Reputation
3,706
Top tag
Next privilege 5,000 Rep.
Approve tag wiki edits
Badges
1 10 20
Newest
 metasploit
Impact
~161k people reached

Apr
27
comment Detect Man In The Middle From An Application
That is because the public key in the google.com certificate has been included in the code of the chrome browser and every time Fiddler MITM the connection, the public key fingerprint changes which is detected by the chrome browser.
Apr
23
comment Letsencrypt not valid in Firefox or PHP, but valid in Chromium
Ah. Didn't use Apache 2.4 before. I have done this on Apache 2.2. From the description, you need to do this: cat server.pem fullchain.pem > mycert.pem. Then set the SSLCertificateFile to mycert.pem.
Apr
23
comment Letsencrypt not valid in Firefox or PHP, but valid in Chromium
The configuration is incorrect. SSLCertificateFile should contain the server.crt file you received while the fullchain.pem should be in the SSLCertificateChainFile directive.
Apr
23
comment Letsencrypt not valid in Firefox or PHP, but valid in Chromium
I have used letsencrypt with all major browsers supporting it without any issue. Make sure you have the server certificate, key, and full chain configured correctly. As regards the EV cert, EV is about trust and not security. Also, I would say if properly configured, Letsencrypt will be much better than a paid certificate.
Apr
15
comment Prevent external script from loading using Burp
Intercept the server response and remove the contents of the JavaScript file from the response.
Apr
15
awarded  metasploit
Apr
14
answered armitage find attack tool cli equivalent command
Apr
9
comment Assuming UAC is enabled, does a non-administrator account offer any security improvements?
+1. My related answer might be of help to someone as well. security.stackexchange.com/a/104393/21426
Apr
8
comment Do actual penetration testers actually use tools like metasploit?
The purpose was to let the readers know that almost all the AVs consider anything related to msf as malicious. Also myn.exe as above isn't the actual payload the user will be using during their campaign. It is just a dummy payload having nothing in it other than using the default decoder and exe template.
Mar
27
comment metasploit search command to fetch one AND another word
Have you looked at the msf console's grep command? Together with search you can grep but multiple keywords if you want
Mar
24
comment How would one recall a worm?
A modular worm always contact a C&C server for what operation to perform on the victim's machine. If the command is "spam 1.1.1.1", the worm start sending spam on the IP address. Make sure the worm has the capability to act on "delete yourself" command and it will happily comply. That's why everything - including malware - needs to be generic and modular.
Mar
16
comment What to do if stuck with website that has poor security?
Use a unique password for this site. Also, I am not sure if they are using HTTPS but considering the other security loopholes they have, I won't be surprised if SSL is missing as well. In that case make sure to always access the site from a relatively trusted network where no sniffers are installed. Granted that people who own the network or tap into the ISPs routers can still get all the info in plaintext over HTTP but this is the best you can do right now.
Mar
6
revised Using optical illusions as CAPTCHA
spelling correction
Mar
5
answered How does exploit development work for penetration testers?
Mar
3
awarded  Yearling
Mar
3
comment Recent malware programming language?
Depends on a lot of vectors: size, convenience, pre-build APIs etc. If size matters, go with Assembly/C/C++. Python has some excellent libraries you can use for offensive stuff. Ruby has the advantage of calling Metasploit API and a lot of post exploitation stuff. The new language-in-town is Powershell. It has the advantage of being signed by Microsoft!
Mar
1
comment What is DROWN and how does it work?
Yeah. And when I see the bear answer, I upvote it, then start reading. Thanks for everything you do. The moderators here don't like thank you comments but in this case they should get an exception.
Feb
29
comment How are zero days found?
Microsoft can't define what is illegal or legal. The local laws do and that is different everywhere. Also, as we see when the researcher do the job in a responsible way (responsible disclosure), not only Microsoft appreciates it but actually pay the researcher for the efforts as well. It is quite a grey area though and local laws should be consulted before doing anything that is explicitly not permitted.
Feb
23
comment windows/shell_reverse_tcp exploit is not working if listener is not running already
You must be using a very old version of Metasploit as the msfpayload has been deprecated long ago. Network resiliency is part of TCP and HTTP transport so you should be able to do what you are looking for. You need to update framework to the latest version first.
Feb
9
awarded  Excavator