Reputation
3,651
Next tag badge:
43/100 score
8/20 answers
Badges
11 33
Newest
 Nice Answer
Impact
~240k people reached

Feb
4
reviewed Approve Why is leaving a passworded SSH over the internet so bad?
Feb
3
comment why not use hashed password as password
This reminds me of brainwallet. Instead of a truly random private key, it was derived from a password. Many people who used brainwallet had it emptied - en.bitcoin.it/wiki/Brainwallet
Feb
3
reviewed Close Generate Custom Brute Force Dictionary from Partial Knowledge of Password
Feb
3
reviewed Close What happens if two parties have the same public key?
Feb
3
reviewed Reviewed and give mecan you give me best, full tutorial of IP hijacking?
Feb
2
comment web application extracts uploaded tar files, is it vulnerable?
@JossefHarush - good, this closes the possibility of injecting parameters to tar, and possibly new commands if executed from a shell.
Feb
2
comment web application extracts uploaded tar files, is it vulnerable?
Is the user in control of the filename? Can this be used to execute additional commands?
Jan
30
comment What is airodump-ng able to detect?
Maybe your sniffer is not able to receive 802.11n. Otherwise, I cannot explain it.
Jan
30
comment Decrypting a very simple key
sorry, hope you still have fun with it :(
Jan
30
comment Decrypting a very simple key
Looks like a simple substition cipher. Start by analyzing what the most common letters are in your language and replace occurrences in the ciphertext. The last part looks like its a password given the use of digits.
Jan
30
comment What is airodump-ng able to detect?
You might notice that the iPhone will rotate the mac address when it is probing, but will use its real mac address when associated with an AP. As for your guest, do you know if he had wifi turned on? I am using an app called Tasker, and turns off Wifi when it cannot detect basestations near my house.
Jan
30
revised What is airodump-ng able to detect?
added 13 characters in body
Jan
29
comment Motion sensor door locks
There is an post on this at warroom.securestate.com/request-exit-sensor-bypass - the sensor looks exactly like the one you have posted. Add heat/cold, and you will get through.
Jan
29
revised What is airodump-ng able to detect?
added 478 characters in body
Jan
29
answered What is airodump-ng able to detect?
Jan
28
reviewed Leave Closed Bought used computer with working GSM card
Jan
28
reviewed Close need to hide server details using apache server whenever there is 404 or 403 error
Jan
28
reviewed Approve How safe is Apple's FileVault full disk encryption?
Jan
19
revised Reading physical memory frame previously owned by another process to read contents of its memory page
added 9 characters in body
Jan
19
reviewed Close Burpsuite accidental defacement, should I be concerned?