Reputation
1,462
Top tag
Next privilege 2,000 Rep.
Edit questions and answers
Badges
4 13
Impact
~66k people reached

  • 0 posts edited
  • 1 helpful flag
  • 109 votes cast
Apr
21
comment Google Drive photo security and publicly visible lh*.googleusercontent.com
I get a 403 accessing that resource; so it must be protected by something. Furthermore, @ThisClark secure documents that fetch more resources should be safe, unless your client/browser allows mixed content.
Apr
8
comment Is it a good practice to forbid ip access to port 80?
+1. The only "security risk" that may be there is that your default page exposes data such as "You're running Nginx [VERSION] on CentOS [VERSION]".
Apr
5
comment Monitoring HTTP traffic on openvpn server
I updated my answer with how to intercept it.
Apr
4
comment Monitoring HTTP traffic on openvpn server
Do you control the clients as well?
Mar
29
comment Is there any benefit to encrypting messages with PGP that will be trasmitted over SSL to a REST server?
Oh no, not at all. It's possible to perform a man-in-the-middle, just like Burp suite does it, by trusting a arbitrary CA certificate. This allows that party to issue certificates, and decrypt (and re-encrypt) all SSL traffic. This doesn't mean that the same person/organization (think agency, proxy admin, wifi, ...) has access to your environment. If you do ever send any secrets (i.e symmetric keys, secret keys, pw's) over SSL, then they will see it.
Mar
29
comment Is there any benefit to encrypting messages with PGP that will be trasmitted over SSL to a REST server?
Why assuming SSL is setup poorly, you're not in control of that? Also, is the message supposed to be for a (human) recipient, or the web app?
Mar
29
comment Best practice of Secret Question/Answer
..Or let machines auto-lock when not in use? If it's a back office app, I assume you're running on some sort of directory anyway.
Jul
13
comment Apache Server Maintains HTTPS Connection To Mysterious Server (Hijacking?)
Do you have XMLRPC enabled?
Jul
9
comment XSS only works when GET request is submitted with form
It seems your form's response is a JSON object which is rendered in your page. I'm afraid the page isn't even reloading. Do you have a code snippet when the form is submitted? It's probably an XHR function, or JQuery's $.getJSON() ...
Jul
9
comment XSS only works when GET request is submitted with form
Is the form being submitted using POST / XHR? - When you copy/paste a URL, the request should be in the query string (ie: GET request).
Jun
28
comment Enumerate the subdomains of a given domain - what's the point?
Wouldn't that just resolve non-existing names to an IP address? Thereby making it more difficult to differentiate existing and non-existing ones.
Jun
28
comment Enumerate the subdomains of a given domain - what's the point?
For 3, sure it's security by obscurity, but one could set up a wildcard domain record, so that every subdomain responds to an IP address.
Jun
22
comment Dom based Xss Query - location.hash
Currently no, but it depends on what happens to myhash. If you run it through an eval() or so it might be.
Jan
15
comment Http redirect using Location, but using falsely supplied data from host header
I think your last paragraph nails it; it just redirects everything everything to SSL first, and will then handle the hostname afterwards. (Which may be rendering the default vhost, or nothing at all)
Jan
14
comment Bruteforce with Hydra
Can you see if there's a string in the HTTP response when you request it with curl? Some pages do a 302, but also have HTTP content.
Aug
31
comment Which encryption technique should be used for cloud computing data transfer?
It's about making the OS more secure: Ubuntu has a great guide on securing their distribution.
Aug
4
comment Should I be concerned about the following URLs that were tried to open on my webpage?
Could it a be a bad <a> HTML tag? More like: <a href="$tags.get(...)">something</a>, rather than the <a href="javascript:$tags.get(...)"> ?
Aug
4
comment DNS Security Questions
Your ISP may be blocking Netflix, they may prevent the DNS from resolving, or could be dropping traffic towards it. Anyhow, that's trying to access a blocked service, not necessarily how DNS works
Aug
3
comment How should I defend against zero-day attack on SSH?
It may be a very "patchy" thing, but you could allow a particular netblock (like: 1.1.0.0/16), sure, you allow 65k addresses, (or 16M, if you allow /8) - but you block the others.
Aug
3
comment Find the location of a hidden host
Could you add a .crontab file in the home directory? It may give you a possibility to execute something. Or, see if there's anything useful in .bash_history, ...