Reputation
1,740
Top tag
Next privilege 2,000 Rep.
Edit questions and answers
Badges
5 22 44
Impact
~254k people reached

Apr
21
comment Can a computer virus be stored somewhere else than on the hard drive?
@ivan_bilan one thing should be noted over here,this were the possiblities which was derived theoretically and proven methods describe how it can be done,but this kind of rootkits,virus,spywares were very uncommon and rare among endusers,so no need to worry about that blog.erratasec.com/2013/10/… have a look over here there is in much detailed answer
Mar
9
comment How can i demonstrate remote file inclusion via get methods
@NeilSmithline is it possible to turn this vulnerablity with a shell upload,at present whenever i upload script,it just reflects the script,it doesnt execute the script,anything i need to add for executing php at request
Feb
26
comment Heap Buffer Overflow - AddressSanitizer output - what is needed to exploit this condition?
www.mathyvanhoef.com/2013/02/understanding-heap-exploiting-heap.html this might help u
Dec
24
comment How can I detect real location of the user through their IP address?
@Bergi sir, during pentesting activities we used to gather lot of information from the victim,its one of the part to collect the user location which will help us in many activities
Dec
24
comment How can I detect real location of the user through their IP address?
@Bergi the model/setting is like let's say i send a link ,once u click over it i can get the ip address you,Now if i search the ip address i get only isp location,i need to trace out whats the real geolocation of u :)
Dec
24
comment How can I detect real location of the user through their IP address?
@schroeder ,so everytime we need to ask isp provider about the real ip address location :(
Dec
24
comment How can I detect real location of the user through their IP address?
@NeilSmithline instead of ip address of isp ,is it there any way to trace the exact geolocation of the victim/sender?
Nov
16
comment How can I demonstrate the reflected XSS via post methods
@Matthew thanks for the response friend,i tried to insert the above script under the 'value' parameter where the script doesnt get executed ,instead it reflected in html response ,the above code just got printed at response,it doesnt thrown alert :(
Nov
16
comment How can I demonstrate the reflected XSS via post methods
@Matthew what i did was intercepted the browser request with burp and generated csrf poc,there i just modified the post parameters with script ,the above seen code was burp generated html code bro,
Nov
13
comment Does creation of dump data would be considered as vulnerablity?
@Xander nice idea xander i will update question with csrf code soon
Nov
13
comment Does creation of dump data would be considered as vulnerablity?
@Xander yes friend,user was not added to db but there were logs for succesful executed query
Nov
6
comment Sites to test login through jmeter
related : security.stackexchange.com/questions/3592/… ,this gives u the list of sites were you can play around ,
Oct
28
comment What are the defenses against SSL Interception?
security.stackexchange.com/questions/8145/…
Oct
19
comment Can a Trojan horse hide its activity from TCPView?
hackingsec.in/2013/06/what-is-rat-rat-so-basically-rat-is.html this might help u
Oct
9
comment My internet service provider spying on me?
@MRRobot it has cache servers in africa balancingact-africa.com/news/en/issue-no-568/computing/…
Oct
9
comment What are the disadvantages of single sign-on authentication?
@gilles its not plagirised content :( its my own question,i agree someof my questions contains plagirised content but this was my own :(
Oct
9
comment Is it possible to infect an e-mail by accident?
@Gilles i agree with its plagrised content but i refered whatever the sources which they provided friend,since sometimes linkonly answers wont turn as valid
Oct
5
comment Are firewalls required if using a VPN
ebay.com/gds/… this might help u
Sep
11
comment How to know somebody's IP? (Fraud victim)
also notably if the attacker was connected to through vpn/proxy the link will fetch only spoofed ip,
Sep
3
comment What are the vulnerablities for revealing IP addresses in code
@schroeder trusting dmz people and posting it over here :),other than that its dummy ip