Your browser does not seem to support JavaScript. As a result, your viewing experience will be diminished, and you may not be able to execute some actions.

Please download a browser that supports JavaScript, or enable it if it's disabled (i.e. NoScript).

Vulnerability literature

S
simrah last edited by

Don't tell me where you can read about the different vulnerabilities of the Internet projects? I'm doing a little Django site. I want to solve the problems in advance.
Reply Quote 0
1 Reply Last reply
Laycee last edited by

Well, don't you ask the searchers for a request? Here's the 2008 article: http://blog.artus.ru/ataki-protiv-sajtov/ ♪
Reply Quote 0
1 Reply Last reply

2
Posts

0
Views

Suggested Topics

Get a local user date from the browser at Django
Software Programming • python django • • Analeea

2

0
Votes

2
Posts

0
Views

A

https://docs.djangoproject.com/en/dev/topics/i18n/timezones/ - eng http://djbook.ru/rel1.4/topics/i18n/timezones.html - ru
J

pySerial arduous connection, and python
Software Programming • python arduino • • jules

2

0
Votes

2
Posts

0
Views

D

As the error specifies:Type error: type of operation not supported for /: bytes and integer:rawString is a chain of bytes which you can't divide between an integer. Python never makes implicit conversions of data by principle (such as his own Zen prays; "explicit better than implied").You must be the one who explicitly makes the conversion of the bytes chain (which in this case represents a floatthe corresponding type. On the other hand, the conditionalif rawString == 400: He's never going to meet for the simple reason rawString It's kind of bytes and 400 It's a literal int, are two objects of different kind not comparable to each other. You must make the comparison with porcentaje or with conversion to float/int of rawString.
B

How do you set up a pillow library?
Software Programming • python django pillow pil • • baileigh

2

0
Votes

2
Posts

0
Views

Try the pillow with http://www.lfd.uci.edu/~gohlke/pythonlibs/ Pages, it's probably already on.
K

ASP literature. NET
Software Programming • asp.net • • Kadir

2

0
Votes

2
Posts

0
Views

N

http://metanit.com/sharp/mvc.php http://smarly.net/pro-asp-net-mvc-4 Front (HTML, CSS, JavaScript) is the same as everywhere.In Freeman's book, the first part of it makes an Internet store. A lot of important and useful work is still under discussion (Dependency Injection, Unit-testing, work on the Entity Framework database).
B

Formulation of values from sqlite tables in python (pytelegrambotapi)
Software Programming • python sqlite telegram bot telegram pytelegrambotapi • • baileigh

2

0
Votes

2
Posts

0
Views

The solution to the problem has been helpful. https://ru.stackoverflow.com/users/201445/gil9red ! Fetchone shall be called upon to return one value, ID.There was a sql-request error, below the corrected version:"""Получаем user_id""" def get_id(self, user_id): with self.connection: return self.cursor.execute("SELECT `user_id` FROM `subscriptions` WHERE `user_id` = ?", (user_id,)).fetchone()[0]
D

Literature for the compilation of templates for regular expressions
Software Programming • php • • Duquan

2

0
Votes

2
Posts

0
Views

B

Download Jeffrey Friddle's 3rd edition, "Regular expressions." It reveals all the subtleness of this powerful tool.
Bote telegrams, no stricker from the user.
Software Programming • python telegram bot telebot • • Analeea

2

0
Votes

2
Posts

0
Views

K

We need to write. message.sticker.file_id, it's id styker.I think, of course, 'CAACAgIAAxkBAAEBFJpfF1S4E2A_-_LenXaARO2xLf4CHQACz3IAAp7OCwAB1R6GX4tzWG0aBA' a little weird id, but you can easily re-examine the right id:@bot.message_handler(content_types=['sticker']) def send_sticker(message): print(message.sticker.file_id) Also, if you're interested, message.sticker - it's a dictionary.{'file_id': 'CAACAgQAAxkBAAM0XyloC6nx7N2XgZOzPdvrgvBcOywAAt4CAAJSOZMG91SyalTt7u8aBA', 'width': 512, 'height': 371, 'thumb': {'file_size': 2902, 'height': 93, 'width': 128, 'file_id': 'AAMCBAADGQEAAzRfKWgLqfHs3ZeBk7M92-uC8Fw7LAAC3gIAAlI5kwb3VLJqVO3u7yeUYTAABAEAB20AA7QkAAIaBA'}, 'emoji': '�', ' set_name': 'CatPusheen', 'mask_position': None, 'file_size': 14262, 'is_animated': False}
A

Where do you find vulnerability to Joomla?
Software Programming • joomla cms vulnerable • • Amritpal

2

0
Votes

2
Posts

0
Views

J

I think it's usually a vulnerability search. https://nvd.nist.gov/ or https://cve.mitre.org/ There's a search, and Jomla has a lot of CVEs.And then your experience has to show how to put them on your website.But in my mind, usually with these tasks, they use ready scanners like Nessus. He's really far from free, but you can take his home version, which, like, can be used as a home, it's a license to read, but it's like that.Or you can use it. https://cirt.net/nikto2 - ready web scanner - vulnerable
G

JavaFX Literature
Software Programming • java javafx gui • • gionna

2

0
Votes

2
Posts

0
Views

In Russian, I've seen several books. JavaFXand they're on the Internet. As a guide to Russian, I often use Timur Mashkin's book. http://www.ozon.ru/context/detail/id/7968121/?partner=ilja_blog " It has all the information needed on the components and their processing through fxcs, animation, video and audio, and of course on FXML. I'd also pay attention to this book in Russian. http://www.ozon.ru/context/detail/id/30196193/?partner=ilja_blog 2015 to keep abreast of all the innovations that have happened to Java in the past few years. If English isn't too bad, there's a book from Oracle http://www.ozon.ru/context/detail/id/24285073/?partner=ilja_blog And 2013 is true in English, but the relevance of her is higher than Timur Machine's book. Yes and http://www.ozon.ru/context/detail/id/27572803/?partner=ilja_blog Publication of this book, 2014.Look. https://www.google.ru/webhp?sourceid=chrome-instant&ion=1&espv=2&es_th=1&ie=UTF-8#q=javafx+books&newwindow=1&tbm=bks There's a list of google books, there's a good number of books, but really English. In addition to the books, of course, use the official Oracle's certificate, sometimes there's everything you need to find, or there's a question to ask. Because the technology is quite new and JavaFX literature It is rapidly outdated, but the foundation does not change much, at least knowing it will be easier to adapt to new realities.Good luck training!
Assistance in the selection of literature
Software Programming • javascript html cs frontend • • Marcee

2

0
Votes

2
Posts

0
Views

T

Canals: Sorax, WebDesign Master, Gloacademy.Books:Juan Diego Goshe - HTML5 for professionalsB. Frein - HTML5 and CSS3. Development of sites for any browsers and devicesDevelop dynamic websites with PHP, MySQL, javascript, CSS and HTML5Redmond E., Wilson D. Seven databases for seven weeks.Yitzk Ben-Gan - T-SQL frameworkIsik Ben-Gan - Microsoft SQL Server 2012. Request creation. Microsoft courseCrocford is JavaScript. Strong partiesDavid Flanagan is JavaScript. Detailed guidanceBurb Bebo, Jeguda Katz - jQuery. Detailed guidance on advanced JavaScript
T

Visual Fox Pro literature
Software Programming • database books • • terrea

2

0
Votes

2
Posts

0
Views

A

Maybe some of this to you. http://free-book.at.ua/news/1-0-19 ♪
E

take spicy value of a string type text [PYTHON]
Software Programming • python python 3. x • • emerson

2

0
Votes

2
Posts

0
Views

B

Even if I haven't put enough information, I'm going to show you how easy it is to do that with https://www.crummy.com/software/BeautifulSoup/bs4/doc/ .BeautifulSoup is a webscrapping-focused library in the search for HTML and XML data. Use is simple. In case, after installing (pip install bs4), you import in bs4 the main class BeautifulSoup and instantiate it with a html and a preference parser (like https://docs.python.org/3/library/html.parser.html or https://lxml.de/ ).To find a specific tag, indicate the minimum number of information to find that single tag instead of several of the same type.Translating to a ready code would be:from bs4 import BeautifulSoup textoHTML = '<html><head></head><body><input aria-required="true" autocomplete="given-name" class="give-input required" id="descricao" name="descricao" placeholder="First Name" required="" type="text" value="Roberta Bellamy"/></body></html>' #SEU HTML ARQUI soup = BeautifulSoup(textoHTML, 'html.parser') print(soup.find("input", class_=['given-input', 'required'], id='descricao')) IMPRIME: <input aria-required="true" autocomplete="given-name" class="give-input required" id="descricao" name="descricao" placeholder="First Name" required="" type="text" value="Roberta Bellamy"/>
S

Objective-C, Cocoa Touch - literature/manuals/totorials
Software Programming • ios objective c books • • simrah

2

0
Votes

2
Posts

0
Views

T

One good resource was noted for itself (other than documentation): http://www.extpost.com/category/objc/ I think you'll be interested in reading. And read the offs, the records, it's great if the problems with the foreign language are translated, it's at least faster and the information is always fresh.Decided to finish a few references, I think you and a lot of people need to:Официальная документация: //iOS https://developer.apple.com/technologies/ios/cocoa-touch.html https://developer.apple.com/library/ios/documentation/cocoa/reference/foundation/ObjC_classic/_index.html https://developer.apple.com/library/ios/documentation/uikit/reference/UIKit_Framework/_index.html https://developer.apple.com/library/ios/documentation/GameKit/Reference/GameKit_Collection/_index.html https://developer.apple.com/library/ios/documentation/UserExperience/Reference/iAd_ReferenceCollection/_index.html https://developer.apple.com/library/ios/documentation/MapKit/Reference/MapKit_Framework_Reference/_index.html https://developer.apple.com/library/ios/documentation/cocoa/Reference/CoreData_ObjC/_index.html //Mac OS https://developer.apple.com/technologies/mac/cocoa.html https://developer.apple.com/library/mac/documentation/Cocoa/Reference/Foundation/ObjC_classic/_index.html https://developer.apple.com/library/mac/documentation/Cocoa/Reference/ApplicationKit/ObjC_classic/_index.html https://developer.apple.com/library/mac/documentation/CoreFOundation/Reference/CoreFoundation_Collection/_index.html That's not all, but there's something to read about. A few more references to yourself: http://www.youtube.com/playlist?list=PLDDC57722482A7C4E http://www.youtube.com/user/GeekyLemon/videos http://www.youtube.com/user/iffytheperfect1983/videos http://www.youtube.com/user/1plahoff/videos http://macbug.ru http://www.imaladec.com http://touchdev.ru http://osxdev.ru http://macsoj.wordpress.com http://besimple.ru http://podcast.ipromix.de http://appleinsider.ru/search?cx=partner-pub-6968868674851935%3A49rfe2v5oqx&cof=FORID%3A11&ie=UTF-8&q=реалити+шоу+научи+меня+xcode&sa.x=-1016&sa.y=-191 http://www.raywenderlich.com https://www.cocoacontrols.com/platforms/ios/controls?page=6&sort=rating http://habrahabr.ru/post/131128/ http://habrahabr.ru/post/144136/ http://habrahabr.ru/post/167981/ http://habrahabr.ru/post/149090/ http://habrahabr.ru/post/107126/ http://habrahabr.ru/post/192062/ http://habrahabr.ru/post/191334/ http://habrahabr.ru/hub/ios_dev/ http://www.intuit.ru/studies/courses/4811/1058/info http://hexlet.org/course/osx_dev/ The list of references is small, but I think you're gonna need some more intrusive references, and I'm gonna finish this.
E

Using Hash, without adding a Salt chain to the password, can make the password vulnerable?
Software Programming • hash salt sandles • • emran

2

0
Votes

2
Posts

0
Views

M

There is no point where it is totally safe to use an algorithm hash.A problem is the dictionary attack on top of ♪. Services https://crackstation.net/ can easily break a hash for example, SHA256. Restricting that the user uses complex passwords to assign this (with characters, numbers, capital letters...) may not be as easy as most security issues come by human factors such as phishing, which achieves a 45% conversion rate https://returnpath.com/pt-br/blog/gestao-de-risco-e-os-desafios-da-seguranca-no-varejo-online/ . Which gives you greater responsibility at security time. Another problem when using SHA256, leaves vulnerable to attack by https://secure.php.net/manual/pt_BR/faq.passwords.php#faq.passwords.fasthash (this is true for outdated algorithms like MD5 and SHA1). Therefore, it is 'false' the idea that to use Jump leaves the algorithm safer by itself (in the sense that there is a safer option). In the case of your problem, a SQL injection could reveal database information for comparison of Jump.That doesn't mean there are no options. Some of them:1) Force a registry of complex passwords. If the scope of the application allow.2) Enter token inside the hash (if it is not possible the option 1).(3) Use https://en.wikipedia.org/wiki/Bcrypt . The bluefish algorithm allows parameter creation of processing to increase hash complexity.
A

Method returns None by calling it from another script
Software Programming • python django ldap • • Anderson

2

0
Votes

2
Posts

0
Views

Here's a simple explanation:print('inicio script') def saludo(): print('hola mundo') if name == 'main': print('inicio programa') saludo() If this script is executed in direct mode, we get:inicio script inicio programa hola mundo But when starting it from another script with a import, we get:inicio script This because the condition of if name == 'main': only meets when you start the script directly. It is usually used for the case cited in my example, in which you have a function and you want it executed when you run the script directly, but when importing it from a second script you want to control the moment of execution of the function and can do something like the following:import test hago cosas elijo el momento adecuado para ejecutar la funcion saludo test.saludo() Well, if your script didn't have the condition if name == 'main':, the salutation function would run just by importing the script and you couldn't help it.

Vulnerability literature

Suggested Topics

Get a local user date from the browser at Django Software Programming • python django • • Analeea

pySerial arduous connection, and python Software Programming • python arduino • • jules

How do you set up a pillow library? Software Programming • python django pillow pil • • baileigh

ASP literature. NET Software Programming • asp.net • • Kadir

Formulation of values from sqlite tables in python (pytelegrambotapi) Software Programming • python sqlite telegram bot telegram pytelegrambotapi • • baileigh

Literature for the compilation of templates for regular expressions Software Programming • php • • Duquan

Bote telegrams, no stricker from the user. Software Programming • python telegram bot telebot • • Analeea

Where do you find vulnerability to Joomla? Software Programming • joomla cms vulnerable • • Amritpal

JavaFX Literature Software Programming • java javafx gui • • gionna

Assistance in the selection of literature Software Programming • javascript html cs frontend • • Marcee

Visual Fox Pro literature Software Programming • database books • • terrea

take spicy value of a string type text [PYTHON] Software Programming • python python 3. x • • emerson

Objective-C, Cocoa Touch - literature/manuals/totorials Software Programming • ios objective c books • • simrah

Using Hash, without adding a Salt chain to the password, can make the password vulnerable? Software Programming • hash salt sandles • • emran

Method returns None by calling it from another script Software Programming • python django ldap • • Anderson

Get a local user date from the browser at Django
Software Programming • python django • • Analeea

pySerial arduous connection, and python
Software Programming • python arduino • • jules

How do you set up a pillow library?
Software Programming • python django pillow pil • • baileigh

ASP literature. NET
Software Programming • asp.net • • Kadir

Formulation of values from sqlite tables in python (pytelegrambotapi)
Software Programming • python sqlite telegram bot telegram pytelegrambotapi • • baileigh

Literature for the compilation of templates for regular expressions
Software Programming • php • • Duquan

Bote telegrams, no stricker from the user.
Software Programming • python telegram bot telebot • • Analeea

Where do you find vulnerability to Joomla?
Software Programming • joomla cms vulnerable • • Amritpal

JavaFX Literature
Software Programming • java javafx gui • • gionna

Assistance in the selection of literature
Software Programming • javascript html cs frontend • • Marcee

Visual Fox Pro literature
Software Programming • database books • • terrea

take spicy value of a string type text [PYTHON]
Software Programming • python python 3. x • • emerson

Objective-C, Cocoa Touch - literature/manuals/totorials
Software Programming • ios objective c books • • simrah

Using Hash, without adding a Salt chain to the password, can make the password vulnerable?
Software Programming • hash salt sandles • • emran

Method returns None by calling it from another script
Software Programming • python django ldap • • Anderson