28,679 reputation
232100
bio website bishopfox.com
location
age
visits member for 3 years, 8 months
seen 1 hour ago

Do not trust any security related answers you see on StackOverflow/Security.StackExchange. Not from me, not from anyone. There are very smart people on SO/SE and there are excellent answers given, although the right answer is almost never chosen.

Test everything, trust no one.

I have been writing exploit code for a while. There is no perfect system, vulnerable code will always exist.


Sep
14
comment How To Patch LFI Vulnerability
The code is difficult to read, consider using the code formatting tool.
Sep
14
answered OAuth - Why exchange the authcode for a token
Sep
13
comment Tiny USB sticks
The machine that has the bitcoin wallet needs to be connected to the intent. You can give someone a QR code and then expect payment without violating the air gap.
Sep
13
comment How to find Database attack in my site?
maybe this will help: owasp.org/index.php/SQL_Injection
Sep
13
comment drupal external authentication - how to handle password?
This design is insecure (CWE-257). We have already solved this problem and we call it OAuth.
Sep
13
revised Why should I use ROP for exploit dev?
added 51 characters in body
Sep
13
comment Why should I use ROP for exploit dev?
Based on technical mistakes in this post, I don't think you will be able to grasp this concept until you spend a few thousand hours using a debugger and writing C and ASM.
Sep
13
answered Why should I use ROP for exploit dev?
Sep
13
revised Where to store uploaded images from perspective of security
deleted 19 characters in body
Sep
13
comment Where to store uploaded images from perspective of security
@minitech There are very different attack patterns that affect both methods of data storage. For example, storing uploaded files on your filesystem could lead to remote code execution by uploading an executable script, like php or asp.
Sep
13
answered Where to store uploaded images from perspective of security
Sep
13
answered Decoding string retrieved by sqlmap
Sep
12
revised How risky is having sensitive files on webroot?
deleted 2 characters in body
Sep
12
answered How risky is having sensitive files on webroot?
Sep
12
answered Authentication between two internal servers
Sep
12
comment Understanding cross origing requests from a web page
CORS != XSS. XSS is a hack used by attacker to break the SOP, CORS allows developers to choose what SOP rules to ignore.
Sep
12
comment Apply SSL for domain that I do not own
@dK3 development environments must never be exposed to the internet. The problem of SSL on a dev site is minimal, compared to the concern of exposing untested code to the open internet. You are asking for trouble.
Sep
8
revised Designing single-sign-on with JSONP/CORS?
edited body
Sep
8
awarded  Revival
Sep
8
comment How Does A Random Salt Work?
You should be asking "How are passwords cracked?"