-
The exploit remote services action should work as follows.
Input: IP address or hostname
Implementation:
- The red agent will "think" it's invoking the FTPDirTraversal exploit action (because…
-
Related to https://github.com/interledgerjs/ilp-plugin-btp/pull/3, why doesn't the plugin just generate a (safe) random token for you? If you manually supply one in the BTP server URI it could use tha…
-
I believe the salt should be different per record (and stored on the record).
The reason for this is so that if two records have the same password and using the same salt, then the encrypted value …
-
Hashtopolis: 0.12.0 commit 2402201, client version 0.6.0.20
I have a wordlist with about [400,000 words in it](https://raw.githubusercontent.com/dwyl/english-words/master/words_alpha.txt). Task is …
-
```
Just read "Dictionary Attacks 101"
(http://www.codinghorror.com/blog/archives/001206.html) and I think it
would be useful if we implemented something to delay failed login attempts
as described in…
-
One of the important countermeasures against the password dictionary attack is locking an account after number of failed login attempts(account locking login policy). It is not enabled by default. If …
-
You mention in your README [here](https://github.com/Benjamin-Pasternak/Security_project/blob/17418f395f7452092d1d10b5ace0245545aadbe6/README.md?plain=1#L12-L13) that you are using SHA-256 for passwor…
-
In my case it found a key for a sector, which was the same key for fourteen other sectors. The process might be sped up if it first attempts to try any keys it already found during the attack, as thes…
-
Right now, localStorage is not password-protected and unencrypted, which means that a single XSS attack could expose a user's secret key :boom:
We can try to mitigate this by doing something along th…
-
Each one should be a different task.