7,281 reputation
1532
bio website
location
age
visits member for 3 years, 5 months
seen Apr 16 at 6:45

Apr
16
answered Effectiveness of Interactive Application Security Testing
Mar
25
awarded  Good Answer
Mar
23
comment Where does Active Directory store user hashes?
Here's a Volume Shadow Service script I bookmarked from DerbyCon 2 -- code.google.com/p/ptscripts/source/browse/trunk/windows/…
Mar
23
revised Setup of Kali Linux for reverse shell connections over the internet
added 208 characters in body
Mar
23
answered Setup of Kali Linux for reverse shell connections over the internet
Mar
18
answered EICAR alternative for IDS/IPS
Mar
12
answered Detecting Pass-the-Hash
Mar
12
comment Encrypting files on Google Drive
Like the other person answered, use portable 7-zip
Mar
12
answered Encrypting files on Google Drive
Mar
9
answered Which Secure Development Lifecycle model to choose?
Feb
22
answered Is it reasonable to do a pentest (or other non-theoric security audit) over a critical infrastructure?
Feb
21
comment Risk management with software code analysis
I don't have to start a good answer. I just have to finish one.
Feb
21
comment Risk management with software code analysis
You guys obviously missed my section on self assessment! Try to read!
Feb
20
revised Risk management with software code analysis
added 60 characters in body
Feb
20
answered Risk management with software code analysis
Feb
20
answered Verifying NLA support on Remote Desktop
Feb
20
answered API Security Testing Methodologies
Feb
19
comment Anyone out there using Umbrella from OpenDNS? What exactly is it?
Thanks for the question. Umbrella was on my list of things to learn about from information I gathered at presentations during NullCon last week. I'm also interested in the ShadowServer databases, crysys.hu (and other malware repos), and the malware prevalence service from virtusbtn.com
Feb
19
comment Major differences between Kali and SecurityOnion
Agree that it's not the scope of this site, but as one security professional to another, it might be interesting to hear an infosec-centric view, but with a link to an outside source such as ServerFault. Not sure that I agree on separation of duties (although it is a good security principle in general) because convergence is often necessary -- adversaries test their attack tools with our defense tools, as an example. I'm very familiar with rolling my own attack and defense tools and this sparked a new question for me, thank you!
Feb
18
revised SCADA, ICS Specfic Testing Tools and Methodologies
added 1 characters in body