Reputation
302
Top tag
Next privilege 500 Rep.
Access review queues
Badges
1 13
Impact
~10k people reached

  • 0 posts edited
  • 3 helpful flags
  • 39 votes cast
Mar
19
comment Evading IDS in exploit development
You are right, but I am not going to defend the answer. The.Exodus.Exploit.Dev master course.also said it. I can google and first a credible source. Or I can leave it at this. I choose to do the latter.
Mar
16
comment Evading IDS in exploit development
Every exploit developer I know. But as I realise that is not a credible source have a look at : information.rapid7.com/rs/rapid7/images/… "Encoders are not meant to evade AV but handle bad characters" same goes for IDS. If you rewrite the shellcode to avoid the signature, you will have less chance to trigger a different (more generic) signature. The hide in plain side techniques.
Mar
16
comment Evading IDS in exploit development
Using encoders to avoid IDS is bad practice.
Nov
7
comment Send fake response(?packets) to a program
This should be on reverse engineering. But it might have a challenge response in there, still check for internet connections, have checksums etc.
Nov
5
comment My college hosts a critically vulnerable service. I warned them 4 years ago. What should I do?
Public Disclosure Time! :)
Oct
15
comment Intel How Strong is Your Password page, good advice?
Its all about Entropy. Longer passwords create a higher Entropy (as do more chars)
Sep
24
awarded  Autobiographer
Sep
19
comment Do actual penetration testers actually use tools like metasploit?
Well, it (might) be detected by heuristics you didn't prepare for. Creating 'unreadable' code will only fool stupid (granted most AV is stupid) security products. But it most of them will detect that something might be 'off' with the file. If you encode it the entropy will highten. This will result in a 'caught' 'oday' 'virus'. However if you make a better random program, that also triggers the same conditions are your meterpreter the chance of being detected is way lower. As it looks, and acts as a normal program.
Sep
9
comment Olly Debugger Linux not functioning
Use a linux debugger. gdb is fine.
Sep
9
answered Olly Debugger Linux not functioning
Aug
8
comment What are JS malware attack techniques?
Why the down votes?
Aug
7
revised What are JS malware attack techniques?
added 24 characters in body
Aug
7
answered What are JS malware attack techniques?
Aug
7
comment What are JS malware attack techniques?
More like heapgrooming. Is used in use-after-free attacks.
Jul
30
comment Questions about the 2013 php.net malware
@begueradj Download any piece of serious malware from OpenMalware and you will see for your self. Mandiant has a tool to detect these kinds of activities. You can also do it your self, in an easy maner. If you download metasploit and exploit a target. Mitigate your meterpreter shell to a different process. And you will have code without a binary in memory.
Jul
30
comment Cracking a 6-character alphanumeric password Windows dialog box
@silvernightstar Load up IDA, put the tool in there. Do a string seach. Hope you are lucky, and go from there. For questions about that I'd welcome you to the reverse engineering stack.
Jul
30
comment Cracking a 6-character alphanumeric password Windows dialog box
What I would do is reverse the tool of the manufactor. The security they often used is on the side of the tool, and not in the board. This allows very easy bypass methods.
Jul
29
comment Are two firewalls better than one?
@tylerl During a pentest I did exploit the firewall and get access from there. Thus you can also see two firewalls as two attack surfaces.
Jul
29
answered Scan interpreted code for long lines to detect code injection?
Jun
12
comment How dangerous is the security hole CVE-2014-019?
@rubo77 There are a lot more dangerous vulnerabilities out there. That are not yet fixed! Even undetected by most security tools. These are called 0days, they always are out there. waiting. This makes IT-Sec fun =)