196 reputation
29
bio website
location
age
visits member for 3 years, 8 months
seen May 23 at 23:40

f00d


Sep
24
awarded  Autobiographer
Sep
3
awarded  Notable Question
Jul
2
awarded  Curious
Jun
19
awarded  Popular Question
Apr
17
comment Using a Web Server to steal NTLM credentials
They complained because of the performance degradation! And they use encryption, too.
Apr
17
accepted Using a Web Server to steal NTLM credentials
Apr
17
comment Using a Web Server to steal NTLM credentials
Thanks, beautiful!
Apr
17
comment Using a Web Server to steal NTLM credentials
Thank you ;) What about XSS? Can you please elaborate on the ability to downgrade users to NTLMv1 (Or even LM?!)
Apr
16
awarded  Custodian
Apr
16
awarded  Editor
Apr
16
revised Using a Web Server to steal NTLM credentials
deleted 1 characters in body
Apr
16
reviewed Approve suggested edit on Using a Web Server to steal NTLM credentials
Apr
16
comment Getting credentials using proxy server
@Maximin One issue remains: The admin could install and trust his own root CA on your PC, which would make your browser/OS accept the false CA as if it was a real one.
Apr
16
asked Using a Web Server to steal NTLM credentials
Mar
18
comment If I include a Forgot Password service, then what's the point of using a password?
Seems like BrowserID from Mozilla.
Feb
8
accepted Getting a Root CA accepted in systems and browsers
Feb
7
asked Getting a Root CA accepted in systems and browsers
Apr
15
awarded  Necromancer
Mar
23
comment I'm Trying to Find how to Exploit my SQL Code
I upvoted TobyS's answer, but he didn't really answer my question directly.
Mar
23
accepted I'm Trying to Find how to Exploit my SQL Code