meta user
network profile
| bio | website | |
|---|---|---|
| location | Canada | |
| age | ||
| visits | member for | 1 year, 5 months |
| seen | 1 hour ago | |
| stats | profile views | 342 |
Canadian insurance company Security Manager.
|
Apr 10 |
comment |
Firewall philosophy @k1DBLITZ you completely missed my point. If you allow only port 80 outbound, then you are STILL not operating on 'least privilege', you just reduced the threat surface. To do what you suggest means that you need to know more about the traffic to qualify it, and if you do that, does it matter how many ports you have open? |
|
Apr 6 |
comment |
Best way to alert a website owner of a vulnerability? I did not say that users were not potentially 'at risk', but rather that it is the site's risk to manage. Stamping your feet and screaming that things should be done a certain way does no good if the risks of a realized failure are cheaper than the costs to fix the issue. |
|
Mar 26 |
comment |
Should an invalid user name be logged? What you are trying to say is that you are for logging usernames so that admins can know if a particular user is getting hit? Secondarily, as a means to perform research on brute-force techniques. |
|
Mar 25 |
comment |
snort ignores packets with matching src/dest IP address Are other snort alerts firing? How are you 'running snort against' a file? |
|
Mar 12 |
comment |
Recomended Nessus Windows-7 scan settings? @ScottPack he wants to run the scan from a Win7 machine |
|
Mar 12 |
comment |
Writing application specfic rules for WAF? I'm not sure that you will get any answers to this. A WAF is application-specific. You need to tune it to your application. If you have access to the original developers of the application, you can enlist their help in coming up with the rules you need. |
|
Jan 21 |
comment |
Are honeypots successful in preventing attacks? I hope I answered that already. |
|
Jan 3 |
comment |
How does window.w3ssss hack occur 1 million bots types and each with their own methods that change regularly. There is no 'default method of infection'. |
|
Jan 3 |
comment |
Building a Security Training Simulation environment Have you considered asking Offensive Security or eLearnSecurity to ask how they set up their environments? |
|
Dec 28 |
comment |
Best free website vulnerability scanners Requests for lists do not fare well on this forum. That said, I provided an answer... |
|
Dec 27 |
comment |
How to retrieve a site whose server is running Linux Nmap runs scanme.nmap.org for this very purpose ... |
|
Dec 27 |
comment |
Reflection Attacks on Server it requires payment to read the paper ... |
|
Dec 27 |
comment |
Alternatives to Common Password Retrieval @JoshTerrill The only problem there is that the user must be told to keep that photo in an unaltered state to use later. |
|
Dec 27 |
comment |
How I add cookie to w3af for authenticated attacks? w3af can be a wonderful tool, but it is not easy to configure properly. |
|
Dec 27 |
comment |
using exploit/unix/webapp/tikiwiki_graph_formula_exec Why did you choose the tikiwiki exploit? Why do you think that having port 80 open means that the exploit should work? Also, your 'nc' command is not properly formed, which is why it says 'port unreachable'. |
|
Dec 19 |
comment |
Swatch installation's issue to detect intrusion Can you confirm that swatch is running (ps)? Are you sure you triggered a priority 1 event? |
|
Dec 19 |
comment |
Bruteforce vs Denial of Service I misread your config - you require that the IP and user be logged in conjunction in order to increase the delay, which would not affect the real admin's login attempts. |
|
Dec 19 |
comment |
Bruteforce vs Denial of Service whitelist the admin's IPs? |
|
Dec 19 |
comment |
Bruteforce vs Denial of Service You can effectively DoS the account the same way. I love the increasing time out, but for static admin accounts, you can run in to the same problems as when you lock out the account. |
|
Dec 19 |
comment |
Bruteforce vs Denial of Service 'CAPTCHA' is the word you are looking for. |
