I have just stumbled upon what is a very helpful flag in chrome (for developers):
chrome://flags/#allow-insecure-localhost
The flag is described as:
Allow invalid certificates for resources loaded from localhost.
Allows requests to localh…
I’m checking the options to harden my web app by setting the appropriate HTTP headers.
Besides the Content Security Policy (CSP) there are two another approaches: Document Policy and Permissions-Policy (Feature-Policy).
I’ve checked the W…
So I hope I’m phrasing this right. I’m trying to exploit a piece of c code which you can see below.
#include <stdlib.h>
#include <unistd.h>
#include <stdio.h>
#include <string.h>
int user_age;
void secretClub(){
…
Recently i wanted to play a bit with TCP/UDP networking (and touch some custom HTTP server impl) on C# and found out that i’m getting requests from totally unknown dudes, such as this one:
FROM: [::ffff:149.129.139.48]:52306
[ANS]
PO…
I have two SSDs in my laptop. one is SATA 500GB and the other is M.2 SATA 250 GB. I used the following steps for both to securly erase them so that I can sell the laptop:
unfreeze the drives:
sudo systemctl suspend
Set a User Password: h…
I’ve studying and practicing different approach to SQLi filter bypass and I faced a challenge. What if the WAF filters look for specific strings rather than SQL keywords?
Example:
Filter: /UNION/
SQLi: UnIoN
Filter: /UNION/i
SQLi: un/**/i…
Everyone knows of the common cybersecurity tips to be careful when you open links in an email. But every day we look for something on the Internet, clicking links which the search engine shows us, and we do not have the same fear. Why are …
I want to make it impractical to link the users to their sensitive data without their passwords – even with a full access to the database.
Furthermore, if a user has multiple pieces of sensitive data, I also want to avoid linking the diffe…
My school supposedly cuts everyone’s connection at exactly 12:00am. Although the network is still there, Windows shows the "no internet" sign when connecting to the network.
However, the strange thing I have been noticing is that…
ssh-keygen has the following options for a key type (-t):
dsa | ecdsa | ecdsa-sk | ed25519 | ed25519-sk | rsa
I am not familiar with the -sk notation and it’s not explained in the man page.
What does it mean?
