Collaborate Disseminate
For one of our company’s clients, there is a custom portal implementation of our system on a subdomain, on our main product domain (something like client.product.company.com).
This client, happens to be a large Bank, that has provided logo… Continue reading How to White Listing a legitimate site that looks deceptive/phishing to Google? [closed]
A website is returning valid response if IP of the client is in specific range(whitelist). I know that one can spoof IP within that range to bypass that block, but in that case the spoofer will not receive response as it will be sent to th… Continue reading Spoofing IP to get content from website? [duplicate]
I’m getting ready to deploy a website and wanted a second opinion on the security. I have a database containing hashed passwords with correlating usernames to log in with. On top of that, I’m using a google cloud instance that can only be … Continue reading Will whitelisting IP’s and hashed passwords be enough to protect my site?
We developed an application (see https://embeetle.com). To avoid false positives, all our executables and DLLs are code-signed with an Extended Verification Code Signing Certificate from Sectigo. Despite this, our users complain that Norto… Continue reading What is the most efficient way to get new executables whitelisted by Norton? [closed]
I’m doing a pentest on a website and I’ve managed to gain access to the admin’s page that has file upload functionality to an /uploads/ directory. It will only accept html files, per the upload.php source code.
I’ve tried uploading a simpl… Continue reading Help with bypassing file upload whitelist
Sometimes when checking whether requests are cross-origin, applications check whether the origin contains the whitelisted domain. This makes it possible to bypass the white-listing by including the whitelisted value in the subdomain.
E.g. … Continue reading How to get my exploit script served on arbitrary subdomain?
Sometimes when checking whether requests are cross-origin, applications check whether the origin contains the whitelisted domain. This makes it possible to bypass the white-listing by including the whitelisted value in the subdomain.
E.g. … Continue reading How to get my exploit script served on arbitrary subdomain?
Is there any way to check if my email is on a blacklist or whitelist of some organization? Is there an option to check it without sending an email to that organization?
Because of I don’t want to send at first many email that will go direc… Continue reading checking if my email is in blacklist or whitelist of an organization [closed]
I would like to prevent connect residential IP and mobile device and Internet of things IP
Is there a white list of IPv4 and IPv6 address with subnet mask of essential data Center only by countries?
In another words, what are the essential… Continue reading What are the IP address with subnet mask of essential data Center and countries?
I’m writing an app that tries to check if an email address is already known by a company or not, meaning, if an given email address is in the whitelist or the blacklist of the company’s email server. I thought about analyzing the SMTP comm… Continue reading checking if email is in whitelist or blacklist [closed]