| bio | website | |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 10 months |
| seen | 2 days ago | |
| stats | profile views | 46 |
|
May 17 |
answered | Vulnerability testing without the use of exploits? |
|
May 12 |
comment |
Vulnerable OS's? In addition, Windows Server 2003 with no patches would be a good start. |
|
Apr 17 |
answered | How do random attackers discover websites to target? |
|
Apr 17 |
awarded | Popular Question |
|
Apr 12 |
answered | how can you inject malicious code into an innocent-looking URL? |
|
Apr 10 |
comment |
Is there additional security value in using passwords with words or phrases in non-English languages? @IlmariKaronen Genius! |
|
Apr 8 |
comment |
Is there additional security value in using passwords with words or phrases in non-English languages? @Polynomial Technically, Passw0rd is only 8 characters! (Not "over 8") |
|
Apr 1 |
answered | Why improvising your own Hash function out of existing hash functions is so bad |
|
Mar 28 |
comment |
What is zero day? @Luc I wasn't trying to say that it had to have a patch when it was released, but rather that it could get released to the public some other way than though a patch. This method is usually a forum or a vulnerability website. exploit-db.com |
|
Mar 28 |
comment |
What is zero day? @Luc by definition a 0-day is not known by the public, hence when it is released to the public or patched it violates the definition therefore it is not a 0-day exploit anymore. One would just call it a vulnerability because it has been patch and is known. System administrators and security professionals can try to protect themselves by knowing this vulnerability. Good ol' wikipedia has a bunch of sources that reinterate this same idea: en.wikipedia.org/wiki/Zero-day_attack |
|
Mar 28 |
answered | What is zero day? |
|
Mar 26 |
answered | How can i calculate the number of possible passwords? |
|
Mar 18 |
awarded | Enthusiast |
|
Mar 15 |
answered | Retrieve auto saved Skype password from Ubuntu 12.04 LTS |
|
Mar 7 |
comment |
allowing inbounding UDP datagram if outbound has been done You could configure the firewall to allow traffic from a particular IP address and drop traffic from all other sources. You could use iptables or a cisco asa. |
|
Mar 5 |
answered | Hashing a key: less entropy than the key itself |
|
Mar 4 |
answered | Account lockout with human interaction required to unlock |
|
Mar 2 |
answered | NMAP scan fails |
|
Feb 27 |
comment |
Cracking CISCO ASA Passwords @D3C4FF I have added a tutorial on how to crack the password with Cain. I am not sure what problem your having. Maybe it's a typo or an ancient version of Cain. |
|
Feb 27 |
revised |
Cracking CISCO ASA Passwords Added a tutorial for the user. |