296 reputation
112
bio website
location The Netherlands
age
visits member for 1 year, 3 months
seen Aug 14 at 12:04

Reverse Engineer who loves:

  • Exploit Development
  • Analysing Malware
  • Chess
  • Owls
  • Martial Arts
  • Programming in C, Assembler and Python

Aug
8
comment What are JS malware attack techniques?
Why the down votes?
Aug
7
revised What are JS malware attack techniques?
added 24 characters in body
Aug
7
answered What are JS malware attack techniques?
Aug
7
comment What are JS malware attack techniques?
More like heapgrooming. Is used in use-after-free attacks.
Jul
30
comment Questions about the 2013 php.net malware
@begueradj Download any piece of serious malware from OpenMalware and you will see for your self. Mandiant has a tool to detect these kinds of activities. You can also do it your self, in an easy maner. If you download metasploit and exploit a target. Mitigate your meterpreter shell to a different process. And you will have code without a binary in memory.
Jul
30
comment Cracking a 6-character alphanumeric password Windows dialog box
@silvernightstar Load up IDA, put the tool in there. Do a string seach. Hope you are lucky, and go from there. For questions about that I'd welcome you to the reverse engineering stack.
Jul
30
comment Cracking a 6-character alphanumeric password Windows dialog box
What I would do is reverse the tool of the manufactor. The security they often used is on the side of the tool, and not in the board. This allows very easy bypass methods.
Jul
30
comment All about executing Dlls and malicious dll
Try to Google, but: msdn.microsoft.com/en-US has nearly all calls you could need.
Jul
29
comment All about executing Dlls and malicious dll
It is a function located within kernel32.dll
Jul
29
comment Are two firewalls better than one?
@tylerl During a pentest I did exploit the firewall and get access from there. Thus you can also see two firewalls as two attack surfaces.
Jul
29
comment All about executing Dlls and malicious dll
Try: rundll32.exe kernel32.dll InitiateSystemShutdownA, 1
Jul
29
answered Scan interpreted code for long lines to detect code injection?
Jun
12
comment How dangerous is the security hole CVE-2014-019?
@rubo77 There are a lot more dangerous vulnerabilities out there. That are not yet fixed! Even undetected by most security tools. These are called 0days, they always are out there. waiting. This makes IT-Sec fun =)
Jun
11
comment How dangerous is the security hole CVE-2014-019?
CVSS Scores are getting outdated. As Heartbleed only has a 4~5 ish score. blog.risk.io/2014/04/heartbleed-is-not-a-big-deal
Jun
11
comment Do actual penetration testers actually use tools like metasploit?
Small additional Note: shikata_ga_nai (or any other encoder) should not be used to in order to avoid av-software. It works often, but encoders are primarily ment to avoid-badchars etc. Metasploit Pro has a true anti-virus evasion technique implemented that generates a truely random program.
May
10
awarded  Yearling
Apr
7
answered Exploiting XP SP3 with local privilege escalation
Mar
17
comment Best practice for sending IP Addresses
Ever heard of GPG? (Or PGP)
Jan
17
answered Tails like OS for Smartphones
Jan
16
awarded  Citizen Patrol