Amit Sinha

How can I confirm that embedded iframe cookies are readable from the parent?

First thing to note is that iframe cookies (by default) don't act like they're part of the same origin, unless they are. If the iframe origin (in the src attribute) and the parent origin differ, the iframe will always be sandboxed from the parent. This imposes a bunch of restrictions, like being just unable to access…

SQL Server

Answered Dec 24, 2021 · 0 Views Read answer →

How can I confirm that embedded iframe cookies are readable from the parent?

First thing to note is that iframe cookies (by default) don't act like they're part of the same origin, unless they are. If the iframe origin (in the src attribute) and the parent origin differ, the iframe will always be sandboxed from the parent. This imposes a bunch of restrictions, like being just unable to access…

SQL Server

Answered Dec 24, 2021 · 2.2K Views Read answer →

What are the points that differ siem & soc from each other?

Siem & soc can be explained below : SOC is McDonalds franchise (Service) and SIEM is their Oven (Tool) SOC: A Security Operation Center (SOC) is a centralized function within an organization employing people, processes, and technology to continuously monitor and improve an organization's security posture while…

SQL Server

Answered Dec 23, 2021 · 635 Views Read answer →

Can you give a visible mandatory access control example?

There are a couple of ways that you can see Mandatory Access Control examples - SELinux is installed on a number of linux distributions and can be set in enforcing mode which would show an example. Also Windows Mandatory Integrity Levels are another example. An example of this could be done by getting a Windows 8…

SQL Server

Answered Dec 22, 2021 · 749 Views Read answer →

Can you be tracked on tor once you have stopped using it?

The question 'Can you be tracked on tor ' can be answered simply by saying that Tor is probably one of your best options at being anonymous on the internet. That being said there are always a possibility of being tracked. For instance if you had your internet connection tapped before you started using tor and your…

SQL Server

Answered Dec 21, 2021 · 724 Views Read answer →

Can someone use my IP address for wifi hack torrents i.e hack into a secured wifi to download bit torrent?

Yes, it is possible for someone to use your IP for wifi hack torrents, even if you use WPA2. There are different ways how to do it: The faster is WPS Pixie Dust Attack (within some seconds), the next is Reaver (some hours, also need enabled WPS), and the slowest is the off-line Dictionary attack (days or weeks, or…

SQL Server

Answered Dec 17, 2021 · 762 Views Read answer →

Is the url injection vulnerable or open to exploitation?

What you are witnessing is probably a mitigation for a common vulnerability, OWASP 2013 A10, Unvalidated Redirects and Forwards. If the application simply redirected to the URL found in the JSON, verbatim, you'd have a problem. Basically anyone who tampers with that JSON could send your browser anywhere they want.…

SQL Server

Answered Dec 16, 2021 · 562 Views Read answer →

What are the ways through which I can recover my lost zip file password?

One method that can be used for the Zip File Password Crack is using the fcrackzip CLI tool. It's in most Linux distro repos such as Ubuntu & Fedora/CentOS. Using it is pretty straightforward: $ fcrackzip -b -c a1:$% -l 1-6 -u myencrypted.zip Options -b - brute force -c a1:$% - specifies the character sets to use -l…

SQL Server

Answered Dec 16, 2021 · 1.0K Views Read answer →

What can I do if in Facebook, the "Where You're logged in" IP is not matching the Actual IP?

When a user faces a situation where the Facebook login location is wrong they must understand that there are quite a few apps that interface with FB. In addition to flat out showing the wrong location for an IP, I suspect FB gets confused and maybe shows your location as the most frequently logged in location rather…

SQL Server

Answered Dec 16, 2021 · 872 Views Read answer →

CSRF v/s XSS - Similarities and differences?

In a cross-site request forgery attack, the attacker tries to force/trick you into making a request which you did not intend. This could be sending you a link that makes you involuntarily change your password. A malicious link could look like that: https://security.stackexchange.com/account?new_password=abc123 In a…

SQL Server

Answered Dec 9, 2021 · 1.1K Views Read answer →

Is there any SHA1 cracker?

No, there is no such thing as SHA1 cracker hash. Currently, there are two main issues with using the hash function for security purposes (not specifically password hashing): It is a very fast hash, meaning a brute force attack will run much more quickly than it would if you were to correctly use a slow KDF. The fact…

SQL Server

Answered Dec 8, 2021 · 823 Views Read answer →

Is it not good to use Password with Special Character

Most of the so-called password strength checkers understand neither passwords nor entropy correctly. I have always found something ridiculous that passes as a strong password. Try your name plus your birthdate (with dots or slashes, as your locale requires). There's your upper and lowercase, special characters…

SQL Server

Answered Dec 2, 2021 · 800 Views Read answer →