21,954 reputation
44285
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 3 years, 8 months
seen 7 hours ago

Security Architect


Jul
28
revised What is the precise difference between a signature based vs behavior based antivirus?
deleted 1 character in body
Jul
28
comment What is the precise difference between a signature based vs behavior based antivirus?
This might be an oversimplification. Old viruses had variants, too, but as new code morphs, the signature approach isn't scalable. Behaviour-based approaches can also be much simpler than your example. E.g. no user-land process should be writing to System32.
Jul
28
reviewed Close Creating SSL certificate signed by a self-signed CA certificate in Jetty
Jul
28
reviewed Leave Open How dangerous is it to use textmods from internet sources?
Jul
28
reviewed Reject Pronounceable Password Generator
Jul
27
comment Is there an equivalent of meterpreter's “run persistence” for Linux?
right - so there is no standard script - you'd need to write or find a 3rd party specialized script
Jul
27
comment Is there an equivalent of meterpreter's “run persistence” for Linux?
it's really going to depend on the distro
Jul
27
comment Javascript web-based key derivation
@NaN you could write your own website to do this, too.
Jul
27
comment Is there an equivalent of meterpreter's “run persistence” for Linux?
typically that's done by injecting a cron job or a low level service in init.d
Jul
27
reviewed Close Multiple SSL certificates in Apache with clients using different certificates
Jul
27
reviewed Close Where to search for vulnerabilities in a WordPress theme?
Jul
27
comment How to verify Signature Value using cert file in C#?
Because this is a language-specific and library-specific question, it really should be asked over at stackoverflow. Voting to migrate.
Jul
27
comment Where to search for vulnerabilities in a WordPress theme?
Hm. That question is really, really broad. If you look at other known vulnerabilities in other themes, you might get an idea what to look for, but the question as asked is hard to answer in this format.
Jul
27
answered Is it okay if passphrases to KDFs are “predictable”
Jul
27
comment Where to search for vulnerabilities in a WordPress theme?
I'm assuming that the custom theme will not have known vulnerabilities and you need to test for them by scratch?
Jul
27
reviewed Close Which format of secret would be the most efficient for human memory?
Jul
27
comment How to find live hosts on my network?
How is this different from what the OP already did? It looks like all you've done is add grep and awk to simplify the output.
Jul
27
comment what reconnaissance or foot-printing tools for network or web, do you recommend?
Welcome to Security.SE. There are a few issues with this question: product recommendations are off-topic because any answer will go stale quickly, the question doesn't state what your requirements are for a suitable tool and is very broad, and you are asking for opinions. StackExchange sites are designed to be able to have a clear, definitive answer to a question instead of being a discussion forum like many other sites. You can head over to the FAQ to help get some idea about how this site is unique.
Jul
27
reviewed No Action Needed Where to download OpenBSD release ISO's over HTTPS?
Jul
27
reviewed Close Authenticated encryption (Symmetric encryption) for .NET applications