7,546 reputation
11037
bio website
location Canada
age
visits member for 1 year, 5 months
seen 6 hours ago
stats profile views 342

Canadian insurance company Security Manager.


Dec
28
answered How can this xss challenge be solved?
Dec
27
comment How to retrieve a site whose server is running Linux
Nmap runs scanme.nmap.org for this very purpose ...
Dec
27
answered How to define different firewall rules for different users on the same machine running on Windows 7?
Dec
27
answered Reflection Attacks on Server
Dec
27
comment Reflection Attacks on Server
it requires payment to read the paper ...
Dec
27
answered is there any program that can tell me which files have been transferred from my computer thru the web
Dec
27
revised is there any program that can tell me which files have been transferred from my computer thru the web
tags, capitalization
Dec
27
answered Alternatives to Common Password Retrieval
Dec
27
comment Alternatives to Common Password Retrieval
@JoshTerrill The only problem there is that the user must be told to keep that photo in an unaltered state to use later.
Dec
27
comment How I add cookie to w3af for authenticated attacks?
w3af can be a wonderful tool, but it is not easy to configure properly.
Dec
27
answered using exploit/unix/webapp/tikiwiki_graph_formula_exec
Dec
27
comment using exploit/unix/webapp/tikiwiki_graph_formula_exec
Why did you choose the tikiwiki exploit? Why do you think that having port 80 open means that the exploit should work? Also, your 'nc' command is not properly formed, which is why it says 'port unreachable'.
Dec
19
revised Connection on port 3387 Event viewer says “authorized”
wording
Dec
19
revised How safe is WSIT username authentication with symmetric key?
spelling, grammar
Dec
19
comment Swatch installation's issue to detect intrusion
Can you confirm that swatch is running (ps)? Are you sure you triggered a priority 1 event?
Dec
19
revised Swatch installation's issue to detect intrusion
tags, wording
Dec
19
answered Are there security or privacy concerns in using YaCy as a substitute for Google or Duckduckgo?
Dec
19
comment Bruteforce vs Denial of Service
I misread your config - you require that the IP and user be logged in conjunction in order to increase the delay, which would not affect the real admin's login attempts.
Dec
19
comment Bruteforce vs Denial of Service
whitelist the admin's IPs?
Dec
19
comment Bruteforce vs Denial of Service
You can effectively DoS the account the same way. I love the increasing time out, but for static admin accounts, you can run in to the same problems as when you lock out the account.