21,936 reputation
44285
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 3 years, 7 months
seen 10 mins ago

Security Architect


Jul
17
reviewed Close Get RSA private key and certificate from GlobalSign certificate
Jul
17
reviewed Leave Open Guessing random bit with 100% accuracy
Jul
17
reviewed Close API which does not allow to invalidate session on server side - how to make it more secure?
Jul
17
reviewed Leave Open At what point in their employment should security policies be explained to an employee?
Jul
17
reviewed Leave Closed What kinds of attacks can VLAN's mitigate?
Jul
17
comment 'http_login' metasploit module isn't able to Brute Force the target. Any suggestions?
Try the DOMAIN setting?
Jul
17
answered At what point in their employment should security policies be explained to an employee?
Jul
17
comment Link(s) between subnet mask, IP address and subnet ID
If you are also new to networking, as a former Network+ instructor, I would highly recommend that you study for, if not take, the Network+ material.
Jul
17
comment Link(s) between subnet mask, IP address and subnet ID
I get that, you've just asked in the wrong forum. I look forward to a new colleague.
Jul
17
comment Link(s) between subnet mask, IP address and subnet ID
I understand that this came from a Security+ text, but this isn't a security question. This is basic networking.
Jul
17
comment Guessing random bit with 100% accuracy
Can you explain how you got to 75%?
Jul
17
comment How to use wireshark to decode SSL stream from remote API server?
Ok. You need to include what you've tried and what the results are. It looks like you're close.
Jul
17
comment How to use wireshark to decode SSL stream from remote API server?
Read the section called: Using the (Pre)-Master-Secret
Jul
17
comment How to use wireshark to decode SSL stream from remote API server?
so, this: wiki.wireshark.org/SSL ?
Jul
17
comment 'http_login' metasploit module isn't able to Brute Force the target. Any suggestions?
You question really boils down to: RHOSTS is changing a domain to an IP: how do I get it to accept and use a domain?
Jul
17
comment Is there a Antivirus called “Application level antivirus”
It's unclear what you're asking about. You want to know if it exists, but you already found a company doing it. What's the question?
Jul
17
comment 'http_login' metasploit module isn't able to Brute Force the target. Any suggestions?
You've made an assumption that RHOSTS takes domain info. But, take a look at the description of RHOSTS.
Jul
17
comment 'http_login' metasploit module isn't able to Brute Force the target. Any suggestions?
But you aren't using the URL, you're using the IP. Did you use the IP with nmap?
Jul
17
comment Windows: unknown program/service etc. sends HTTP request to download a file; how can I find the origin of that request?
It's good to know the owner of the URL: virustotal.com/en/url/… but I'm not sure this answers the OP's question.
Jul
17
comment 'http_login' metasploit module isn't able to Brute Force the target. Any suggestions?
The error message has your clue: in your browser go to the URL that it lists : http://74.125.68.141:80/lab/webapp/basicauth - it doesn't show a login page (it's a 404) - you need to hunt down why it is converting the URL to an IP