Reputation
10,643
Top tag
Next privilege 15,000 Rep.
Protect questions
Badges
1 33 55
Newest
 Announcer
Impact
~670k people reached

15h
comment Would you typically want to monitor all ports for NIDS monitoring? If so, is span port or network tap the way to go?
SFPs with copper should suffice, albeit overkill
16h
comment Would you typically want to monitor all ports for NIDS monitoring? If so, is span port or network tap the way to go?
The GigaVUE H and G series are found at network trade shows very often -- and they definitely support that requirement. It's not abnormal especially if you work in Technical Marketing Engineering for Ethernet switches ;>
1d
comment How can a font be used for privilege escalation?
Cisco's TalosIntel group released several vulnerabilities for TTF fonts built using the libgraphite library -- blog.talosintel.com/2016/02/…
2d
revised Would you typically want to monitor all ports for NIDS monitoring? If so, is span port or network tap the way to go?
added 28 characters in body
2d
answered Would you typically want to monitor all ports for NIDS monitoring? If so, is span port or network tap the way to go?
Feb
7
comment Hacking/Sniffing/recording GSM like Karsten Nohl
Related answer using pytacle and Kraken here -- security.stackexchange.com/a/94901/140
Feb
6
revised What is real-world impact of CVE-2016-0728 (Linux Kernel Vulnerability)
added 200 characters in body
Feb
3
revised Do actual penetration testers actually use tools like metasploit?
added 41 characters in body
Feb
3
revised Metasploit Meterpreter alternatives
added 41 characters in body
Feb
3
revised Should veil framework produce packed and obfuscated binaries which bypass virustotal?
added 98 characters in body
Feb
3
awarded  Announcer
Jan
30
comment How often do high-end attackers actually use zero-day exploits?
Yeah the use of the term `zero-day exploit' is sort of a misnomer. I find it interesting when there is no public code available but an adversarial team like a nation state or criminal org all of a sudden uses an exploit for a patched vuln where the patch is 0-3 months old. This happened twice in the Stuxnet codebase, as an example (patches were available but no known exploit code was). What's scary about very-recent patches with no public exploit code is that many IDS/IPS/UTM devices do not have signatures yet. Red-team engagements can't use them yet for adversarial simulation.
Jan
25
answered What is the best way to report IT Security risks to Executive management?
Jan
22
comment How Should WiFi Passwords be securely stored on IOT (embedded) devices?
BitLocker will stop those attacks
Jan
22
revised What is real-world impact of CVE-2016-0728 (Linux Kernel Vulnerability)
added 243 characters in body
Jan
21
answered Protecting account ssh keys from root
Jan
21
revised How Should WiFi Passwords be securely stored on IOT (embedded) devices?
added 195 characters in body
Jan
21
answered How Should WiFi Passwords be securely stored on IOT (embedded) devices?
Jan
20
answered Penetration Testing Criteria
Jan
20
comment What is real-world impact of CVE-2016-0728 (Linux Kernel Vulnerability)
@leoluk: yes, but even ARM processors (and most server-based Intel ones) include this sort of support.