1,293 reputation
311
bio website michaelhendrickx.com
location Dubai, United Arab Emirates
age 33
visits member for 3 years
seen yesterday

Entropy isn't what it used to be.


Jun
28
comment Enumerate the subdomains of a given domain - what's the point?
Wouldn't that just resolve non-existing names to an IP address? Thereby making it more difficult to differentiate existing and non-existing ones.
Jun
28
comment Enumerate the subdomains of a given domain - what's the point?
For 3, sure it's security by obscurity, but one could set up a wildcard domain record, so that every subdomain responds to an IP address.
Jun
26
awarded  Yearling
Jun
24
answered Using VPN in the UAE - safe or trackable?
Jun
22
answered What are hashes that begin with $1$…?
Jun
22
comment Dom based Xss Query - location.hash
Currently no, but it depends on what happens to myhash. If you run it through an eval() or so it might be.
Jun
21
awarded  Editor
Jun
21
revised Multiple logins on the same website
fixed typo, SSL -> Transport layer security
Jun
21
answered Multiple logins on the same website
Jun
21
answered How secure are “pattern” passwords?
Jun
20
awarded  Revival
Jan
15
comment Http redirect using Location, but using falsely supplied data from host header
I think your last paragraph nails it; it just redirects everything everything to SSL first, and will then handle the hostname afterwards. (Which may be rendering the default vhost, or nothing at all)
Jan
14
comment Bruteforce with Hydra
Can you see if there's a string in the HTTP response when you request it with curl? Some pages do a 302, but also have HTTP content.
Oct
2
awarded  Popular Question
Aug
31
comment Which encryption technique should be used for cloud computing data transfer?
It's about making the OS more secure: Ubuntu has a great guide on securing their distribution.
Aug
31
answered Which encryption technique should be used for cloud computing data transfer?
Aug
4
comment Should I be concerned about the following URLs that were tried to open on my webpage?
Could it a be a bad <a> HTML tag? More like: <a href="$tags.get(...)">something</a>, rather than the <a href="javascript:$tags.get(...)"> ?
Aug
4
comment DNS Security Questions
Your ISP may be blocking Netflix, they may prevent the DNS from resolving, or could be dropping traffic towards it. Anyhow, that's trying to access a blocked service, not necessarily how DNS works
Aug
3
answered DNS Security Questions
Aug
3
comment How should I defend against zero-day attack on SSH?
It may be a very "patchy" thing, but you could allow a particular netblock (like: 1.1.0.0/16), sure, you allow 65k addresses, (or 16M, if you allow /8) - but you block the others.