338 reputation
57
bio website
location Tbilisi, Georgia
age 21
visits member for 3 years, 5 months
seen Nov 19 '12 at 11:45

Just another network engineer


Aug
18
awarded  Yearling
Dec
20
awarded  Notable Question
Nov
9
awarded  Favorite Question
Sep
17
awarded  Good Question
Jan
14
awarded  Popular Question
Jun
2
comment Determining vulnerable software on client machines
As I wrote above, with local BOF exploits, IMHO there is no way to remotely determine which software and version does victim use, if software doesn't listen to any port, or send any packets. You need something to access remotely. But that's software independent, maybe users use multicast streams with VLC that will help you to determine version or you can use social engineering. I hope you get the point.
Jun
2
answered Determining vulnerable software on client machines
May
10
awarded  Editor
May
10
revised What security resources should a white-hat *developer* follow these days?
added 208 characters in body
May
10
awarded  Necromancer
Apr
20
answered List of good security blogs one should read
Apr
3
awarded  Nice Question
Feb
12
comment Options when defending against SSLstrip?
you're right, ettercap is capable changing SSL certificate.
Feb
11
awarded  Teacher
Feb
11
answered Options when defending against SSLstrip?
Feb
7
answered What security resources should a white-hat *developer* follow these days?
Feb
6
awarded  Scholar
Feb
6
awarded  Supporter
Feb
6
comment Books about Penetration Testing
Class is great, but costs too much for me.
Feb
5
comment Books about Penetration Testing
Hacking: The Art of Exploitation and Nmap Network Scanning: Yap, they might be a great books but they are mostly focused at some parts of attack. I would recommend following book: oreilly.com/catalog/9780596006112 but searching for another great books. Thanks anyway. Web app handbook looks really great.