10,023 reputation
11547
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 2 years, 4 months
seen 5 hours ago

Canadian insurance company Security Manager.


Jun
18
comment Snort rules question
I would follow up with the question, "any ideas about what?" Who sent it? Why? What it is? We have no idea what you want help with.
Jun
12
comment A faster method than Blind SQL Injection?
@FirstnameLastname Isn't BSQLi the same as Error-based except that you don't get an overt error message?
Jun
12
comment A faster method than Blind SQL Injection?
This is a really poorly worded question. It is not clear what you are asking. If you are guessing, then use brute force. If you want to extract data, then you are looking at Bsqli or error-based.
Jun
11
comment How to get started in information security with sales background?
InfoSec is a wide topic. Do you have an idea what area you are interested in? Security+ would be a good place to get the most basic foundation, and then you narrow down from there. There are also tons of others asking similar questions here. Poke around.
Jun
6
comment Using Python for security
Please edit your question to include this new info. Also, scapy is directly related to pen testing, and xss is for web app testing. What are you looking to do?
Jun
3
comment Physical machines not detected from a Backtrack VM
removing the VMs as a potential problem is a valid diagnostic step, but there might be some questions to ask before you do that. The VMs you are targeting, are they Windows? If they are, then nmap should be able to detect them, and in your scenario, the VMs are a problem. If they are Linux, then we need to know if they have services configured. For instance, do they have a web server running, or FTP, SSH, something for nmap to try to connect to. If they do, then the VMs are an issue. If they don't, then get a service running and retest.
Jun
2
comment Can a .sh file be malware?
+1 for using standard libraries
Jun
2
comment Physical machines not detected from a Backtrack VM
Are there services running on the target VMs? Are there firewalls blocking TCP ports? An nmap scan requires that it can interact with the target, not just being able to ping.
Jun
2
comment Physical machines not detected from a Backtrack VM
@pnp MUCH better question. Thanks for editing.
Jun
1
comment How to use http-get-form in THC-Hydra?
that targets a different page on the dvwa site
May
31
comment Is TLS flawless enough to prevent eavesdropping carried out by an ISP?
You are correct, of course. But the potential vulnerability I don't think you directly addressed was the user not accepting bad certificates when they are presented in a run-of-the-mill MITM attack. The browser will properly validate the certificate, and prompt the user for verification. If the user accepts the certificate, then the chain is broken. I'm thinking of BEAST or Ettercap, for instance. But as I said, it's local and not ISP.
May
31
comment Is TLS flawless enough to prevent eavesdropping carried out by an ISP?
and then you need to worry about local MITM attacks with WIFI and malicious nodes on your local network, but that's not ISP :)
May
31
comment Physical machines not detected from a Backtrack VM
What command did you run to do the OS scan?
May
31
comment Physical machines not detected from a Backtrack VM
I run BT in VMs without issues and I have set up complex testing networks on a single virtual server. My advice: re-write your question leaving out BT, but reference the tools you are using instead. That might clear some things up: "Metasploit on a VM, scanning other VMs on the same VirtualBox host server, all VMs in bridged mode. Metasploit VM can ping the other VMs but can't get OS detection" - how close am I?
May
31
comment failed login attempts analysis
The MS page says it is compatible with Win 2k3 but not anything more recent. How does it handle on Win 2k8R2? And btw, Splunk also does all the things you list :)
May
30
comment Resources to learn about memory allocation & security
I think you need to rephrase because I am not sure what you are asking. Can you link to an example of what you are wondering about?
May
29
comment Is it safe to use namebench?
It appears that you can prevent info going to Google, and the code looks like the public reviewers are ok with what they have found.
May
29
comment failed login attempts analysis
+1 Splunk is what I use for this very situation. There are ways to cut down the data Splunk indexes to stay under the 500MB limit and keep it free.
May
28
comment Backtrack 5 R2 & Metasploitable
I assume you specified the task to start in your "openvas_task_start" ... Does openvas_report_list show a report, or is the report empty?
May
28
comment Backtrack 5 R2 & Metasploitable
What happens when you run OpenVAS by itself on the target? Does it return results?