Reputation
11,542
Next privilege 15,000 Rep.
Protect questions
Badges
1 35 58
Newest
 Organizer
Impact
~725k people reached

Apr
26
comment Can a SIM card propagate malware?
en.wikipedia.org/wiki/UICC_configuration
Apr
26
comment SS7 exploit on the wiretapping part
Can you provide links to the references you used, please?
Apr
26
comment Can a SIM card propagate malware?
Not entirely accurate because a UICC enabled with GlobalPlatform can cause a device to pull down malicious logic in a very similar way as a malware stager.
Apr
23
comment The best way to prevent ransomware and virus?
This is an ok answer, but you should include that Silverlight is a prominent attack vector -- much more-so when compared to Java or Internet Explorer -- and significantly more-so when compared to MS Office or Adobe Reader. For example, much of the ransomware in the past six months (especially in the past 1-2 months) has been delivered via CVE-2016-0034 included in the patch rollup for MS16-006.
Apr
23
comment Planning Incident Response / Business Continuity
There's the MITRE cyber exercise playbook -- mitre.org/publications/technical-papers/cyber-exercise-playbook
Apr
17
comment How to verify if a source code is safe before compiling it?
Some commercial security-focused static analysis tools have rulepacks to detect the insider threat, e.g., malicious logic, such as a backdoor, inserted into a codebase or built into it from the start (intentionally). Is that what you are looking for? Remember that often, many people have access to code repos (and they are not protected well). Some code generators will obfuscate the code, but with integrity-checking. Then there is the app "last-mile" problem of secure release and distribution.
Apr
9
comment Out of band verification using phone; a fallacy?
I always say use a split-key method where half of the symmetric passphrase (or key) goes through email (or web -- really any TCP/IP-based mechanism) and other over SMS
Apr
9
comment Assuming UAC is enabled, does a non-administrator account offer any security improvements?
A new UAC bypass was just published this morning -- kernelmode.info/forum/viewtopic.php?p=28249
Apr
8
comment How can a font be used for privilege escalation?
exploit-db.com/exploits/38713
Apr
8
comment Missing scripts in NMAP
Did you run `nmap --script-updatedb' like the documentation suggests?
Apr
5
comment Software Library Vulnerability Tracking
seen cve-search/cve-search ?
Mar
21
comment Kali Linux metasploit and android attack by PAYLOAD
Or just put meterpreter in an APK that is already loaded during startup -- techkernel.wordpress.com/2015/12/19/…
Mar
21
comment Kali Linux metasploit and android attack by PAYLOAD
@ Adi : Great insight, here is an article to perform those actions -- null-byte.wonderhowto.com/how-to/…
Mar
19
comment Is it possible to perform a MITM attack with a smartphone?
github.com/offensive-security/kali-nethunter/wiki/…
Mar
18
comment COPE vs. BYOD - as an employee why should I be interested in BYOD?
It should be against the law. In France, it is now against the law to force or allow employees to read e-mail after normal close-of business hours.
Mar
16
comment Nessus Scan Port ID mapped to Metasploit Vulnerability exploits
vulners.com
Mar
15
comment How can a font be used for privilege escalation?
recon.cx/2015/slides/…
Mar
10
comment How can a font be used for privilege escalation?
j00ru.vexillium.org/?p=2520
Mar
10
comment How can a font be used for privilege escalation?
tenable.com/plugins/index.php?view=single&id=83440
Mar
6
comment How do confirm my router is vulnerable to the glibc vulnerability(CVE-2015-7547)
The web interface will likely show the Segmentation Fault as well! You really do not understand how any of these technologies work, do you?