Reputation
58,865
Next tag badge:
593/400 score
74/80 answers
Badges
17 146 240
Newest
 Nice Answer
Impact
~2.3m people reached

Feb
3
reviewed Satisfactory Is it useful to determine the name of the server software while doing a penetration test?
Feb
3
reviewed Excellent How much should I care about the iOS/Android version when pentesting mobile app?
Feb
3
reviewed Excellent Is it preferable to perform encryption using database functions or code?
Feb
3
reviewed Excellent How secure is Windows 8 email authentication?
Feb
3
reviewed Excellent What does a HTML filter need to do, to protect against SVG attacks?
Feb
3
reviewed Satisfactory Is it possible to boot into root's /bin/bash on a LUKS encrypted device?
Feb
3
reviewed Satisfactory Future proof encryption possible in theory?
Feb
3
answered Encrypting user data using password and forgot my password
Feb
2
asked Maltego transform samples
Feb
2
awarded  Popular Question
Feb
1
reviewed Approve Reverse engineering malware/viruses
Feb
1
accepted What goes into an average incident response process for a corporate network?
Feb
1
accepted Is NTFS file compression vulnerable to a CRIME-like attack when using an encrypted volume?
Feb
1
accepted Better way to import Win32 APIs from injected shellcode
Feb
1
accepted How can SMS spoofing be detected?
Feb
1
accepted How does OCSP stapling work?
Feb
1
awarded  Nice Question
Jan
30
comment How can PayPal spoof emails so easily to say it comes from someone else?
You seem to misunderstand why I asked you to provide an excerpt. StackExchange isn't just yet another Q&A site - it aims to be a go-to source for clear answers and information. As such, SE has a range of guidelines and rules about content, and one of those is that answers shouldn't consist of only a link, especially when the external media isn't text. If the links change on the 3rd party site later, your answer becomes completely useless - otherwise known as link rot. This is a requirement of all answers across the StackExchange network.
Jan
29
reviewed Approve Best practice advice - folder security (windows environment)
Jan
29
comment default.php file found on the server, is this a security threat?
@derobert The system command was disabled for security reasons, and the PHP process is sandboxed.