Reputation
3,717
Top tag
Next privilege 5,000 Rep.
Approve tag wiki edits
Badges
7 30
Impact
~72k people reached

Apr
26
revised Spam email text analysis
adding more ideas
Apr
26
answered Spam email text analysis
Apr
23
comment How does Signal Protocol, used by `whatsapp` Works?
I'd like to hear more about this too but it would get better attention on here if you demonstrated what you do know and put forth your own understanding of how it works so that people on here can correct you and / or add to your understanding. For example, the Wikipedia article (en.wikipedia.org/wiki/Signal_(software)) has diagrams and basic definition and functionality. Read that and expand your question.
Apr
20
comment XSS on a single page web application
each of those img tags should send a request that the server has to answer, even if it doesn't result in a valid image. Only your browser will know it isn't a valid image. The server has no way of knowing the request came from an img tag and will work on answering each one. For the jquery, you can call in an external jquery library using XSS. or go ahead and figure out the ajax calls without jquery like you said.
Apr
20
answered XSS on a single page web application
Apr
19
reviewed Approve Creating accounts on sites with no security?
Apr
15
revised Found a security vulnerability on gov related site
typo in word
Mar
25
accepted How can I get confirmation of new security problem in struts2?
Mar
24
answered How to trace the actions performed by a virus?
Mar
8
revised How to host application monitoring and administration dashboards?
added 112 characters in body
Mar
8
answered How to host application monitoring and administration dashboards?
Mar
7
reviewed Approve Is blocking UDP and TCP sufficient to prevent unwanted network activity?
Mar
7
comment Bypass Stack Canary by going past the return address
out of curiosity, what is the simple C program you are testing?
Mar
5
comment How does exploit development work for penetration testers?
It's purpose is to defeat DEP but it must also defeat ASLR
Mar
5
answered How does exploit development work for penetration testers?
Mar
5
comment How does exploit development work for penetration testers?
I think the question should say "When doing exploit development involving shellcode, the process always relies on memory address from the victim's machine." instead but I'm afraid this would change the meaning of the question too much.
Mar
5
revised How does exploit development work for penetration testers?
syntax and grammar
Mar
5
comment How does exploit development work for penetration testers?
Probably should specify that you are talking about memory addresses rather than IP addresses to reduce confusion
Mar
3
revised Detecting unusual network activity
added links
Mar
3
answered Detecting unusual network activity