810 reputation
210
bio website
location
age
visits member for 10 months
seen 2 days ago
stats profile views 46

May
17
answered Vulnerability testing without the use of exploits?
May
12
comment Vulnerable OS's?
In addition, Windows Server 2003 with no patches would be a good start.
Apr
17
answered How do random attackers discover websites to target?
Apr
17
awarded  Popular Question
Apr
12
answered how can you inject malicious code into an innocent-looking URL?
Apr
10
comment Is there additional security value in using passwords with words or phrases in non-English languages?
@IlmariKaronen Genius!
Apr
8
comment Is there additional security value in using passwords with words or phrases in non-English languages?
@Polynomial Technically, Passw0rd is only 8 characters! (Not "over 8")
Apr
1
answered Why improvising your own Hash function out of existing hash functions is so bad
Mar
28
comment What is zero day?
@Luc I wasn't trying to say that it had to have a patch when it was released, but rather that it could get released to the public some other way than though a patch. This method is usually a forum or a vulnerability website. exploit-db.com
Mar
28
comment What is zero day?
@Luc by definition a 0-day is not known by the public, hence when it is released to the public or patched it violates the definition therefore it is not a 0-day exploit anymore. One would just call it a vulnerability because it has been patch and is known. System administrators and security professionals can try to protect themselves by knowing this vulnerability. Good ol' wikipedia has a bunch of sources that reinterate this same idea: en.wikipedia.org/wiki/Zero-day_attack
Mar
28
answered What is zero day?
Mar
26
answered How can i calculate the number of possible passwords?
Mar
18
awarded  Enthusiast
Mar
15
answered Retrieve auto saved Skype password from Ubuntu 12.04 LTS
Mar
7
comment allowing inbounding UDP datagram if outbound has been done
You could configure the firewall to allow traffic from a particular IP address and drop traffic from all other sources. You could use iptables or a cisco asa.
Mar
5
answered Hashing a key: less entropy than the key itself
Mar
4
answered Account lockout with human interaction required to unlock
Mar
2
answered NMAP scan fails
Feb
27
comment Cracking CISCO ASA Passwords
@D3C4FF I have added a tutorial on how to crack the password with Cain. I am not sure what problem your having. Maybe it's a typo or an ancient version of Cain.
Feb
27
revised Cracking CISCO ASA Passwords
Added a tutorial for the user.