do websites check that password hashes saved in the database are the same as passwords hashed and sent by a client?
I know that client-side hashing is not secure.
Placeholder images are important for those in web development if folks want their mockups to look great or appear as if they’ve been thrown together in the last few minutes of the work. And yes, we know the need for placeholder images is not just… Continue reading Best free Placeholder Image Generators Online
I saw a webpage hosted on sites.google.com and went into reading it without much second thought. It was essentially a personal blog with mostly text and little other elements.
I then decided to send the link to virustotal and it returned 1… Continue reading Possible false positive in hybrid analysis sandbox, or am I screwed?
I joined as an intern at this organization as a supposed cyber security consultant and now I’m expected to conduct a vulnerability assessment of the website and prepare a report on that.
Any suggestions as to what tools I can use for free … Continue reading Need help with the process of vulnerability assessing a website [closed]
I’m trying to use a site that’s https but has it’s own certificate, and when I add an exception it still shows it as unsecure, with an exclamation on the padlock and when I click the padlock it says "Connection not secure" and &q… Continue reading HTTPS/TLS security with an invalid certificate
I made a website which among other things allows users to sign up to events. The HTML form is filled out and submitted, which automatically updates a google spreadsheet with all applications. This of course uses IDs and auth keys, which I … Continue reading How do I best share a shared account’s private key?
For example: https://pdfcandy.com/pdf-ocr.html has a limit on how many times I can use a feature per hour, but if I use an incognito tab I can easily bypass that.
But with https://ichigoreader.com/upload (don’t judge I’m trying to translat… Continue reading How does a website know if i’ve visited it before? (and how to bypass that) [closed]