Reputation
11,627
Next privilege 15,000 Rep.
Protect questions
Badges
1 35 58
Newest
 Organizer
Impact
~729k people reached

1d
answered Why does OWASP ASVS require HTTP responses to have a content header specifying a character set?
2d
answered Nmap snmp-info.nse Security Name
2d
comment Preventing Browser from BeEF Exploitation
@GerorgeTimber : Thank you. One is not safe from BeEF if you do those things, but it should clean an infected browser. There may be more-advanced techniques -- best to check with Volatility or similar (e.g., Rekall framework), such as the ones you mention. If you click my persistent BeEF scenarios you will see tricks that can leverage Metasploit BAPv2 and/or hta_powershell to launch a meterpreter payload, PowerShellEmpire agent, or other implant.
2d
comment Preventing Browser from BeEF Exploitation
deobfuscatejavascript.com
2d
comment Preventing Browser from BeEF Exploitation
Hahaha @dhaupin -- very clever! Note taken!!
2d
revised Preventing Browser from BeEF Exploitation
added 138 characters in body
2d
revised Preventing Browser from BeEF Exploitation
added 369 characters in body
2d
revised Preventing Browser from BeEF Exploitation
edited tags
2d
revised Preventing Browser from BeEF Exploitation
added 369 characters in body
2d
answered Preventing Browser from BeEF Exploitation
2d
comment Benefits to Arch Linux over Kali Linux
BlackArch is still going strong -- 2016.04.28 release with new installer! -- twitter.com/blackarchlinux/status/725983337383362560
May
1
comment Bank complains about rooted Android. Is it really any worse than a Windows desktop?
@Silverfox: That's ok, it's a common misconception. See more thorough analysis of the repackaging problem, as well as the conceptual hooking techniques (applies to Android as well as iOS) here -- security.stackexchange.com/a/98326/140 -- but also here -- frida.re/docs/ios/#without-jailbreak -- and here -- frida.re/docs/android
May
1
comment Bank complains about rooted Android. Is it really any worse than a Windows desktop?
The OWASP Mobile Security Project has been trying to remove those requirements. There's no reason why a bank or any mobile app shouldn't run on a jailbroken or rooted device. They are more at-risk on a jailed or non-rooted device because all of the same reversing, subverting, and memory-dumping techniques still apply.
Apr
30
revised Use Nessus or focus on manual testing?
added 125 characters in body
Apr
30
answered Use Nessus or focus on manual testing?
Apr
28
revised Open-source penetration-test automation
added 116 characters in body
Apr
26
comment Can a SIM card propagate malware?
en.wikipedia.org/wiki/UICC_configuration
Apr
26
comment SS7 exploit on the wiretapping part
Can you provide links to the references you used, please?
Apr
26
comment Can a SIM card propagate malware?
Not entirely accurate because a UICC enabled with GlobalPlatform can cause a device to pull down malicious logic in a very similar way as a malware stager.
Apr
24
revised How to detect mimikatz usage on LAN
edited body