6,091 reputation
41142
bio website adranos.com
location
age
visits member for 2 years, 7 months
seen Feb 13 at 14:40

@TildalWave said having a sig would encourage more people to view my profile. Also beer.


Apr
30
accepted “Please Enter Nth Character” without HSM
Apr
30
reviewed Leave Closed Filehosting - Malicious or not?
Apr
30
reviewed Leave Open How long will it take to crack a 10-15 character winrar password?
Apr
30
reviewed Leave Open Can anyone determine what kind of encryption this is?
Apr
30
reviewed Close Breaking into your own systems
Apr
30
reviewed Close Asymmetric encryption algorithms
Apr
30
reviewed Close Create additional database in server using sql injection
Apr
30
reviewed Leave Open How secure is wiping an encrypted Android device?
Apr
30
reviewed Leave Open Web application security standards/certificates
Apr
30
answered Can anyone determine what kind of encryption this is?
Apr
30
comment Can anyone determine what kind of encryption this is?
This might be marked as too localized, but do you have any other information? They just look like random uids matching the format w0dA0dwwwMP1
Apr
29
comment .JPEG File upload shell via EXIF comments
In combination with a local file include vulnerability this would be quite powerful - ie not having to rely on poor extension filtering. I assume include(evil_image.jpg); would execute the embedded scripts..
Apr
28
comment Asymmetric encryption algorithms
RSA is secure, it is by far the most widely used asymmetric algorithm out there.
Apr
28
comment Are there any situations when one can only mount a passive MITM?
One could imagine a stream which is HMACed but not encrypted, anything that is digitally signed is tamper evident.
Apr
28
reviewed Close Filehosting - Malicious or not?
Apr
28
reviewed No Action Needed Best option to fuzz a C Network Program
Apr
28
reviewed No Action Needed Any browser that supports script-nonce?
Apr
26
comment Resources for building a network security curriculum
So I actually got around to putting something online. There is a setup guide and a contact address if you have any trouble. alhazred.net let me know how it goes!
Apr
26
awarded  Yearling
Apr
26
comment Working from many places <-> being able to restrict SSH access to server to IP range
MAC addresses are not relevant, the MAC that you would see on the server would almost certainly never change, due to it being some on-premises routing device. The 'source mac' you see in an ethernet frame is only that of the last device the frame passed through.