30,084 reputation
336107
bio website bishopfox.com
location
age
visits member for 3 years, 10 months
seen yesterday

Test everything, trust no one.

Do not trust any security related answers you see on StackOverflow.com (SO) / Security.StackExchange.com (SE). Not from me, not from anyone. There are very smart people on SO/SE and there are excellent answers given, although the right answer is not always chosen.

I have been writing exploit code for a while. There is no perfect system, vulnerable code will always exist.


1d
comment is it sufficient to convert '(single-quote) to ` ' `
@Milen Your posts need to contain citation. Link to the OWASP XSS filter evasion cheat sheet, or XSS prevention cheat sheet.
1d
comment is it sufficient to convert '(single-quote) to ` ' `
Why would filtering a single character fix XSS? What about param='</script><script>alert(1)//'
1d
comment Is this PHP code XSS proof?
@Gumbo is right, this filter won't work for youtube links youtube.com/watch?v=EZTXYCJk05w
1d
comment Is this PHP code XSS proof?
@Lucas NN Sorry I had trouble reading the code formatting in an previous revision. The only attacks I'm aware of would require the page to specify an alternative character set, such as GBK which permits multi-byte character consumption.
2d
revised Someone faxed me a bunch of black paper
added 9 characters in body
2d
comment {Secure} Telnet connect to a console server from webbrowser
I'm pretty sure that "secure telnet" is an oxymoron.
2d
comment Someone faxed me a bunch of black paper
Hey man, don't throw 'scum' around, some people make a living off of telemarketing.
2d
answered Someone faxed me a bunch of black paper
2d
comment Someone faxed me a bunch of black paper
I think it shocks most people when they realize facsimile is insecure.
Nov
25
comment Open source alternatives to tamper data
OWASP ZED attack Proxy, or BURP free edition.
Nov
25
comment ASP.NET Web API and potential XSS
@drogon I don't see how the OP's example ie exploitable. Perhaps you should write a Proof-of-Concept exploit to prove me wrong.
Nov
25
comment Which is more in demand Web or Wireless pen-testing.?
Webapps receive far more attacks on a regular basis because a lot more attackers can target a webapp at any given time. Additionally web apps have a lot more complexity than a wireless network. Most wifi pentests: "Hey did cowpatty work? Nope? ok."
Nov
24
comment Why does this CSRF vulnerability work?
No exploit? How did it work?
Nov
19
comment Is $_SERVER[ ] a safe source of data in PHP?
It is customary to accept good answers. You should really choose an answer for this question.
Nov
19
comment _ _ VIEWSTATE to Protect Against CSRF
+1, additionally, this is a double-submit cookie based CSRF token.
Nov
17
awarded  Populist
Nov
13
revised Clarification on OAuth Client Secret
added 83 characters in body
Nov
13
comment Clarification on OAuth Client Secret
This question entirely hinges on something that you left out: How the hell are you using oauth? OAuth strength is that it is versatile.
Nov
13
answered Clarification on OAuth Client Secret
Nov
13
answered Proper way to allow access to systems within different offices?