7,877 reputation
1935
bio website
location
age
visits member for 4 years, 1 month
seen 6 hours ago

8h
comment Meterpreter on non-jailbroken Iphone
This guy seems to know what he is doing -- 0vercl0k.tuxfamily.org/bl0g
8h
comment Meterpreter on non-jailbroken Iphone
btw you will need a working iOS exploit, which may prove difficult on iOS 6 and higher, but here are two methods to do so -- offensive-security.com/vulndev/… -- exploit-db.com/osx-rop-exploits-evocam-case-study
8h
answered Meterpreter on non-jailbroken Iphone
8h
comment How exactly was Sony Pictures hacked November 2014?
I have responded to incidents where there were clear indicators pointing to multiple intrusions and "digging in" over several years by several different threat communities. Often, several variants of malware and several entry points are identified but none are conclusive as the "first" or "initial" entry point. Usually the first large exfiltration can provide a trail, but there could have been smaller or earlier exfiltrations -- sometimes no exfiltration during an entry point at all
2d
comment Fastest way to “lockdown” CentOS and have network intrusion detection, firewall, etc up and running?
This is a very different way to look at the problem! Kudos to this answer!! Threat intelligence feeds such as ThreatRecon are making the rounds, supported by tools such as CRITs, PizzaCat, and Maltego. Other free options include OpenDNS, PassiveTotal, and totalhash -- with may other demos from the commercial cyber threat intelligence offerings
2d
comment Fastest way to “lockdown” CentOS and have network intrusion detection, firewall, etc up and running?
These are wonderful tools and I'm happy to "suggest" that there are Windows equivalents! Google for them!
2d
comment Fastest way to “lockdown” CentOS and have network intrusion detection, firewall, etc up and running?
CIS also has their own commercial offering called CIS-CAT !
2d
answered Fastest way to “lockdown” CentOS and have network intrusion detection, firewall, etc up and running?
Dec
10
answered Creating a secure and encrypted e-mail service
Dec
9
revised Benefits to BlackArch over Kali
added 90 characters in body
Dec
9
comment List of security products for my network
You can't purchase AppSensor. You have to build it into your app from the start, and that takes much more time and effort than anything else
Dec
8
comment List of security products for my network
Modified a bit to Rory's points
Dec
8
revised List of security products for my network
added 692 characters in body
Dec
8
comment List of security products for my network
I don't feel that I need to cater to people who refuse to understand that some things are out of the ordinary and require work on their own part to understand. Go ahead and downvote me as much as you want. In five years you will all be begging me for advice.
Dec
8
comment List of security products for my network
I have seen open-source software systems breached, however, I'll cite an open situation: the Apache Foundation was breached on several occasions -- zdnet.com/article/…
Dec
8
comment List of security products for my network
@ munkeyoto : I feel that I don't need to answer your questions or even read them until you read mine and answer mine. Please stay on topic or I will report you. UPDATE: I cannot share the information you requested here because I performed incident response for third parties under NDA
Dec
8
comment List of security products for my network
@ munkeyoto: I took those under consideration. Thank you for pointing out the obvious to me. STIX and TAXII are great alternatives, why don't you mention CRITs or Soltra Edge in your own answer and I'll upvote it?
Dec
8
comment List of security products for my network
Snort, Squid, syslog-ng, and SIEM-tech such as OSSIM (which includes key tools such as OSSEC, OpenVAS, etc) are great, perhaps when combined with ModSecurity and a few other greats. However, they typically fail in every environment that gets breached on a regular basis, so really they are worth nothing
Dec
8
comment List of security products for my network
@munkeyoto: You really didn't consider anything I said in this post besides Palantir and Maltego, did you?
Dec
8
comment List of security products for my network
analyzethe.us