Pentester, ex-developer, security researcher, reverse engineer, electronics tinkerer, internet activist, zombie eradicator, promulgator of useless facts, shrubbery inspector, bacon aficionado.
Strengths: Security, Crypto, Win32 API, C#, .NET, PHP, x86 assembly
All answers and comments are encrypted with ROT256-ECB.
Opinions are my own. Advice provided with no warranty.
|
2d
|
|
comment |
Password Verification Server @John Not really. The whole benefit of a HSM is that isn't a general purpose computing device, so it's much more difficult to attack in traditional ways. |
|
2d
|
|
answered | Password Verification Server |
|
May
15 |
|
comment |
Is it posible to make shellcode with C++? This is actually how I write shellcode. Use __asm in C, insert db instructions with a known uncommon values before and after the shellcode, compile it, then open it in a hex editor and do a search for them - easy extraction. Saves having yet another compiler on my box, and most decent IDEs will syntax highlight nicely.
|
|
May
15 |
|
comment |
Designing a Sandbox for Windows On Windows, the normal way is to hook APIs at the user level, using code caves and redirects. |
|
May
14 |
|
awarded | Good Answer |
|
May
14 |
|
comment |
Source where you can find if a CVE has a patch or not CVE Details is another good resource for this stuff, but no explicit notice of it being patched or not. |
|
May
14 |
|
comment |
What kind of attack was this?mod_security for Apache is pretty decent.
|
|
May
14 |
|
awarded | Nice Answer |
|
May
13 |
|
awarded | Popular Question |
|
May
13 |
|
awarded | Popular Question |
|
May
13 |
|
awarded | Nice Answer |
|
May
13 |
|
comment |
Cascading Encryption Algorithm using mcrypt or GnuGP Mimir Software + TrueCrypt = "MCrypt". It's nothing to do with the actual mcrypt. They're probably selling open source software illegally, or have backdoored the hell out of it. |
|
May
13 |
|
comment |
Cascading Encryption Algorithm using mcrypt or GnuGP The "mcrypt" page you posted seems highly suspicious. It is a verbatim word-for-word copy of the real TrueCrypt website. The SourceForge page you linked is the correct one for mcrypt. |
|
May
13 |
|
comment |
Making undeterminable containers inside existing file system This sounds like a questionable approach. Why not just use hidden TrueCrypt volumes that have a provable security model? |
|
May
13 |
|
answered | Are password-protected ZIP files secure? |
|
May
10 |
|
accepted | Handling background network operations in Python |
|
May
9 |
|
comment |
Handling background network operations in Python And re: your question about background workers in C#... not exactly. A task is not guaranteed to run on its own personal thread, but is instead scheduled onto a thread pool. So it might actually end up meaning that your task runs on the same thread as your calling code, if your calling code happens to yield execution immediately after the task is scheduled. |
|
May
9 |
|
comment |
Handling background network operations in Python Looks potentially ideal. I'll give this a go and see how it works out. |
|
May
9 |
|
asked | Handling background network operations in Python |
|
May
9 |
|
answered | Prove that you deleted the file |
