185 reputation
119
bio website bb.com.br
location Águas Claras, Brazil
age 30
visits member for 3 years
seen Mar 3 at 19:43

I am actualy working for Banco do Brasil, building the app programs in Objective-C.


Apr
8
awarded  Popular Question
Jan
20
revised What is the severity if someone read the ConnectionStrings_Prod.config?
deleted 13 characters in body
Jan
9
comment What is the severity if someone read the ConnectionStrings_Prod.config?
Hi. I was able to find a place with sql injection that only work if I have the password. And think what... I have it :D So, yes. This information can be useless. But, you can use it in another place. Thanks for the tips.
Jan
9
accepted What is the severity if someone read the ConnectionStrings_Prod.config?
Dec
12
comment What is the severity if someone read the ConnectionStrings_Prod.config?
Lol, the "web based system" is just the web page. I just thought it a common name. This is not a intranet or things like that. Everyone can access and even login as administrator with a web browser in internet. Obvious the database is more restrict.
Dec
12
revised What is the severity if someone read the ConnectionStrings_Prod.config?
deleted 3 characters in body
Dec
12
asked What is the severity if someone read the ConnectionStrings_Prod.config?
Dec
10
revised Is string concatenation vulnerable to null character in aspx?
added 147 characters in body
Dec
10
comment Is string concatenation vulnerable to null character in aspx?
As far I know, I tested for 0x00, %00, %00000. I see if I send " or & the function say it is a ilegal character for file name.
Dec
10
comment Is string concatenation vulnerable to null character in aspx?
lol, I already tested of %00. I understand that it need to check the file type. But the guys are saying it is too dificult for every type. They say they can't see a way to break it.
Dec
10
awarded  Scholar
Dec
10
accepted Is it possible to steal money directly from the systems of a big bank?
Dec
10
asked Is string concatenation vulnerable to null character in aspx?
Jul
19
awarded  Famous Question
Sep
6
awarded  Nice Question
Feb
2
awarded  Notable Question
Jan
6
asked Is it possible detect a device using a 3G connection?
Oct
17
awarded  Popular Question
Apr
7
awarded  Peer Pressure
Mar
28
awarded  Student