Reputation
34,999
Next tag badge:
167/100 score
19/20 answers
Badges
15 107 144
Newest
 Guru
Impact
~1.6m people reached

Mar
29
reviewed Close Hosting a “Capture the Flag” style competition for fun and learning?
Mar
29
reviewed Approve How did FBI/DoJ retrieve the data stored on the encrypted iPhone?
Mar
29
reviewed Close Is it possible to hide malicious code within/behind an image?
Mar
26
comment How to extract windows event logs from a hard disk forensic image?
Extract all .evt files from C:\Windows\system32\winevt\logs.
Mar
25
reviewed Approve Why do ALGs restrict traffic on a given TCP port based on the protocol?
Mar
24
reviewed Approve How can someone spoof texts with my phone number?
Mar
24
reviewed Approve Is Apple's AirPort Time Capsule vulnerable to ransomware?
Mar
23
reviewed Reject How can I keep usernames out of /etc/passwd on LINUX
Mar
22
comment Where to get a specific malware by its name?
It's possible through VirusTotal private API virustotal.com/en/documentation/private-api We use it a lot. It's very useful and offers a lot of information besides samples based on names/metadata.
Mar
21
reviewed Close Is the password FFFFFggggg&&&&&22222 safe from being guessed?
Mar
21
comment Kali Linux metasploit and android attack by PAYLOAD
Now that I think about it, if you have root access, then it's actually not that good to keep using the Meterpreter APK as it can be spotted in the installed apps. Instead, compile an ARM ELF Meterpreter, copy it to some innocent directory, and symlink it in init.d (or name it innocently and copy it to init.d without symlinking). As an added bonus, it won't appear in the Android running apps menu. It's far more stealthy.
Mar
21
comment Kali Linux metasploit and android attack by PAYLOAD
This is not enoguh. The APK will simply install the the stager's component on the victim's phone (which is basically the meterpreter Android Java payload) and launch the stager upon installation, but after reboot, the application won't launch; this is not persistent. To create actual persistence, you'll need a root exploit (there are tens to try from) and you'll need to add am start of the stager's MainActivity to /etc/init.d/. Even better, if you have Busybox you can use crond, or if you know some Java you can modify the Metasploit package to use AlarmManager to run ever 15 minutes.
Mar
21
reviewed Approve Is it possible to get hacked if my bcrypt hash is publically known?
Mar
20
reviewed Approve How do I know which padding was used in a cipher suite?
Mar
20
comment Tool for reading application data before it's encrypted
@yzT More like you don't understand your own question.
Mar
20
revised Where to find about web application vulnerabilities' history?
deleted 139 characters in body
Mar
20
reviewed Close Where to find about web application vulnerabilities' history?
Mar
20
reviewed Leave Open Why does Canonical not enable https here?
Mar
20
reviewed Close Network authentication using router firmware scripting
Mar
20
reviewed Close What's the point of public key servers, if they usually don't require any authentication at all upon upload?