178 reputation
118
bio website bb.com.br
location Águas Claras, Brazil
age 30
visits member for 2 years, 9 months
seen Dec 16 at 1:55

I am actualy working for Banco do Brasil, building the app programs in Objective-C.


Dec
12
comment What is the severity if someone read the ConnectionStrings_Prod.config?
Lol, the "web based system" is just the web page. I just thought it a common name. This is not a intranet or things like that. Everyone can access and even login as administrator with a web browser in internet. Obvious the database is more restrict.
Dec
12
revised What is the severity if someone read the ConnectionStrings_Prod.config?
deleted 3 characters in body
Dec
12
asked What is the severity if someone read the ConnectionStrings_Prod.config?
Dec
10
revised Is string concatenation vulnerable to null character in aspx?
added 147 characters in body
Dec
10
comment Is string concatenation vulnerable to null character in aspx?
As far I know, I tested for 0x00, %00, %00000. I see if I send " or & the function say it is a ilegal character for file name.
Dec
10
comment Is string concatenation vulnerable to null character in aspx?
lol, I already tested of %00. I understand that it need to check the file type. But the guys are saying it is too dificult for every type. They say they can't see a way to break it.
Dec
10
awarded  Scholar
Dec
10
accepted Is it possible to steal money directly from the systems of a big bank?
Dec
10
asked Is string concatenation vulnerable to null character in aspx?
Jul
19
awarded  Famous Question
Sep
6
awarded  Nice Question
Feb
2
awarded  Notable Question
Jan
6
asked Is it possible detect a device using a 3G connection?
Oct
17
awarded  Popular Question
Apr
7
awarded  Peer Pressure
Mar
28
awarded  Student
Mar
28
comment Is it possible to steal money directly from the systems of a big bank?
Ok, how much money you want? But first you need send-me a little to pay bank tax and trade tariffs :)
Mar
28
awarded  Editor
Mar
28
revised Is it possible to steal money directly from the systems of a big bank?
added 43 characters in body
Mar
28
awarded  Supporter