1,800 reputation
311
bio website
location
age
visits member for 1 year, 1 month
seen 10 hours ago

Apr
3
answered Security of a Windows XP system after April 8th when running the latest Firefox or Chrome
Mar
30
comment Should I worry about this UAC bypass exploit for Windows 7?
@Clockwork-Muse the IFileOperation object when called from a process that is signed by Microsoft code signing certificate allow copying/deleting/executing of files on the file system without UAC prompt that is why you can spawn notepad.exe for example, from there call the IFileOperation COM object and instruct it to copy CRYPTBASE.DLL to system32\sysprep directory and it can do that without the UAC prompt.
Mar
28
answered Should I worry about this UAC bypass exploit for Windows 7?
Mar
23
comment Drive-by downloads
That is right. Malware is split into multiple stages to save space as well as well bypass security controls such as AV, HIDS etc.
Mar
23
answered Drive-by downloads
Mar
9
comment What causes a powershell payload to run the first time but not the second?
Powershell is a pretty reliable method of code execution. When you run the payload for the second time, do you have the handler listening ready?
Mar
3
awarded  Yearling
Mar
3
comment Do i need to have Airpcap?
Thank you. Yes the VMware won't mount the internal WiFi adapter but any external adapter can be used without any problem. Wireless USB adapter from Alpha networks is a popular one but practically any modern WiFi adapter is capable of doing injection.
Mar
2
answered Do i need to have Airpcap?
Feb
28
revised How weak is MD5 as a password hashing function ?
changed MD to MD5 for clarity in heading
Feb
28
suggested suggested edit on How weak is MD5 as a password hashing function ?
Feb
25
comment Documentation on Meterpreter Shells
Most of my own knowledge about Metasploit came from Metasploit IRC channel and reading the source code of the framework. I don't think you can cite either one. Tutorials and books focus on the working of the framework more, not the low level stuff. These you have to cover on your own I am afraid.
Feb
25
answered Documentation on Meterpreter Shells
Feb
16
answered Is it possible to hash bcrypt passwords more securely?
Feb
12
comment Resetting passwords howto
To clarify for you and other users, you need to send the temporary generated password half through the phone and half through email or some other communication medium other than phone. Don't think of sending the original password in half pieces because that would mean you will store the password in plaintext or in an encrypted format both of which are not the appropriate procedures. Use a multi-iterated slow hashing function such as bcrypt.
Jan
19
comment Reverse TCP connection from exploited SearchIndexer.exe failing
You mean when you execute the reverse tcp shell code inside calc.exe, it connects back to the handler but when you execute it inside the SearchIndexer.exe process space, it fails? What I fail to understand is how you manage to execute your shell code inside calc.exe? You are exploiting some other vuln and then migrating your shell code to calc.exe process space?
Jan
18
comment Reverse TCP connection from exploited SearchIndexer.exe failing
If you are able to pop a calc, it means the shellcode is executed successfully. This means that it won't make any difference for any other type of shell code as well. If the connection is getting dropped, check that port 4444 is allowed between the two machines and that the AV is not blocking the connection. A lot of AV's blacklist the TCP stagger of Metasploit.
Jan
3
revised After having confirmed a computer is infected by a Botnet.
removed unnecessary words; corrected spelling mistake
Jan
3
suggested suggested edit on After having confirmed a computer is infected by a Botnet.
Jan
3
comment Issues setting up DVWA for SQLMAP
There is a database configuration file at config/config.inc.php. It has the database connection string. Make sure the username and password in this file matches the credentials of your configured MYSQL server.