118 reputation
3
bio website blog.affirmix.com
location
age
visits member for 1 year, 7 months
seen Jul 2 at 8:17

For additional resources, please see my Twitter, Google+, and LinkedIn profiles.


Jul
2
comment Someone tried to access a list of hundreds of standard website urls in a go, is it a cause of concern
This isn't actually a duplicate of the linked question; the linked question is trying to execute known vulnerabilities in PhpMyAdmin, while this is clearly a case of fingerprinting the server: owasp.org/index.php/Fingerprint_Web_Server_(OTG-INFO-002) Basically, the attacker is trying to determine what software is running, which he can then use to determine whether exploits are available, perhaps using Armitage or something like that: fastandeasyhacking.com While not a major source of concern, it is a good reminder to keep up-to-date with the latest security updates.
Nov
24
comment Is it possible for Apache to display PHP source code if PHP crashes?
Very interesting; here is a reference to that if anyone is interested: techcrunch.com/2007/08/11/facebook-source-code-leaked
Nov
24
awarded  Student
Nov
24
awarded  Scholar
Nov
24
accepted Is it possible for Apache to display PHP source code if PHP crashes?
Nov
23
awarded  Supporter
Nov
23
asked Is it possible for Apache to display PHP source code if PHP crashes?