1,694 reputation
317
bio website
location
age
visits member for 2 years, 9 months
seen 11 hours ago

14h
reviewed No Action Needed How to prevent users from downloading information from our search engine?
14h
awarded  Custodian
18h
reviewed No Action Needed TLS 1.2 Server certificate and signature_algorithms
1d
comment Failed to connect to netcat reverse shell
You are right, my lazy eye did not spot it was part of the GET parameters
1d
revised Is crypto.js vulnerable to heartbleed attack?
Fixed topic and punctuation
1d
reviewed No Action Needed To what extent is FREE 3rd party antivirus software better than Windows 8 defender (if any)?
1d
reviewed No Action Needed Is crypto.js vulnerable to heartbleed attack?
1d
reviewed No Action Needed Client authentication flaw in old Netscape SSL protocol
1d
suggested suggested edit on Is crypto.js vulnerable to heartbleed attack?
Apr
9
comment Failed to connect to netcat reverse shell
Ok, think I've spotted something. You probably don't need the %00 in your query. How does it work without it?
Apr
9
comment Failed to connect to netcat reverse shell
What does the apache logs say? Also, do you see the process in "ps aux"?
Apr
8
awarded  Enthusiast
Apr
3
comment Apache, DocumentRoot and path traversal - /manual/ query
That would be nice :)
Apr
3
comment Apache, DocumentRoot and path traversal - /manual/ query
Ok, so this is a false positive? It might not be the same for your configuration, but take a look at /etc/httpd/conf.d/manual.conf . Here you can remove the line for the manual (Alias /manual/ "/usr/local/apache/htdocs/manual/"). Remember to restart/reload the apache server afterwards.
Apr
3
revised Apache, DocumentRoot and path traversal - /manual/ query
added 337 characters in body
Apr
3
answered Apache, DocumentRoot and path traversal - /manual/ query
Mar
31
comment Is it a real security benefit if a host uses static IP Addresses for authentication?
Blind TCP spoofing is again feasible due to SYN-Cookies. It is "easier" to guess the initial SEQ, you can skip the 1st SYN packet due to SYN-Cookies. This mean you only send the third packet in a handshake. This can also contain a payload. Details here jakoblell.com/blog/2013/08/13/… - Does not apply in all environments (stateful firewalls which do not understand syncookies will enforce the complete handshake)
Mar
29
comment How do I prove for my client that unused ports are closed and unused services are disabled?
If there are not many servers, you can do some checks manually. "netstat -nlp" on linux will show listening ports and the process who is listening.
Mar
27
comment Does WiFi SSID spoofing also affect known password protected networks?
You might not know where someone live, as you are attacking the client, and not the AP - you are the AP. The SSID can be used to find out where the client belongs.
Mar
27
answered Scan All private subnets with NMAP