658 reputation
49
bio website
location
age
visits member for 2 years, 5 months
seen 14 hours ago

Jun
14
awarded  Yearling
Aug
25
awarded  Citizen Patrol
Jul
7
awarded  Quorum
Jun
30
comment How to deal with MySQL's Errcode 13 when trying to write a shell
Try to find a public directory with write permissions for everyone. If users can upload images or files on that site, you may be able to write in the folder where they are stored.
Jun
14
awarded  Yearling
Feb
21
comment My site just got hit with a SQL injection attack, how can I tell what they were doing?
@joshg did you check if your mysql user has the FILE privilege? If it isn't enabled, the chance of full server compromise is very low.
Feb
20
answered My site just got hit with a SQL injection attack, how can I tell what they were doing?
Jan
13
comment UNION SQL Injection
I think you need a space after the double dash.
Jan
9
answered Can other customers on shared hosting see requests from/to my site?
Dec
30
answered Is it useful to determine the name of the server software while doing a penetration test?
Dec
30
answered Using Netcat to detect the webserver type
Nov
23
revised Public key Infrastructure
added 187 characters in body
Nov
23
answered Public key Infrastructure
Nov
22
comment Public key Infrastructure
Signing actually means encrypting the hash of the message with the private key, so yes it's correct.
Nov
18
answered What Type Of Encoding Is This?
Nov
10
comment Can someone figure out the encryption method?
@Mike even if you don't have the sources it may be possible to reverse engineer the binaries
Oct
8
comment sql injection: use WHERE statement in address bar
@Siamak.A.M No, but it has a character length limit. See group_concat_max_len
Oct
4
answered Program binaries or files with same MD5 hash
Sep
27
answered Security purpose of asking admin password to mount partition on Linux
Sep
24
comment Where is the salt on the OpenSSL AES encryption?
@Polaco Because your computer is little-endian. And od probably just loads the bytes directly into memory so it isn't even aware of the endianess.