Reputation
1,594
Top tag
Next privilege 2,000 Rep.
Edit questions and answers
Badges
5 22 43
Impact
~235k people reached

Jan
13
accepted Usablity vs security malicious file upload
Jan
12
asked Approach for testing xxe injection
Jan
6
asked Usablity vs security malicious file upload
Jan
5
asked Is it there any way to detect payloads generated by veil framework
Dec
29
awarded  Notable Question
Dec
24
awarded  Nice Question
Dec
24
comment How can I detect real location of the user through their IP address?
@Bergi sir, during pentesting activities we used to gather lot of information from the victim,its one of the part to collect the user location which will help us in many activities
Dec
24
comment How can I detect real location of the user through their IP address?
@Bergi the model/setting is like let's say i send a link ,once u click over it i can get the ip address you,Now if i search the ip address i get only isp location,i need to trace out whats the real geolocation of u :)
Dec
24
comment How can I detect real location of the user through their IP address?
@schroeder ,so everytime we need to ask isp provider about the real ip address location :(
Dec
24
comment How can I detect real location of the user through their IP address?
@NeilSmithline instead of ip address of isp ,is it there any way to trace the exact geolocation of the victim/sender?
Dec
24
asked How can I detect real location of the user through their IP address?
Dec
8
accepted Does creation of dump data would be considered as vulnerablity?
Dec
8
accepted How can I demonstrate the reflected XSS via post methods
Nov
16
comment How can I demonstrate the reflected XSS via post methods
@Matthew thanks for the response friend,i tried to insert the above script under the 'value' parameter where the script doesnt get executed ,instead it reflected in html response ,the above code just got printed at response,it doesnt thrown alert :(
Nov
16
comment How can I demonstrate the reflected XSS via post methods
@Matthew what i did was intercepted the browser request with burp and generated csrf poc,there i just modified the post parameters with script ,the above seen code was burp generated html code bro,
Nov
16
asked How can I demonstrate the reflected XSS via post methods
Nov
13
comment Does creation of dump data would be considered as vulnerablity?
@Xander nice idea xander i will update question with csrf code soon
Nov
13
comment Does creation of dump data would be considered as vulnerablity?
@Xander yes friend,user was not added to db but there were logs for succesful executed query
Nov
13
asked Does creation of dump data would be considered as vulnerablity?
Nov
6
comment Sites to test login through jmeter
related : security.stackexchange.com/questions/3592/… ,this gives u the list of sites were you can play around ,