Reputation
3,157
Top tag
Next privilege 5,000 Rep.
Approve tag wiki edits
Badges
6 25
Newest
 Caucus
Impact
~44k people reached

1d
comment unsolved issues with dynamic malware analysis?
Really vague question. Can you tell us more about what you are looking for and what you have already tried? I found some interesting stuff just typing "problems with Dynamic Malware Analysis" into a search engine.
Aug
26
accepted Why did this attack use 0.0.0.0 as IP address and why did it work?
Aug
26
comment Why did this attack use 0.0.0.0 as IP address and why did it work?
I see what I missed. A shell was already open to attacker's machine, so the 0.0.0.0 was used locally to the attacker just as if I had logged into a remote host with ssh and typed ftp 0.0.0.0 etc...
Aug
25
comment How to protect against SQL Injection in Jaggeryjs?
Why don't you test it yourself to see if it is vulnerable to SQL injection?
Aug
25
asked Why did this attack use 0.0.0.0 as IP address and why did it work?
Jul
31
comment Decrypt Java Payload
You're right. Wouldn't it be possible, though, to inject a part of a class file so it wouldn't start with CA FE BA BE? It probably wouldn't be understandable by a decompiler.
Jul
31
comment Decrypt Java Payload
oh. even better.
Jul
29
comment Adding SSL to existing applications
Since the SSL and HTTPS tags are now remapped to "TLS" and SSL is obsolete, shouldn't we refer to it as TLS or SSL/TLS since most people still won't recognize the term "TLS"?
Jul
29
comment Famous XSS attacks over JavaScript
There is an inexhaustible supply of real xss exploits at the xss subreddit
Jul
28
answered Decrypt Java Payload
Jul
27
awarded  Caucus
Jul
27
awarded  Constituent
Jul
27
accepted Is this the end of malware use of DNS?
Jul
27
answered Password Manager use and safety
Jul
27
asked Is this the end of malware use of DNS?
Jul
25
comment How much protection is really offered by TLS_FALLBACK_SCSV?
don't worry, steps were taken, but I had to explain to people why TLS_FALLBACK_SCSV did not make everything OK.
Jul
25
comment How much protection is really offered by TLS_FALLBACK_SCSV?
Ahhh. Never again will I confuse cipher suite downgrade and protocol downgrade. Your answer clarified things. The reasons for the F were clearly listed in the results and I've pasted the image of those results in the question.
Jul
25
accepted How much protection is really offered by TLS_FALLBACK_SCSV?
Jul
25
revised How much protection is really offered by TLS_FALLBACK_SCSV?
edited title
Jul
25
comment How much protection is really offered by TLS_FALLBACK_SCSV?
Neil, the POODLE part caps it at a C. I added the full results in the post.