Eric Kollmann

[Eric Kollmann @xnih]

@netresec nice addition!

[Eric Kollmann @xnih]

I've been spending some time updating satori fingerprints again. If you have pcaps of different "odd" devices you'd like to add (tcp, dhcp, http (server or useragent) or smb) please send them my way.

[Eric Kollmann @xnih]

Been busy updating fingerprints into Satori over the last month after a long pause. Check it out at https://t.co/tZM68vKdt9

[Eric Kollmann @xnih]

Finally got around to rewriting Satori in python: https://t.co/tZM68vKdt9

Nice to get it off of the windows platform and give you the ability to do passive OS Fingerprinting on whatever OS you can get python3 and the requirements running on.

[Eric Kollmann @xnih]

I'm adding dhcpv6 fingerprinting to Satori, so anyone with pcap traces of dhcpv6 traffic get a hold of me

[Eric Kollmann @xnih]

Twitter passwords in clear text? http://www.hak5.org/forums/index.php?s=2e2403f573f4726eb99f84edad76c867&showtopic=16497

[Eric Kollmann @xnih]

Feeding another GB+ of traffic through Satori, seeing what else I can make break this week

[Eric Kollmann @xnih]

latest rant on "ESX is software therefor it is full of vulns" here: http://chatteronthewire.blogspot.com/

[Eric Kollmann @xnih]

@pauldotcom between PDAs running dhcp software and the latest malware, you just have to love how easy it is to take over things!

[Eric Kollmann @xnih]

anyone have a pcap file of any of the variants of Trojan.Flush.M? I want to add it to my dhcp fingerprinting file!