meta user
network profile
| bio | website | |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 11 months |
| seen | 2 days ago | |
| stats | profile views | 22 |
|
Feb 21 |
comment |
My site just got hit with a SQL injection attack, how can I tell what they were doing? @joshg did you check if your mysql user has the FILE privilege? If it isn't enabled, the chance of full server compromise is very low. |
|
Feb 20 |
answered | My site just got hit with a SQL injection attack, how can I tell what they were doing? |
|
Jan 13 |
comment |
UNION SQL Injection I think you need a space after the double dash. |
|
Jan 9 |
answered | Can other customers on shared hosting see requests from/to my site? |
|
Dec 30 |
answered | Is it useful to determine the name of the server software while doing a penetration test? |
|
Dec 30 |
answered | Using Netcat to detect the webserver type |
|
Nov 23 |
revised |
Public key Infrastructure added 187 characters in body |
|
Nov 23 |
answered | Public key Infrastructure |
|
Nov 22 |
comment |
Public key Infrastructure Signing actually means encrypting the hash of the message with the private key, so yes it's correct. |
|
Nov 18 |
answered | What Type Of Encoding Is This? |
|
Nov 10 |
comment |
Can someone figure out the encryption method? @Mike even if you don't have the sources it may be possible to reverse engineer the binaries |
|
Oct 8 |
comment |
sql injection: use WHERE statement in address bar @Siamak.A.M No, but it has a character length limit. See group_concat_max_len |
|
Oct 4 |
answered | Program binaries or files with same MD5 hash |
|
Sep 27 |
answered | Security purpose of asking admin password to mount partition on Linux |
|
Sep 24 |
comment |
Wheres the salt on the openssl aes encryption? @Polaco Because your computer is little-endian. And od probably just loads the bytes directly into memory so it isn't even aware of the endianess. |
|
Sep 23 |
answered | How to defeat ASLR in linux kernel? |
|
Sep 11 |
comment |
Encryption and compression of Data That looks like a question from the coursera cryptography course's exams. |
|
Aug 21 |
awarded | Constituent |
|
Aug 21 |
awarded | Caucus |
|
Aug 21 |
comment |
Are there any tools that focus on shellcode analysis? @Polynomial you can disassemble raw blobs using objdump: objdump -mi386 -D -b binary shellcode.bin |
