snyff

6 ms·

1.
by snyff 11y ago
Monetising https://www.pentesterlab.com by creating an online version of the exercises...
2.
by snyff 11y ago
Amazon is not super keen on people pentesting from or against their infrastructure. You will be better using labs available as ISO or VM.
3.
by snyff 13y ago
from php-2.0.1/src/lex.c void IntFunc(char *fnc_name) { int i=0; int cmdlen = strlen(fnc_name); while(cmd_table[cmdlen][i].cmd) { if(!strncasecmp(fnc_name,cmd_table[cmdlen][i].cmd,cmdlen)) { cmd_table[cmdlen][i].
4.
by snyff 13y ago
Success button with an Apple logo... nicely played ;)
5.
Searching for files added by mistake on github(blog.pentesterlab.com)
1 points by snyff 13y ago|0 comments
6.
by snyff 13y ago
Just did that at school, they needed someone to teach and I got lucky and got selected to do it :) Thanks ;)
7.
by snyff 13y ago
I think you can be suited for everything. IT Security is a real big domain, depending on your skills and what you like, you can land different jobs. If you are a person who go to calmly deep dive into problems, you may be interested by secu
8.
by snyff 13y ago
Fair point. <Kaa singing "Trust in Me"> My real name is on the PDF and you can find a lot of information on me on Internet... Previous talks, where I worked... As far as I know, the PDF aren't backdoored (I'm also working on a HTML
9.
by snyff 13y ago
You can try bugcrowd, they won't qualify for "a reputable pentest organization" yet , but they will get stuff done and you can then argue that you had few hundreds hacker attacking your app. Maybe you can talk to one of this "reputable pen
10.
by snyff 13y ago
Thanks :)
11.
by snyff 13y ago
Yes, good point. However it's a bit harder to maintain a working architecture while giving a shell to everyone on Internet ;)
12.
by snyff 13y ago
Yes, sorry for that, it may be a bit presumptuous. I tried "The Worst Way" it didn't work as much ;) Joke aside, most training/material I saw give too much information or not enough, I tried to find the right balance to help people understa
13.
The first CTF where the winner receives Bitcoins(bitcoinctf.com)
1 points by snyff 13y ago|0 comments
14.
CVE-2012-6081:The bug used to compromise wiki.python.org and wiki.debian.org(pentesterlab.com)
1 points by snyff 13y ago|0 comments
15.
by snyff 13y ago
https://saucelabs.com/ perhaps?
16.
Latest PentesterLab exercise: 106-pages PDF course, 36 vulnerabilities(pentesterlab.com)
2 points by snyff 13y ago|0 comments
17.
by snyff 14y ago
A LOT!
18.
by snyff 14y ago
Stop complaining. Go to some local dev/tech meetups. Do some freelance work and/or hack on opensource projects. Work on your self esteem. Be more confident. Maybe, despite living at your parents, you were the best time she had... who cares
19.
Ask HN: how to get revenue from my site
8 points by snyff 14y ago|7 comments
20.
Pentesting exercise on attacking Axis2 Web service and Tomcat Manager(pentesterlab.com)
1 points by snyff 14y ago|0 comments
21.
by snyff 14y ago
Did a quick write-up on the conditions required to exploit this: http://blog.pentesterlab.com/2013/01/on-exploiting-cve-2012-...
22.
PentesterLab Bootcamp(pentesterlab.com)
11 points by snyff 14y ago|0 comments
23.
Test-Driven Security(blog.pentesterlab.com)
2 points by snyff 14y ago|0 comments
24.
How not to get a good pentest...(blog.pentesterlab.com)
1 points by snyff 14y ago|0 comments
25.
From SQL injection to shell: PostgreSQL edition(pentesterlab.com)
30 points by snyff 14y ago|4 comments
26.
More free exercises(pentesterlab.com)
1 points by snyff 14y ago|0 comments
27.
by snyff 14y ago
So far, I don't think DataMapper is vulnerable. The mapping is not done in the same way (datamapper use hard coded properties). As an example, the following User.all(':email '=> {':id' => '1"'}) will throw ArgumentError:
28.
by snyff 14y ago
To be honest, I think there is a lot more work to do (at least 2 more hours just to dump the database version) even for the author. I don't think any script kiddie will be able to exploit it based on the information provided. Or a least unt