passwords

Detecting people sharing login / account information for a website

╄→尐↘猪︶ㄣ 提交于 2020-05-10 03:24:18
问题 I have a website that contains a secure area accessible by logging in with account info. Within the secure area, I have some expensive IP. I have been finding that people are sharing their passwords with other people. Are there any existing technologies / solutions / methods that I can implement to detect fraud patterns? Thanks in advance for the help. 回答1: check geographical region. If within some timeframe multiple logins from regions geographically far apart log in, then you know those

Is there any way to generate password protected XLSX in NodeJS?

扶醉桌前 提交于 2020-05-09 06:11:07
问题 I am looking for an npm package or any other workaround to be able to generate xlsx file with password. I do not want to protect the sheet(s) or cell(s)... I want the whole file password protected. I found few quite good packages (excel4node, exceljs..) but none of them able to do what I need. Any suggestion appreciated 回答1: You can use the xlsx-populate module to do this, for example: const XlsxPopulate = require('xlsx-populate'); XlsxPopulate.fromBlankAsync().then(workbook => { workbook

What kind of JavaScript protection is usually applied on fields to prevent value injection?

若如初见. 提交于 2020-04-17 23:30:35
问题 There is a certain website with a certain login form which includes two fields; username and password . I can successfully inject data with vanilla JavaScript to the first field: document.querySelector("#username").value = "USERNAME"; But when I try to inject a password: document.querySelector("#password").value = "PASSWORD"; I get an error: VM1766:1 Uncaught TypeError: Cannot set property 'value' of null at :1:45 My problem I double checked if the field exists as is and it is indeed existing

Random Password Generator Javascript not working

余生长醉 提交于 2020-04-11 18:33:09
问题 I'm trying to create a random password generator that asks for the user input on size 8-128 characters and then confirms the use of uppercase, lowercase, symbols, and or numbers. I'm trying to get the password to generate and print in the text area and i know i'm missing something but I'm not exactly sure what. I apologize for the rough code. I'm just starting out. var plength = prompt("How many characters would you like your password to be?") if (plength < 8 || plength > 128){ alert("Length

Require old password to make new password

百般思念 提交于 2020-04-08 05:50:42
问题 Right now every time I change anything in user/edit the form requires the user to set a new password. I would like for it to require the current password (how can I ask for current password?) only incase a new password is entered. How can I achieve this, thanks a lot for this. <%= form_for(@user, :html => {:multipart => true}) do |f| %> <%= render 'shared/error_messages', object: f.object %> <%= f.text_field :name, placeholder: :name %> <%= f.text_field :email, placeholder: :email %> <%= f

how can I get the String from hashCode

喜欢而已 提交于 2020-04-07 05:59:50
问题 I am working on a project where I had got my password field value's hashCode and stored that hashCode in DB for security purposes.Now I want to recover the password from the hashCode.How can I do it? Is it possible to get the String value back from the hashCode ?If it is not, can anyone suggest me a better way to store my password in anyother format? 回答1: You know that several objects can have same hash(), as it mentioned in java doc for Object.hashCode() It is not required that if two

how can I get the String from hashCode

一曲冷凌霜 提交于 2020-04-07 05:59:10
问题 I am working on a project where I had got my password field value's hashCode and stored that hashCode in DB for security purposes.Now I want to recover the password from the hashCode.How can I do it? Is it possible to get the String value back from the hashCode ?If it is not, can anyone suggest me a better way to store my password in anyother format? 回答1: You know that several objects can have same hash(), as it mentioned in java doc for Object.hashCode() It is not required that if two

Python Multiprocessing password cracker

醉酒当歌 提交于 2020-03-26 23:21:21
问题 I have been learning Python in my spare time for a small amount of time now and I set myself a challenge to build a password cracker for a very specific task, it was to test how effective the security on my ADSL Router was (not very) - using Wireshark I could quite clearly see how it was hashing the password over http and I developed some code to perform a wordlist attack. (I apologise if you think my code is badly written - you would probably be correct!). #!/usr/bin/env python import

How can I get information about the users network when he tries to authenticate towards my IIS?

…衆ロ難τιáo~ 提交于 2020-03-26 19:15:31
问题 I want users, when they are in the workplace (e.g. on the LAN), to authenticate themselves with their regular username and password. Auto-login is disabled. However - logging in from outside the LAN should trigger a 2-level authentication (like SMS, mail or similar). How can we get information about the users network when they try to log in to the application from outside the LAN? NB - it does not matter if you have AD user and pwd. If you are on the outside you have to trigger the 2 level

How to add password fields to a default WordPress registration?

≡放荡痞女 提交于 2020-03-20 06:41:05
问题 I woulrd like to enable users to choose their own passord, but keep a verification email(without reseting password link)? I am adding an input field for the password in wp-login: <input type="password" name="user_password" value="" placeholder="Password" id="user_password" class="input" /> Than, I have a custom plugin thats sets user's password: function myplugin_registration_change_pass( $user_id ) {if ( isset( $_POST['user_password'] ) ) wp_set_password( $_POST['user_password'], $user_id );