393 reputation
212
bio website
location
age
visits member for 2 years, 5 months
seen 9 hours ago

Just a person.


Apr
12
accepted What are good tools for CRLF discovery?
Apr
12
accepted What are correct steps to setup this exploit execution(jboss_invoke_deploy)?
Apr
11
revised What are good tools for CRLF discovery?
Added some text.
Apr
11
comment What are good tools for CRLF discovery?
this acunetix.com/websitesecurity/crlf-injection
Apr
11
asked What are good tools for CRLF discovery?
Mar
3
asked What are correct steps to setup this exploit execution(jboss_invoke_deploy)?
Mar
2
comment Is it possible to exploit XSS inside User-Agent header?
Thanks , seems like there is no way , now . I've downloaded the tool and downgraded my flash player , just to test it.It works great.Thanks
Mar
2
accepted Is it possible to exploit XSS inside User-Agent header?
Mar
2
comment Is it possible to exploit XSS inside User-Agent header?
There is a cross site scripting on mobile version of that site , it is showing my user-agent inside source code.So when I use temper data I can change user-agent to "><script>alert(0)</script> and crate javscript alert. But how to request for that page with spoofed user-agent without need to use temper data?
Mar
2
asked Is it possible to exploit XSS inside User-Agent header?
Feb
27
accepted How can XML Injection be exploited , need example?
Feb
26
asked How can XML Injection be exploited , need example?
Feb
2
comment Finding all AJAX entrypoints
Ali fix link for crawljax.com :) Also : youtube.com/watch?v=rYAO94GnBlY
Jan
30
accepted How can I find websites owned by a particular company?
Jan
29
asked How can I find websites owned by a particular company?
Jan
1
comment How can this xss challenge be solved?
Thanks the jquery one gave me a real headache , but three of 5 for a beginner is not bad, and btw nice challenge.
Dec
31
accepted How I add cookie to w3af for authenticated attacks?
Dec
28
comment How can this xss challenge be solved?
Thanks , I think first three were easy but others will be very hard , will try my best. Hvala
Dec
28
revised How can this xss challenge be solved?
added 115 characters in body
Dec
28
comment How can this xss challenge be solved?
I have updated my thread , just want to know how can I access those values. Thanks