301 reputation
12
bio website
location
age
visits member for 1 year, 11 months
seen Apr 28 at 15:19

Oct
31
awarded  Yearling
Oct
1
answered Continuous Integration for Exploit Development
Sep
30
comment Continuous Integration for Exploit Development
Your question seems to have two parts, one seems about testing the same exploit on different versions and the other checking whether the exploit is patched or not. Is this correct?
Sep
14
comment I've encountered JavaScript attack code - how do I search for information on the exploit's specifics?
Say two particular bugs effect 7.x.x version of Java, A and B. But the attacker found it easier to write an exploit for A. So, he will be using that. But another attacker found that writing B was easier. So, you see you'll never know.
Sep
14
comment I've encountered JavaScript attack code - how do I search for information on the exploit's specifics?
Obviously, there were almost 100 Java security patches issued last year. It could be any one of those.
Sep
13
comment I've encountered JavaScript attack code - how do I search for information on the exploit's specifics?
Like I have been saying, the JS you posted just checks for versions, os, plugins etc. installed on the system. The actual exploit is the next stage like functions java1(), java2() etc. for which you don't have the JS. So again, you'll never know.
Sep
12
comment I've encountered JavaScript attack code - how do I search for information on the exploit's specifics?
Well that's what I have been trying to explain. Out of the numerous bugs out there, it could be any exploit. You don't have the JS which carries out the exploit. So, you'll never know.
Sep
12
awarded  Editor
Sep
12
revised I've encountered JavaScript attack code - how do I search for information on the exploit's specifics?
a line about the OS dependcy as well.
Sep
12
answered I've encountered JavaScript attack code - how do I search for information on the exploit's specifics?
Nov
1
comment Iframe javascript Keylogger
For almost every mitigation whether on the OS level or the webapp level there is always a way to bypass when coupled with other vulnerabilities.
Oct
31
awarded  Teacher
Oct
31
answered Iframe javascript Keylogger