Polynomial

32,757 reputation

1066135

bio	website	en.wikipedia.org/wiki/…
	location	United Kingdom
	age	25
visits	member for	1 year, 7 months
	seen	18 hours ago
stats	profile views	2,043

Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado, devourer of donuts.

Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly

All answers and comments are encrypted with ROT256-ECB.

Opinions are my own. Advice provided with no warranty.

	32,757 reputation	bio	website	en.wikipedia.org/wiki/…	visits	member for	1 year, 7 months
1066135 badges		location	United Kingdom		seen	18 hours ago

summary answers questions tags badges favorites bounties reputation activity

2,742 Actions

suggestions reviews revisions comments badges posts accepts all

18h	answered	Security implications of an exploited router
18h	answered	How can a website find my real IP address while I'm behind a proxy?
1d	answered	PDF files on webserver file system
1d	comment	PDF files on webserver file system SCP is hardly a good fit for client usability, especially if they're non-technical.
May 15	comment	Password Verification Server @John Not really. The whole benefit of a HSM is that isn't a general purpose computing device, so it's much more difficult to attack in traditional ways.
May 15	answered	Password Verification Server
May 15	comment	Is it posible to make shellcode with C++? This is actually how I write shellcode. Use `__asm` in C, insert `db` instructions with a known uncommon values before and after the shellcode, compile it, then open it in a hex editor and do a search for them - easy extraction. Saves having yet another compiler on my box, and most decent IDEs will syntax highlight nicely.
May 15	comment	Designing a Sandbox for Windows On Windows, the normal way is to hook APIs at the user level, using code caves and redirects.
May 14	comment	Source where you can find if a CVE has a patch or not CVE Details is another good resource for this stuff, but no explicit notice of it being patched or not.
May 14	comment	What kind of attack was this? `mod_security` for Apache is pretty decent.
May 14	awarded	Nice Answer
May 13	awarded	Popular Question
May 13	awarded	Nice Answer
May 13	comment	Cascading Encryption Algorithm using mcrypt or GnuGP Mimir Software + TrueCrypt = "MCrypt". It's nothing to do with the actual mcrypt. They're probably selling open source software illegally, or have backdoored the hell out of it.
May 13	comment	Cascading Encryption Algorithm using mcrypt or GnuGP The "mcrypt" page you posted seems highly suspicious. It is a verbatim word-for-word copy of the real TrueCrypt website. The SourceForge page you linked is the correct one for mcrypt.
May 13	comment	Making undeterminable containers inside existing file system This sounds like a questionable approach. Why not just use hidden TrueCrypt volumes that have a provable security model?
May 13	answered	Are password-protected ZIP files secure?
May 9	answered	Prove that you deleted the file
May 9	comment	Linux Runtime Memory protection "research about this article" - what article are you referring to? Also, protecting process memory against what?
May 9	comment	Information Security career guidance? Hi Disha, welcome to IT Security StackExchange. Unlike normal forums, StackExchange has certain requirements on the types of questions that are suitable. One of those requirements is that questions are objective and definitively answerable, which this question doesn't meet. As such, it will likely be closed. Please see the FAQ for more details.