71 reputation
5
bio website infosecninja.blogspot.co.uk
location London, United Kingdom
age 25
visits member for 2 years, 7 months
seen yesterday

Security Analyst@Lucideus, Like to play with Cryptography, MSc Student, Experienced Web App Security Pentester, Interested in Logical Vulnerability, Bounty Hunter, Philosopher, Hollywood movie freak, Interested to Analyze Loopholes in Indian Politics, #NAMO follower, Moody, intelligent, Arrogant, Believe in "Sharing is caring", Request & Response lover, Kejriwal Hater, #heartbleed lover, Keeping dream of flying with a spider-man.

London, United Kingdom · infosecninja.blogspot.com


Apr
15
comment Malware analysis - Traffic Inspection
Also I have audited more than 20 system in which type of malware was different everytime. Sometimes trojon, sometimes backdoor or other infection. So cant really say that those are only responsible for this activity in which system pings to various sites than the whitelisted one. So something has to be done on network point only and for that your first options suites more.
Apr
15
comment Malware analysis - Traffic Inspection
Thank you for your valuable suggestions. I guess your first option is far better since blocking all malicious site is not a good idea and logic even. Need to block all sites except the whitelisted ones.
Apr
15
asked Malware analysis - Traffic Inspection
Mar
3
comment List of cookie parameter names to identify load balancing mechanism
Yes there are other ways to test. However this is one of the test cases which I thought to include. Apart from this I am going to use lbd and other KALI linux tools. However to create a methodology for pentest, its a good practice to include every small and big thing. That is why I have asked this question.
Mar
3
asked List of cookie parameter names to identify load balancing mechanism
Jan
6
comment Open redirection unique token bypass
I did not say I removed cookies. I said I removed that passrx parameter and it’s encoded value passing through get request. Cookies were there in their section.
Jan
5
asked Open redirection unique token bypass
Oct
16
awarded  Teacher
Jun
4
awarded  Supporter
May
1
comment Password capturing from dump file or browser after log out
well it will be on stored in heap and heap is not that predictable and if u have a UAF then there are better things to do than reading a random chunk of memory. point is u can't predict location of password in memory 1) It will be on heap ,heap is not perdictable 2) ASLR
Apr
4
answered How to learn penetration testing at home?
Mar
30
asked Password capturing from dump file or browser after log out
Nov
3
awarded  Editor
Jun
9
comment Side Channel Attack Query
I am asking because i have seen somewhere that many people are using printer or scanner's ip address with nmap command for just information gathering about target that hw many and which ports are open and closed. So my question of ip spoofing is relatd to this topic. IN my question scanner and printer are called zombies as u know.
Jun
9
awarded  Student
Jun
9
asked Side Channel Attack Query
Oct
19
awarded  Autobiographer