3,064 reputation
518
bio website bonsaiviking.com
location
age
visits member for 3 years, 1 month
seen 2 hours ago

20h
comment Are passwords comprised of key sequences on a keyboard any less secure than the same characters but jumbled up?
@Peteris not for hunt-and-peck typists.
May
22
answered Any way to circumvent a 'filtered' response on NMap?
May
9
awarded  Necromancer
May
7
reviewed Reject How to prevent installation of Google Chrome extensions
Apr
28
answered How to run nmap HTTP scripts on unusual ports
Apr
23
answered Caching ARP to avoid L2 detection on switched network?
Apr
18
awarded  Yearling
Apr
16
comment nmap script with credentials
@yuda41 no particular file extension is needed. But some versions had a bug where absolute paths could not be used. Try using -d to get debug output, and use relative paths.
Apr
13
answered nmap script with credentials
Apr
7
revised Why companies do not simply use hackers' tools to find their own vulnerabilities prior to the release of their software?
re-tag, focus on relevant tools to finding vulnerabilities as opposed to exploiting them.
Apr
7
comment Why companies do not simply use hackers' tools to find their own vulnerabilities prior to the release of their software?
If the question were edited to remove reference to Metasploit, you may get more thoroughly thought-out answers. If you want to mention categories of tools, relevant ones would be fuzzers and code analyzers.
Mar
27
answered Why does WPA2 need a 4 way handshake?
Mar
27
revised Why does WPA2 need a 4 way handshake?
Add tags, clarify domain of the question.
Mar
10
answered proxychains-ng with nmap issues
Mar
6
answered SSLv3 HandShake but TLSv1 client hello
Mar
5
comment Is plain text over https really a good idea?
The advice to salt a password is like saying "Always sharpen your pocket knife before walking through bear territory." Too little, too late. You should be using a secure password storage mechanism. Even PHP got this right eventually, defaulting to bcrypt when you use password_hash and password_verify.
Mar
4
answered nmap not running as root shows unknown open ports for a fraction of a second
Mar
4
comment In light of the FREAK TLS vulnerability, why do so many servers still offer RSA-EXPORT keys?
@SiyuanRen The ciphersuite is changed back to what the client expects. The bug is that the client will accept export-grade keys even when the ciphersuite should be using longer keys. Edited my answer to clarify.
Mar
4
revised In light of the FREAK TLS vulnerability, why do so many servers still offer RSA-EXPORT keys?
Clarify attacker's modifications to server traffic
Mar
4
awarded  Explainer