1,628 reputation
613
bio website colibrifrost.com
location
age
visits member for 2 years, 8 months
seen 2 days ago

I enjoy writing a programming and security focused blog complete with code snippets.

I try and exemplify very useful and tricky pieces of code, explain different security concepts and review some of my favorite books.

I learned a lot from open source projects so I try and publish my more exciting and useful programs on GitHub.

All in the name of fun and education.


Nov
23
comment Is a server absolutely safe if the attacker don't know unknown bug?
misconfigurations, default passwords, default code, poorly written code all can be leveraged by attackers and have nothing to do with patches or zero days
Nov
19
answered Difference between hardening guides (CIS, NSA, DISA)
Nov
18
comment Is it possible to exploit a file upload with whitelist and filename hashing?
py and rb? Do you have an interpreter that would execute these files?
Nov
6
comment Navigating SQL Injection Safeguards
Care to add the code for mysql_real_escape_String() if it's not too large of a function?
Oct
27
awarded  Nice Answer
Oct
26
revised Does this simple function add something to prepared statements?
added 261 characters in body
Oct
26
answered Does this simple function add something to prepared statements?
Oct
26
comment If perl/python is not guaranteed to be installed on a target system why are those scripts useful to hackers?
@kotozna Programming language isn't quite relevant to the covering tracks portion. Check out the edit for further info on your question.
Oct
26
revised If perl/python is not guaranteed to be installed on a target system why are those scripts useful to hackers?
added 244 characters in body
Oct
26
revised If perl/python is not guaranteed to be installed on a target system why are those scripts useful to hackers?
added 12 characters in body
Oct
26
comment If perl/python is not guaranteed to be installed on a target system why are those scripts useful to hackers?
For #4 metasploit is written in ruby, unless I missunderstand what you mean by this point?
Oct
26
answered If perl/python is not guaranteed to be installed on a target system why are those scripts useful to hackers?
Oct
4
comment where can I find list of zero day vulnerability?
It is a vulnerability for which there is no patch.
Oct
4
answered Understanding the security of my home network
Oct
4
revised WRT1900AC and network monitoring
deleted 2 characters in body
Oct
4
answered WRT1900AC and network monitoring
Oct
4
answered How to generete dictionary for brute force attack?
Sep
26
comment HTTPS self signed certficiate for personal website
if you're the only one using it then that's fine. Root CAs are to verify ownership for public websites
Sep
24
awarded  Autobiographer
Sep
20
comment Reflected XSS script passing through URL how to make it work and what are the preconditions for it to work?
I use iceweasel. Ive heard good thing about owasp mantra