Jose Gomez

In the News: http://www.govinfosecurity.com/verizon-confirms-breach-affecting-business-customers-a-8991

Verizon Enterprise Solutions, which regularly assists clients in responding to data breaches, admits it’s […]

Reading Summary:

The MSF Console is the most popular interface to the Metasploit Framework (MSF). The console provides an “all-in-one” centralized console and allows you efficient access to virtually all […]

Summary: Metasploit Framework (MSF) provides all the necessary tools to exploit a system.  The tool provides of over 900 different exploits for several operating systems.  Metasploit also checks for the s […]

Intrusion Prevention System (IPS) are network security appliances which inspect data and flow of network traffic.   This appliances is configured to detect or prevent malicious activity targeting systems. The as […]

Web Services Security – An Overview: 

Web services allow complex applications to present their information in a simpler manner via common processes such as HTTP or HTTPS.  The most common web service voc […]

Web Application vulnerabilities are still rampant and companies continue to allow attackers to exploit weaknesses in their websites.   XSS is the most prevalent attack method for the Web app type attack followed c […]

Malware infection is a very common attack vector utilizing various types of malware with common examples being Trojans and Polymorphic malware. Every organization should have a plan in place to handle an […]

Packet sniffing is largely an internal threat which must be mitigated.  Packet sniffing is susceptible in both a non-switched and switched network.  Many off the shelf tools today allow insider threats to easily c […]

Reading Summary: Enumeration is a powerful to which allows you to identify valid user accounts or any weak components at a target.    One of the first activities while conducting a penetration test in Unix […]

The importance of vulnerability scanning cannot be minimized.  The attack vectors routinely target systems which are vulnerable from an upgrade, patch or security perspective.   Organizations which have […]

The key facts I got from the reading are that public information will always be available as the internet will always be instrumental in finding customers which in turn will always make you vulnerable or a […]