Profile Activity

Sonny Ordell

Meta user

Network profile

Reputation

3,284

3.3k
3k
2.6k

2017
2018
2019
2020

Top tag

penetration-test

Next privilege

5,000 Rep.

Approve tag wiki edits

Badges

Newest

Famous Question

Next badge

0/1

Impact

1 post edited

3 helpful flags

67 votes cast

Summary Answers Questions Tags Badges Favorites Bounties Reputation All actions

46 Questions

Views Newest Activity Votes

votes

answer

views

WPA significantly less secure than WPA2?

Jun 6 '11 at 23:45 AviD♦ 67.7k

votes

answers

30k

views

Leveraging a shell from SQL injection

sql-injection

Mar 7 '17 at 7:15 kaidentity 2,514

votes

answers

views

Threat assesment for a captive portal

network wifi vlans

Sep 2 '18 at 22:05 forest 50.5k

votes

answers

43k

views

Browsing exploits with Metasploit console

tools vulnerability-scanners metasploit

May 12 at 21:46 sadiaa 1

votes

answers

19k

views

Nmap reporting almost every port as open

penetration-test ports nmap

Sep 1 at 0:58 Tarun 1

votes

answers

views

Bypassing a reverse proxy/NAT

network network-scanners proxy

Oct 24 '16 at 16:27 atdre 18.1k

votes

answer

37k

views

Force a specific SSL cipher

tls penetration-test

Mar 22 '17 at 16:54 AviD♦ 67.7k

votes

answers

views

Attacks against windows kiosk software

operating-systems windows desktop

Apr 11 '12 at 0:21 Community♦ 1

votes

answer

10k

views

Are there any ways to leverage NTLM V2 hashes during a penetration test?

hash penetration-test ntlm

Feb 2 '17 at 4:00 techraf 8,683

votes

answer

views

Bypassing hidden SSID and MAC filtering “protection”

network wifi mac-spoofing

Sep 9 '12 at 2:08 Community♦ 1

votes

answers

views

Is denying login after incorrect attempts ineffective?

authentication passwords

Aug 19 '14 at 3:15 Community♦ 1

votes

answers

views

Any advantage to securing WiFi with a PSK, other than to keep out unauthorized

cryptography network authentication wifi

Jul 4 '13 at 10:33 Community♦ 1

votes

answers

views

What is the practical difference between MAC and Capabilities

access-control mandatory-access-control capabilities

Nov 26 '11 at 10:56 D.W. 92.6k

votes

answer

17k

views

Bypassing a captive portal with tor

wifi tor captive-portal

Oct 22 '15 at 0:48 Community♦ 1

votes

answers

817

views

Determining vulnerable software on client machines

exploit known-vulnerabilities vulnerability-scanners

Apr 3 '12 at 12:02 John Richardson 11

votes

answers

views

SSL / TLS Renegotiation Handshakes MiTM Plaintext Data Injection- medium or low risk?

tls man-in-the-middle nessus cvss

Jun 28 '17 at 2:30 rcbartel 1

votes

answers

11k

views

What is a good browser for web application pen testing? [closed]

web-application web-browser penetration-test xss

Apr 13 '15 at 19:51 slm 167

votes

answers

54k

views

How can you see the device history of a computer when doing forensics?

forensics

Jul 26 '16 at 9:37 Community♦ 1

votes

answers

446

views

Forensics on a SOHO router

network forensics routing

Apr 11 '12 at 13:54 woozle 69

votes

answers

views

How effective is an IDS at catching targeted attacks

attacks ids detection

Feb 29 '12 at 2:22 Sonny Ordell 3,284

votes

answers

914

views

International pentester certification

certification

Nov 20 '11 at 18:02 Henri 1,515

votes

answers

570

views

Enterprise security incident response and detection

incident-response siem

Jun 23 '11 at 16:29 Rakkhi 5,623

votes

answers

301

views

Spamming exploits without user detection

exploit malware detection

Jun 10 '11 at 11:14 Community♦ 1

votes

answers

views

Verifying NLA support on Remote Desktop

penetration-test remote-desktop

Oct 8 '15 at 18:51 Community♦ 1

votes

answers

views

Do WebGoat style XSS attacks still work?

web-application webgoat

Jun 16 '15 at 14:26 Schism 107

votes

answers

views

What are the practical differences between SELinux targeted mode and a capability based OS?

mandatory-access-control capabilities selinux

May 6 '15 at 20:47 Community♦ 1

votes

answers

views

Bypassing Trustwave NAC

arp-spoofing vlans network-access-control

Jul 16 '14 at 0:15 Sonny Ordell 3,284

votes

answers

736

views

Determing live hosts past a restrictive firewall with nmap

penetration-test nmap

Jan 21 '14 at 14:19 user37658 49

votes

answer

456

views

Attacks against HIDS software running on the same machine

operating-systems attacks ids

Jun 17 '11 at 23:49 this.josh 8,713

votes

answer

views

Windows task manager can see all processes as non administrator without permission

operating-systems windows access-control

Jun 9 '11 at 21:11 AviD♦ 67.7k

Stack Exchange Network

current community

your communities

more stack exchange communities

Next privilege

Next badge

46 Questions

WPA significantly less secure than WPA2?

Leveraging a shell from SQL injection

Threat assesment for a captive portal

Browsing exploits with Metasploit console

Nmap reporting almost every port as open

Bypassing a reverse proxy/NAT

Force a specific SSL cipher

Attacks against windows kiosk software

Are there any ways to leverage NTLM V2 hashes during a penetration test?

Bypassing hidden SSID and MAC filtering “protection”

Is denying login after incorrect attempts ineffective?

Any advantage to securing WiFi with a PSK, other than to keep out unauthorized

What is the practical difference between MAC and Capabilities

Bypassing a captive portal with tor

Determining vulnerable software on client machines

SSL / TLS Renegotiation Handshakes MiTM Plaintext Data Injection- medium or low risk?

What is a good browser for web application pen testing? [closed]

How can you see the device history of a computer when doing forensics?

Forensics on a SOHO router

How effective is an IDS at catching targeted attacks

International pentester certification

Enterprise security incident response and detection

Spamming exploits without user detection

Verifying NLA support on Remote Desktop

Do WebGoat style XSS attacks still work?

What are the practical differences between SELinux targeted mode and a capability based OS?

Bypassing Trustwave NAC

Determing live hosts past a restrictive firewall with nmap

Attacks against HIDS software running on the same machine

Windows task manager can see all processes as non administrator without permission