Reputation
34,592
Next tag badge:
95/100 score
18/20 answers
Badges
5 55 134
Newest
 Enlightened
Impact
~2.0m people reached

Sep
17
awarded  Enlightened
Sep
17
awarded  Nice Answer
Sep
17
awarded  Nice Answer
Sep
7
comment Is it possible to Exploit this Line Feed?
Could you provide a link to explain %E5%98%8D%E5%98%8A?
Sep
7
comment Is it possible to Exploit this Line Feed?
An attacker shouldn't need two content-types to exploit this issue. In fact, this may confuse the browser. Controlling the header and the beginning of the HTML should be sufficient to control the content of the entire page. I have no idea what micro is referring to about "%E5%98%8A%E5%98%8D", that must be chinese (literally).
Sep
7
comment Is it possible to Exploit this Line Feed?
So what the hell is "%E5%98%8D%E5%98%8A", could you link to some background information on this extremely obscure attack string? My guess is this is some kind of advanced multi-byte injection, care to elaborate? (hackerone.com/reports/52042)
Aug
21
comment Crossdomain.xml vulnerabilities
Yes ideally. And if you modify your post to talk about the SOP for flash and not the JS SOP, I'll give you a +1
Aug
21
comment Crossdomain.xml vulnerabilities
The OP didn't ask about CORS, this response seems out of left field. The part about CSRF tokens is spot on, but an XMLHTTPRequest isn't going to be affected by the OP's crossdomain.xml file and it can't be used to test or exploit the OP's vuln.
Aug
21
comment Crossdomain.xml vulnerabilities
The OP is asking about a crossdomain.xml file, which is different from the CORS standard. CORS is a set of HTTP headers for access control: developer.mozilla.org/en-US/docs/Web/HTTP/Access_control_CORS . The big difference is that CORS is newer and has more features than the old crossdomain.xml files, also CORS is for JavaScript, and crossdomain.xml is flash and silverlight.
Aug
19
comment Crossdomain.xml vulnerabilities
@Michal Koczwara Without a shadow of a doubt. 100% textbook issue right here, all sources will confirm that the SOP has been intentionally disabled. It really doesn't get clearer than this.
Aug
19
answered Crossdomain.xml vulnerabilities
Aug
19
awarded  Nice Answer
Aug
16
awarded  Nice Answer
Aug
13
accepted Should we start using SHA-3?
Aug
4
comment Do ISP Detect and Block Pen Testing Tools?
Consider changing the title.
Aug
2
comment Oracle Sql Injection Reverse Shell
Shells outside of the MS-SQL world often require some form of creativity. Perhaps you should do your own research, and explore the database before asking such questions.
Aug
1
comment Can this text be figured out?
Asymmetric or symmetric?
Aug
1
comment Brute force attack
Consider renaming your post to "Common Security Vulnerability"
Jul
30
comment OAuth access token vs session key
CSRF is not a method of authentication, it is an attack. Consdier reading the OWASP top 10, espically the parts on session managment: (owasp.org/index.php/Session_Management_Cheat_Sheet).
Jul
28
comment How can I defend against malicious GET requests?
What attack are you worried about here? Could you provide more details, I just see a routing table. I think most attackers are more interested in code exec and info disclosure than DoS.