21,060 reputation
33982
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 3 years, 7 months
seen 7 hours ago

Security Architect


15h
comment Question regarding keylogger references
This is a very broad question. We can talk about a specific keylogger, but not the entire scope of all keyloggers.
15h
comment Kali Linux Veil-Evasion install problem
You are asking all these questions on the wrong forum. We are not Kali tech support.
15h
comment Four way handshake and HTTP protocol
I think you have an X/Y situation going on in your question. HTTP isn't supposed to be secure, and it is not. Your question is "why isn't an insecure protocol secure?" Answer: because it is not. Tautology FTW. Perhaps you need to rephrase your question or include some more underlying detail to your assumptions?
19h
comment How can we locate the exact location of an IP spoofer?
I'm not sure IP spoofing works the way you think it does.
19h
comment Disable ftp://hostname for my website
I'm not sure why this got migrated here.
19h
comment Does calling with wireless phone have enough security?
You need to define "safe" and "wireless" and what you expect your neighbours to be able to do.
1d
comment LastPass authentication grid hacked on June 15?
@Craig you are conflating too many ideas and missing the point.
1d
comment How to track who created a fake Gmail account using my name
Can the sending IP be faked?
1d
comment Is there any way track a Andriod phone using IMEI Number
That's something for your phone company to tackle.
1d
comment Metasploit payload problem
Spend some time looking up "TCP/IP" for beginners. It's a huge topic, but hopefully you can find some light material to trigger some thoughts.
1d
comment LastPass authentication grid hacked on June 15?
@Craig I'm not sure what you disagree with. I agree with all your statements, but your comments highlight the need for understanding context. All of your proposed attack vectors require physical access to the 2nd factor. If someone steals your phone, then all bets are off, no matter how strong your password is. Using a phone as a second factor mitigates the threat of a remote treat actor.
1d
comment Metasploit payload problem
Dude, you're sticking your key in your house's door lock and wondering why the car isn't starting. It's not about distance, it's about having a connection. 192.186.* is a private address and doesn't work over the Internet. You need a direct connection, an external IP, and port forwarding on your router. And no, I'm not going to explain that. You are on the wrong forum for the help you need.
1d
comment What are the security benefits to block all http referer header requests for web browser?
possible duplicate of Does the practice of blocking an off-site "Referer:" HTTP requests improve website security?
1d
comment Metasploit payload problem
Ok, you need to take a big step backwards from this. You are missing a lot of critical knowledge for any of this to work. First step, you need to learn basic networking. Your questions are the equivalent of wanting to know what exit to get off on to get to a city 200km away, but you don't know what a car ignition key looks like. I could tell you what the exit number is, but you need to get your license first.
1d
comment Metasploit payload problem
In order for the meterpreter to send back a session the target computer and yours need a network connection!! Your VM is behind a heck of a lot of layers. She can't get to your computer. What IP did you put in the meterpreter settings as the LHOST?
1d
comment LastPass authentication grid hacked on June 15?
@Craig saying "no" is far too simple a response. Passwords (and their complexity) and 2FA exist to address risks from threat actors. It is perfectly reasonable to allow simple passwords when you have 2FA, depending on the risks involved. In some cases, you're correct, the risk is still too high, but you need to understand the elements of the risk and the threat actors.
1d
comment Metasploit payload problem
You need to describe the networking between the VM and your friend's computer. Does your VM have network access to your target? Can you ping it? Can it ping you? Do you have proof that it ran at all on your friend's computer?
1d
comment Metasploit payload problem
Please differentiate between the Linux distro you're using and Metasploit, which is a completely independent program from Linux.
1d
comment When did development on various TLS versions begin?
Cool. For completeness sake, I'd list both the 'development start date' and the 'release date'. That will make the question more clear.
1d
comment a pdf that is really a zip with a pdf inside?
First, it is not a pdf file, but a zip file with a renamed extension. Second, your question boils down to, "how do I get the password to a password-protected zip?" Answer: Ask the one who set the password. Otherwise, we are not a hacking site.