7,877 reputation
1935
bio website
location
age
visits member for 4 years, 1 month
seen 2 mins ago

1d
comment Fastest way to “lockdown” CentOS and have network intrusion detection, firewall, etc up and running?
This is a very different way to look at the problem! Kudos to this answer!! Threat intelligence feeds such as ThreatRecon are making the rounds, supported by tools such as CRITs, PizzaCat, and Maltego. Other free options include OpenDNS, PassiveTotal, and totalhash -- with may other demos from the commercial cyber threat intelligence offerings
1d
comment Fastest way to “lockdown” CentOS and have network intrusion detection, firewall, etc up and running?
These are wonderful tools and I'm happy to "suggest" that there are Windows equivalents! Google for them!
1d
comment Fastest way to “lockdown” CentOS and have network intrusion detection, firewall, etc up and running?
CIS also has their own commercial offering called CIS-CAT !
Dec
9
comment List of security products for my network
You can't purchase AppSensor. You have to build it into your app from the start, and that takes much more time and effort than anything else
Dec
8
comment List of security products for my network
Modified a bit to Rory's points
Dec
8
comment List of security products for my network
I don't feel that I need to cater to people who refuse to understand that some things are out of the ordinary and require work on their own part to understand. Go ahead and downvote me as much as you want. In five years you will all be begging me for advice.
Dec
8
comment List of security products for my network
I have seen open-source software systems breached, however, I'll cite an open situation: the Apache Foundation was breached on several occasions -- zdnet.com/article/…
Dec
8
comment List of security products for my network
@ munkeyoto : I feel that I don't need to answer your questions or even read them until you read mine and answer mine. Please stay on topic or I will report you. UPDATE: I cannot share the information you requested here because I performed incident response for third parties under NDA
Dec
8
comment List of security products for my network
@ munkeyoto: I took those under consideration. Thank you for pointing out the obvious to me. STIX and TAXII are great alternatives, why don't you mention CRITs or Soltra Edge in your own answer and I'll upvote it?
Dec
8
comment List of security products for my network
Snort, Squid, syslog-ng, and SIEM-tech such as OSSIM (which includes key tools such as OSSEC, OpenVAS, etc) are great, perhaps when combined with ModSecurity and a few other greats. However, they typically fail in every environment that gets breached on a regular basis, so really they are worth nothing
Dec
8
comment List of security products for my network
@munkeyoto: You really didn't consider anything I said in this post besides Palantir and Maltego, did you?
Dec
8
comment List of security products for my network
analyzethe.us
Dec
8
comment Alternative ways to exploit this path traversal
Try injecting your canocolizations into both the parameters names and values
Dec
5
comment database of URLs used by penetration tools
Updated on speculation that it was Acunetix
Dec
5
comment database of URLs used by penetration tools
Updated as to guesses of tools or potential for multiple tools and checks that could have been used based on the URIs given by the author. Do you have more examples?
Dec
5
comment database of URLs used by penetration tools
You are looking for tools that implement forced browsing in addition to link extraction. Interesting. There should be a database that supports what you ask for -- if I had access to the tools I'd build the db myself and release to the Internet. The sectoolmarket guy would be a good bet -- he has access to all of the tools
Dec
3
comment What are security issues which are specific to cloud computing?
You can't get cyber insurance on data that you store in or that transits a public cloud.
Oct
10
comment Testing Basic Authentication with ncrack
pretty sure you don't put http as the target. You would just put the hostname (or IP addr/prefix) and then use -p <port number>
Oct
10
comment Proxychains + nmap = segmentation fault
Can you please try using this newer and more-complete version of proxychains -- github.com/rofl0r/proxychains-ng ?
Jul
15
comment How bad is the leaking of Internal IP addresses through external DNS
I'm talking about security issues, not performance issues. Check out more at -- web.archive.org/web/20050728133540/http://www.as112.net