Reputation
1,393
Top tag
Next privilege 2,000 Rep.
Edit questions and answers
Badges
4 12
Newest
 Caucus
Impact
~45k people reached

  • 0 posts edited
  • 0 helpful flags
  • 99 votes cast
Jul
13
comment Apache Server Maintains HTTPS Connection To Mysterious Server (Hijacking?)
Do you have XMLRPC enabled?
Jul
9
comment XSS only works when GET request is submitted with form
It seems your form's response is a JSON object which is rendered in your page. I'm afraid the page isn't even reloading. Do you have a code snippet when the form is submitted? It's probably an XHR function, or JQuery's $.getJSON() ...
Jul
9
comment XSS only works when GET request is submitted with form
Is the form being submitted using POST / XHR? - When you copy/paste a URL, the request should be in the query string (ie: GET request).
Jun
28
comment Enumerate the subdomains of a given domain - what's the point?
Wouldn't that just resolve non-existing names to an IP address? Thereby making it more difficult to differentiate existing and non-existing ones.
Jun
28
comment Enumerate the subdomains of a given domain - what's the point?
For 3, sure it's security by obscurity, but one could set up a wildcard domain record, so that every subdomain responds to an IP address.
Jun
22
comment Dom based Xss Query - location.hash
Currently no, but it depends on what happens to myhash. If you run it through an eval() or so it might be.
Jan
15
comment Http redirect using Location, but using falsely supplied data from host header
I think your last paragraph nails it; it just redirects everything everything to SSL first, and will then handle the hostname afterwards. (Which may be rendering the default vhost, or nothing at all)
Jan
14
comment Bruteforce with Hydra
Can you see if there's a string in the HTTP response when you request it with curl? Some pages do a 302, but also have HTTP content.
Aug
31
comment Which encryption technique should be used for cloud computing data transfer?
It's about making the OS more secure: Ubuntu has a great guide on securing their distribution.
Aug
4
comment Should I be concerned about the following URLs that were tried to open on my webpage?
Could it a be a bad <a> HTML tag? More like: <a href="$tags.get(...)">something</a>, rather than the <a href="javascript:$tags.get(...)"> ?
Aug
4
comment DNS Security Questions
Your ISP may be blocking Netflix, they may prevent the DNS from resolving, or could be dropping traffic towards it. Anyhow, that's trying to access a blocked service, not necessarily how DNS works
Aug
3
comment How should I defend against zero-day attack on SSH?
It may be a very "patchy" thing, but you could allow a particular netblock (like: 1.1.0.0/16), sure, you allow 65k addresses, (or 16M, if you allow /8) - but you block the others.
Aug
3
comment Find the location of a hidden host
Could you add a .crontab file in the home directory? It may give you a possibility to execute something. Or, see if there's anything useful in .bash_history, ...
Aug
3
comment Is it fine to run custom javascript on a site?
If you're just traversing the DOM, then I don't think it's an issue (since you downloaded the page). If you follow links (ie: loop through all <a> elements and set your document.location to it), you could overload the site a bit.
Jul
20
comment Old Tool: S.A.T.A.N. (a.k.a. S.A.N.T.A.)
A security scanner is only as relevant until the bugs it exploits are relevant. You're talking about a tool that's 20 years old...
Jul
16
comment How to configure Burp suite in browsers while my internet connection works behind proxy.?
Sniff your TCP connection/do a netstat, see what server your browser talks to, verify if that's a proxy. Else, WPAD's wiki page gives you info how a browser finds its proxy server.
Jul
16
comment How to configure Burp suite in browsers while my internet connection works behind proxy.?
Your browser probably uses the web proxy autodiscovery protocol. You can try to get the PAC file yourself, and set the proxy address. Alternatively, call your internal helpdesk for the proxy address (say you can't surf), or try to ping proxy.<domain-name>.
Jul
15
comment How to configure Burp suite in browsers while my internet connection works behind proxy.?
If your browser is setup to use a proxy (could be pushed by active directory), then normally it are those values.
Jul
9
comment Tor IP and cookies in hidden services
On another note, using JS people could find out if you're using Tor or not by linking resources from the "deep web".
Jul
7
comment Tor IP and cookies in hidden services
The hidden services is in my other comment, it seems to be anonimized. RFC1918 are internal addresses, like 10.0.0.2.