Cristian Dobre

3,850 reputation

1628

bio	website	twitter.com/cyberu
	location	Romania
	age	29
visits	member for	4 months
	seen	yesterday
stats	profile views	194

Security consultant mainly doing penetration testing.

	3,850 reputation	bio	website	twitter.com/cyberu	visits	member for	4 months
1628 badges		location	Romania		seen	yesterday

summary answers questions tags badges favorites bounties reputation activity

415 Actions

suggestions reviews revisions comments badges posts accepts all

Apr 7	awarded	Fanatic
Apr 4	awarded	Enlightened
Mar 2	comment	Are there any example domains where I can run my nmap scans just to learn? With Nmap scripting engine and scripts you can detect and exploit vulnerabilities.
Feb 26	reviewed	No Action Needed What measures should be taken when losing an iPad
Feb 22	reviewed	Reviewed What are the security risks when users upload their html & javascript to AWS S3 and the content is used in a webapp
Feb 22	awarded	Nice Answer
Feb 22	reviewed	Leave Open An OS that does not trust its RAM?
Feb 21	reviewed	Leave Open An OS that does not trust its RAM?
Feb 21	answered	Dynamic tools to detect vulnerabilities in software applications written in c?
Feb 21	revised	Actual issue? Phone switches from 3G to router makes session switch from https to http added 149 characters in body
Feb 21	answered	Actual issue? Phone switches from 3G to router makes session switch from https to http
Feb 21	reviewed	Approve suggested edit on How to prevent attacks against client side validations?
Feb 21	reviewed	Reviewed Dynamic tools to detect vulnerabilities in software applications written in c?
Feb 21	revised	Dynamic tools to detect vulnerabilities in software applications written in c? deleted 8 characters in body; edited title
Feb 21	revised	Why are iframes allowed at all in modern browsers? added 34 characters in body
Feb 21	revised	how to handle error reply messages? added 385 characters in body
Feb 21	answered	how to handle error reply messages?
Feb 21	answered	Why are iframes allowed at all in modern browsers?
Feb 20	revised	SQL injection Are there any instances where a vulnerable url would not contain an 'equals' (=) symbol added 578 characters in body
Feb 20	comment	SQL injection Are there any instances where a vulnerable url would not contain an 'equals' (=) symbol URL rewrite is just one of the ways you could pass data to the application. It's true that url?variable=value is the most common way to pass information but there are MANY other ways. Passing data with POST is the next most common way. URL rewrite make detection of injection points more difficult for automated tools.