1,195 reputation
29
bio website michaelhendrickx.com
location Dubai, United Arab Emirates
age 33
visits member for 2 years, 3 months
seen 22 hours ago

Entropy isn't what it used to be.


Oct
2
awarded  Popular Question
Aug
31
comment Which encryption technique should be used for cloud computing data transfer?
It's about making the OS more secure: Ubuntu has a great guide on securing their distribution.
Aug
31
answered Which encryption technique should be used for cloud computing data transfer?
Aug
4
comment Should I be concerned about the following URLs that were tried to open on my webpage?
Could it a be a bad <a> HTML tag? More like: <a href="$tags.get(...)">something</a>, rather than the <a href="javascript:$tags.get(...)"> ?
Aug
4
comment DNS Security Questions
Your ISP may be blocking Netflix, they may prevent the DNS from resolving, or could be dropping traffic towards it. Anyhow, that's trying to access a blocked service, not necessarily how DNS works
Aug
3
answered DNS Security Questions
Aug
3
comment How should I defend against zero-day attack on SSH?
It may be a very "patchy" thing, but you could allow a particular netblock (like: 1.1.0.0/16), sure, you allow 65k addresses, (or 16M, if you allow /8) - but you block the others.
Aug
3
comment Find the location of a hidden host
Could you add a .crontab file in the home directory? It may give you a possibility to execute something. Or, see if there's anything useful in .bash_history, ...
Aug
3
comment Is it fine to run custom javascript on a site?
If you're just traversing the DOM, then I don't think it's an issue (since you downloaded the page). If you follow links (ie: loop through all <a> elements and set your document.location to it), you could overload the site a bit.
Jul
20
comment Old Tool: S.A.T.A.N. (a.k.a. S.A.N.T.A.)
A security scanner is only as relevant until the bugs it exploits are relevant. You're talking about a tool that's 20 years old...
Jul
16
comment How to configure Burp suite in browsers while my internet connection works behind proxy.?
Sniff your TCP connection/do a netstat, see what server your browser talks to, verify if that's a proxy. Else, WPAD's wiki page gives you info how a browser finds its proxy server.
Jul
16
answered Is there any way to log in with a hash?
Jul
16
comment How to configure Burp suite in browsers while my internet connection works behind proxy.?
Your browser probably uses the web proxy autodiscovery protocol. You can try to get the PAC file yourself, and set the proxy address. Alternatively, call your internal helpdesk for the proxy address (say you can't surf), or try to ping proxy.<domain-name>.
Jul
15
comment How to configure Burp suite in browsers while my internet connection works behind proxy.?
If your browser is setup to use a proxy (could be pushed by active directory), then normally it are those values.
Jul
15
comment Perform THC-Hydra Dictionary attack on Microsoft forefront TMG login
Not an answer by far, but aren't there any log files that would give you more information on how he/she compromised the system?
Jul
15
answered How to configure Burp suite in browsers while my internet connection works behind proxy.?
Jul
15
answered How to sniff a data from an upstream router?
Jul
9
answered how to block ip from head or ping or get or post to webserver (using apache and windows)?
Jul
9
comment Tor IP and cookies in hidden services
On another note, using JS people could find out if you're using Tor or not by linking resources from the "deep web".
Jul
7
comment Tor IP and cookies in hidden services
The hidden services is in my other comment, it seems to be anonimized. RFC1918 are internal addresses, like 10.0.0.2.