647 reputation
313
bio website software-talk.org
location Germany
age 27
visits member for 2 years, 5 months
seen 10 hours ago

-.-


17h
reviewed No Action Needed Why should I sign data that's already encrypted?
23h
revised DOM XSS issue in code
format code, rephrase question, add tags
1d
suggested suggested edit on DOM XSS issue in code
1d
comment Wordpress Brute Force Attacker knows real admin Username -
@rm-vanda Oh yes, I forgot to mention from where that page is linked, good point. I updated my answer. (btw, I'm pretty sure that that is not the only place (although I forgot where else it was linked from), that's why I suggested editing the database instead of using rewrites.)
1d
revised Wordpress Brute Force Attacker knows real admin Username -
added 66 characters in body
1d
answered Wordpress Brute Force Attacker knows real admin Username -
Aug
26
comment Brute force alphanumeric password using JohnTheRipper
@andrepd well, . and _ will be filtered out. And you probably are missing three characters in your .pot file? how does it look?
Aug
25
comment Brute force alphanumeric password using JohnTheRipper
@andrepd do you have a .pot file (which contains all the characters that you want)? if not, this will not work. In that case, either create a .pot file from a wordlist or similar, or use john --make-charset=YOUR_NEW_FILE.chr --external=filter_lowernum YOUR_WORDLIST (the wordlist should at least contain all the characters you want once)
Aug
25
revised Brute force alphanumeric password using JohnTheRipper
added 276 characters in body
Aug
25
revised Brute force alphanumeric password using JohnTheRipper
added url: how to create own filter
Aug
25
revised Brute force alphanumeric password using JohnTheRipper
added 580 characters in body
Aug
25
answered Brute force alphanumeric password using JohnTheRipper
Aug
25
reviewed No Action Needed Testing clean urls with sqlmap
Aug
24
revised someone is trying to SQL injection me.. what are they trying to do?
removed xss tag
Aug
24
reviewed No Action Needed Is it safe to play around with this on a virtual machine?
Aug
24
suggested suggested edit on someone is trying to SQL injection me.. what are they trying to do?
Aug
22
awarded  Enthusiast
Aug
21
reviewed No Action Needed emailing a direct link to executable file blacklist risk
Aug
19
awarded  Autobiographer
Aug
19
comment XSS echoed in pages html code but no pop up window
@Ben the site uses some kind of filter, if you post the source code we can say if it is good, or if an attacker can get around it. But without code it is hard to say. For possible ways around some filters, see this owasp xss cheat sheet