296 reputation
1212
bio website owasp.org/index.php/…
location London, United Kingdom
age 39
visits member for 2 years, 7 months
seen May 30 at 14:28
Dinis Cruz is a Security Consultant based in London (UK) and specialized in: ASP.NET/J2EE Application Security, Application Security audits and .NET Security Curriculum Development.

For the past years Dinis has focused on the field of Static Source Code analysis, from May 2007 to Dec 2009 he worked as a independent consultant for Ounce Labs (bought by IBM in July 2009) where during active security engagements using Ounce's technology he developed the Open Source codebase which now is the foundation of the OWASP O2 Platform.

Dinis is currently focused on making the O2 Platform the industry standard for consuming, instrumenting and data-sharing between the multiple WebAppSec tools, the Security consultants and the final developers. Dinis is a also active trainer on .Net security having written and delivered courses for IOActive, Foundstone, Intense School and KPMG (at multiple locations including BlackHat), and has delivered a number of presentations and keynote speeches at multiple OWASP and Security related conferences

At OWASP, Dinis is the leader of the OWASP O2 Platform project, member of the OWASP Global Projects, chair of the OWASP Connections Committee and member of the OWASP Board

Feb
6
comment Are .NET WebServices vulnerable to CSRF?
Fair enough, I will :) Thx for the help
Feb
6
comment Are .NET WebServices vulnerable to CSRF?
In terms of the use of ActionScript, that is the only vector that looks like might work, BUT, only if one can set the ContentType to application/json (for example some browsers do allow the manipulation of content type via form submission, BUT only to a set of values (i.e. not to application/json))
Feb
6
comment Are .NET WebServices vulnerable to CSRF?
Hi Rook, I just updated the original question to add details about where you can get the Source Code of the app (in case you want to take a look at it)