Viewing profile — jdeca568

There is one difference still, by downloading it locally, you only have to check it once and not everytime you want to use the script. You definitely have to trust more parties by …

Here is one: https://www.exploit-db.com/ . But this CVE doesn't appear to be referenced at the moment.

paths | awk -F / '{ print $1 }' (edit: format)

As mentionned several times already, OWASP has very interesting stuff, it's more web application oriented though. ( https://www.owasp.org ) WebGoat is a good way to put things in p…

Well that's more of a manual work than anything else, not optimal in term of speed. Trying to keep following mailing lists diagonally, keep contact with other people in the niche. …

I had the same problem with an almost automatic !g. A while back i decided to put more effort and try to survive with !so, !gh, !hn, !r, !w, and a couple more depending on the cont…

Everybody is guilty in some way of not making a change, or not taking a stand, whatever the 'good' or 'bad' subject that is. Still, no single indvidual is to blame in most cases. T…

Cool, in the ~same vein, SBE is definitely worth a look. https://github.com/real-logic/simple-binary-encoding

If i understand correctly, the problem of Java deserialization is 1) gadgets for code execution and maybe 2) DoS. And this is bad because even if it looks secure now, a gadget coul…