30,074 reputation
336107
bio website bishopfox.com
location
age
visits member for 3 years, 10 months
seen 3 hours ago

Test everything, trust no one.

Do not trust any security related answers you see on StackOverflow.com (SO) / Security.StackExchange.com (SE). Not from me, not from anyone. There are very smart people on SO/SE and there are excellent answers given, although the right answer is not always chosen.

I have been writing exploit code for a while. There is no perfect system, vulnerable code will always exist.


9h
revised Someone faxed me a bunch of black paper
added 9 characters in body
10h
comment {Secure} Telnet connect to a console server from webbrowser
I'm pretty sure that "secure telnet" is an oxymoron.
10h
comment Someone faxed me a bunch of black paper
Hey man, don't throw 'scum' around, some people make a living off of telemarketing.
10h
answered Someone faxed me a bunch of black paper
10h
comment Someone faxed me a bunch of black paper
I think it shocks most people when they realize facsimile is insecure.
1d
comment Open source alternatives to tamper data
OWASP ZED attack Proxy, or BURP free edition.
1d
comment ASP.NET Web API and potential XSS
@drogon I don't see how the OP's example ie exploitable. Perhaps you should write a Proof-of-Concept exploit to prove me wrong.
1d
comment Which is more in demand Web or Wireless pen-testing.?
Webapps receive far more attacks on a regular basis because a lot more attackers can target a webapp at any given time. Additionally web apps have a lot more complexity than a wireless network. Most wifi pentests: "Hey did cowpatty work? Nope? ok."
2d
comment Why does this CSRF vulnerability work?
No exploit? How did it work?
Nov
19
comment Is $_SERVER[ ] a safe source of data in PHP?
It is customary to accept good answers. You should really choose an answer for this question.
Nov
19
comment _ _ VIEWSTATE to Protect Against CSRF
+1, additionally, this is a double-submit cookie based CSRF token.
Nov
17
awarded  Populist
Nov
16
comment PHP altering function inputs
@Guesser based on this code ship, you could accept all characters and there is still a zero % chance of being hacked. This code is not using a sink for an attacker to abuse, I don't see how this question is security related.
Nov
15
comment PHP altering function inputs
How is this security related?
Nov
13
revised Clarification on OAuth Client Secret
added 83 characters in body
Nov
13
comment Clarification on OAuth Client Secret
This question entirely hinges on something that you left out: How the hell are you using oauth? OAuth strength is that it is versatile.
Nov
13
answered Clarification on OAuth Client Secret
Nov
13
answered Proper way to allow access to systems within different offices?
Nov
12
comment SQL Injection Modify / Insert Table Values
"MySQL Server doesn't support the SELECT ... INTO TABLE Sybase SQL extension. Instead, MySQL Server supports the INSERT INTO ... SELECT". The into table query operator cannot be in the OP's injection.
Nov
12
revised SQL Injection Modify / Insert Table Values
deleted 24 characters in body