meta user
network profile
| bio | website | |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 10 months |
| seen | Jun 11 at 10:54 | |
| stats | profile views | 3 |
|
Oct 7 |
accepted | tools automating logins/hashes grabbing |
|
Sep 26 |
comment |
Good reading about windows architecture/reversing @Polynomial Thanks, I'll check the books you've mentioned. |
|
Sep 26 |
asked | Good reading about windows architecture/reversing |
|
Sep 12 |
asked | tools automating logins/hashes grabbing |
|
Sep 6 |
accepted | Building list of vulnerabilities that should be verified during pentest |
|
Sep 5 |
comment |
Building list of vulnerabilities that should be verified during pentest ... What I am curious about is if, lets say, you'd discovered that your target server runs sshd. Would you delve into protocol/sources analysis and see what you can do or you would try to find (how?) CVEs or other known vulnerabilities first? |
|
Sep 5 |
comment |
Building list of vulnerabilities that should be verified during pentest Thanks for the tips on CWE and CAPEC. I'll definitely going to check them. However, it seems that both of the lists provide rather abstract description of vulnerablities/attacks, something like design patterns in terms for sw development. While this seems to be very handy during design of exploit/attack I have a feeling that you will try to get maximum from public vulns/exploits before trying to implement your own home-grown exploit/attack. ... |
|
Sep 5 |
comment |
Building list of vulnerabilities that should be verified during pentest I don't think OWASP top 10 will help me a lot since I am not testing web application right now. I am rather interested in testing server\infrastructure. |
|
Sep 5 |
asked | Building list of vulnerabilities that should be verified during pentest |
|
Aug 29 |
awarded | Scholar |
|
Aug 29 |
accepted | Tools/methods helping to determine application/protocol serving specific port |
|
Aug 28 |
awarded | Student |
|
Aug 28 |
asked | Tools/methods helping to determine application/protocol serving specific port |
|
Aug 1 |
awarded | Supporter |
