30,333 reputation
337108
bio website bishopfox.com
location
age
visits member for 3 years, 11 months
seen yesterday

Test everything, trust no one.

Do not trust any security related answers you see on StackOverflow.com (SO) / Security.StackExchange.com (SE). Not from me, not from anyone. There are very smart people on SO/SE and there are excellent answers given, although the right answer is not always chosen.

I have been writing exploit code for a while. There is no perfect system, vulnerable code will always exist.


1d
comment Is SQL Injection possible with limit?
Sorry but, this is a huge pet peeve of mine. Mainly because I really wish query stacking was supported by majority of SQL databases, but in the real world it is very uncommon (MS-SQL, Access, SQLite). I see posts talking about query stacking as providing false hope.
1d
comment VPN Usage in China
A lot of attacks originate form attackers in the US. I don't see how China changes anything, other than the "great firewall of China" (which is a clear human rights violation).
1d
comment Is SQL Injection possible with limit?
Query stacking? In MySQL? Have you ever exploited SQL Injection on MySQL??? PiTheNumber got he right answer.
1d
comment is HttpOnly and Secure cookie enough to prevent CSRF in rest api?
A cookie can't prevent CSRF, the point of CSRF is that you are riding on a session because all requests to a domain contain a cookie. Perhaps you are confused by how double-submit CSRF tokens work?
1d
comment is HttpOnly and Secure cookie enough to prevent CSRF in rest api?
Please use spell check and proper punctuation. English is hard, but at-least follow the basic rules when posting. Also, yes your app is vulnerable as hell.
1d
revised is HttpOnly and Secure cookie enough to prevent CSRF in rest api?
OMFG SPELL CHECK
1d
comment Is SQL Injection possible with limit?
+1 nice, this exploit is legit.
1d
comment Is SQL Injection possible with limit?
-1 a real exploit would be nice.
1d
revised Is SQL Injection possible with limit?
edited tags
1d
revised Is cookie-based XSS exploitable?
added 25 characters in body
Dec
18
awarded  Enlightened
Dec
18
awarded  Nice Answer
Dec
17
awarded  tls
Dec
14
comment prevent session hijacking in PHP
-1 Don't write your own session handler. Use PHP session_start()
Dec
14
comment prevent session hijacking in PHP
First and foremost: Never write your own session handler.
Dec
10
answered Parallel HTTPS connection remote and local host
Dec
8
comment Alternative ways to exploit this path traversal
Well first of all, there is some code preventing you from reading files, what does this code look like? We can't just magic away an error message.
Dec
6
comment Exploiting cve:2005-1794
A 9 year old exploit? Someone needs to take that exploit to disneyland for it's birthday, because it is certainly old enough.
Dec
5
comment Can my raw html website get hacked?
You still need a way to update this HTML, and that is a point of weakness.
Dec
5
comment Is there a secure way to share sessions in the same server with different sub domains?
*.example.com is a scope that encompasses all subdomains of example.com