172 reputation
3
bio website
location
age
visits member for 2 years, 2 months
seen Oct 14 at 10:30

Oct
7
accepted tools automating logins/hashes grabbing
Sep
26
comment Good reading about windows architecture/reversing
@Polynomial Thanks, I'll check the books you've mentioned.
Sep
26
asked Good reading about windows architecture/reversing
Sep
12
asked tools automating logins/hashes grabbing
Sep
6
accepted Building list of vulnerabilities that should be verified during pentest
Sep
5
comment Building list of vulnerabilities that should be verified during pentest
... What I am curious about is if, lets say, you'd discovered that your target server runs sshd. Would you delve into protocol/sources analysis and see what you can do or you would try to find (how?) CVEs or other known vulnerabilities first?
Sep
5
comment Building list of vulnerabilities that should be verified during pentest
Thanks for the tips on CWE and CAPEC. I'll definitely going to check them. However, it seems that both of the lists provide rather abstract description of vulnerablities/attacks, something like design patterns in terms for sw development. While this seems to be very handy during design of exploit/attack I have a feeling that you will try to get maximum from public vulns/exploits before trying to implement your own home-grown exploit/attack. ...
Sep
5
comment Building list of vulnerabilities that should be verified during pentest
I don't think OWASP top 10 will help me a lot since I am not testing web application right now. I am rather interested in testing server\infrastructure.
Sep
5
asked Building list of vulnerabilities that should be verified during pentest
Aug
29
awarded  Scholar
Aug
29
accepted Tools/methods helping to determine application/protocol serving specific port
Aug
28
awarded  Student
Aug
28
asked Tools/methods helping to determine application/protocol serving specific port
Aug
1
awarded  Supporter