9,973 reputation
11547
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 2 years, 4 months
seen 8 hours ago

Canadian insurance company Security Manager.


Jun
26
comment Malware that uses http as a covert channel
yes - the 2 code samples there simulate a RFI PHP shell upload. They aren't bots, but they can help you identify RFI and shells on the network.
Jun
21
comment Tracing an IP from a mobile broadband ISP
From the paper, you can be in Romania and get a UK IP. "mobile hosts exit the operator's network through a few gateways within the country, and these exit points may also be maintained while roaming" "hosts behind NATs appear from a few IP addresses per country, we shown how these IP addresses can cover hosts physically present in entire countries, across inter-national borders, and even continents"
Jun
20
comment Proxy Server options for school administrators
+1 This is the right answer for 'rookies' who want to set up a proxy to block certain types of sites. I have clients who use this service.
Jun
20
comment Proxy Server options for school administrators
@ION Are you asking how to set up a proxy in order to block Facebook, or do you want to get past a block on Facebook at school?
Jun
20
comment Which software scans software for potential vulnerabilities?
You are looking for a "static code analyzer"
Jun
18
comment Snort rules question
I would follow up with the question, "any ideas about what?" Who sent it? Why? What it is? We have no idea what you want help with.
Jun
12
comment A faster method than Blind SQL Injection?
@FirstnameLastname Isn't BSQLi the same as Error-based except that you don't get an overt error message?
Jun
12
comment A faster method than Blind SQL Injection?
This is a really poorly worded question. It is not clear what you are asking. If you are guessing, then use brute force. If you want to extract data, then you are looking at Bsqli or error-based.
Jun
11
comment How to get started in information security with sales background?
InfoSec is a wide topic. Do you have an idea what area you are interested in? Security+ would be a good place to get the most basic foundation, and then you narrow down from there. There are also tons of others asking similar questions here. Poke around.
Jun
6
comment Using Python for security
Please edit your question to include this new info. Also, scapy is directly related to pen testing, and xss is for web app testing. What are you looking to do?
Jun
3
comment Physical machines not detected from a Backtrack VM
removing the VMs as a potential problem is a valid diagnostic step, but there might be some questions to ask before you do that. The VMs you are targeting, are they Windows? If they are, then nmap should be able to detect them, and in your scenario, the VMs are a problem. If they are Linux, then we need to know if they have services configured. For instance, do they have a web server running, or FTP, SSH, something for nmap to try to connect to. If they do, then the VMs are an issue. If they don't, then get a service running and retest.
Jun
2
comment Can a .sh file be malware?
+1 for using standard libraries
Jun
2
comment Physical machines not detected from a Backtrack VM
Are there services running on the target VMs? Are there firewalls blocking TCP ports? An nmap scan requires that it can interact with the target, not just being able to ping.
Jun
2
comment Physical machines not detected from a Backtrack VM
@pnp MUCH better question. Thanks for editing.
Jun
1
comment How to use http-get-form in THC-Hydra?
that targets a different page on the dvwa site
May
31
comment Is TLS flawless enough to prevent eavesdropping carried out by an ISP?
You are correct, of course. But the potential vulnerability I don't think you directly addressed was the user not accepting bad certificates when they are presented in a run-of-the-mill MITM attack. The browser will properly validate the certificate, and prompt the user for verification. If the user accepts the certificate, then the chain is broken. I'm thinking of BEAST or Ettercap, for instance. But as I said, it's local and not ISP.
May
31
comment Is TLS flawless enough to prevent eavesdropping carried out by an ISP?
and then you need to worry about local MITM attacks with WIFI and malicious nodes on your local network, but that's not ISP :)
May
31
comment Physical machines not detected from a Backtrack VM
What command did you run to do the OS scan?
May
31
comment Physical machines not detected from a Backtrack VM
I run BT in VMs without issues and I have set up complex testing networks on a single virtual server. My advice: re-write your question leaving out BT, but reference the tools you are using instead. That might clear some things up: "Metasploit on a VM, scanning other VMs on the same VirtualBox host server, all VMs in bridged mode. Metasploit VM can ping the other VMs but can't get OS detection" - how close am I?
May
31
comment failed login attempts analysis
The MS page says it is compatible with Win 2k3 but not anything more recent. How does it handle on Win 2k8R2? And btw, Splunk also does all the things you list :)