3,137 reputation
518
bio website bonsaiviking.com
location
age
visits member for 3 years, 3 months
seen 2 hours ago

Jul
27
comment Is there an equivalent of meterpreter's “run persistence” for Linux?
With what level of privilege?
Jul
17
revised Is there a nmap command to get the top # most common ports?
Found a better way to do it.
Jun
26
comment How do Common Vulnerabilities and Exposures (CVEs) work?
This is hardly a complete answer, but cvedetails.com is an awesome resource for searching CVEs.
Jun
3
comment explanation of an nmap behaviour
-sV should not make a difference, since it does not run unless -sS or -sT detect the port to be open. Maybe there is some instability in the service that makes it not available all the time?
May
28
comment Are passwords comprised of key sequences on a keyboard any less secure than the same characters but jumbled up?
@Peteris not for hunt-and-peck typists.
May
22
answered Any way to circumvent a 'filtered' response on NMap?
May
9
awarded  Necromancer
May
7
reviewed Reject How to prevent installation of Google Chrome extensions
Apr
28
answered How to run nmap HTTP scripts on unusual ports
Apr
23
answered Caching ARP to avoid L2 detection on switched network?
Apr
18
awarded  Yearling
Apr
16
comment nmap script with credentials
@yuda41 no particular file extension is needed. But some versions had a bug where absolute paths could not be used. Try using -d to get debug output, and use relative paths.
Apr
13
answered nmap script with credentials
Apr
7
revised Why companies do not simply use hackers' tools to find their own vulnerabilities prior to the release of their software?
re-tag, focus on relevant tools to finding vulnerabilities as opposed to exploiting them.
Apr
7
comment Why companies do not simply use hackers' tools to find their own vulnerabilities prior to the release of their software?
If the question were edited to remove reference to Metasploit, you may get more thoroughly thought-out answers. If you want to mention categories of tools, relevant ones would be fuzzers and code analyzers.
Mar
27
answered Why does WPA2 need a 4 way handshake?
Mar
27
revised Why does WPA2 need a 4 way handshake?
Add tags, clarify domain of the question.
Mar
10
answered proxychains-ng with nmap issues
Mar
6
answered SSLv3 HandShake but TLSv1 client hello
Mar
5
comment Is plain text over https really a good idea?
The advice to salt a password is like saying "Always sharpen your pocket knife before walking through bear territory." Too little, too late. You should be using a secure password storage mechanism. Even PHP got this right eventually, defaulting to bcrypt when you use password_hash and password_verify.