capt8bit

4 ms·

1.
by capt8bit 8y ago
This is common misinformation. Even in this case, OpenBSD did not break the embargo. After protesting, they received the permission of the researcher to publish: Note that I wrote and included a suggested diff for OpenBSD already, and t
2.
by capt8bit 10y ago
> (I am, for what it's worth, extremely familiar with Burp, but only casually acquainted with mitmproxy). You may be disappointed, since I am the opposite. I use burp in rare cases now, since I've been using mitmproxy for so lo
3.
by capt8bit 10y ago
I have used mitmproxy for performing web application pentest for years. If you want something to create/intercept/edit/tamper/replay requests, this is your tool. If you want to script any of those things, this is still y
4.
by capt8bit 10y ago
Many thanks to you, cortesi, and the rest of the team. I hope this doesn't mean that the command-line interface is going to become a second-class interface? The CLI is what originally attracted me to mitmproxy. Having CLI keyboard shor
5.
by capt8bit 11y ago
> My comment was supposed to be an addendum but I failed by nitpicking and questioning your interpretation. I'm sorry. Well, I appreciate you pointing out where I was vague. You provided, and brought about, some important clarificat
6.
by capt8bit 11y ago
You are absolutely right. Big difference. I did not mean to imply that it was 5 days, regardless of holidays/weekends. In fact, because we are online more often during holidays, it is during holidays that we most often find vulnerabili
7.
by capt8bit 11y ago
The Security Researchers that I work with, and myself included, usually follow the RFPolicy: http://www.wiretrip.net/p/rfpolicy.html This responsible disclosure policy was first put together by rain.forest.puppy. (One
8.
by capt8bit 11y ago
"I've seen good documentations, but nothing beats the Arch Wiki. It's the most comprehensive Wiki you could imagine." I have heard this a number of times from Arch Fans, but I think I disagree. While I have referenced th