1,981 reputation
421
bio website captainholly.wordpress.com
location Minnesota
age 48
visits member for 2 years, 6 months
seen Apr 23 at 17:42

profile for mcgyver5 on Stack Exchange, a network of free, community-driven Q&A sites


Apr
17
comment Metasploit ssh_enumusers stops instantly
how is this off topic? The help center says "Topics include but are not limited to: ... security tools." Metasploit is nothing if not a security tool. Other Metasploit topics are closed with such comments as "If you are just trying to learn metasploit then this question is off topic here." Thus we are reduced to a forum for cutting and pasting security best practices. Looking further, I see the majority of questions about learning metasploit are closed or on hold while none about learning nmap are closed or on hold. hmmm...
Apr
16
comment Metasploit ssh_enumusers stops instantly
It is working for me. I get the same response from check as you did. Is it possible your USER_FILE is empty? When I run this module with an empty user file, I get the same results as you. USER_FILE is required and > run should give an error if USER_FILE is not set, so when you type show options what does it show as the USER_FILE?
Apr
14
comment Can postMessage be used to forward data to hacker's iframe in CSRF attack?
How is the http get to the attacker's web service generated? If the IFrames are hidden, what does the victim see when they arrive at the attacker's website? In any case, the attacker's web page would not be able to read anything the victim types in to the legitimate web page, so "sends this password via html5" would not work.
Apr
14
answered Found a security vulnerability on gov related site
Feb
9
revised penetration testing first step
typos and readability
Feb
9
comment penetration testing first step
The training you are following wants you to collect information before trying some attacks. The reconnaissance phase is important and you should learn to do it well. There is always more information to gather. What framework runs the application? What is the version of that framework? What is the response when you try to login with a bad password? How does the "forgot password" feature work? What information can you gather from viewing source? Is there contact information on the website? What is the server's response when you type in a URL that does not exist? Who owns the domain name?
Feb
9
suggested approved edit on penetration testing first step
Jan
27
awarded  Popular Question
Jan
20
revised How to communicate securely
typos and readability
Jan
20
suggested approved edit on How to communicate securely
Jan
20
comment using temporary tokens for secure communication with IFRAME
thanks for responding. The inner frame creates a document (HTML or PDF) with a URL containing the valid token and then lets the wrapper app know that URL and then expires it (the document is destroyed).
Jan
15
comment using temporary tokens for secure communication with IFRAME
I like it Dino. Unfortunately I have since learned that the "direct requests to child app" won't work and I have updated the question.
Jan
15
revised using temporary tokens for secure communication with IFRAME
updated the question with new information
Jan
14
asked using temporary tokens for secure communication with IFRAME
Jan
13
revised Protecting code injection via chattr on php files?
adding php tag
Jan
13
comment Protecting code injection via chattr on php files?
are you sure the actual php files were edited instead of this unwanted code being injected in some other way (like a problem with the footer)?
Jan
13
suggested approved edit on Protecting code injection via chattr on php files?
Jan
5
comment How is the QSS tag used as payload in an XSS attack?
this is correct. <qss> is a safe way to verify that angle brackets are allowed to be submitted and rendered as is in the final output.
Jan
3
comment How I do get the correct the Tamper parameters from an internal web login
and that redirect URL is just one of my parameters, you need to capture your own which will be different.
Jan
2
comment How I do get the correct the Tamper parameters from an internal web login
the % symbols are just encoding a url (%3A is encoded form of ":", %2F is a slash)