25,433 reputation
34197
bio website scotsts.com
location Scotland, United Kingdom
age 40
visits member for 3 years, 8 months
seen 3 hours ago

I'm an IT Security professional based in Scotland. I've been in IT Security for over x years now, with the last x-5 focusing on penetration testing/ethical hacking.

Currently director at a Scotland based Security Testing consultancy called ScotSTS


Jul
20
answered WPA/WPA2 vulnerabilities
Jul
20
answered Online Shopping password keylogger risk
Jul
20
comment Is there a repository of credentials used in training materials/samples and SDKs?
I'm not aware of a specific repo. for this, but to be honest googling <product or SDK name> default credentials generally does the job just fine...
Jul
20
answered How can I identify this hash?
Jul
20
answered Can JS templates for admin-only pages be public
Jul
11
answered Should remote access (RDP/SSH) only be allowed for VPN clients? Or should RDP and SSH be opened the public?
Jul
8
answered Publicly Available API + Sensitive ID/Key Transmission Over HTTP
Jul
7
answered What does this Snort rule do?
Jul
6
comment Cannot get access into a vulnerable Windows 2000 (MS03_026)
@yzT Assuming that you've got access to the machine at an OS level, if you haven't already, I'd try rebooting it before retrying the exploit. In some cases I've seen exploits that will only work once as they leave the vulnerable service in a hung/crashed state.
Jul
4
answered Nmap stealth scan shows that port is filtered
Jul
3
awarded  Nice Answer
Jul
2
awarded  Curious
Jun
19
comment Are there any exploits in Movable Type that allow the attacker to delete the movable type files?
you might want to have a look at this movabletype.org/news/2014/05/securing_movable_type.html recent blog post from movable type about securing an installation...
Jun
18
answered VPN disconnection and snooping
Jun
17
comment Should websites be allowed to disable autocomplete on forms or fields?
@Manishearth sure in an ideal world but the reality is that sites do this for all sorts, I had one today do it for Debit card expiry dates and CVV numbers..
Jun
16
comment Tools to test all-around hardness of a Unix installation?
@kjo as another option to OpenVAS you could look at Nessus, there's a free version for non-profit use and a commercial option which has some pretty good security auditing features.
Jun
16
comment Should websites be allowed to disable autocomplete on forms or fields?
@Manishearth I'd guess that the problem lies where sites are using password type fields for secondary secrets. I have seen this behaviour ins some cases...
Jun
12
answered Do I need a hardware firewall even if I have Internet security software?
Jun
10
comment How do you capture ALL the traffic from an Android app?
you might find that the application is using certificate pinning ( more info security.stackexchange.com/questions/29988/…), which would mean that traffic interception would be tricky. If that's the case you may have more luck de-compiling the app and approaching the review that way...
Jun
8
answered PCI questions regarding software