21,944 reputation
44285
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 3 years, 7 months
seen 1 hour ago

Security Architect


59m
comment How can i get my algorithm corrected? it seems it should be simple
Compression is not an InfoSec issue. This could be migrated to StackOverflow, but since there is also an offer of payment, I'm afraid that it isn't on-topic anywhere in StackExchange.
2h
comment Practice your security skills
It's still a very valid and useful tool. I myself still recommend it regardless of it not being actively updated.
1d
comment XSS filter evasion when “less than” followed by an English character is filtered
Possible answers here: security.stackexchange.com/questions/164/…
1d
comment XSS filter evasion when “less than” followed by an English character is filtered
use different encodings for the blocked characters
1d
comment What is the precise difference between a signature based vs behavior based antivirus?
I'm not sure that your burglar scenario works. You might need to clarify how it applies to heuristic analysis.
1d
comment What is the precise difference between a signature based vs behavior based antivirus?
This might be an oversimplification. Old viruses had variants, too, but as new code morphs, the signature approach isn't scalable. Behaviour-based approaches can also be much simpler than your example. E.g. no user-land process should be writing to System32.
2d
comment Is there an equivalent of meterpreter's “run persistence” for Linux?
right - so there is no standard script - you'd need to write or find a 3rd party specialized script
2d
comment Is there an equivalent of meterpreter's “run persistence” for Linux?
it's really going to depend on the distro
2d
comment Javascript web-based key derivation
@NaN you could write your own website to do this, too.
2d
comment Is there an equivalent of meterpreter's “run persistence” for Linux?
typically that's done by injecting a cron job or a low level service in init.d
2d
comment How to verify Signature Value using cert file in C#?
Because this is a language-specific and library-specific question, it really should be asked over at stackoverflow. Voting to migrate.
2d
comment Where to search for vulnerabilities in a WordPress theme?
Hm. That question is really, really broad. If you look at other known vulnerabilities in other themes, you might get an idea what to look for, but the question as asked is hard to answer in this format.
2d
comment Where to search for vulnerabilities in a WordPress theme?
I'm assuming that the custom theme will not have known vulnerabilities and you need to test for them by scratch?
2d
comment How to find live hosts on my network?
How is this different from what the OP already did? It looks like all you've done is add grep and awk to simplify the output.
2d
comment what reconnaissance or foot-printing tools for network or web, do you recommend?
Welcome to Security.SE. There are a few issues with this question: product recommendations are off-topic because any answer will go stale quickly, the question doesn't state what your requirements are for a suitable tool and is very broad, and you are asking for opinions. StackExchange sites are designed to be able to have a clear, definitive answer to a question instead of being a discussion forum like many other sites. You can head over to the FAQ to help get some idea about how this site is unique.
2d
comment Searching for an updated IP/URL Blacklist
blacklisted for what reason?
2d
comment Conky for PenTesters
Also please use code formatting when pasting in code text
2d
comment Can my ISP read my gmail even when using HTTPS? Is there a way to prevent that?
so, possible but unlikely?
2d
comment How do I completely delete the “Chrome Remote Desktop Viewer” that comes with Google Chrome?
This is more of a question for SuperUser than InfoSec. I have voted to migrate for you.
2d
comment Is there any way to formally ensure privacy to my clients by technical means?
That will depend on the capabilities of the cpanel. You need to talk with your provider.