29,228 reputation
652110
bio website raesene.github.io
location Scotland, United Kingdom
age 94
visits member for 4 years, 5 months
seen 5 mins ago

I'm an IT Security professional based in Scotland. I've been in IT Security for over x years now, with the last x-5 focusing on penetration testing/ethical hacking.

Currently a managing consultant with a large provider of security testing services.

Any opinions expressed here are purely my own and not necessarily those of my employer.


1d
comment Solution for Protocol Downgrade Attacks
when you say you "have protocol downgrade attacks" on your server what exactly do you mean? For example have you been given a finding in a security audit? If so, what is the finding you've been given? Also it would help to know what web server you're using.
Apr
16
comment Information Security on a network
this would appear to be a straight copy of expertsmind.com/questions/miss-301141998.aspx
Apr
16
reviewed Approve Web Crawler for ASP.NET site
Apr
16
revised Suspicious SMS getting received on selected browsing
removed ads tag
Apr
16
reviewed Approve An analysis of storing hints for passwords?
Apr
16
reviewed Close How do I restrict priveleges for an SQL Server Stored Procedure?
Apr
16
reviewed Close AD Authentication using LDAP : Can I authenticate outside of DMZ/Domain
Apr
16
reviewed Close Domain Exploitation
Apr
16
comment Domain Exploitation
so yeah as @raz says, bit of a broad topic. However if you have a default W2K8 with no additional services, it's unlikely you'll get any easy exploits on it. I'd recommend looking for known vulnerable test systems to practice on rather than starting with what might be a hard target.
Apr
16
reviewed Close Block An IP Address Scanner On Mac
Apr
14
answered CRT / CHECK vs OSCP certification
Apr
14
answered ettercap use as local proxy
Apr
14
answered How can I confirm I'm vulnerable to OS X “rootpipe” (CVE-2015-1130)?
Apr
14
answered Risks of legacy JRE versions?
Apr
11
answered proxy servers and restricted work computers
Apr
9
comment Can I save passwords in my app securely and retrieve them without asking for a master password?
Platform is really important information for this question. Some OSs' (e.g. iOS) provide native functionality for this, so knowing that would affect the answer quite a bit...
Apr
7
answered Question on SNORT Rule
Apr
7
answered For intrusion detection, tripwire, using crypto hash integrity checking - what can be expected?
Mar
31
reviewed Close UDP Traffic is blocked
Mar
31
reviewed Leave Open Does any OpenID identity provider allow site-unique arbitrary email addresses?