9,909 reputation
22261
bio website clearnetsec.com
location Colorado
age
visits member for 3 years, 10 months
seen 3 hours ago

I play offensive security professionally and defense part time.


Sep
12
awarded  Nice Answer
Jul
10
awarded  Popular Question
Jul
2
awarded  Curious
Mar
20
awarded  Nice Answer
Mar
7
answered DOM XSS attack failing in Firefox
Mar
3
answered Increase speed in nmap UDP scan?
Feb
28
awarded  Guru
Feb
27
comment Is CVE-2011-1571 fixed in tomcat?
It appears the vulnerabilities do not affect Tomcat, but affect IBM's Cognos Express product. That is, Cognos Express contained a hard-code credential to access the Tomcat manager -> "IBM Cognos Express contains a default manager-level account password for the packaged Tomcat server".
Feb
19
answered New to ossec - what does active response do out of the box
Jan
2
comment How to check if wifi is safe while travelling?
@gilles actually checking train times can be bad, an HTTP request can be seen and an attacker can modify the HTTP response to include, for example, a JavaScript block to do bad things or deliver malware, or watch this amazing video from the author of Silica (wireless pentest kit) silica.immunityinc.com/SILICA-7.17-service-impersonations.mov) for more craziness
Jan
2
awarded  Nice Answer
Dec
10
awarded  Good Answer
Nov
15
awarded  Nice Question
Nov
11
awarded  Yearling
Nov
7
awarded  penetration-test
Nov
6
answered Black-box fuzzing a TCP Port running an unknown applicaiton
Oct
31
awarded  Nice Answer
Oct
21
awarded  Nice Answer
Sep
12
answered Is there a pre-existing taxonomy of attackers?
Aug
15
awarded  Necromancer