14,857 reputation
12865
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 3 years
seen Dec 17 at 23:50

Security Architect

Owner of: SelfPhish.com


Dec
4
revised google recaptcha V2 on apache shared server: How to get it to work with SSL
formatting
Dec
4
comment google recaptcha V2 on apache shared server: How to get it to work with SSL
This is more of an Apache config question.
Dec
4
comment Screen capture through silent install routed back out port 80
Through what route was the link sent? That's the important info. Email readers can process links, and that requires no interaction. Or, the tester had control over the endpoint and activated the link. We need more info.
Dec
4
reviewed Leave Open Which forward secrecy cipher suites are supported for TLS1.0 protocols?
Dec
4
reviewed Leave Open Automated tools to manage or monitor authorized_keys?
Dec
4
comment Protecting a statistics endpoint
I'm not sure why the devs would care. The data would have to be properly formed to be relevant. Unless there was an identified risk that manufactured data was going to taint their debug data, there might not be any authentication at all.
Dec
4
reviewed Close TrueCrypt 7.1a - resume encryption process
Dec
4
reviewed Close TLS Authentication with OpenVPN Server
Dec
3
comment Protecting a statistics endpoint
Why would authentication need to work?
Dec
3
reviewed No Action Needed How is printf() in C/C++ a Buffer overflow vulnerability?
Dec
3
comment Is there a Plug and Play demonstration kit for various types of attacks?
@R15 You could edit your question to generalize what WebGoat is and then specifically call out WebGoat as a current example.
Dec
3
comment If mysql schema is missing, where can I find credentials?
Are you supposed to find the DB users, or the application users. Those are 2 different access levels. Does abc have a users table?
Dec
3
reviewed Close Why hydra doesn't return a valid username&password with a valid supplied username&password
Dec
3
reviewed Leave Open Is there a Plug and Play demonstration kit for various types of attacks?
Dec
3
reviewed Close Hydra empty response, only difference is header locaion
Dec
3
reviewed No Action Needed Information Transfer Between Browsers and Tabs
Dec
2
reviewed No Action Needed Statistics about webservers and browsers SSLv3.0 support
Dec
2
reviewed Reviewed How exactly is the output of the XOR step in PBKDF2 used?
Dec
2
reviewed No Action Needed Statistics about webservers and browsers SSLv3.0 support
Dec
2
comment LastPass Bootstrap on New Android Phone
@JinghaoShi use a short password and enable 2FA?