1,190 reputation
29
bio website michaelhendrickx.com
location Dubai, United Arab Emirates
age 33
visits member for 2 years, 5 months
seen Nov 24 at 11:38

Entropy isn't what it used to be.


Aug
31
comment Which encryption technique should be used for cloud computing data transfer?
It's about making the OS more secure: Ubuntu has a great guide on securing their distribution.
Aug
4
comment Should I be concerned about the following URLs that were tried to open on my webpage?
Could it a be a bad <a> HTML tag? More like: <a href="$tags.get(...)">something</a>, rather than the <a href="javascript:$tags.get(...)"> ?
Aug
4
comment DNS Security Questions
Your ISP may be blocking Netflix, they may prevent the DNS from resolving, or could be dropping traffic towards it. Anyhow, that's trying to access a blocked service, not necessarily how DNS works
Aug
3
comment How should I defend against zero-day attack on SSH?
It may be a very "patchy" thing, but you could allow a particular netblock (like: 1.1.0.0/16), sure, you allow 65k addresses, (or 16M, if you allow /8) - but you block the others.
Aug
3
comment Find the location of a hidden host
Could you add a .crontab file in the home directory? It may give you a possibility to execute something. Or, see if there's anything useful in .bash_history, ...
Aug
3
comment Is it fine to run custom javascript on a site?
If you're just traversing the DOM, then I don't think it's an issue (since you downloaded the page). If you follow links (ie: loop through all <a> elements and set your document.location to it), you could overload the site a bit.
Jul
20
comment Old Tool: S.A.T.A.N. (a.k.a. S.A.N.T.A.)
A security scanner is only as relevant until the bugs it exploits are relevant. You're talking about a tool that's 20 years old...
Jul
16
comment How to configure Burp suite in browsers while my internet connection works behind proxy.?
Sniff your TCP connection/do a netstat, see what server your browser talks to, verify if that's a proxy. Else, WPAD's wiki page gives you info how a browser finds its proxy server.
Jul
16
comment How to configure Burp suite in browsers while my internet connection works behind proxy.?
Your browser probably uses the web proxy autodiscovery protocol. You can try to get the PAC file yourself, and set the proxy address. Alternatively, call your internal helpdesk for the proxy address (say you can't surf), or try to ping proxy.<domain-name>.
Jul
15
comment How to configure Burp suite in browsers while my internet connection works behind proxy.?
If your browser is setup to use a proxy (could be pushed by active directory), then normally it are those values.
Jul
15
comment Perform THC-Hydra Dictionary attack on Microsoft forefront TMG login
Not an answer by far, but aren't there any log files that would give you more information on how he/she compromised the system?
Jul
9
comment Tor IP and cookies in hidden services
On another note, using JS people could find out if you're using Tor or not by linking resources from the "deep web".
Jul
7
comment Tor IP and cookies in hidden services
The hidden services is in my other comment, it seems to be anonimized. RFC1918 are internal addresses, like 10.0.0.2.
Jul
7
comment Tor IP and cookies in hidden services
this paper indicates that .onion sites are accessed through a rendez-vous point and is anonymized.
Jul
7
comment Apache redirecting to unsecure port
What do you redirect to? Do you include the schema? Are you listening on both 80 and 443?
Jul
7
comment Tor IP and cookies in hidden services
What's a hidden service?
Jul
3
comment Are two firewalls better than one?
Although a valid opint, the question stipulates firewalls "after" each other, and not in a HA setup.
Jun
30
comment How do I secure my REST api that is being accessed by only one application?
If "they" can read SSL, then yes. But that would mean that they have access to either server, or do a successful MitM. The seconds one being unlikely (if you implement it right)
Jun
30
comment How do I secure my REST api that is being accessed by only one application?
The other questions was more about SSL communications and sessions, this seems to be app <-> app authentication.
Jun
25
comment How to become Intermediate Certificate Authority?
If your end users are your branch organizations, then you can install your CA cert on their machines. If you want to create certificates "for your branch organizations" to serve to the rest of the world, then you need to sign up with a CA.