I’m trying to understand how using a crypto co-processor chip can securely decrypt a disk without someone getting the decryption key by sniffing the bus it communicates on or loading the disk onto another computer and viewing the contents …
I want to set up a MITM-scenario as an exercise for myself. My setup looks like this:
Internet <——–> Laptop <———-> Client
At this stage I just want to route the traffic from my AP to the internet, without monitoring …
I am trying to configure ZAP on an Android device using a hotspot connection opened on another Android device.
I followed the setup instructions available here: https://security.secure.force.com/security/tools/webapp/zapandroidsetup I als…
Somewhat related to Is malware or screen capture possible with iMac as external display?, where we investigate the possibility of a DMA attack through DisplayPort, nowadays, many machines don’t even have a dedicated port for connecting an …
IDA Pro and the Hex Rays decompiler are a core part of any toolkit
for reverse engineering and vulnerability research. In a previous blog
post we discussed how the Hex-Rays
API can be used to solve small, well-defined problems commonly
seen as …
IDA Pro and the Hex Rays decompiler are a core part of any toolkit
for reverse engineering and vulnerability research. In a previous blog
post we discussed how the Hex-Rays
API can be used to solve small, well-defined problems commonly
seen as …
I study web attacks. I find that it is possible to submit a form with HTML from another origin into the victim server. But if I use AJAX then I get a CORS error. Is this the expected behavior? If yes, why? The victim has not set any “Allow…
When deriving a private key from a password, will the resulting secret key be any weaker if the user email is included in the function input? Meaning, user email concatenated with the user password.
I’m using scrypt for key derivation, wi…
I have a website where a registered user can exchange any number of offline messages with a guest. The guest only has to enter his e-mail address and should not have to create an account. The messages should be stored encrypted on the serv…
I have a webpage that blindly removes < and > as hardcoded rule. I know XSS doesn’t always need < and > since it is not needed in HTML attribute and javascript contexts.
But is it possible to carry out XSS in HTML context with…
