191 reputation
17
bio website
location
age
visits member for 3 years, 2 months
seen Sep 9 '13 at 11:06

10 READ SIGNATURE

20 GOTO 10


Jun
19
awarded  Popular Question
Apr
17
comment Using a Web Server to steal NTLM credentials
They complained because of the performance degradation! And they use encryption, too.
Apr
17
accepted Using a Web Server to steal NTLM credentials
Apr
17
comment Using a Web Server to steal NTLM credentials
Thanks, beautiful!
Apr
17
comment Using a Web Server to steal NTLM credentials
Thank you ;) What about XSS? Can you please elaborate on the ability to downgrade users to NTLMv1 (Or even LM?!)
Apr
16
awarded  Custodian
Apr
16
awarded  Editor
Apr
16
revised Using a Web Server to steal NTLM credentials
deleted 1 characters in body
Apr
16
reviewed Approve suggested edit on Using a Web Server to steal NTLM credentials
Apr
16
comment Getting credentials using proxy server
@Maximin One issue remains: The admin could install and trust his own root CA on your PC, which would make your browser/OS accept the false CA as if it was a real one.
Apr
16
asked Using a Web Server to steal NTLM credentials
Mar
18
comment If I include a Forgot Password service, then what's the point of using a password?
Seems like BrowserID from Mozilla.
Feb
8
accepted Getting a Root CA accepted in systems and browsers
Feb
7
asked Getting a Root CA accepted in systems and browsers
Apr
15
awarded  Necromancer
Mar
23
comment I'm Trying to Find how to Exploit my SQL Code
I upvoted TobyS's answer, but he didn't really answer my question directly.
Mar
23
accepted I'm Trying to Find how to Exploit my SQL Code
Mar
23
comment I'm Trying to Find how to Exploit my SQL Code
@CodeNaked: Oh, okay, that much I already know, I thought you meant an insecurity in the code above. Since you were the first to actually 'answer' my question, would you mind adding an answer so I can accept it?
Mar
23
comment I'm Trying to Find how to Exploit my SQL Code
@CodeNaked: What do you mean the data in the table isn't executed in any manner?
Mar
17
asked I'm Trying to Find how to Exploit my SQL Code