1,180 reputation
930
bio website
location
age
visits member for 3 years, 2 months
seen 4 hours ago

I work as a security analyst. I'm from Australia, although I've recently immigrated to the US and hope to start a small business offering security services.

I have a strong interest and knowledge in different access control models, reading about new exploits and vulnerabilities and digital forensics.


Jul
24
comment SSL / TLS Renegotiation Handshakes MiTM Plaintext Data Injection- medium or low risk?
I'm thinking of moving it to low risk because practically, I don't see how it can be leveraged. While it seems possible to MITM, it seems very unlikely to get it to succeed. I don't see why this shouldn't be the same level as RC4 ciphers being considered insecure, which is low by default.
Jul
24
asked SSL / TLS Renegotiation Handshakes MiTM Plaintext Data Injection- medium or low risk?
Jul
24
comment Inconsistant browser warnings for SSL
I figured, but wanted to make sure. Just an odd policy of what gets passed through or not I guess. Thanks.
Jul
24
asked Inconsistant browser warnings for SSL
Jul
24
comment Bypassing Trustwave NAC
@danielAzuelos Not sure what you mean when you say evaluation or weak points. With the restrictions of my engagement I cannot leave the room I'm in as an attacker would not be able to due to physically controls. Social engineering is not part of the engagement. As such, I unfortunately have to state the trustwave nac simply cannot be bypassed at this point in time without using getting physical access to a whitelisted or previously authenticated device.
Jul
21
comment Bypassing Trustwave NAC
@danielAzuelos they are white listed in. less than .005 of devices are non windows.
Jul
16
revised Bypassing Trustwave NAC
added 74 characters in body
Jul
16
comment Bypassing Trustwave NAC
@danielAzuelos, have you had firsthand experience with the trustwave NAC? All PC's are in the quarantine vlan by default, until authenticated by active directory. AD authentication is almost more important than MAC addresses in this design. Spoofing a MAC won't work, unless I can also trick the device into thinking I was a previously AD authenticated device.
Jul
15
comment Bypassing Trustwave NAC
@danielAzuelos that's the thing, you can't see the correct MAC of the gateway when in the segmented untrusted network. I've tried extensively. I'm meant to be emulating an attacker in a specific room, so to go and get the correct MAC would be "cheating" for this engagement. Would you have any tips to grab the correct MAC of the gw while in the segmented, untrusted nw?
Jul
15
comment Bypassing Trustwave NAC
Thank you, but that won't work in this situation. I need to be able to do it form my laptop. Whatever that device is doing, I should be able to replicate.
Jul
15
comment Bypassing Trustwave NAC
That won't work against the Trustwave NAC. it's using arp poisoning and checking for authentication against an AD server before permitting access, it isn't simple port security.
Jul
14
comment Bypassing Trustwave NAC
@danielAzuelos I've tried all that. Honestly, this is a next generation NAC and the typical tricks don't work. Spoofing a printer was the very first thing I tried. With the arp poisoning the device is doing, I don't know that spoofing a mac really helps, as you only see the gateway if you authenticate to AD, which I don't know can be spoofed.
Jul
14
comment Bypassing Trustwave NAC
@danielAzuelos Yes. Need to bypass the nacl using methods available from just my laptop, and the conference room I'm plugged into. That's it. And I don't think that's possible.
Jul
10
comment Bypassing Trustwave NAC
@danielAzuelos per the terms of my engagement, I can't do anything with a NAC connected PC or really do anything physically and "cheat", and there is no wireless. I basically need to do it through my laptop alone. Anything else you can recommend to try?
Jul
9
comment Bypassing Trustwave NAC
@danielAzuelos only traffic I can see is other people on the network before they are authneticated. Is the only potential way to bypass to spoof an allowed machine? If that is so, is the only avenue of attack to spoof one of these machines?
Jul
8
comment Bypassing Trustwave NAC
@daniel yes, can see some broadcast traffic. Some arp requests and dhcp traffic, that's it.
Jul
8
asked Bypassing Trustwave NAC
Jul
4
awarded  Popular Question
Jul
2
awarded  Curious
Jun
17
awarded  Popular Question