313 reputation
113
bio website
location The Netherlands
age
visits member for 1 year, 7 months
seen Nov 26 at 15:30

Reverse Engineer who loves:

  • Exploit Development
  • Analysing Malware
  • Chess
  • Owls
  • Martial Arts
  • Programming in C, Assembler and Python

Nov
7
comment Send fake response(?packets) to a program
This should be on reverse engineering. But it might have a challenge response in there, still check for internet connections, have checksums etc.
Nov
5
comment My college hosts a critically vulnerable service. I warned them 4 years ago. What should I do?
Public Disclosure Time! :)
Oct
15
comment Intel How Strong is Your Password page, good advice?
Its all about Entropy. Longer passwords create a higher Entropy (as do more chars)
Sep
24
awarded  Autobiographer
Sep
19
comment Do actual penetration testers actually use tools like metasploit?
Well, it (might) be detected by heuristics you didn't prepare for. Creating 'unreadable' code will only fool stupid (granted most AV is stupid) security products. But it most of them will detect that something might be 'off' with the file. If you encode it the entropy will highten. This will result in a 'caught' 'oday' 'virus'. However if you make a better random program, that also triggers the same conditions are your meterpreter the chance of being detected is way lower. As it looks, and acts as a normal program.
Sep
9
comment Olly Debugger Linux not functioning
Use a linux debugger. gdb is fine.
Sep
9
answered Olly Debugger Linux not functioning
Aug
8
comment What are JS malware attack techniques?
Why the down votes?
Aug
7
revised What are JS malware attack techniques?
added 24 characters in body
Aug
7
answered What are JS malware attack techniques?
Aug
7
comment What are JS malware attack techniques?
More like heapgrooming. Is used in use-after-free attacks.
Jul
30
comment Questions about the 2013 php.net malware
@begueradj Download any piece of serious malware from OpenMalware and you will see for your self. Mandiant has a tool to detect these kinds of activities. You can also do it your self, in an easy maner. If you download metasploit and exploit a target. Mitigate your meterpreter shell to a different process. And you will have code without a binary in memory.
Jul
30
comment Cracking a 6-character alphanumeric password Windows dialog box
@silvernightstar Load up IDA, put the tool in there. Do a string seach. Hope you are lucky, and go from there. For questions about that I'd welcome you to the reverse engineering stack.
Jul
30
comment Cracking a 6-character alphanumeric password Windows dialog box
What I would do is reverse the tool of the manufactor. The security they often used is on the side of the tool, and not in the board. This allows very easy bypass methods.
Jul
29
comment Are two firewalls better than one?
@tylerl During a pentest I did exploit the firewall and get access from there. Thus you can also see two firewalls as two attack surfaces.
Jul
29
answered Scan interpreted code for long lines to detect code injection?
Jun
12
comment How dangerous is the security hole CVE-2014-019?
@rubo77 There are a lot more dangerous vulnerabilities out there. That are not yet fixed! Even undetected by most security tools. These are called 0days, they always are out there. waiting. This makes IT-Sec fun =)
Jun
11
comment How dangerous is the security hole CVE-2014-019?
CVSS Scores are getting outdated. As Heartbleed only has a 4~5 ish score. blog.risk.io/2014/04/heartbleed-is-not-a-big-deal
Jun
11
comment Do actual penetration testers actually use tools like metasploit?
Small additional Note: shikata_ga_nai (or any other encoder) should not be used to in order to avoid av-software. It works often, but encoders are primarily ment to avoid-badchars etc. Metasploit Pro has a true anti-virus evasion technique implemented that generates a truely random program.
May
10
awarded  Yearling