| bio | website | |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 9 months |
| seen | 53 mins ago | |
| stats | profile views | 139 |
|
3h |
comment |
iPhone\Network Security Not an answer but this previous post might be of some interest security.stackexchange.com/questions/4272/… |
|
1d |
comment |
Can attacker break out of apparmor jail with the following profile? Just curious under which OS you have compiled apparmor as i tried it on Ubuntu with no success |
|
1d |
comment |
How to allow only some specific computer systems to access website? I answer from the perspective of using kerberos for Web authentication which you can read from workshop.openafs.org/afsbpw06/talks/wes-kerberos-on-web.pdf |
|
May 13 |
comment |
Web GUI for Snort + ModSecurity You can use Jwall Auditviewer jwall.org/web/audit/viewer.jsp |
|
May 12 |
comment |
Looking for Dataset for Test IDS In my previous post i asked for some botnet dataset you can read my post security.stackexchange.com/questions/18218/… |
|
May 7 |
comment |
How does a firewall help to protect a server? @TildalWave There is always a confusion about role of application layer firewall and network layer firewall. My Question would by to detect XSS attack with an IP filter Firewall. Problem seems obvious attacker is not targeting network layer which is well protected. You cannot block port 80 traffic to protect your servers. I hope you get my point. |
|
May 6 |
comment |
Help in understanding an application's crash - exploitable? Your Question was partially answered in security.stackexchange.com/questions/33604/… |
|
May 6 |
comment |
may DNS companies track visitors by traffic analysis? You are confusing DNS with IP routing they are entirely two different things. |
|
May 6 |
comment |
may DNS companies track visitors by traffic analysis? Read about Public and Private IP addresses, Instead of remembering every Public IP address of website you visit DNS provides a better alternative of doing that. |
|
May 2 |
comment |
Relationship between penetration testing and false positive results Can you provide some reference ... |
|
Apr 27 |
comment |
“You have new mail” message Are you using an Web Proxy server to access internet ? |
|
Apr 17 |
comment |
Bypassing Web Application input validation From WAF perspective is there any way is there any way to identify Application encoding scheme. |
|
Apr 5 |
comment |
Why isn't AV software configured to recognize installed program vulnerabilities? Kaspersky Anti-Virus 2013 do detect vulnerable installed application and recommend patching please read usa.kaspersky.com/products-services/home-computer-security/… |
|
Apr 3 |
comment |
Windows 7 How To Get Around Iboss Webfilter Are you are looking for Iboss Webfilter alternatives ? |
|
Mar 14 |
comment |
How to detect & prevent fake emails? A good read superuser.com/questions/480270/… |
|
Mar 13 |
comment |
Writing application specfic rules for WAF? Agreed this is very basic application specific tuning to validate application input. My question is there any further application specific information i need to acquire from the developer? |
|
Mar 8 |
comment |
What hardware do I need to monitor mobile traffic? A good read on how to intercepting GSM traffic blackhat.com/presentations/bh-dc-08/Steve-DHulton/Presentation/… |
|
Mar 4 |
comment |
Using ModSecurity as transparent mode @DanielExar you can configure apache 2.2 as a transparent proxy and configure modsecurity with it. you can read this gossamer-threads.com/lists/apache/users/312902 |
|
Feb 27 |
comment |
Securing a simple webservice against brute-force with mod-security Use Response status variable like SecRule RESPONSE_STATUS "^[45]" and set rule phase as 4 to run the rule in response phase use chain keyword to combine multiple rule. I recommend to read ModSecurity handbook |
|
Feb 22 |
comment |
Websocket implication for firewalls This post partially answer your question serverfault.com/questions/296838/… |

