29,555 reputation
234105
bio website bishopfox.com
location
age
visits member for 3 years, 9 months
seen 4 hours ago

Do not trust any security related answers you see on StackOverflow/Security.StackExchange. Not from me, not from anyone. There are very smart people on SO/SE and there are excellent answers given, although the right answer is almost never chosen.

Test everything, trust no one.

I have been writing exploit code for a while. There is no perfect system, vulnerable code will always exist.


Oct
18
revised Socket.IO Client Security
added 20 characters in body
Oct
18
comment Socket.IO Client Security
@jfriend00 updated.
Oct
18
revised Socket.IO Client Security
deleted 7 characters in body
Oct
18
comment Socket.IO Client Security
This post is confusing because the Same Origin Policy (SOP) is never mentioned. The last paragraph is a violation of the SOP.
Oct
18
answered Socket.IO Client Security
Oct
18
awarded  Enlightened
Oct
18
awarded  Nice Answer
Oct
18
revised Is it any more secure to use a HTML form instead of a javascript popup?
deleted 145 characters in body
Oct
18
comment Fastest dictionary attacker?
patator, hydra, ncrack, or burp intruder.
Oct
18
comment Facebook full IP log
The attacker could be female.
Oct
18
revised Is it any more secure to use a HTML form instead of a javascript popup?
added 130 characters in body
Oct
18
comment CVE-2014-4113 Proof of Concept Code?
Security.se is not an exploit forum. I'm sure that every active forum on the net has a copy: exploit-db.com
Oct
18
answered Hardware token to authenticate web application
Oct
18
revised Is it any more secure to use a HTML form instead of a javascript popup?
added 28 characters in body
Oct
18
revised Is it any more secure to use a HTML form instead of a javascript popup?
deleted 7 characters in body
Oct
18
answered Is it any more secure to use a HTML form instead of a javascript popup?
Oct
18
comment Code injection in PHP
@Wennielwy This code snip does not contain a sink, or vulnerable function, no one tell you if PHP code injection is possible or not. The sanitation routine wp_specialchars( strip_tags($title)) is meaningless without context.
Oct
17
comment Reversing an entry card - How to find out what type of RFID hardware I need to read the chip?
@domen If you aren't using a NIST approved algorithm then the protocol is already broken. If you search for "DESfire proxmark" I'm sure you will find more than one exploit.
Oct
17
comment How is the same origin policy causing my PoC to fail when I don't need to read return data?
You can't use an AJAX post request for a CSRF exploit. You need to use <form> tags or <img> tags. Use onload events to coodiate the order of requests sent.
Oct
16
revised Reflected XSS through cookie value?
added 248 characters in body