Viewing profile — rudhir-secpanel

Texas has been a magnet for data centers for years.

So, does this mean that I can use my existing IP hard phones and control them via plivo cloud?

Yes. When one is logged in as a gmail user, any google search is done as that user. Therefore the requests will carry session information just as if one were using gmail with http.…

The google search tab on the right top in Safari/iPad is what a user tends to search in, instead of opening up a new browser tab. This opens up http://google.com , which is the iss…

http://www.webmin.com/cgi-bin/search_third.cgi?recent=1 Secpanel added as a webmin module

They claim it was a social engineering attack. Their entire database has been compromised and put on pastebin. This is just months after the Local file disclosure vulnerability and…

http://www.behind-the-enemy-lines.com/2012/04/google-attack-... Interesting post which showed how badly configured linkages between private google docs and S3 caused an accidental …

Backtrack is used to install/host metasploit. If you find Metasploit daunting then you could use Armitage - a gui interface for metasploit.

Thank you for your comments. I am always learning and take this opportunity to do that as well from someone with a better insight and experience. On the specific points raised here…

we have been working on this and have had some success in detecting and stopping an attack. would be glad to share more details, if you want

Thanks for you 'vote' :). I have responded to the issue of nginx vs os

the attack was done with slow http traffic. the delay effect on an apache server on the same os(centos) was different than was on nginx(again on centos). also i have been able to c…

@jayesheg - I tested LDoS on nginx. It easily crashes it within a few seconds.

nginx should also be vulnerable, though one has better control over it, relatively. I have not yet tested full bloodedly against nginx, yet though. I will do that soon and publish.…