Reputation
411
Top tag
Next privilege 500 Rep.
Access review queues
Badges
4 18
Newest
 Caucus
Impact
~17k people reached

Jan
14
comment Is there any FOSS passive vulnerability scanner ? Not a NIDS but a vulnerability assessment tool
@Rory You have missing totally the point. do you know what is PVS and what you can do with it? I think no. I know that hypothetically you can made lot of stuff with snort, but it's not imaginable to write down about 40k rule to do what PVS do to do it in snort. Please before reply take a look here: tenable.com/products/tenable-passive-vulnerability-scanner and here: cgi.tenable.com/Features_PVS.pdf.
Jan
9
revised Is there any FOSS passive vulnerability scanner ? Not a NIDS but a vulnerability assessment tool
edited title
Jan
9
revised Is there any FOSS passive vulnerability scanner ? Not a NIDS but a vulnerability assessment tool
added 226 characters in body
Jan
9
comment Is there any FOSS passive vulnerability scanner ? Not a NIDS but a vulnerability assessment tool
I don't know well snort but also tweaking it to detect banner of vulnerable host it's don't have any form of management GUI to handle this kind of stuff. Also, supposing I have a Intranet web serve vulnerable, every time a client connect to it, snort will made an Alert about a vulnerable host. Also this kind of hack can't be affordable to be used in a professional way.
Jan
9
comment Is there any FOSS passive vulnerability scanner ? Not a NIDS but a vulnerability assessment tool
PVS DON'T do active scanning. It's simple collect traffic from a TAP or span port and then analyze it to found vulnerability. SNORT do Network Intrusion Detection System, detect attack on a network, don't detect vulnerable version on a network analyzing passively the network.
Jan
5
asked Is there any FOSS passive vulnerability scanner ? Not a NIDS but a vulnerability assessment tool
Dec
6
revised What lawful interception standards are used outside Europe?
added 66 characters in body
Dec
6
asked What lawful interception standards are used outside Europe?
Dec
1
awarded  Yearling
Sep
30
accepted How do you organize a code review / static analysis report?
Sep
28
revised How do you organize a code review / static analysis report?
edited title
Sep
28
asked How do you organize a code review / static analysis report?
Jul
23
comment Books about Penetration Testing
Really good list of books! Why no book on reversing engineering ? Ida guide and so on ? No windows internal ? BTW I know some author of this book and I think they are the most talented security people around since the 1990 ;) This one was the right answer of the question.
May
26
awarded  Critic
May
26
accepted When you make a revision of rules on a firewall, how do you add credibility/customer satisfaction to your final consideration?
May
10
accepted How to make a report after a ddos attack? what information do I need to write on the report?
Apr
6
revised High concentration of UDP traffic, good or bad?
fixed some reduntant word
Apr
6
suggested approved edit on High concentration of UDP traffic, good or bad?
Mar
29
revised When you make a revision of rules on a firewall, how do you add credibility/customer satisfaction to your final consideration?
edited title
Mar
29
comment When you make a revision of rules on a firewall, how do you add credibility/customer satisfaction to your final consideration?
Say to a customer: "I have experience enough to say it", it's not my goal. My focus point is to add customer satisfaction referencing some thirty party and 'higher power' organization.