29,248 reputation
652110
bio website raesene.github.io
location Scotland, United Kingdom
age 94
visits member for 4 years, 5 months
seen 11 hours ago

I'm an IT Security professional based in Scotland. I've been in IT Security for over x years now, with the last x-5 focusing on penetration testing/ethical hacking.

Currently a managing consultant with a large provider of security testing services.

Any opinions expressed here are purely my own and not necessarily those of my employer.


11h
reviewed Close If EMV can't be copied/cloned, how will companies like plastc do it?
11h
comment If EMV can't be copied/cloned, how will companies like plastc do it?
if you believe their FAQ plastc.com/faqs they can clone EMV cards, however this seems ... unlikely
11h
reviewed Close startups - securing data and applications on laptop
11h
reviewed Close Securely delete a file in Ubuntu?
11h
reviewed Close Win server 2008 partition security
11h
reviewed Close Are there any regulations regarding password storing schemes in the EU or US?
11h
reviewed Close Android email encryption
11h
reviewed Close Suspicious wifi networks from distant places and hotels
11h
reviewed Leave Open Is Cryptree suitable for cloud storage?
2d
comment Solution for Protocol Downgrade Attacks
when you say you "have protocol downgrade attacks" on your server what exactly do you mean? For example have you been given a finding in a security audit? If so, what is the finding you've been given? Also it would help to know what web server you're using.
Apr
16
reviewed Approve Web Crawler for ASP.NET site
Apr
16
revised Suspicious SMS getting received on selected browsing
removed ads tag
Apr
16
reviewed Approve An analysis of storing hints for passwords?
Apr
16
reviewed Close AD Authentication using LDAP : Can I authenticate outside of DMZ/Domain
Apr
16
reviewed Close Domain Exploitation
Apr
16
comment Domain Exploitation
so yeah as @raz says, bit of a broad topic. However if you have a default W2K8 with no additional services, it's unlikely you'll get any easy exploits on it. I'd recommend looking for known vulnerable test systems to practice on rather than starting with what might be a hard target.
Apr
16
reviewed Close Block An IP Address Scanner On Mac
Apr
14
answered CRT / CHECK vs OSCP certification
Apr
14
answered ettercap use as local proxy
Apr
14
answered How can I confirm I'm vulnerable to OS X “rootpipe” (CVE-2015-1130)?