ifoundthetao

13 ms·

61.
by ifoundthetao 9y ago
I'm incredibly excited for Red's use for exploit development, as a security researcher having a tool like this can make things move along quite well.
62.
by ifoundthetao 9y ago
They can give themselves gold if they want. I'm not sure how it affects the downvotes, or if it does.
63.
by ifoundthetao 9y ago
I have had great success with Mediawiki and Slate. With Mediawiki, you can use Categories, ex: [[Category:NameHere]], and templates (don't forget to update the CSS) for great organization and consistency. The usage of templates will
64.
by ifoundthetao 9y ago
Is there a work-around to see the paywalled content?
65.
by ifoundthetao 9y ago
That's possible. I'll try it on a physical system in a bit. See what I can do.
66.
by ifoundthetao 9y ago
Hm, I wasn't able to replicate it. I'm using a Kali Linux VM. I'll try some other OSes and see if it works on there. Was anyone else successful with the PoC code?
67.
by ifoundthetao 9y ago
Boy do I miss those types of sites. I need to find more of them.
68.
by ifoundthetao 9y ago
Do it, and post here.
69.
by ifoundthetao 9y ago
Neat!
70.
by ifoundthetao 9y ago
Yeah, it's not too bad. Odds are, you were probably doing it already anyway. My recommendation, learn how to translate "unquantifiable" ideas to quantifiable ones. You can do this through a simple tool called an "OKR&q
71.
by ifoundthetao 9y ago
We'll be seeing similar sights with drones in the next few decades.
72.
by ifoundthetao 9y ago
I use a personal wiki (I use Mediawiki) and private git repos (BitBucket). It may make sense to open up a YouTube channel though, so I can go back and review things later on. Thanks for bringing this up, because I think that's a very
73.
by ifoundthetao 9y ago
You're missing the "non-intrusive" point that he was bringing up. While they did find a vulnerability, they went beyond the scope the had agreed to, which is the issue he's describing.
74.
by ifoundthetao 9y ago
That's some solid advice. Thanks for sharing it. :-)
75.
by ifoundthetao 9y ago
Are you kidding me? I would just say no. It's much more to lose your family and life by going to jail than it is to use public services to get assistance for food and shelter. Even if you don't go to jail, the amount lost in lega
76.
by ifoundthetao 10y ago
OSCP is excellent.
77.
by ifoundthetao 10y ago
"Meaningful research" is incredibly subjective.
78.
by ifoundthetao 10y ago
You nailed it. I work for a payment gateway and I've written several Account Updater integrations.
79.
by ifoundthetao 10y ago
I'm currently doing the OSCP, and I've been dreaming of buffer overflow attacks the past few days. It's encouraging too, because my dreams are accurate.
80.
by ifoundthetao 10y ago
Where is the dual cursor option for wemux? I haven't been able to find it or emulate it. It would be great but each user is sharing the same instance of Vim and sharing their shell (well, in Pairing mode, at least).
81.
by ifoundthetao 10y ago
For a nice historical background on this, you can read "Prime Obsession", which is a pretty fascinating read.
82.
by ifoundthetao 10y ago
Interesting, you may be interested in vi mode in bash. http://www.catonmat.net/blog/bash-vi-editing-mode-cheat-shee...
83.
by ifoundthetao 10y ago
Vim is very easy, I think it's just simple to get overwhelmed with it. There are a couple of tools which gamify Vim. I personally haven't used them. But some say they're pretty good. For me, what worked was just jumping in
84.
by ifoundthetao 10y ago
Refresh a few times, it usually works.
85.
by ifoundthetao 10y ago
It's a "common" attack. Well, common enough, that it's something to consider if you have wells of information out there for people to draw from. https://en.wikipedia.org/wiki/Sarah_Palin_email_hack
86.
by ifoundthetao 10y ago
Along with everyone else here, I had the same issue with my wrists, took a gamble, and got the keyboard. I haven't looked back. It's awesome. I let a co-worker borrow it, because he was having wrist issues, and he had the comple
87.
by ifoundthetao 10y ago
Go NMI or go home.
88.
by ifoundthetao 10y ago
You're still thinking too small. It isn't about validation for duplicate accounts, and by the way, this gets past that duplicate account validation, because "admin" is different from "admin' --" You get a
89.
by ifoundthetao 10y ago
It's a second stage SQL injection, and it's very serious. Here's a contrived example: At the user creation page the malicious user wants to get admin access. They have their username be: admin' -- They do this because th
90.
by ifoundthetao 10y ago
I do this with audiobooks and it changed everything. I listen to them on triple speed. For some things, I have to ramp up to it, and for others I can only go 2.5x. One trend I noticed was that I kept it at 1x on content I wanted to enjoy

More ›