Reputation
3,401
Top tag
Next privilege 5,000 Rep.
Approve tag wiki edits
Badges
11 25
Newest
 Enlightened
Impact
~153k people reached

Jan
17
revised How does WPA2-PSK prevent evil twin password phishing?
BSSID and MAC are the same thing in this case
Jan
8
comment Removing remnants of a Metasploit exploit
I prolly should have said module instead of payload. If a module is not a memory corruption exploit then a stager might be used to deliver the meterpeter payload (e.g. tomcat but there are many better examples) that first bit of transferred data will touch disk and 'may' remain.
Jan
7
comment Removing remnants of a Metasploit exploit
Many metasploit payloads may touch disk prior to loading meterpreter
Jan
4
revised How unique should I make my SSID?
deleted 1 character in body
Jan
3
answered Capture & Decrypt packets captured by monitoring mode
Jan
3
answered How unique should I make my SSID?
Jan
3
answered Do cellphones periodically send a “hello” msg to nearby WiFi APs?
Dec
22
revised Finding artifacts of software
corrected spelling issue
Dec
11
comment Can the root user be removed from a *nix system to prevent privilege-escalation?
Isn't this the basis of SElinux? "It has no concept of a "root" super-user" en.wikipedia.org/wiki/Security-Enhanced_Linux
Dec
10
reviewed Approve Can a malware infect just by right clicking?
Dec
10
comment Finding Targets in Foreign Network
IPs don't change that often, and usually servers have static ips. Beyond that arp, netstat, your local DC, fileshares, netbios, local reverse dns lookups are pretty good methods
Dec
9
comment Bypass an escape function - SQL injection (Educational Purpose)
might be helpful to show your http request and the server's response
Dec
6
comment Blind SQL injection: Can you execute a hex string as part of the query?
Prolly worth your time youtube.com/watch?v=-AkUutmXwUI
Dec
4
reviewed Approve CSRF tokens in Single Page Applications (JavaScript/Angular)
Nov
28
reviewed Approve For an end-user, is HTML5/JavaScript more secure than Flash?
Nov
28
revised Dealing with a malware infected server
corrected question title
Nov
28
reviewed Approve Liliane Bettencourt scam?
Nov
27
comment How to prevent future attacks from Trojan.Agent.Linux.A?
The last part of the answer that I pointed to will be the most helpful then. Basically what logging was in place prior? can you determine from that how the attacker loaded the file? If not ensure in the future the proper controls/logging is in place.
Nov
26
awarded  Enlightened
Nov
26
awarded  Nice Answer