245 reputation
12
bio website
location The Netherlands
age
visits member for 11 months
seen yesterday

Reverse Engineer who loves:

  • Exploit Development
  • Analysing Malware
  • Chess
  • Owls
  • Martial Arts
  • Programming in C, Assembler and Python

Apr
7
answered Exploiting XP SP3 with local privilege escalation
Mar
17
comment Best practice for sending IP Addresses
Ever heard of GPG? (Or PGP)
Jan
17
answered Tails like OS for Smartphones
Jan
16
awarded  Citizen Patrol
Jan
16
comment Hydra bruteforce is giving wrong passwords. Can't seem to work any help?
@ram what you do is illigal. maple.extalia.net is not yours. Nobody will help you.
Jan
16
comment If I visit a HTTPS website when using Tor, is my IP exposed?
@Philipp no proof here, but you could intercept the Cerificate anyway and send a new fake one. Users always click 'accept certificate' anyway ;)
Jan
8
comment Performance of biometric authentication on cell phones as of 2014?
Biometric authentication is not really secure. As you leave your biometric signature everywhere. Fingerprint authentication is a horrible idea and iris scans really don't work well (, easily faked).
Nov
18
comment Applications security review
Read the source, fuzz the application and be paranoid.
Nov
1
comment Methods for protecting computer systems from physical attacks
tldr; Duck Tape.
Oct
14
comment What is “KDV” in antivirus databases?
It stands for Keylogger, Downloader or Virus I've been told. Better known as Heuristic Detection basicly it is saying: "Dont have a clue but you don't want it".
Oct
3
awarded  Benefactor
Oct
3
awarded  Scholar
Oct
3
accepted Continuous Integration for Exploit Development
Oct
2
comment Continuous Integration for Exploit Development
I have been thinking of using Jenkins, Buildbot and even been considering of using CMake, CTest and CDash for this. However the Python thing gives me a tad more flexibility for a temp setup before I know what I want to get a server for this. Now this is running in a breakable environment. I was just wondering if there are papers on this subject.
Oct
1
comment Continuous Integration for Exploit Development
@Omair. Exactly, as a software developer we use Jenkins etc for these things with 'normal' software. Python scripts, etc etc. I figured (as an exploit developer) I could leverage this to ExploitDevelopment to see when my 0day is not a 0day anymore or to test my exploits. Eg, installing software, firing at it and closing it. By doing this daily both tests will be done in an automatic fashion. I know I can keep an eye on CVE-RSS Feeds to see when a vuln has been found but this method you'll also see the silent patches.
Sep
30
comment Why is 0x41414141 associated with security exploits?
Some researchers use A's due the the matter that it is easy to count. 41 -> 1 -> A, 42 -> 2 -> B etc etc.
Sep
30
revised Continuous Integration for Exploit Development
added 622 characters in body
Sep
26
awarded  Promoter
Sep
24
comment Continuous Integration for Exploit Development
I would like see what the exact thing you meant? He is not really talking about continues testing his exploitation techniques?
Sep
18
awarded  Student