30,044 reputation
336107
bio website bishopfox.com
location
age
visits member for 3 years, 10 months
seen 7 hours ago

Test everything, trust no one.

Do not trust any security related answers you see on StackOverflow.com (SO) / Security.StackExchange.com (SE). Not from me, not from anyone. There are very smart people on SO/SE and there are excellent answers given, although the right answer is not always chosen.

I have been writing exploit code for a while. There is no perfect system, vulnerable code will always exist.


Nov
19
comment Is $_SERVER[ ] a safe source of data in PHP?
It is customary to accept good answers. You should really choose an answer for this question.
Nov
19
comment _ _ VIEWSTATE to Protect Against CSRF
+1, additionally, this is a double-submit cookie based CSRF token.
Nov
17
awarded  Populist
Nov
16
comment PHP altering function inputs
@Guesser based on this code ship, you could accept all characters and there is still a zero % chance of being hacked. This code is not using a sink for an attacker to abuse, I don't see how this question is security related.
Nov
16
comment Finding Probability in Lehman Test
How is this security related?
Nov
16
revised ldap password storage
This has nothing to do with encryption.
Nov
16
comment ldap password storage
md5 is not encryption algorithm md5, it is a very insecure hash function. Also this code is probably vulnerable to LDAP injection.
Nov
16
comment How is there an XSS possible here?
This is a malformed fragment of the google-analytics widget, and there isn't enough code here to hack.
Nov
15
comment PHP altering function inputs
How is this security related?
Nov
13
revised Clarification on OAuth Client Secret
added 83 characters in body
Nov
13
comment Clarification on OAuth Client Secret
This question entirely hinges on something that you left out: How the hell are you using oauth? OAuth strength is that it is versatile.
Nov
13
answered Clarification on OAuth Client Secret
Nov
13
answered Proper way to allow access to systems within different offices?
Nov
12
comment SQL Injection Modify / Insert Table Values
"MySQL Server doesn't support the SELECT ... INTO TABLE Sybase SQL extension. Instead, MySQL Server supports the INSERT INTO ... SELECT". The into table query operator cannot be in the OP's injection.
Nov
12
revised SQL Injection Modify / Insert Table Values
deleted 24 characters in body
Nov
11
revised SQL Injection Modify / Insert Table Values
added 132 characters in body
Nov
11
comment SQL Injection Modify / Insert Table Values
@Abe Miessler Good point, updated.
Nov
11
revised SQL Injection Modify / Insert Table Values
added 170 characters in body
Nov
11
answered SQL Injection Modify / Insert Table Values
Nov
8
comment Is this XSS filter i.e <[space][0-9a-z]/> can be bypassed?
Have you looked at the OWASP XSS filter evasion cheat sheet? I am 100% positive that this half-baked regex is trivial to bypass.