1,495 reputation
1520
bio website
location
age
visits member for 1 year, 9 months
seen 15 hours ago

Jul
24
asked Penetration testing's terms of agreement template
Jul
12
comment When to apply for a CVE?
no, it's not ethical-related. I just want to know if I need to contact a CNA while the vendor fix the problem, of if I need to wait until the problem is fixed to request the CVE.
Jul
12
asked When to apply for a CVE?
Jul
2
revised Content of a penetration testing authorization
added 89 characters in body
Jul
2
asked Content of a penetration testing authorization
Jun
9
comment Practicing pentesting locally
security.stackexchange.com/questions/183/vulnerable-oss
Jun
5
comment Cannot get access into a vulnerable Windows 2000 (MS03_026)
the problem is that after "Sending exploit" it returns to the prompt msf exploit(ms03_026_dcom) >. Only once it continued to the meterpreter.
Jun
5
asked Cannot get access into a vulnerable Windows 2000 (MS03_026)
Jun
3
revised Bypassing CVE-2010-4478 (J-PAKE parameter validation) in OpenSSH 5.1
added 165 characters in body
Jun
3
accepted Find and solve XSS in this code
Jun
3
answered Find and solve XSS in this code
Jun
2
asked Bypassing CVE-2010-4478 (J-PAKE parameter validation) in OpenSSH 5.1
Jun
1
comment Nmap reporting the status of a port as both opened and closed
It's a 3rd party vulnerable on purpose. It's a Windows 2000 server online by my university to practice penetration skills.
Jun
1
comment Nmap reporting the status of a port as both opened and closed
there are neither firewall nor IDS protecting the network.
May
31
asked Nmap reporting the status of a port as both opened and closed
May
30
answered Intrusion detection system and firewalling
May
28
comment Which mechanism did Flame use to avoid being identified?
I knew what you said about not doing anything, but the scope of the question is more on the technical side. Did it have something in its code to prevent the identification?
May
28
asked Which mechanism did Flame use to avoid being identified?
May
25
accepted Does ASLR protect against a buffer overflow within a struct?
May
25
asked Does ASLR protect against a buffer overflow within a struct?