Reputation
1,589
Top tag
Next privilege 2,000 Rep.
Edit questions and answers
Badges
5 22 43
Impact
~236k people reached

Dec
24
comment How can I detect real location of the user through their IP address?
@Bergi sir, during pentesting activities we used to gather lot of information from the victim,its one of the part to collect the user location which will help us in many activities
Dec
24
comment How can I detect real location of the user through their IP address?
@Bergi the model/setting is like let's say i send a link ,once u click over it i can get the ip address you,Now if i search the ip address i get only isp location,i need to trace out whats the real geolocation of u :)
Dec
24
comment How can I detect real location of the user through their IP address?
@schroeder ,so everytime we need to ask isp provider about the real ip address location :(
Dec
24
comment How can I detect real location of the user through their IP address?
@NeilSmithline instead of ip address of isp ,is it there any way to trace the exact geolocation of the victim/sender?
Nov
16
comment How can I demonstrate the reflected XSS via post methods
@Matthew thanks for the response friend,i tried to insert the above script under the 'value' parameter where the script doesnt get executed ,instead it reflected in html response ,the above code just got printed at response,it doesnt thrown alert :(
Nov
16
comment How can I demonstrate the reflected XSS via post methods
@Matthew what i did was intercepted the browser request with burp and generated csrf poc,there i just modified the post parameters with script ,the above seen code was burp generated html code bro,
Nov
13
comment Does creation of dump data would be considered as vulnerablity?
@Xander nice idea xander i will update question with csrf code soon
Nov
13
comment Does creation of dump data would be considered as vulnerablity?
@Xander yes friend,user was not added to db but there were logs for succesful executed query
Nov
6
comment Sites to test login through jmeter
related : security.stackexchange.com/questions/3592/… ,this gives u the list of sites were you can play around ,
Oct
28
comment What are the defenses against SSL Interception?
security.stackexchange.com/questions/8145/…
Oct
19
comment Can a Trojan horse hide its activity from TCPView?
hackingsec.in/2013/06/what-is-rat-rat-so-basically-rat-is.html this might help u
Oct
9
comment My internet service provider spying on me?
@MRRobot it has cache servers in africa balancingact-africa.com/news/en/issue-no-568/computing/…
Oct
9
comment What are the disadvantages of single sign-on authentication?
@gilles its not plagirised content :( its my own question,i agree someof my questions contains plagirised content but this was my own :(
Oct
9
comment Is it possible to infect an e-mail by accident?
@Gilles i agree with its plagrised content but i refered whatever the sources which they provided friend,since sometimes linkonly answers wont turn as valid
Oct
5
comment Are firewalls required if using a VPN
ebay.com/gds/… this might help u
Sep
11
comment How to know somebody's IP? (Fraud victim)
also notably if the attacker was connected to through vpn/proxy the link will fetch only spoofed ip,
Sep
3
comment What are the vulnerablities for revealing IP addresses in code
@schroeder trusting dmz people and posting it over here :),other than that its dummy ip
Jun
23
comment Decrypting TOR traffic?
how about dns sniffing?If client isn't encapsulate DNS-requests traffic into tor network and requested only internet (not tor internal) resources you can capture network packets between client and DNS-server,also note that works only througth tor network,will encapsulated DNS-requests.
Jun
10
comment Precauations for web application security audit
there would be agreement b/w us and vendor but other than fixing web application exploits should i take care of any other stuff before submitting application to the vendor@ρss
Jul
2
comment why gmail's phone verification code not encrypted
@user93353 code whatever they sending through sms/text