Reputation
300
Top tag
Next privilege 500 Rep.
Access review queues
Badges
1 11
Impact
~20k people reached

  • 0 posts edited
  • 0 helpful flags
  • 5 votes cast
Sep
3
accepted Looking for a tutorial on meterpreter extensions
Jun
29
awarded  Autobiographer
Jun
27
comment Options when defending against SSLstrip?
You're totally missing the point. I'm not saying from the server hosting side e.g. mydomain.com. I'm saying from a local proxy for a LAN before ever leaving. I'm convinced at this point you're intentionally just being difficult.
Jun
26
comment Options when defending against SSLstrip?
It would prevent a mitm-ed user from fetching non-http assets. Instead of a "Paypal" banner it would display "you have been hijacked". Hence, they don't continue entering data. Hence it is useful.
Jun
26
comment Options when defending against SSLstrip?
@curiousguy Forcing https at the proxy as stated in the question(we're talking local proxy in a business case). If someone tries gets any assets via http, you replace all assets with "you have been hijacked." I thought that was relatively clear from the statement.
Mar
22
comment Most Efficient way of Encrypted Chat
no why on the -1? it's for sure the 'simplest' peer reviewed crypto chat setup
Mar
22
answered Most Efficient way of Encrypted Chat
Mar
22
awarded  Scholar
Mar
22
awarded  Peer Pressure
Mar
22
accepted Is there a Snort rule that equates to “something suspicious flagged from a client side application?”
Mar
22
comment Is there a Snort rule that equates to “something suspicious flagged from a client side application?”
Thanks I think you nailed it more in the question with 'No, there are too many client-side apps to catch them all'. And no there is no standard rule for appname field thinks eventid Y is causing problem level z.
Mar
22
comment Is there a Snort rule that equates to “something suspicious flagged from a client side application?”
Thanks, I know I could define a rule for just about anything. I just wasn't sure if a rule existed for 'client side app alert'
Mar
22
asked Is there a Snort rule that equates to “something suspicious flagged from a client side application?”
Mar
9
comment In Linux, when I consider trusting a new software source, what do I need to evaluate?
Agreed. I might add that some distros just say 'requires software from unsigned sources' when the gpg key is not already imported or the software is unsigned. A much better idea.
Mar
7
awarded  Student
Feb
10
awarded  Yearling
Nov
30
comment Looking for a tutorial on meterpreter extensions
I +1'd the post btw
Nov
20
comment Looking for a tutorial on meterpreter extensions
thx. i wound up having someone on IRC send me a link to one of mubix's articles. it doesn't inject directly into memory...as in it requires upload first, but it's a starting point
Nov
6
awarded  Tumbleweed
Oct
30
asked Looking for a tutorial on meterpreter extensions