Jake Baines

icon company Rapid7 icon location Lead Security Researcher @ Rapid7

Results 5 comments of Jake Baines

ACIDDAMAGE runs as low-privileged user

Obviously, I'd need more information to troubleshoot this. Windows version, driver version, etc.

Metasploit Generated SSL/TLS Certificates Trivial to Fingerprint

I think only replacing OU is inadequate. Using [Faker.Company.name](https://github.com/faker-ruby/faker/blob/aa31845ed54c25eb2638d716bfddf59771b502aa/lib/locales/en/company.yml) is also very limited. It only has three forms and relies on a very limited set of names from [names.yml](https://github.com/faker-ruby/faker/blob/aa31845ed54c25eb2638d716bfddf59771b502aa/lib/locales/en/name.yml). I...

Rewrite of Cisco ASA Clientless VPN Brute-force

> I compared this with the web portal connection HTTP requests/responses and found out the POST login request needs to include a CSRF token (`csrf_token`), which should come from the...

Rewrite of Cisco ASA Clientless VPN Brute-force

My target doesn't have that code. What ASAv version did you install?

Rewrite of Cisco ASA Clientless VPN Brute-force

Okay, I was able to get the CSRF token version working as well. I did end up touching `lib/rex/proto/http/client.rb` because the client wasn't handling the server's HTTP response `Connection: Keep-Alive`...