10,054 reputation
22263
bio website clearnetsec.com
location Colorado
age
visits member for 3 years, 11 months
seen 45 mins ago

I play offensive security professionally and defense part time.


Oct
15
answered Web Application Vulnerability Scan- False Positives-Recognizing and Eliminating
Oct
15
reviewed Approve suggested edit on How secure is HMAC
Oct
9
comment Where should a team store server credentials
Check out KeePass (keepass.info/help/base/multiuser.html) and 1Password (agilebits.com/onepassword)
Oct
8
awarded  Nice Answer
Sep
24
awarded  Autobiographer
Sep
12
awarded  Nice Answer
Jul
10
awarded  Popular Question
Jul
2
awarded  Curious
Mar
20
awarded  Nice Answer
Mar
7
answered DOM XSS attack failing in Firefox
Mar
3
answered Increase speed in nmap UDP scan?
Feb
28
awarded  Guru
Feb
27
comment Is CVE-2011-1571 fixed in tomcat?
It appears the vulnerabilities do not affect Tomcat, but affect IBM's Cognos Express product. That is, Cognos Express contained a hard-code credential to access the Tomcat manager -> "IBM Cognos Express contains a default manager-level account password for the packaged Tomcat server".
Feb
19
answered New to ossec - what does active response do out of the box
Jan
2
comment How to check if wifi is safe while travelling?
@gilles actually checking train times can be bad, an HTTP request can be seen and an attacker can modify the HTTP response to include, for example, a JavaScript block to do bad things or deliver malware, or watch this amazing video from the author of Silica (wireless pentest kit) silica.immunityinc.com/SILICA-7.17-service-impersonations.mov) for more craziness
Jan
2
awarded  Nice Answer
Dec
10
awarded  Good Answer
Nov
15
awarded  Nice Question
Nov
11
awarded  Yearling
Nov
7
awarded  penetration-test