Sonny Ordell's user avatar
Sonny Ordell's user avatar
Sonny Ordell's user avatar
Sonny Ordell
  • Member for 12 years, 9 months
  • Last seen more than 8 years ago
22 votes
1 answer
3k views

WPA significantly less secure than WPA2?

22 votes
7 answers
35k views

Nmap reporting almost every port as open

21 votes
6 answers
69k views

Browsing exploits with Metasploit console

21 votes
4 answers
37k views

Leveraging a shell from SQL injection

20 votes
1 answer
55k views

Force a specific SSL cipher

19 votes
4 answers
4k views

Threat assesment for a captive portal

13 votes
3 answers
4k views

Attacks against windows kiosk software

13 votes
2 answers
5k views

Bypassing a reverse proxy/NAT

11 votes
1 answer
3k views

Bypassing hidden SSID and MAC filtering "protection"

11 votes
1 answer
13k views

Are there any ways to leverage NTLM V2 hashes during a penetration test?

10 votes
6 answers
6k views

Is denying login after incorrect attempts ineffective?

9 votes
2 answers
1k views

Any advantage to securing WiFi with a PSK, other than to keep out unauthorized

9 votes
5 answers
3k views

What is the practical difference between MAC and Capabilities

8 votes
1 answer
19k views

Bypassing a captive portal with tor

8 votes
6 answers
1k views

Determining vulnerable software on client machines

7 votes
2 answers
9k views

SSL / TLS Renegotiation Handshakes MiTM Plaintext Data Injection- medium or low risk?

7 votes
4 answers
14k views

What is a good browser for web application pen testing? [closed]

6 votes
3 answers
391 views

Spamming exploits without user detection

6 votes
3 answers
560 views

Forensics on a SOHO router

6 votes
2 answers
656 views

Enterprise security incident response and detection

6 votes
2 answers
995 views

International pentester certification

6 votes
2 answers
3k views

What are the practical differences between SELinux targeted mode and a capability based OS?

6 votes
2 answers
2k views

How effective is an IDS at catching targeted attacks

6 votes
2 answers
61k views

How can you see the device history of a computer when doing forensics?

5 votes
4 answers
11k views

Verifying NLA support on Remote Desktop

5 votes
3 answers
3k views

Do WebGoat style XSS attacks still work?

5 votes
1 answer
1k views

Non English password dictionaries [closed]

4 votes
2 answers
928 views

Determing live hosts past a restrictive firewall with nmap

4 votes
2 answers
2k views

Bypassing Trustwave NAC

4 votes
5 answers
12k views

Determining false positives when scanning for live hosts with Nmap