1,423 reputation
1523
bio website
location
age
visits member for 9 months
seen 53 mins ago
stats profile views 139

3h
comment iPhone\Network Security
Not an answer but this previous post might be of some interest security.stackexchange.com/questions/4272/…
1d
comment Can attacker break out of apparmor jail with the following profile?
Just curious under which OS you have compiled apparmor as i tried it on Ubuntu with no success
1d
comment How to allow only some specific computer systems to access website?
I answer from the perspective of using kerberos for Web authentication which you can read from workshop.openafs.org/afsbpw06/talks/wes-kerberos-on-web.pdf
May
13
comment Web GUI for Snort + ModSecurity
You can use Jwall Auditviewer jwall.org/web/audit/viewer.jsp
May
12
comment Looking for Dataset for Test IDS
In my previous post i asked for some botnet dataset you can read my post security.stackexchange.com/questions/18218/…
May
7
comment How does a firewall help to protect a server?
@TildalWave There is always a confusion about role of application layer firewall and network layer firewall. My Question would by to detect XSS attack with an IP filter Firewall. Problem seems obvious attacker is not targeting network layer which is well protected. You cannot block port 80 traffic to protect your servers. I hope you get my point.
May
6
comment Help in understanding an application's crash - exploitable?
Your Question was partially answered in security.stackexchange.com/questions/33604/…
May
6
comment may DNS companies track visitors by traffic analysis?
You are confusing DNS with IP routing they are entirely two different things.
May
6
comment may DNS companies track visitors by traffic analysis?
Read about Public and Private IP addresses, Instead of remembering every Public IP address of website you visit DNS provides a better alternative of doing that.
May
2
comment Relationship between penetration testing and false positive results
Can you provide some reference ...
Apr
27
comment “You have new mail” message
Are you using an Web Proxy server to access internet ?
Apr
17
comment Bypassing Web Application input validation
From WAF perspective is there any way is there any way to identify Application encoding scheme.
Apr
5
comment Why isn't AV software configured to recognize installed program vulnerabilities?
Kaspersky Anti-Virus 2013 do detect vulnerable installed application and recommend patching please read usa.kaspersky.com/products-services/home-computer-security/…
Apr
3
comment Windows 7 How To Get Around Iboss Webfilter
Are you are looking for Iboss Webfilter alternatives ?
Mar
14
comment How to detect & prevent fake emails?
A good read superuser.com/questions/480270/…
Mar
13
comment Writing application specfic rules for WAF?
Agreed this is very basic application specific tuning to validate application input. My question is there any further application specific information i need to acquire from the developer?
Mar
8
comment What hardware do I need to monitor mobile traffic?
A good read on how to intercepting GSM traffic blackhat.com/presentations/bh-dc-08/Steve-DHulton/Presentation/…
Mar
4
comment Using ModSecurity as transparent mode
@DanielExar you can configure apache 2.2 as a transparent proxy and configure modsecurity with it. you can read this gossamer-threads.com/lists/apache/users/312902
Feb
27
comment Securing a simple webservice against brute-force with mod-security
Use Response status variable like SecRule RESPONSE_STATUS "^[45]" and set rule phase as 4 to run the rule in response phase use chain keyword to combine multiple rule. I recommend to read ModSecurity handbook
Feb
22
comment Websocket implication for firewalls
This post partially answer your question serverfault.com/questions/296838/…