745 reputation
314
bio website software-talk.org
location Germany
age 27
visits member for 2 years, 6 months
seen 5 hours ago

-.-


1d
revised XSS - Bypass this RegExp
added 677 characters in body
1d
answered XSS - Bypass this RegExp
Oct
12
answered Is it dangerous for apache error_log to be writable?
Oct
11
awarded  Custodian
Oct
11
reviewed Approve suggested edit on Is it a good idea to use the user's username as a salt when hashing a password like hash(username_str + password_str)?
Oct
11
answered Is it a good idea to use the user's username as a salt when hashing a password like hash(username_str + password_str)?
Sep
29
revised Does a random set of secondary passwords add any security?
added 175 characters in body
Sep
29
revised Does a random set of secondary passwords add any security?
added 376 characters in body
Sep
29
answered Does a random set of secondary passwords add any security?
Aug
30
comment How secure is this method to remember security questions?
I would definitely save it. Some sites not only use these questions for password recovery, but also in random intervals or on special actions as "additional security". So you will have a problem if you didn't write it down.
Aug
30
comment How secure is this method to remember security questions?
do you have any information on how most sites handle the confidentiality of the answers? Because my guess would be that they would not hash it, so that an approximate answer could be used as well (like on the phone: I went to albany high, Do you mean Albany High School?).
Aug
29
reviewed No Action Needed Why should I sign data that's already encrypted?
Aug
28
comment Wordpress Brute Force Attacker knows real admin Username -
@rm-vanda Oh yes, I forgot to mention from where that page is linked, good point. I updated my answer. (btw, I'm pretty sure that that is not the only place (although I forgot where else it was linked from), that's why I suggested editing the database instead of using rewrites.)
Aug
28
revised Wordpress Brute Force Attacker knows real admin Username -
added 66 characters in body
Aug
28
answered Wordpress Brute Force Attacker knows real admin Username -
Aug
26
comment Brute force alphanumeric password using JohnTheRipper
@andrepd well, . and _ will be filtered out. And you probably are missing three characters in your .pot file? how does it look?
Aug
25
comment Brute force alphanumeric password using JohnTheRipper
@andrepd do you have a .pot file (which contains all the characters that you want)? if not, this will not work. In that case, either create a .pot file from a wordlist or similar, or use john --make-charset=YOUR_NEW_FILE.chr --external=filter_lowernum YOUR_WORDLIST (the wordlist should at least contain all the characters you want once)
Aug
25
revised Brute force alphanumeric password using JohnTheRipper
added 276 characters in body
Aug
25
revised Brute force alphanumeric password using JohnTheRipper
added url: how to create own filter
Aug
25
revised Brute force alphanumeric password using JohnTheRipper
added 580 characters in body