5,436 reputation
22356
bio website pablumfication.co.uk
location England, United Kingdom
age 27
visits member for 3 years, 9 months
seen Aug 19 at 8:54

Dec
18
comment Is this a reasonable approach to “generating” passwords?
Evgeni see this question security.stackexchange.com/questions/662/…
Dec
10
comment How to know which database is behind a web application?
@Polynomial your right without a doubt. I'm just saying without knowing any potential SQL Injection attack that's a place to start.
Dec
5
comment php.ini security setting after attack
welcome to the site and thanks for your answer. But could you format it a little better and maybe add some details about your suggestions?
Jun
22
comment How to properly secure OO PHP CMS?
@AndrewSmith are you saying that you want to for example protect customer information (name, address, etc) from being viable by the attacker?
Aug
25
comment What to do in response to a source code and/or database leak by a third party hosting provider?
Sorry to hear about your problem but what is the question here? Are you looking for after leak suggestions in which case you should probably say what was in the database dump that got leaked as that will dictate on it a lot.
Aug
23
comment Combat Apache Killer
For people unfamiliar with the script it is available here - exploit-db.com/exploits/17696
Aug
12
comment Which resources can help me learn how to use metasploit?
+1 Metasploit unleashed is a very good resource.
Aug
2
comment Wordpress online pharmacy hack?
It's can be free if just a personal blog depending on how much you wish to contribute its between $0-120yr. For business its $5/mo which is still not bad.
Aug
2
comment Wordpress online pharmacy hack?
@Mena are you talking about spam posts / comments being posted to the blog?
May
23
comment How reliable is a password strength checker?
@Yaur You could alternatively use something like pwqcheck under Linux and verify the source code manually.
May
23
comment How reliable is a password strength checker?
@Yaur I disagree. Verification is fairly simple, use firebug net monitoring mode and you can watch all activity to and from the site. You could also monitor it using wireshark.
May
23
comment How reliable is a password strength checker?
@Yaur the tester does not send your password across the net at all. It assesses the strength using locally executed JavaScript.
May
6
comment extract from pcap all protocols found
I'd +1 if I had any votes left for the day. Might want to do tshark -r test.cap -Tfields -eframe.protocols | sort | uniq so you only get a list uniq entries.
Apr
14
comment How to protect data on a thumb drive
@Kromey I've never tried turning it off but remembered you can customise it. Just done a quick google and it appears it can only be customised on the IronKey Enterprise which allows the setting of the allowed number of failed attempts.
Apr
12
comment Egress filtering on an office network?
Websters 'egress' a place or means of going out.
Mar
22
comment How do you properly make a backdoor shell with netcat using UDP?
Trying the flags you are using with /bin/nc.traditional under Ubuntu I get nothing when using the UDP flag not the single character issue you are seeing. But works fine with TCP.
Mar
22
comment How do you properly make a backdoor shell with netcat using UDP?
What version of Linux are you using for this? Netcat is a bit different across the various distributions and can effect the behavior of some flags.
Mar
14
comment Is there a need for a simple SAAS security risk assessment application?
@Rakkhi I'm afraid I don't really see a question in this. But I will give you some feedback. I would suggest making the login for your demo work without js if you really need a login that is and also making the demo work without having to signup would be good as well.
Mar
9
comment Is AJAX fundamentally insecure?
Well @C. Ross judge for yourself if you don't think the answer I posted answers your question. Then please say and we can reopen it. If you simply want a yes or no answer to if AJAX is fundamentally insecure then the brief answer is No not anymore than any normal web page. If your interested in the theory of what could potentially be exploited when using Ajax incorrectly on a page then it might be worth reopening this question.
Mar
9
comment Is AJAX fundamentally insecure?
This has kinda been discussed before. This answer may answer your question security.stackexchange.com/questions/2099/…