Viewing profile — snyff

Monetising https://www.pentesterlab.com by creating an online version of the exercises...

Amazon is not super keen on people pentesting from or against their infrastructure. You will be better using labs available as ISO or VM.

from php-2.0.1/src/lex.c void IntFunc(char *fnc_name) { int i=0; int cmdlen = strlen(fnc_name); while(cmd_table[cmdlen][i].cmd) { if(!strncasecmp(fnc_name,cmd_table[cmdlen][i].cmd,…

Success button with an Apple logo... nicely played ;)

Just did that at school, they needed someone to teach and I got lucky and got selected to do it :) Thanks ;)

I think you can be suited for everything. IT Security is a real big domain, depending on your skills and what you like, you can land different jobs. If you are a person who go to c…

Fair point. My real name is on the PDF and you can find a lot of information on me on Internet... Previous talks, where I worked... As far as I know, the PDF aren't backdoored (I'm…

You can try bugcrowd, they won't qualify for "a reputable pentest organization" yet , but they will get stuff done and you can then argue that you had few hundreds hacker attacking…

Thanks :)

Yes, good point. However it's a bit harder to maintain a working architecture while giving a shell to everyone on Internet ;)

Yes, sorry for that, it may be a bit presumptuous. I tried "The Worst Way" it didn't work as much ;) Joke aside, most training/material I saw give too much information or not enoug…

https://saucelabs.com/ perhaps?

A LOT!

Stop complaining. Go to some local dev/tech meetups. Do some freelance work and/or hack on opensource projects. Work on your self esteem. Be more confident. Maybe, despite living a…

I'm the guy behind pentesterlab.com. This site offers free exercises to learn web security (an ISO with a vulnerable web application and a PDF with the course). I'd like to get rev…

Did a quick write-up on the conditions required to exploit this: http://blog.pentesterlab.com/2013/01/on-exploiting-cve-2012-...