10,023 reputation
11547
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 2 years, 4 months
seen 5 hours ago

Canadian insurance company Security Manager.


Dec
31
comment MiTM not working --rejected by router?
If you aren't seeing traffic from your target in Wireshark, then you have a basic routing problem. It is possible that you are not on the target's local network. What we would need from you is a description of your network setup. What's in between your target and your attacker?
Dec
19
awarded  Pundit
Dec
19
answered How do I educate others about social engineering?
Dec
18
comment How can someone go off-web, and anonymise themselves after a life online?
@RoryAlsop define 'identify you'.
Dec
18
comment How can someone go off-web, and anonymise themselves after a life online?
Of course. The data exists. Are you expecting to reach into the the databases of the world to delete the information? The only way to anonymize is to deassociate yourself from those data sets. An efficient way to do that is to 'invalidate the index' by dereferencing yourself from the index, i.e. change your identity.
Dec
18
comment How can someone go off-web, and anonymise themselves after a life online?
Winess protection programs have a system for this. Change name, change national id numbers, change location, change vocation. All without linkages between the old and new.
Dec
17
comment What kind of attacks can be performed off a local network?
Frankly, social engineering is the most effective when you want to target a particular system. To defend, you need to look at the browser, email client, and user education.
Dec
17
comment Use Metasploit to exploit SMB through Conficker
Your real question seems to be: "why is my meterpreter session closing after a few seconds?" Look at other migration options. And, try harder ;)
Dec
17
comment NGO Joomla! site: Infected with malware? JavaScript injection?
please mark this as the answer
Dec
17
comment What kind of attacks can be performed off a local network?
Still very broad after the edit. The problem is that there are too many vectors to consider. Attacking the web browser is common, attacking the user is easiest. Turn the question around: what do you want to protect against? As it stands, you need a pentesting course to answer your question.
Dec
9
comment Advice of responsible disclosure
You do not have the option for 'responsible disclosure' any more. You have tainted yourself, the evidence, and your honour. As others have mentioned, you need to talk to an attorney.
Dec
9
revised Is there other vulnerabilities than CVE of NVD
added 1 characters in body
Dec
7
awarded  Yearling
Dec
3
comment What is the difference between antivirus and firewalls
It would take a specialized firewall to recognize binary signatures. It is misleading to say that a firewall is a specialized antivirus.
Dec
2
revised Can my customer's ISP trace who visited my business website?
clarity
Nov
20
comment Storing credit cards to use for purchases on customer's behalf
Keep it in the existing file? I'm not sure what you're asking for. What are you hoping to protect against? I would note that PCI-DSS has some very specific things to say about the storage of credit card details, and those details lay out some security methods to employ.
Nov
20
comment Port list according to vulnerability
How would you correlate port 80 with port 443, 8080, 8081, etc? Are they different vulnerabilities or the same one? Do you need service or application-level vulnerabilities? Does XSS count as a port 80 vulnerability? You need narrow this down a lot more before we can attempt to answer this.
Nov
19
revised Prevention against Cryptolocker virus by requesting password for all installing apps in Windows 7
added 33 characters in body
Nov
19
comment Prevention against Cryptolocker virus by requesting password for all installing apps in Windows 7
Good point Iszi. UAC will only prompt if properly configured.
Nov
19
answered Prevention against Cryptolocker virus by requesting password for all installing apps in Windows 7