Stack Exchange
log in

Chris Dale

 The DMZ

A serious place where infosec is discussed PS we don't do hard...
3
Chris Dale
Jul 29, 2015 11:54
Hola all.. A thread on a new stackexchange for Hacking emerged yesterday. I commented for security.stackexchange.com -> https://www.reddit.com/r/hacking/comments/3ewlcy/stackexchange_the_makers_of_stackoverflowcom_want/

There is one dude who claims that this SE is for "business related" questions though, but I believe he is wrong
Chris Andrè Dale
Feb 5, 2014 10:05
Where do you do the testing from?
Chris Andrè Dale
Feb 5, 2014 10:04
Thanks Rory
Karrax
Feb 5, 2014 09:04
I am debugging an error, and my ISP doesn't want to admit fault
Karrax
Feb 5, 2014 09:04
Hi all. Anyone alive and can do me a favour? I need one or more to run the TPC/IP speedtest on ndt.bkkb.no and give me the result, where you are coming from and which max bandwith you have
Karrax
Aug 16, 2012 10:07
ok :)
Karrax
Aug 16, 2012 10:06
hackthissite.org :)
Karrax
Aug 15, 2012 06:07
Nevermind I just did the edit. No doubt the user-education was wrong
Karrax
Aug 15, 2012 06:05
0
Q: Why wireshark source ip tab lists other ip as well

user2315I was trying to capture some packets using Wireshark. I could find a lots of ip in the source address tab. Which ip do they represent. Which all packets are visible to wireshark when I run it in my system?

user-education wireshark
Karrax
Aug 15, 2012 06:04
As much as I want to post answers in the user-education category I think this question is wrongly tagged. Anyone want to confirm?
Karrax
Aug 14, 2012 12:49
maybe @TerryChia is up for it
Karrax
Aug 14, 2012 12:49
@Polynomial I gotta leave from work very soon so I can't atm.
Karrax
Aug 14, 2012 12:46
@Polynomial Nice @Polynomial :)
Karrax
Aug 14, 2012 12:38
Wasn't DEP left out of Linux kernel because Linus Torvaldsen think its pointless as it is so trivial to bypass?
Karrax
Aug 14, 2012 12:36
@TerryChia Have an upvote!
Karrax
Aug 14, 2012 12:35
OS based as far as I know
Karrax
Aug 14, 2012 11:45
@Polynomial Thats better (Y) :)
Karrax
Aug 14, 2012 11:12
[tag:theory x] and [tag:theory y] seems a bit too specific and localized tags
Karrax
Aug 13, 2012 15:18
had to rage first :p
Karrax
Aug 13, 2012 15:18
LOL :D No I havent read it yet
Karrax
Aug 13, 2012 15:16
Holy shit.. the nuclear-bomb question got 4 answers while I was writing mine. I knew I shouldn't have taken time for dinner :P
Karrax
Aug 13, 2012 12:35
Oh god.. I've been hearing that phrase so much lately! I am listening to Pauldotcom in my daily commute
Karrax
Aug 13, 2012 12:31
@ScottPack Some refer to it as good community service :p
Karrax
Aug 13, 2012 12:31
@ScottPack Haha :D
Karrax
Aug 8, 2012 21:05
Night :)
Karrax
Aug 8, 2012 19:38
hey guys. Does anyone know of a site that provides a lot of known locations of application passwords stored locally? For example it contains the path of where Filezilla stores rememberd passwords or where in registry X application stores it.
Karrax
Jul 26, 2012 08:21
hakshop.myshopify.com/products/wifi-pineapple
Karrax
Jul 26, 2012 08:21
@AviD It's a product Hak5 has put together. Sec I'll bring you a link
Karrax
Jul 19, 2012 13:02
Thanks for advice bwt :) I'll cya guys later when Im online again
Karrax
Jul 19, 2012 12:59
Anyone know if there exist a SE chat application for Android? I gotta leave work any minute lol
Karrax
Jul 19, 2012 12:58
to keep the development cost down
Karrax
Jul 19, 2012 12:58
and one issue is that consultans need to be able to log into customers accounts.. previously this was done by using the customers password. To fix this I thought maybe pass the hash would be sufficient
Karrax
Jul 19, 2012 12:57
I am currently advising a client in removal of clear text passwords in database. I am recommending using PBKDF2 with SHA256 over as many iterations they can afford. This is so they can document compliance with NIST guidance. However the thing is they cant afford very much development time to fix the issue
Karrax
Jul 19, 2012 12:56
yes I believe NetBIOS uses pass the hash. The attack vector is commonly known as "Pass the hash attack"
Karrax
Jul 19, 2012 12:54
and yes, its vulnerable for replay attack, however maybe that a risk we can afford compared to other risks involved
Karrax
Jul 19, 2012 12:54
Hmm I see.. Thank you. However is this like saying "Pass the hash" technique is inherently insecure? MAny applications in windows rely on this
Karrax
Jul 19, 2012 09:26
Thomas Pornin got so many brilliant answers that are easy to understand
Karrax
Jul 19, 2012 08:35
ooo.. just found a question about this: security.stackexchange.com/questions/17129/…
Karrax
Jul 19, 2012 08:29
I got a bit uneasy as there is apparently very few javascript libraries supporting bcrypt, and bcrypt is according to some answers the best practice way of hashing them. stackoverflow.com/questions/2299434/…
Karrax
Jul 19, 2012 08:28
Hmm.. any reason it would be bad for an authentication mechanism to bcrypt the password with javascript before sending it to the webserver? Wouldn't it be best practice since no cleartext passwords would be discovered in logs and so forth?
Karrax
Jul 19, 2012 07:01
kinda*
Karrax
Jul 19, 2012 07:01
Kind also felt like doing the homework for someone
Karrax
Jul 19, 2012 07:01
@RoryAlsop Morning :)
Karrax
Jul 19, 2012 06:54
Vote to close it?
Karrax
Jul 19, 2012 06:54
that question is kind of pointless with the pcap files modified away
Karrax
Jul 19, 2012 06:54
0
Q: Pcap file inspection

Kirsty WhiteI have 3 packet capture, generated with Wireshark, of an example intrusion but I'm struggling to figure out whats going on. I also tried running the pcap files in snort to see if it detected anything but I'm not sure what the results were. I have never used snort before but the results didn't c...

network ssl windows virus botnet
Karrax
Jul 18, 2012 13:36
@ScottPack Excellent Scott. Thank you! I also found out Creative Commons had a free image search: search.creativecommons.org
Karrax
Jul 17, 2012 19:04
that you can legally use
Karrax
Jul 17, 2012 19:03
Wow its really hard getting decent pictures for articles
Karrax
Jul 17, 2012 15:44
No worries though :) I'll just point to that blog entry