19,492 reputation
33677
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 3 years, 5 months
seen 2 hours ago

Security Architect


May
22
comment How does a virtual machine escape work and how can it be prevented?
You pose many different questions here and you might need to narrow your scope.
May
22
comment Any way to circumvent a 'filtered' response on NMap?
@cybersec firewalls can drop for a variety of reasons
May
21
comment Can a browser JavaScript console ever be an issue?
More accurately, client side technologies are out of your control. Any inputs coming from the client need to be untrusted by the server. That's why you validate and sanitize everything from a source that you do not control.
May
21
comment What different methods can be utilized to carry out a DoS attack within Android?
Ah, I see your perspective now, but then my comment is even more appropriate. "Denial of Service" can take a thousand different forms including killing a battery, flooding the local wifi, etc. Are you looking for programatic DoS for an internal service?
May
21
comment What different methods can be utilized to carry out a DoS attack within Android?
DoS is a huge topic covering a vast array of attacks, though. An app designed to eat battery life would also be considered a DoS attack. Is that kind of thing in scope of your expectations?
May
21
comment Differences and Common Points/Similarities between APT and Intrusion attacks
This question is a little broad. Can you explain what you think APT is? There is significant overlap of the concepts as you have expressed them.
May
21
comment Which book is best for ethical hacking?
Are you looking for fiction or technical books?
May
21
comment What different methods can be utilized to carry out a DoS attack within Android?
I'm not sure what you are asking for. Are you looking for a list of DoS types? Exploits that result in DoS? Perhaps it might help if you explain why you want to know, then we can be more focused.
May
21
comment Which book is best for ethical hacking?
This question is far too broad to answer. If you search here for the "professional-education" tag, you will find a lot of resources.
May
21
comment Website using http and https
Try both URLs? Can you explain why you want to know? Maybe that will help.
May
21
comment Creating my own CA for an intranet
Even for an intranet for internal resources? You might also want to indicate that the presentation is your own.
May
21
comment What is the difference between XOR and poly-XOR?
I think it could be polymorphic XOR. rapid7.com/db/modules/encoder/x86/shikata_ga_nai
May
21
comment Should I use FileZilla?
this has been covered by another answer
May
20
comment Checking for changes on Linux live OS's
although you are using Kali, this is better suited over at a linux/server forum.
May
20
comment Generic term for certificates and keys
I hear you, but I think you made an error in logic. An authentication mechanism might use those things, but those things are not an authentication mechanism. Your own wiki link uses the term: authentication factor.
May
20
comment Generic term for certificates and keys
I'm not sure that a private key should be used as a credential
May
20
comment Generic term for certificates and keys
identity != authentication
May
20
comment Generic term for certificates and keys
you are assuming that certs and keys are for authentication
May
20
comment how to test clones site
@user3306821 There is a difference between a whitebox, blackbox, and greybox test. In this case, you need to get access behind the attack mitigations and test the site (greybox test). There might be a good question here about how to properly clone a site with these protections in place in order to test it the way you want to.
May
20
comment Generic term for certificates and keys
by adding "passwords" to your list, I'm not sure what you are asking for