Reputation
1,619
Top tag
Next privilege 2,000 Rep.
Edit questions and answers
Badges
1 12 29
Impact
~119k people reached

  • 0 posts edited
  • 1 helpful flag
  • 174 votes cast
Dec
8
comment Is my web server being compromised?
@John I dug it out of the mzb.c file that its downloading and then compiling.
Nov
18
comment How to thwart PHPMyAdmin attacks?
@Ton van den Heuvel no the "real problem" is getting hacked.
Nov
16
comment Web Server Security Overkill?
@Aaron i'm not sure why you'd use nginx. You can use apache+mod_security as a proxy with whatever strange and featureless httpd you demand using.
Oct
27
comment How to exploit data being written to file
@Brian G being forced to write to input.dat isn't an issue alone unless you can pair it with another attack like an LFI vulnerability. Usually being able to write arbitrary files comes up in a directory traversal attack. In short this doesn't sound like a vulnerability.
Oct
27
comment How to exploit data being written to file
@Brian G without any specifics relating to this vulnerably i am posting on how other exploits are able to gain remote code execution by uploading a file.
Oct
18
comment Why can't I get a 5.3.3 libphp.so?
yeah but i'm not getting a .so! thats the whole point of this post.
Oct
18
comment Why can't I get a 5.3.3 libphp.so?
Thanks, but i don't want to use php-cgi. i want a libphp5.so.
Oct
18
comment Why can't I get a 5.3.3 libphp.so?
I have totally used the --enable-so option before. I just grabbed the latest 5.3.3 source from php.net and its not there, i even tried grepping though the -h looking or .so, so such luck. There is a php-cgi option, but i don't want that.
Oct
18
comment Why can't I get a 5.3.3 libphp.so?
Yeah i have that in my ./configure and i'm not getting a .so file. find . | grep "\.so" doesn't find anything :(
Sep
29
comment Can I do a ctrl-z without the process locking up?
and @wzzrd yeah but its not a job, its just a command like firefox.
Sep
28
comment Can I do a ctrl-z without the process locking up?
It says "no such job"
Sep
2
comment Break into Windows 7?
-1 i thought you said no exploits? wtf?
Sep
2
comment Break into Windows 7?
@chunkyb2002 well peter m didn't want to use a bootdisk, and he accepted your answer which is just a straight up black hat attack that does the exact same thing. Its really baffling. I think that people just don't understand security at all.
Aug
29
comment Break into Windows 7?
@Peter M and @chunkyb2002 can someone please explain how this is not an exploit?
Aug
27
comment Break into Windows 7?
@squillman Touché, I wonder why they haven't implemented a word filter.
Aug
27
comment Break into Windows 7?
@Izzy Your welcome to look at my profile for the severity metric, but I don't have a list of the ~25 CVE numbers I've accumulated. After a while you just kind of loose track.
Aug
27
comment Break into Windows 7?
@Izzy Another CVE number would be nice :) Or maybe a bugtraq ID. Another DHS severity metric would be really sweet. Have you ever gotten one of toughs?
Aug
27
comment Break into Windows 7?
@squillman I don't think you should tell people how to use their constitutional rights.
Aug
27
comment Break into Windows 7?
@Izzy exploit writer != scriptkiddie. (Also I write code for aerospace. I just write exploits for fun :)
Aug
27
comment Break into Windows 7?
So let me get this straight, you want to break into windows but a boot disk is too black hat for you. Would a privilege escalation exploit using buffer overflow in kernel level be okay? Or how on earth would you think of breaking into windows without using an exploit or a boot disk? This question is seriously wtf.