2,708 reputation
1714
bio website
location
age
visits member for 2 years, 1 month
seen 14 hours ago

17h
reviewed Edit Excel files have extension “ecc”, unable to open even after renaming
17h
revised Excel files have extension “ecc”, unable to open even after renaming
Fixed grammar. Retagged as ECC is about elliptic curve cryptography. Added Windows tag on the guess that it is a Windows system, witness that they are using Excel.
1d
comment Preventing reverse engineering through obfuscation and LLVM
@tylerl Certain requirements make it impossible. For example, suppose you write a new Jail break exploit for iOS 8.3, you want the user to run the exploit and achieve JB while you want to keep the source of exploit secret as well. In this scenario I believe the best hope for OP is to use a host derived key to obfuscate the binary. This will prevent all other reverse engineers from looking into the binary
2d
comment How to use a port scanner in a hostile manner
What is "hostile way"? If you mean to perform unauthorized scans, some people do and no one can stop them. Patch systems, monitor the connection attempts (and block if necessary), monitor the logs etc. Script kiddies often use these tools to perform scanning of other machines.
Apr
15
comment SMBDirect & Metasploit
@Sabre Anyway, just to make all this irrelevant, what you are experiencing was a known bug. It seems you haven't updated Metasploit to the latest edition. Have a look at the PR which resolved this at github.com/rapid7/metasploit-framework/pull/4997
Apr
15
comment SMBDirect & Metasploit
@Sabre I am not sure about this on-topic off-topic thing related to this question as well. While I can understand what Rory said, the behavior is quite inconsistent. If one go to the search page and look for Metasploit, almost all other accepted questions are asking for troubleshooting as well.
Apr
15
revised Pentest — handling multiple reverse shells
added 264 characters in body
Apr
11
comment VPS protect joomla site
docs.joomla.org/Security
Apr
10
comment what is the best keylogger for security uses?
Sorry can't comment on Beacon since I haven't used it.
Apr
10
comment Do actual penetration testers actually use tools like metasploit?
Meterpreter is better as interactive payload. In case of non interactive (e.g campaigns over an extended period of time), it is not very reliable. However the auto connect back and dealing with network error issues is on priority and you should see a marked improvements in the coming weeks. Stageless meterpreter is integrated in the main tree as well. And yes Throwback is awesome.
Apr
10
comment How can Antivirus differentiate between a Trojan and a normal remote desktop application software?
@atdre thanks a lot.
Apr
7
answered Why companies do not simply use hackers' tools to find their own vulnerabilities prior to the release of their software?
Apr
6
reviewed Approve Which is the best way to sanitize user input in PHP?
Apr
3
comment Bypass browser requirements to see exploit code
Take a look at room362.com/blog/2012/11/19/… for how to download the exploit. The example is using wget.
Apr
3
comment Bypass browser requirements to see exploit code
Opening exploit source file will be different that the code that is served since at run time all the compiled code (flash, java, js) will be incorporated within the served webpage which wont be part of the source file (just a reference there). An easy way is to browse the page through cURL and specify the User-Agent the exploit is expecting. Then save the served page.
Apr
3
comment Meterpreter:execute command failed
@schroeder I understand what you are saying but this closing of questions based upon off-topic is too inconsistent. To give you an example, go to security.stackexchange.com/search?q=metasploit and look at all the questions. Every one of them is asking about Metasploit help just as this question. At the end of the day every question is about some kind of a product.
Apr
2
comment Meterpreter:execute command failed
@schroeder The Metasploit forum is in migration right now so it would be better if we deal it here. What is the meterpreter version (Win, PHP, Java etc)? I believe you are launching cmd.exe from a non native meterpreter version running in a sandbox or low integrity process.
Mar
25
comment what is the best keylogger for security uses?
I don't think the Metasploit keyloggers will come in handy in the OP's situation since that would mean a continuous meterpreter session from the laptop to the handler. Also OP can persist the session but still managing it would be a lot harder compared to legitimate app which starts normally like prey. Didn't mean to negate your suggestion as all your comments are excellent. Just that IMHO meterpreter would be a lot harder in this condition.
Mar
25
comment What kinds of PE file infection can AV software detect?
+1. Some of the thoughts can be found at security.stackexchange.com/questions/44345/… as well.
Mar
24
comment Meterpreter and staged payloads
Yes. LoadLibrary API is the preferred means through which DLLs are loaded into a process at run time.