196 reputation
5
bio website
location Germany
age 29
visits member for 2 years, 2 months
seen Apr 2 at 13:08

Student of Software-Engineering and IT-Security Perfectionist. Cummunicative. FOSS friend. 6t6FVJ87danTK9Y7


Apr
2
awarded  Scholar
Apr
2
accepted Why does switching to “n-only” help preventing attacks on WPS?
Jan
28
awarded  Citizen Patrol
Jan
28
awarded  Supporter
Jan
28
comment Debugging and DLL-Injection
Thanks for the pointers. So far I had only used wrappers to these functions (pydbg, immlib).
Jan
28
asked Debugging and DLL-Injection
Jan
26
comment Breaking out of attribute in double quotes
Excatly. Dinu is right. This is not just about encodiing.
Jan
21
comment Breaking out of attribute in double quotes
@Rock: Again. This is not about DEFENSE. It is about OFFENSE. I know perfectly well that blacklisting sucks. I want to know if there is a way to gain more than just execution in the context of href
Jan
16
comment Breaking out of attribute in double quotes
I did not know about the vbscript: handler. Do you know about a good list of handlers that one could try? I did not find the information with OWASP
Jan
16
comment Breaking out of attribute in double quotes
Thanks for your tips. The idea to trick the user into clicking the link like this is ver creative. I like :) The utf-7 approach won't work for me since the target correctly sets the charset to utf-8
Jan
16
comment Breaking out of attribute in double quotes
Thanks Rock. I think you misread my question. I already do the HTML encoding to get around the blacklist (and of course I know that whitelisting is the way to got). What I cannot do using HTML-Encoding is breakt out of the context of the attribute value because if I encode the whole string with html encoding this will not work to add new attributes to the href tag or close the tag since HTML does not decode stuff like &#x6A into characters outside the context of the attribute value.
Jan
15
asked Breaking out of attribute in double quotes
May
5
comment How (if at all) can an attacker manipulate an already established SSL/TLS Connection?
Yeah. On l1/l2 you can do MITM to an extent where you can see the encrypted data passing across but thats about it.
May
5
awarded  Teacher
May
5
answered Is Wi-Fi Protected Setup still safe?
May
5
asked How (if at all) can an attacker manipulate an already established SSL/TLS Connection?
Mar
1
awarded  Student
Mar
1
comment Why does switching to “n-only” help preventing attacks on WPS?
Thanks Rick. Yeah that is the other option we are considering. So far the E4200 is a work in progress (wip).
Mar
1
asked Why does switching to “n-only” help preventing attacks on WPS?