30,252 reputation
337108
bio website bishopfox.com
location
age
visits member for 3 years, 11 months
seen 2 days ago

Test everything, trust no one.

Do not trust any security related answers you see on StackOverflow.com (SO) / Security.StackExchange.com (SE). Not from me, not from anyone. There are very smart people on SO/SE and there are excellent answers given, although the right answer is not always chosen.

I have been writing exploit code for a while. There is no perfect system, vulnerable code will always exist.


Nov
30
revised Cannot get simple shellcode runner to work
added 21 characters in body
Nov
30
answered Cannot get simple shellcode runner to work
Nov
30
answered How can two clicks lead to better security in the context of, e.g., Twitter and Facebook share buttons?
Nov
30
comment Cannot get simple shellcode runner to work
Old buffer overflow is old.
Nov
30
revised Is it considered a CSRF if it requires a unique identifier which is not a CSRF token - not tied to the user session?
deleted 69 characters in body
Nov
30
comment DNS Rebinding attack - will the victim's browser send cookies?
I don't think this is accurate at all. No modern browser should be vulnerable to this. DNS rebinding was patched years ago.
Nov
30
answered Is it considered a CSRF if it requires a unique identifier which is not a CSRF token - not tied to the user session?
Nov
30
revised How can I explain to the client that rfc2385 TCP MD5 Checksums can't be turned on for linux webservers?
added 5 characters in body
Nov
30
answered How can I explain to the client that rfc2385 TCP MD5 Checksums can't be turned on for linux webservers?
Nov
30
comment Is this PHP code XSS proof?
@AcidShout XSS in that context could still be used for phishing. An attacker could build a fake login page using document.write().
Nov
27
comment is it sufficient to convert '(single-quote) to ` ' `
@Milen Your posts need to contain citation. Link to the OWASP XSS filter evasion cheat sheet, or XSS prevention cheat sheet.
Nov
27
comment is it sufficient to convert '(single-quote) to ` ' `
Why would filtering a single character fix XSS? What about param='</script><script>alert(1)//'
Nov
27
comment Is this PHP code XSS proof?
@Gumbo is right, this filter won't work for youtube links youtube.com/watch?v=EZTXYCJk05w
Nov
27
comment Is this PHP code XSS proof?
@Lucas NN Sorry I had trouble reading the code formatting in an previous revision. The only attacks I'm aware of would require the page to specify an alternative character set, such as GBK which permits multi-byte character consumption.
Nov
26
revised Someone faxed me a bunch of black paper
added 9 characters in body
Nov
26
comment {Secure} Telnet connect to a console server from webbrowser
I'm pretty sure that "secure telnet" is an oxymoron.
Nov
26
comment Someone faxed me a bunch of black paper
Hey man, don't throw 'scum' around, some people make a living off of telemarketing.
Nov
26
answered Someone faxed me a bunch of black paper
Nov
26
comment Someone faxed me a bunch of black paper
I think it shocks most people when they realize facsimile is insecure.
Nov
25
comment Open source alternatives to tamper data
OWASP ZED attack Proxy, or BURP free edition.