Reputation
1,669
Top tag
Next privilege 2,000 Rep.
Edit questions and answers
Badges
2 13 29
Impact
~134k people reached

  • 0 posts edited
  • 1 helpful flag
  • 174 votes cast
Jan
28
comment Getting started with a blacklist
What operating system/platform are you using?
Dec
9
comment Is my web server being compromised?
@John Well yeah the link is right there. It looks like the server down, which is good.
Dec
8
comment Is my web server being compromised?
@John I dug it out of the mzb.c file that its downloading and then compiling.
Nov
18
comment How to thwart PHPMyAdmin attacks?
@Ton van den Heuvel no the "real problem" is getting hacked.
Nov
16
comment Web Server Security Overkill?
@Aaron i'm not sure why you'd use nginx. You can use apache+mod_security as a proxy with whatever strange and featureless httpd you demand using.
Oct
27
comment How to exploit data being written to file
@Brian G being forced to write to input.dat isn't an issue alone unless you can pair it with another attack like an LFI vulnerability. Usually being able to write arbitrary files comes up in a directory traversal attack. In short this doesn't sound like a vulnerability.
Oct
27
comment How to exploit data being written to file
@Brian G without any specifics relating to this vulnerably i am posting on how other exploits are able to gain remote code execution by uploading a file.
Oct
18
comment Why can't I get a 5.3.3 libphp.so?
yeah but i'm not getting a .so! thats the whole point of this post.
Oct
18
comment Why can't I get a 5.3.3 libphp.so?
Thanks, but i don't want to use php-cgi. i want a libphp5.so.
Oct
18
comment Why can't I get a 5.3.3 libphp.so?
I have totally used the --enable-so option before. I just grabbed the latest 5.3.3 source from php.net and its not there, i even tried grepping though the -h looking or .so, so such luck. There is a php-cgi option, but i don't want that.
Oct
18
comment Why can't I get a 5.3.3 libphp.so?
Yeah i have that in my ./configure and i'm not getting a .so file. find . | grep "\.so" doesn't find anything :(
Sep
29
comment Can I do a ctrl-z without the process locking up?
and @wzzrd yeah but its not a job, its just a command like firefox.
Sep
28
comment Can I do a ctrl-z without the process locking up?
It says "no such job"
Sep
2
comment Break into Windows 7?
-1 i thought you said no exploits? wtf?
Sep
2
comment Break into Windows 7?
@chunkyb2002 well peter m didn't want to use a bootdisk, and he accepted your answer which is just a straight up black hat attack that does the exact same thing. Its really baffling. I think that people just don't understand security at all.
Aug
29
comment Break into Windows 7?
@Peter M and @chunkyb2002 can someone please explain how this is not an exploit?
Aug
27
comment Break into Windows 7?
@squillman Touché, I wonder why they haven't implemented a word filter.
Aug
27
comment Break into Windows 7?
@Izzy Your welcome to look at my profile for the severity metric, but I don't have a list of the ~25 CVE numbers I've accumulated. After a while you just kind of loose track.
Aug
27
comment Break into Windows 7?
@Izzy Another CVE number would be nice :) Or maybe a bugtraq ID. Another DHS severity metric would be really sweet. Have you ever gotten one of toughs?
Aug
27
comment Break into Windows 7?
@squillman I don't think you should tell people how to use their constitutional rights.